last executing test programs: 4m51.381886807s ago: executing program 4 (id=1632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00', {0xb, 0x1, 0x2, 0x1}, 0x4f, [0xffff, 0x7, 0x3, 0x4, 0xebd, 0x2, 0x7, 0x5, 0x2, 0x80, 0x7, 0x1, 0x5, 0x3, 0x2, 0x8000, 0x1, 0x2, 0x5, 0x6, 0x401, 0x1, 0x9, 0x400, 0x67, 0xe, 0x30ed386c, 0x970, 0x9, 0x7, 0x1, 0x10000, 0x9, 0x10, 0x7, 0x4, 0x10, 0x8dd, 0x4, 0x5, 0x8001, 0x2, 0x6, 0xa9, 0x80000000, 0x81, 0xbb76, 0xe0, 0x10, 0x2, 0x5, 0x9, 0xfff, 0x3, 0x1, 0xa663, 0xfffffffe, 0x7ff, 0x3, 0x0, 0x8, 0xbe, 0x7, 0x7], [0x6, 0x4, 0x7560, 0x9, 0xd, 0xff, 0x4, 0xfffffffd, 0x0, 0xfff, 0x5, 0x100, 0x87b7, 0x0, 0x4, 0x0, 0x26, 0x101, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x7f, 0x6, 0x7, 0x10001, 0xf7d1, 0x508, 0x8, 0x9, 0xee, 0x2, 0x817d, 0x6, 0x1, 0x80, 0x3, 0x8, 0x10, 0x335a, 0x1, 0x5, 0x87d, 0x8, 0x8, 0x1ff, 0x4, 0xfffffffe, 0x2, 0x481dc3dd, 0xffff, 0x3ff, 0x2, 0x3, 0x8, 0x101, 0x40, 0x93, 0xe0000000, 0x6bbfc9e1, 0xfffffffe, 0x80], [0xfffffff9, 0xc99, 0xd, 0x2, 0x1, 0xe, 0x3, 0x9, 0xe2e, 0x6, 0x3, 0x8, 0x4, 0x4, 0x7ff, 0x3, 0x48, 0x4, 0x6, 0x200, 0x7, 0x9, 0x8e9, 0x10, 0x4, 0x800, 0xb, 0x58d, 0x8, 0x1000, 0x6, 0x0, 0x51, 0x1, 0x6, 0x1, 0xbb, 0x4, 0x2, 0xf246, 0x3d6126, 0x9841, 0x6a2180, 0x5, 0x6, 0x1000, 0x9, 0x65, 0x309466b5, 0x2, 0xa7b0, 0x8001, 0x40, 0x8, 0x9, 0x9, 0x800, 0x235, 0x1, 0x4, 0x1ff, 0x9, 0x0, 0x4], [0xf437, 0xff, 0x1, 0x73ec, 0x3, 0x2, 0x0, 0x9, 0x10001, 0xfffffff3, 0x4, 0xec9, 0xfffffffd, 0xffff, 0x4f, 0x1, 0x9, 0x8, 0x7, 0x40, 0x1, 0x5, 0xc32, 0x1, 0x81, 0x4, 0x5, 0x0, 0xc, 0x6, 0x9, 0xb, 0x8, 0x4f68, 0x3, 0x80000000, 0x8, 0x5, 0x3, 0x4, 0x0, 0x8, 0x6b5, 0xf01b, 0x0, 0x3, 0x22, 0x0, 0x4, 0x10, 0xe1, 0x6, 0x1, 0x7, 0x1, 0x401, 0x3, 0x9, 0x6, 0x2, 0x6, 0xe1a3, 0xf363, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) 4m51.146425415s ago: executing program 4 (id=1636): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x1, 0x1dd880, 0x7, 0x3, 0x0, 0x81, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x8, 0x3, 0x0, {0xffffffffffffffff, 0xfffffffffffffffe, 0x3, 0x8, 0x15d8, 0x3, 0x400800, 0x0, 0x0, 0xa000, 0xbca4, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r5, r5, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRES16=r5, @ANYRES16=r10, @ANYRES8=r0, @ANYRES32=r9, @ANYBLOB="0c009900050000000b00000004005e80c9973c38a08daf08dbcb35d790af870ae28010b8f405402e878a6062c36884124796ec8a4121d6708fc7b4fa8cfee6fc633caaa53b8ceee01b0d1f8eab3973e09e55e385d407829da13b44928abb90ba43694009d974251879e7c90ec976d84a658182b0e3dd8fb40a567c04aa81b1fc641a8a71c145ad5d53335b5e0f757c227a17bb7353d11e8524aaf1d9f2aed653889b3c9c69b0ac74dacf53283ad2dbe448add5dfc3d9a601f9a37670a9af8461"], 0x2c}}, 0x0) write$dsp(r6, &(0x7f0000000440)="6b6a0000e8aab2a5099755ecd665f590583aee91dc92d888ca669a557c6f57504178379a5a0c9ce480134952f07ece4f1944ecc48dfe80cdba9d17087ebeb27aa0f2e89cd2b8f5b7c30e984e6b63369e49f1a43ebdae4e9ce57492e40477cd7cbc1cd251514a684e3523", 0x6a) 4m49.994459634s ago: executing program 4 (id=1642): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0xf6, r4, 0x1, 0x55, 0x6, @multicast}, 0x14) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000180)) bind$packet(r2, &(0x7f0000000080)={0x11, 0xf7, r4, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x14) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x20000001, 0x4, 0x0, 0x1, 0x5}) socket$kcm(0x2, 0x5, 0x84) syz_open_dev$media(&(0x7f0000000040), 0x4c6c, 0x200) socket$can_bcm(0x1d, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) clock_gettime(0x300, 0x0) bind$l2tp(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4m49.905204193s ago: executing program 4 (id=1643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffd, 0x1, 0xc, 0x1, 0xfffffffc, 0x1, 0x5, 0x4000007}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r8, 0x80044dff, &(0x7f0000000480)) 4m49.691995109s ago: executing program 4 (id=1644): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x10, 0x0, 0x80000001}, 0xc) r1 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x400, 0x0, 0x6, 0xfd}) r2 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = dup2(r1, r2) read$FUSE(r3, &(0x7f0000004380)={0x2020}, 0x2020) 4m49.566421203s ago: executing program 4 (id=1645): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140040003d00010338bd7002fadbdf25010000f0"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000828bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x4}) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000", @ANYRES32, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x401}}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000d43f6c93f4c3ac612c50400000000000008e2a860cb21548dc000000008dd9"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='kvm_dirty_ring_exit\x00', r3, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4000000, 0x2) syz_open_dev$sndctrl(&(0x7f0000000400), 0x800010, 0x44003) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000001380)={0x0, 0x183, 0x0, 'queue1\x00', 0x1}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, 0x9}) r7 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000340)={0x0, @isdn={0x22, 0x10, 0x6, 0x9, 0x9}, @nfc={0x27, 0x0, 0x1, 0x3}, @nl=@unspec, 0xc, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='bond_slave_1\x00', 0x500000, 0x100000a, 0x1}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r9, 0x8522c000) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='attr\x00') getdents64(r10, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0cba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34201113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed00083fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f61e00"}) r11 = openat$sysctl(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000780)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r11, 0xc0709411, &(0x7f0000000080)={{r12, 0x8, 0x1, 0x10000, 0x3, 0xc0000000, 0x7, 0xd268, 0x5, 0x9, 0x3, 0xffffffff, 0x1, 0x2, 0x3}, 0x8, [0x0]}) 4m34.005923609s ago: executing program 32 (id=1645): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140040003d00010338bd7002fadbdf25010000f0"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000828bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x4}) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000", @ANYRES32, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x401}}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000d43f6c93f4c3ac612c50400000000000008e2a860cb21548dc000000008dd9"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='kvm_dirty_ring_exit\x00', r3, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4000000, 0x2) syz_open_dev$sndctrl(&(0x7f0000000400), 0x800010, 0x44003) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000001380)={0x0, 0x183, 0x0, 'queue1\x00', 0x1}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, 0x9}) r7 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000340)={0x0, @isdn={0x22, 0x10, 0x6, 0x9, 0x9}, @nfc={0x27, 0x0, 0x1, 0x3}, @nl=@unspec, 0xc, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='bond_slave_1\x00', 0x500000, 0x100000a, 0x1}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r9, 0x8522c000) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='attr\x00') getdents64(r10, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0cba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34201113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed00083fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f61e00"}) r11 = openat$sysctl(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000780)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r11, 0xc0709411, &(0x7f0000000080)={{r12, 0x8, 0x1, 0x10000, 0x3, 0xc0000000, 0x7, 0xd268, 0x5, 0x9, 0x3, 0xffffffff, 0x1, 0x2, 0x3}, 0x8, [0x0]}) 1m20.238702946s ago: executing program 5 (id=2606): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/kexec_crash_loaded', 0x1a02, 0x44) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x0, 0x80006, 0x1, 0x2, '\x00', '\x00', '\x00', 0x7, 0x0, 0x2000100, 0x0, "a900"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0xd37, 0x10180) fstat(r0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000740)=""/4096, &(0x7f0000000040)=0x1000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x40000000000080, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fchdir(r3) syz_usb_connect(0x3, 0x429, &(0x7f0000001740)={{0x12, 0x1, 0x250, 0xaa, 0xf8, 0xd2, 0x40, 0xbb4, 0xa44, 0xa45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x417, 0x2, 0x56, 0x24, 0x0, 0x8, [{{0x9, 0x4, 0x7d, 0x7, 0xd, 0x4e, 0x84, 0x71, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0xff}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x3, 0x3, 0x2, 0xa, 0x3]}]}], [{{0x9, 0x5, 0xb, 0x8, 0x40, 0x4, 0x0, 0x3, [@generic={0x65, 0xb, "5cce3455005c3acf838961382144d06af2b81a20343928f3f29a689602bf8c8cf12d076d6d1c6fd5c818f09882a1bfe448120d5819a5359a722da581bab24fdf7c1182271d87551db7e89c130ff4ddae44c28500a8e996d04884398df13de6eebf9a90"}, @generic={0x8d, 0x8, "9d356cb3ed15c99f6bc3edc123fab7220d6640e33b7cfeba5016c6a31b93cdde49418fbbcbda731ca5e8d2be1586fc8db9217d43ef5f31b27d5c4492376b1847cedb01c54be28fc0e02944911a9e0c8dda491bb708085e5494f7d3593052cff57e950f906352511df456b6bb60f3f8512bea3796a21e7e41c77286270afea5d1b37635d07c01f14d518000"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x2, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x8}]}}, {{0x9, 0x5, 0xf, 0x1, 0x60, 0x1, 0x8, 0x2}}, {{0x9, 0x5, 0x7, 0xc, 0x0, 0xf, 0xf7, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xfffd}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x10, 0xfc, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x2, 0x0, 0x3}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x84, 0xd8, 0x3}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x8, 0xff}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x81, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x1, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x76, 0x5}]}}, {{0x9, 0x5, 0x8, 0x13, 0x3ff, 0x5, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x6}, @generic={0x74, 0x1, "21b84f94e396c56800638685f7b75c3e8e7022fa99cde129bf17770011a43a2cc680f9a7a7b19dc25149e0e8b18a721ba2564d246f8ffd26f91fa40c530deb838185024a0ff5c0e99dd3a766d05f1b701824c3bf27cd36b2de65f6a79918009892924bb6e45d5898fe53d153c2bcb3431797"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x4, 0x8, 0x81}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x40, 0x4, 0x89, [@generic={0xd, 0x23, "c625dadbbf6ce59f20beb6"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8}]}}]}}, {{0x9, 0x4, 0x60, 0x9, 0x4, 0xd8, 0x95, 0x3f, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x655, 0x1}}], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0x22, 0x7}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x7, 0x1a, 0x26}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x1, 0x50, 0xde, [@generic={0xa5, 0xc, "816330cd74d91d4d3fb7a080031b209a3cc9adfc7501f2be6e3f82da46406ebd3d6b06a075c6986576a839e42353e2a764ff67289ae27ec8c39fcdf3a3197d95366b2afe88f7a37a47edb7286ca2ef63aaeb41d277f8570ef4f7512ebb7fab115f0bc606530b4be70e2d9329f3ce99ae9a26d08dcced0b9f4a680f6bf2fa8070104d56d8321c5ae17ad465d222170cc45c05bf84ed803847e691cbedcbdbfb04b90281"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x8, 0x7f, 0xd9, [@generic={0x29, 0x6, "3b9793965d4283aa0f7a59441d07a4dbc7f8017660fbe009b2de48291f2ccaaa89edca945a4aa9"}, @generic={0xce, 0x23, "2564fc0f1d498264a2817b337a6e4268c75162c7f547efb8a008e82784d018abbd61b2394de445e0b2b4c9bfa0b02eb93f68e62a8be402bf061d54b82ae8e23abbc3cca873217adbc7080bbb368666004dc6e9dde863021a69ded1fb5da367bc9e0aacdef5a254cec9a192dbea7790e9a03fae368b1318aa65315e89c2074f627e419d01a336596736d17a185cccc5e85ad50560c8f87ae4fb613639a81bd8f3891dd831e5e61633fcd65d488efb4417c044d0fbb54171bb67573640cb8b536fc4707f8bb1451e5c9bbedbe4"}]}}]}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x3, 0x5f, 0x4, 0x8, 0x5}, 0x1c, &(0x7f0000001c80)=ANY=[@ANYBLOB="050f1c000203100b1410044083ef2434318aeab5934354fac20bd9fe30e83d76b4aba3f3898b89b34cdab37cc78cc5b3570928a5f9591e465b12657860c21a383f53364613d3dca6e14c77e6e927e83d57301e194fda3eb0838e13649f81e7a396600fd7c298955a76e73f2796f33f4e7b2ed6522b6f57b64d54f005cb3a3bd14757d303fc531d00cbdee70fde8e6c"], 0x6, [{0xff, &(0x7f0000000500)=@string={0xff, 0x3, "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"}}, {0x45, &(0x7f0000000600)=@string={0x45, 0x3, "0c7b5ff78f2120bc62970934298d1f3ae829a31362b119934bd1ceaa78bd48fea0930ab80225b720919a79f1a439583ea9b3b22a8afe84a774977fa3183fbeb75cf2aa"}}, {0x48, &(0x7f00000006c0)=@string={0x48, 0x3, "e3c75687629aab8d5156b5b1f7792ebb745ef229c95122c181805266687cbf81a513a171467a12bc2b2b300b232ed7936589e416e126ba74ab5818659c019d42b07bcac1523d"}}, {0x52, &(0x7f0000001b80)=@string={0x52, 0x3, "e9b1554b1eb199bdbbbc2d8f0202ca440e87c4c04870c2c5b5130593916659e875dedfc6c5c4223351f90de4c7d6349c3b8cad2fc9a91474dd6852adffdd913b67f537533e7e74b43d1a5025ba3b8aff"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x81a}}]}) dup2(r8, r8) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1m18.530741268s ago: executing program 5 (id=2610): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYRES16=r1, @ANYRES8=r0], 0x0) 1m17.217677383s ago: executing program 5 (id=2615): syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8) shutdown(r0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0xffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'hsr0\x00'}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$sndtimer(0xffffff9c, &(0x7f0000000300), 0x8080) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x0, 0x0, 0xa2, 0x0, 0x5}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff80) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x36, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000b60000/0x3000)=nil, 0x800000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m14.061652425s ago: executing program 5 (id=2630): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000000700)="a27f83b3c87343f4da6f7df6001d38d2d4e7c43f8ce4dd4ff5c8d30f411d4a3b35a1aa8f36f12a518b9baabc6fb69cd41943661cd632e22457c06d08141ffc6a08842d227b9281f89dfbbe8ba02446f837a85524e8136a3d14e037f7d09643b5cd4a6af22d08adb93fd03db23c358a", 0x6f}, {&(0x7f0000000480)="f56195e3f573c880e60ac86db4b643700f3db94abbb5129bbe80", 0x1a}, {&(0x7f0000003700)="d422f2b80b1bcefe0bc1fb045f3a153e84f5d67bba9b3c7f2da2875ee4a468dd0b88bcf7ca0c3c9f0ea1f8514b5ed5c4ace069617d71e84dfb9e7c825ba2e6c8b2945eb474f77640c3a43b57fd97a28adeaf9239a07bc5ab0741ac0fdabea5a39f40db7fe0fcc2f42d045203011300b3a9068b906f91b497a4f3b17124ebe1fab6430023c4f8bfd0f84280499fa811e93b3746d334b4b0369b31b4504f0e08f5790289befeca88f02fa02f5f1de0b0ffabab594e696b6d592dfe04", 0xbb}, {&(0x7f0000000540)="9934e99df8658df0cff33c622286d1361d07df0a5dce44bc26843649c132c4a090447df1175794f35747ff", 0x2b}, {&(0x7f00000037c0)="ef464beea007362703e9973f8fd43990da1e0c560aedf8d30b70bc5026009be4897c3be2d40414558f15af38dd2c6512f19bac86ea24ebb78935da36b4feaceeaddab27c90ee12e102c854aa31c51e87207bb16da5614811cc197aa63b893679f7f4eb28797971d2aa6e", 0x6a}], 0x5}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000004a00)}], 0x1}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004c40)="0b3b9ba8e6a6dacf554c44518b3b099543ee23897e0d9aceae2620cb9be475b52ff36ae7f5d16a3745c4f17c34e7c46a3106b3b090573eba5b68c9e69dadd296bd39d4cabbca976a6c09290644a14212c24caf4832c3c96f08bbadf4085e79eb46a5cc2d2a49a9b4e124", 0x6a}, {&(0x7f0000004cc0)="0c558476210103249fc5f6476d0d35874353f3063c8f10e291ee178ff6983e6c208d676733fb75a21784f0c3ae81fd7b8ed6ecbf6c3cc0fe30099e276e39baf8adcb1afadd13fa5ffa7e0c646e753136791552155affceb974945f65a47c8f95c093a063d951325a50de01ac48bd05c5b3d727a38929584679de0a88ce791139dd6378f3281c0e29a3fae586d492db1bcafea55e5a556335053cf884c2fcd11968f960d101bfd0db8ee8286541120dac440d2a37b385e8fa1e051b341be100e9d2d72f01f55946a098afd44956a11d67837d59e70bf74877599bbb0a02f32c73e4049c12d5e43e4da6f87dbfba3130", 0xef}, {&(0x7f0000004dc0)="868ff7d4fba07e6c3056358c3f07e1fecfd75c0848780d60a2b5ddfe3f4bb4a51b42546a84f9963e76376fe162f9ff6f7f987782d6dd59fd03806994ece0fde896187dc14f46163c7fe5d6a4afe3a5eb9be370b6a40f33a2007bf041ac3037a1f4fe0fa788e30c2b837b31aab94833ac21cd417cade9ddfe9240d3b1c0db79f0410ec4b140f555c40e24f9763e3c9298d796d57b26a387ac7a968ca2ec5029d3b87b662a4091b15dc1aa4afa2eae95894f81535221710ea2d96e", 0xba}, {&(0x7f0000004e80)="c3d22ea6ac4fc8ff1bea184fda08f6aeab2d02c16c2796f66097979169ea92e6b11ab34a8eff2cfe2cc467ca238adc240e3c018230c1ba24b81be3d3785a483a84f24e10d7ae7dcbe527754dca030bbd6ba032fd75b28053083b4d1a56770128247c972dc24143fd19e344a566a7", 0x6e}, {&(0x7f0000004f80)="68e158740a3a5457794587bca6f6f1cc137e5744d2967957ad26d3e8cf", 0x1d}], 0x5}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f00000053c0)="a985cc1124623bb428ffa36895e23c9755b8e5a5a5bdda52ec31907cd01bdfdf180520ed8e67ebada0e1e1e147af2e0ed136d6d4dac15f073476", 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f00000054c0)="efd1d7380d9ad06901b210926f", 0xd}], 0x1}}, {{0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f0000006640)="7d94f704f1845b4db489dd7fbc", 0xd}, {&(0x7f0000006680)="02e18d33392575787e760eb5e6c97548b167aa43cf904fd1f1cf1fdbac2df5722236a3a2ce01f8c12962606c01a9faee84f2a90e98b1ac6f447c560f79a87cab1cb74cf8ad2435b9ea40f33bfcb8df85b833468c4105f0ee7c9dd5b50997713da4fa01a6e9413af550971a246e9b9f04dd729685fbf6d442bed48c7e3f1e", 0x7e}, {&(0x7f00000067c0)="f93fb2d69cc85fa7b17d1778b8d3e184e5f45b7f2085b9db9a6a3887b5e8ff80e8ecea3e18af06fd2f9e700a2eb082b47b9f1d200c14d0e7f93e01a81ece23a4620af7e2c5dbdb724bbff914a5d9927506f57c74e35c6d09745449b27ff36b06b287e4fb674c3d679d6400b92539eba1309a54f345c39903481bae8aa3c9ada596886c9b725b6516f1cb8ed5fbb90d7485f4fa13e65d79c64d11247e5dfb9924c1e56958a2c9aa4ab707ce", 0xab}, {&(0x7f0000006880)="75269e4f88d09d1dea20894a2eb0911d44b2ca7d6fd455b9cb74f18e2dc4969d072a51057263cc6407daef3b75f04d2a842b86383c1c15de06baa2eeabb63f9f798af9cfd35f39498271053504d970aa10ade5f0732e8f651bf289fa7c618d9bf837a1122fa24359a29aba8218b6272bbb996716fb8b4271661b7ff57aaa75bcdd0c8259543e9a46d59f543642300f617dbbc0258dd0b7cb5ccdca92075c28cd7b5af72ec306835148061adde6a76ec8b779e349a450fbc012c3d13600c11023e8115f2d9610863059bbfc9569f13e8186a02b0d1a107f914e9be4d54fe8", 0xde}, {&(0x7f0000006980)="2c1ca53d5364e7a3167e9b0f5e654b8afe43a4d0a741", 0x16}, {&(0x7f0000006a00)="8c343f83a7371b6eca878c83c827bb7bfa3ea2acd5f1e25e328820d5c2a05caab7b5e3e42d3973a7ad14e1375f854d127e6ce875c1607def10b42e74192891bb506e16387a8319629b3b16d063c06ed3e3fa367bf3022df80b9c6058a1ba66907b4311096444278324f162", 0x6b}], 0x6}}, {{0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000006b40)="d1354241a2c053337cfae48ce1ebf3f6787599a9055fcee3f9fa8332569e7b4f4c9d6d3fc8c5d5b49bad2e0abeb5a910a4d1fe496cafc08c2d885a6da097a2c1350240482e26254f7947dae57d6db6d3bda4361487022f405aefd677afb437f8c090f4bf19b304aee544f046a233e6eb5c6f4a6b1db9b63f0455933d1a3b9fa19e7e54f6e8a3c5121d10218660e7a6826c6eb85f582cc7f24b304f360d1627d7fb1178c23ba1d97405f0bdfa6f405accade1ba2cf8ff7361ff9aecfb3dc385223b8087e756eb2f688d71c0ef100e0d5567f9f288fde6", 0xd6}, {&(0x7f0000006c40)="07c7a747b0ffa26568d6d6233b38ead425b668f37b228fc8e791ded67b6f82feb4f710fb66229e7b5c3eeb5c9c344bab215aef3058e3e784b725", 0x3a}, {&(0x7f0000006d40)="96168f34030c97fa9b2b903dfb0262f2c0d3dcdd76e5e9d005f86f644704cce5d5e48459b6acf4891bb49f8a3fe21611378c262e8f91521d7adb97aa1699c7260343648a87ee888d3052662bed6bb7a97b04d6dae28bfeda091cc06c81d8df410d125c9de0b770c0a03ca7a0880ec389aa9dbc91d9f69b2f43efec71b7aa94f41a2a8f8b6e19fa464f4845355fca2bd924d4f535238d3d524111bb17daa6d67585ca54be37ca8e6c1a6e7b01d0bbcc369bb3a8c75fd959e8ef4e72c9a7235a9b6ec98cdfe3a25fe5c90fc4a0c138a7b2c3fca0fb0509903d2f1798556d8b93d119f2298212bb952cb7ae5b88e763de", 0xef}, {&(0x7f0000006e40)="8de59d9bf8e2fd6e5ade417b13cc6b2242cafecffc6d2b62ec014983a6d3daf386daa020c64e3aa081237a153e02935f5131d45f89afe3230990eba8eb726741523cb90fd8bb7c67e4eec04df93ee9329d9ef0ca332b917fcb55a486d921f3b0241fb780edfcef30ec52272a2f3ccbb6845dc239762e43968e815c92e6ed96740b4e25dd9ee5dc82446f48d0bec32b10059367fd31d41a1715a2daab25b783e2112169459569c84dfd3d455b304e77a03134207f29719ded3215070afe", 0xbd}, {&(0x7f0000006f00)="827a73a8fcb4db407470", 0xa}, {&(0x7f0000007f40)="c75daac44bd1c6144e96af38a41612294cbe5534a6a85244803036081f95c9ae9d85805276e538656aa5830a765c165c0c435ee880e6c9020474bf", 0x3b}], 0x6}}], 0x7, 0x4000c8d1) sendto$inet6(r1, &(0x7f0000000ec0)="990242d4", 0x4, 0x4044001, 0x0, 0x0) 1m13.88774549s ago: executing program 5 (id=2631): r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = mq_open(0x0, 0x80, 0x110, &(0x7f00000003c0)={0xfffffffd, 0xc, 0xfffffffb, 0x5}) mq_notify(r3, &(0x7f0000000180)={0x20000000, 0x3d, 0x2, @tid=r2}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0xf517, 0x1000, 0x0, 0x2e9}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000040), &(0x7f0000000100)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) syz_io_uring_setup(0x3854, &(0x7f0000000280)={0x0, 0x2dc9, 0x100, 0x3, 0x3ce}, &(0x7f0000000300), &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x80280) ioctl$FS_IOC_SETFLAGS(r9, 0x40046602, &(0x7f0000000180)=0x1000) 1m13.740957542s ago: executing program 5 (id=2632): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406e05e6000000000000010902240001000000000904000005030002000921000033012245000905810300000c0007"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x10, 0x2}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setitimer(0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) unshare(0x40000000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000000), 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) 1m3.768791044s ago: executing program 2 (id=2681): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r1, 0x4004480d, 0x0) preadv(r1, &(0x7f000001fb80)=[{&(0x7f00000002c0)=""/32, 0x20}], 0x1, 0x0, 0x0) 1m3.151386287s ago: executing program 2 (id=2685): unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x28, r1, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x89fb, 0x2b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) close(r0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r3, 0x111, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1m3.038920819s ago: executing program 2 (id=2686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) r1 = openat$udambuf(0xffffff9c, 0x0, 0x2) dup3(r1, r0, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r7, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r9, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r10 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r10, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x4}) 1m2.090604692s ago: executing program 2 (id=2690): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x0, 0x0, 0x39, {0x39, 0x30, "5d7652f81a13e0ab3687039f22f8b38f80f526cb708d549675cebc468d37b8a6999b5517f1ae0b2f39ae7b6153e89c5462cd27b90ae2e5"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8d3}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000180)={0x0, 0xa, 0xa3, "90bbf81856c9398289a5ff05407eaa1f5d6af94025a49b38a749cef8e383927080c565a12dc918a8bdea6d1e7f7be02c1827d22a3e94f7b1f8edfc4a329c62164c9e6c09d449a23e0d0671e9970c5e72e69af9264809850bc164b4451bd0b2aa73ff182e6cb62fc13e659ee4377724f7abe3fc843c069739d501fbecfbc0c3c149eaae16b7d642adcd8dae148a30bf663fd16291b7012d00945332e365d9ba334f98ae"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000002c0)=ANY=[@ANYBLOB="20ec41000000001283d2500ddd339ac1f1ec9335a5fa9719345123d26ef2d196a070376c3dd40a9e69768af5f1e6f087da4a0b1962aeaaf9eb9ab53b394e5532a2ea83a2dbfe29"], &(0x7f0000000340)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x6}}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r0) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) (async) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x0, 0x0, 0x39, {0x39, 0x30, "5d7652f81a13e0ab3687039f22f8b38f80f526cb708d549675cebc468d37b8a6999b5517f1ae0b2f39ae7b6153e89c5462cd27b90ae2e5"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8d3}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000180)={0x0, 0xa, 0xa3, "90bbf81856c9398289a5ff05407eaa1f5d6af94025a49b38a749cef8e383927080c565a12dc918a8bdea6d1e7f7be02c1827d22a3e94f7b1f8edfc4a329c62164c9e6c09d449a23e0d0671e9970c5e72e69af9264809850bc164b4451bd0b2aa73ff182e6cb62fc13e659ee4377724f7abe3fc843c069739d501fbecfbc0c3c149eaae16b7d642adcd8dae148a30bf663fd16291b7012d00945332e365d9ba334f98ae"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000002c0)=ANY=[@ANYBLOB="20ec41000000001283d2500ddd339ac1f1ec9335a5fa9719345123d26ef2d196a070376c3dd40a9e69768af5f1e6f087da4a0b1962aeaaf9eb9ab53b394e5532a2ea83a2dbfe29"], &(0x7f0000000340)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x6}}) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) (async) close(r0) (async) 1m1.442378887s ago: executing program 2 (id=2693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="d10effffe8a0"}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r1, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1", 0x7f, 0x800, &(0x7f0000000200)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0xfffffc1f) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) close_range(r2, 0xffffffffffffffff, 0x0) r6 = fanotify_init(0x200, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r7, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000001180)=""/109, 0xfffffffffffffffb, 0x0, 0x0, 0x2}}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00') write$uinput_user_dev(r8, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x4008c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) writev(r6, &(0x7f0000000440)=[{0x0}], 0x1) 1m1.37912004s ago: executing program 2 (id=2694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) unshare(0x22020400) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000001840)={0x10000000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=@newchain={0x940, 0x64, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}, {0xc, 0x9}, {0xffe0, 0x8}}, [@f_tcindex={{0xc}, {0x8a0, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xe8b2}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff1, 0xfff3}}, @TCA_TCINDEX_SHIFT={0x8}, @TCA_TCINDEX_POLICE={0x874, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x4, 0x7, 0xd1, 0x1, 0x814, 0x100, 0x31bd9a08, 0xa, 0x87e6, 0x7, 0x6, 0x8001, 0x597, 0x6, 0x2, 0x5, 0x8, 0x2, 0x7ff, 0x5, 0x4, 0x9, 0x8, 0x188a, 0x9, 0x101, 0x0, 0xe2, 0x40, 0xb07, 0xfffffffb, 0x0, 0x7f, 0x19, 0x15b, 0xfffffff8, 0x7, 0x10, 0x9, 0x81, 0xb1600, 0x1, 0x0, 0x5, 0x9, 0x66d, 0x13, 0x86, 0x8, 0xffffffff, 0xc58, 0x4, 0xc2, 0x2, 0x3, 0xf, 0x6, 0xc, 0x10, 0x9, 0x101, 0x7, 0x9, 0x6dd, 0xfffffffa, 0x0, 0x1, 0xb, 0x1, 0x80000001, 0x81, 0x7ff8000, 0x0, 0xa, 0xfd9, 0x7, 0x51, 0x7, 0x1, 0x401, 0xe5, 0x8, 0x4, 0x5, 0x1, 0x401, 0x0, 0x4, 0xfffffffb, 0x48, 0xd4, 0x10, 0x6e, 0xfff, 0xa, 0x1, 0x10000, 0xa8f, 0x4c37, 0x0, 0x5, 0x8, 0x4, 0x800, 0x3, 0x9e4, 0x1, 0x32, 0x8, 0x9, 0x101, 0x9, 0x1, 0xf, 0x2, 0x1, 0x2, 0x4b77, 0x6, 0x3, 0x3ff, 0x4, 0xfffffff5, 0x1, 0x1000, 0x3, 0x7, 0x7ff, 0x6, 0x3, 0x6, 0x5, 0x7, 0x5, 0x3, 0x200, 0x3, 0x8, 0x1, 0xbf, 0x4, 0x9, 0x9, 0x0, 0x2, 0x1, 0x8, 0x32a0, 0xff, 0x2, 0x4f44, 0x38c, 0x0, 0x7, 0xffffffff, 0x0, 0xffffff80, 0x0, 0xe2f, 0x8, 0xffffffff, 0xfcc, 0x10001, 0x4, 0x4, 0x3, 0x27, 0xe, 0x2, 0xe33f, 0x5f9a05d2, 0x8001, 0x7, 0x4923, 0x8, 0x4b, 0xfffffff9, 0x5, 0x9, 0x5, 0x7, 0x3, 0x1, 0x3, 0x0, 0x4, 0x7, 0x408b, 0x9, 0x27d, 0x1ff, 0x9, 0x0, 0x567, 0x9, 0x8, 0x3, 0x101, 0x6, 0x7, 0xfffffff7, 0x5a, 0x3, 0x6, 0x9, 0xffffffff, 0x7, 0xfffffff9, 0x1, 0xfff, 0x10, 0x0, 0x468, 0x10001, 0x3, 0x441, 0x5, 0x21c9, 0xffff, 0x1000, 0x81, 0x6, 0x6, 0x7, 0x2, 0x8, 0x400, 0x4, 0x80, 0x0, 0x7, 0x1000, 0x3, 0x0, 0x4, 0x8, 0x7, 0x7fff, 0x10, 0x1dd1, 0x62c, 0x8, 0x3, 0x7b2, 0x9, 0x9, 0x0, 0x3, 0xc, 0x2, 0x8000, 0x6, 0xc, 0x100, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x10, 0x2, 0x96, 0x9, 0x24000000, 0x6, 0x0, 0xf, 0x9, 0xc, 0x7381, 0x100, 0x200, 0x4, 0x98bb, 0xffffff01, 0x2, 0x2, 0x3, 0xc, 0x4, 0xa4, 0x9, 0x0, 0x7f, 0x8, 0x1000000, 0x3, 0xffffffff, 0x300000, 0x8, 0x5, 0xc, 0x7, 0x66f4, 0x80000001, 0x6, 0x5, 0x2, 0x10001, 0x3, 0x3, 0x1, 0x8, 0x8, 0x8, 0x0, 0xb0, 0x1, 0x34, 0x0, 0xc, 0x4, 0x9, 0xf, 0x200, 0x1f54, 0x1, 0x0, 0x80000000, 0x9b, 0xd, 0x1, 0x854c, 0x36, 0x1000, 0x4, 0xff, 0x3, 0x2, 0xfffffff8, 0x9, 0x9, 0x8, 0xec, 0xfffffff9, 0xff, 0x6, 0x9, 0x401, 0x9977, 0xe3, 0x0, 0xf, 0x4, 0x2f, 0x3, 0x4, 0xfffffffd, 0x9, 0x4, 0x8, 0xb, 0x6, 0x2, 0x0, 0x9c83, 0x2, 0x9, 0x3, 0x8, 0x3, 0xffffffa1, 0x81, 0x8, 0x1, 0x3, 0x4c3, 0x6, 0x200000, 0x9, 0x6, 0x3, 0x4, 0x307, 0xff, 0x0, 0x7, 0x1, 0xc03, 0x8, 0xf3, 0x7, 0x4, 0xc3, 0x2, 0x1, 0x4, 0x5, 0x1, 0xfffffffb, 0x3, 0xffff, 0x10, 0x7, 0xffffffff, 0x7, 0xc06b, 0x8, 0x9, 0x3, 0x1, 0x0, 0xe, 0x1, 0x0, 0x2, 0x6f, 0x6, 0x0, 0x0, 0x6, 0x1, 0x3, 0x4, 0x10, 0xb228, 0x8, 0xff, 0x3, 0x5, 0x4, 0x4, 0x2, 0xff, 0x5c75694d, 0xb, 0x7fffffff, 0x7, 0x9, 0x66, 0x8, 0x8e, 0x730, 0x7f, 0x81, 0x3, 0x2, 0x74b, 0x0, 0x1, 0x401, 0x400, 0x1, 0x6, 0x8, 0x8000, 0x9, 0x4, 0x5, 0x8, 0x6, 0xffffffff, 0x80000000, 0x800, 0x5b, 0x1ff, 0x101, 0xe, 0xedba, 0x4, 0x8f8, 0x7, 0xffffff81, 0x2, 0x5, 0x40, 0x40, 0x6, 0x6, 0x1, 0x9, 0x9, 0x7, 0x5607, 0x6, 0x2, 0x7fffffff, 0x7, 0x5, 0x8, 0x7, 0x56, 0x9, 0x5a, 0x3, 0x2, 0x7f, 0x80000001, 0x8c2, 0x5, 0x6, 0x43d9, 0x80000001, 0x6, 0x8, 0x5, 0x481a, 0x8001, 0x1, 0x3, 0x100, 0x0, 0x667, 0x64, 0x6, 0xfff, 0xfffffffa, 0x5, 0x3, 0x1, 0x2, 0x5, 0x3, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x7, 0x8, 0x94be, {0x1d, 0x0, 0xfff9, 0x3, 0x9, 0xd}, {0xf, 0x2, 0x9, 0x342, 0xfffc, 0x401}, 0x4, 0x6ad, 0x80000000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x7, 0xf}}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0x6}}]}}, @f_rsvp={{0x9}, {0x4c, 0x2, [@TCA_RSVP_POLICE={0x48, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x3, 0x7f, 0x392e, 0x0, {0x1, 0x2, 0x1fa0, 0x700, 0x7, 0x9}, {0x2, 0x0, 0x5, 0x799, 0xff80, 0x9}, 0x0, 0x7, 0x3}}, @TCA_POLICE_AVRATE={0x8}]}]}}]}, 0x940}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0xed6, 0x4, 0x10, 0xfffffff7, 0x13, "4ca86f9c3bc93e60e0a255076b5e266d108b42"}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r6, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x1000a0, 0x0, 0xfe, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000001240)=ANY=[@ANYBLOB="e895b0e1473d0ed1009c5942b2add9b5027f8d7d6fdbb9d2b34623be85bd7e2d36e1fc0f951c6c9fc562b2b6f344765a7db3e0761d702e31135e413570d796dc30e2cbe6850b44c2f9b0c10e734e8f9e6ce11921fc278bcf78c6227d", @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, r9, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 58.609046699s ago: executing program 33 (id=2632): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406e05e6000000000000010902240001000000000904000005030002000921000033012245000905810300000c0007"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x10, 0x2}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setitimer(0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) unshare(0x40000000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000000), 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) 12.6883636s ago: executing program 0 (id=2852): io_setup(0x5, &(0x7f0000000240)=0x0) r1 = inotify_init() io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@gettaction={0xb8, 0x32, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6c4}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe000000}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3af}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 12.56453122s ago: executing program 0 (id=2853): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000d, 0x80010, r1, 0xc4d0e000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x38) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r6, &(0x7f00000000c0)=""/144, 0x90, 0x2f) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006940), 0x0, 0x8002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r8, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) 9.506403935s ago: executing program 0 (id=2859): syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0xffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'hsr0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001cc0), 0x400000000000026, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$sndtimer(0xffffff9c, &(0x7f0000000300), 0x8080) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x0, 0x0, 0xa2, 0x0, 0x5}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff80) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x36, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000b60000/0x3000)=nil, 0x800000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 7.614906078s ago: executing program 1 (id=2863): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000040)={0xc, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000180)={0xc, &(0x7f0000000040)={0x40, 0x21, 0xd2, {0xd2, 0xb, "9ade74df2bf5a615d564211cf705e3971c32034414d4351d0ba68dfe0a8bd7df49c606f2a2c53a94ccb59534e8902e6a628d228c1895c3626e0f668abfdf2b92d2ca4913aa94f6837b31a56135f6b725aea75cd5f3ce330cc794dbc18886db217266ff6556ad6d609316d5b7b44155122d02f96179ac41009b35c34ebc231370c4ff17fadbe03ce8efc23275b853f6a5f168bd57c76740ab8f4e9672a17a15d1ad342eff2b1bb2cf1e33df0289d110793ce5478233f12233e57a4a61d656aed95785a2debc0d756f3932d02948311d27"}}, &(0x7f0000000400)={0x0, 0x3, 0x3, @string={0x3, 0x3, '\\'}}}, &(0x7f00000003c0)={0x18, &(0x7f00000001c0)={0x0, 0x17, 0xcf, "3d9574332be3916fb3afb677b2bf28c594e30ca375a40c43d52265013d1f009bf11b412270a3544b54d773da861013f6327986da552b100984eb6ad3133d29889369d695a3552782ce0307714f1eac28e1572e64c7faa71b45aa4d3a318578d9323e7fdcd30e01eee37c5c0c09db4e70e27f9a1d5c834f533bcd330981afb7e6b94222ff094c04f6e5ed184d120c43882368c9bc37f36ff27822c18c9d00e31d5b4b11e1eec1039bb923c0f3ca2d587d94224fe8da68f21e86356069636c265e1d2304711d327d7800000000000000"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x74}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xc3}, &(0x7f0000000340), &(0x7f0000000380)}) 6.436110478s ago: executing program 0 (id=2864): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) close(0x3) r3 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x18, &(0x7f00000000c0)={0x0, 0x5, 0x19, {0x19, 0x23, "ba714c4a9c28d97f1d1397117844fb9c4b5624489302ae"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f00000001c0)={0x0, 0xf, 0xa8, {0x5, 0xf, 0xa8, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0xb, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x5, 0x6, 0x7fff}, @generic={0x7a, 0x10, 0x3, "57dd8654397f246a04833e9949798e8ef37f30992b426bb96373077df5ae64c62a842d2b53e070e008b41e424b63e7749f2e5083c1c863766219e4002fc337aa8f568abcf3016f3803754a2ca2640490f359f3e63e6a3c059f2a481e5c3a9329c2e6aa522b855770e0a0d7a09496b4211b4f0ec7a274d4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xf0, 0x5, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0xc, 0x7, 0x529, 0x2}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x80, 0xc, 0x6, "6b124f8d", "2854e70d"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1b, 0x2, 0x8, 0x4, 0x3, 0x0, 0x100}}}, &(0x7f0000000740)={0x44, &(0x7f0000000300)={0x20, 0xb, 0x78, "76fdabeb9529b7413e6e6f16abb5356e786a3af125d127bc07e9b31612861e9c2a9e38e7f5983ff9e2019083cf37a6a7a59e94199c2ec84099b936707d668a70327aafad386ae80a4d4d26081a2865012cd7b4ca55bb87f64eb2df365e9f3801e25d295085dcb9bbe13474ac0be612e173d02c6945a47980"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1b}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x2, 0x20, [0xf000]}}, &(0x7f0000000480)={0x40, 0x7, 0x2}, &(0x7f00000004c0)={0x40, 0x9, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "9acb"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "b830"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x652}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xb}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xfa}}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @empty, 0xfffff762}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x2000fe, 0x1) vmsplice(r4, 0x0, 0x0, 0x7) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) ioperm(0x9, 0x0, 0x200) syz_emit_ethernet(0x8e, &(0x7f0000000080)=ANY=[], 0x0) 6.018503129s ago: executing program 3 (id=2865): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') r2 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)) msgsnd(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="0300"], 0xb7, 0x0) msgsnd(r2, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x5, 0xe8}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 5.370064439s ago: executing program 0 (id=2866): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="40fa04"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000039c0)={0x24, &(0x7f0000000280)={0x40, 0x7, 0x2, "ca3b"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x83, 0x1, "f1"}, 0x0, 0x0}) 4.314399779s ago: executing program 1 (id=2867): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b7000000001f0000bfa30000000000000703000018feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000630a00fe000000007933000000000000b5040000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fd21e3587b9d9e878c86ba9b66c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00002af000/0x4000)=nil, 0x4000, 0xa, 0x10, r3, 0x80ba0000) unlink(&(0x7f0000000140)='./file2\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x1000000006, 0xfffffffffffffffd, 0x0, 0xfffd, 0x9, 0x4002004c4, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x3], 0x25000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x7ff, 0x93, 0x9, 0xc0, 0xc0, 0xf, 0x21, 0x8, 0x6, 0xa, 0x0, 0x80, 0xa}, {0x5, 0x2, 0xf9, 0x4, 0xdf, 0xff, 0xd, 0x3, 0x5, 0x9, 0x7, 0xa}, {0x7, 0xa, 0x3, 0x3, 0xf8, 0x9, 0x8, 0x3, 0x3, 0x82, 0xc, 0xa7, 0x26}], 0xfffffffa}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) pipe(&(0x7f0000000040)) (async) mmap(&(0x7f00002af000/0x4000)=nil, 0x4000, 0xa, 0x10, r3, 0x80ba0000) (async) unlink(&(0x7f0000000140)='./file2\x00') (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x1000000006, 0xfffffffffffffffd, 0x0, 0xfffd, 0x9, 0x4002004c4, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x3], 0x25000, 0x2011c0}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x7ff, 0x93, 0x9, 0xc0, 0xc0, 0xf, 0x21, 0x8, 0x6, 0xa, 0x0, 0x80, 0xa}, {0x5, 0x2, 0xf9, 0x4, 0xdf, 0xff, 0xd, 0x3, 0x5, 0x9, 0x7, 0xa}, {0x7, 0xa, 0x3, 0x3, 0xf8, 0x9, 0x8, 0x3, 0x3, 0x82, 0xc, 0xa7, 0x26}], 0xfffffffa}) (async) 4.118993043s ago: executing program 1 (id=2868): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) r1 = openat$udambuf(0xffffff9c, &(0x7f0000000100), 0x2) dup3(r1, r0, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r7, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r9, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r10 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r10, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x4}) 3.142173094s ago: executing program 1 (id=2869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 3.105112098s ago: executing program 1 (id=2870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10040092}, 0x80) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) shutdown(r4, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c001080080002400000000708000140000046e2080003"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @local}, &(0x7f0000000400)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x7, 0x9, 0x0, @private0, @loopback, 0x7, 0x80, 0x4}}) sendmsg$inet(r7, &(0x7f0000000700)={&(0x7f0000000200)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f00000002c0)="2376a29d7d7c621bce1150ed878a7d455b9857112d93dec2f67bb5db66e3732e4cf72cd3c326f997b7a485a940e3fd3abb2721af05f2e5c0321c820eda78ba0aa8e6b6404ed434e38d34844e895dcf2e863cd5f929cf095abb8fb05df92dd97432b4d3913cffc8be6b1dfa22cde77ed884ad1e0b5b6a8ea43fcd948095b380555049dc07a7dadded08e324656090e36a4d961a0d618bc7df3dd115af80c086cce06501ca020bfd7d6c2ddc85ed638a34", 0xb0}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="100000000000000002000000482d0000e800000000000000070000008313c17f0000017f000001ac1414bb0a010102441c1933ac1414bb00000007ac1414210000ffff0a010100ffffffff860c92ebdef7ac6991f150d200008639ffffffff0512ecc96bce84f4477c2825a118ceceddf7020a2ff42660eb59b5de000422b3020c75eb71eebca95df5ee060507e9c96583bf443497a36401010200000002e00000020000000eac1414aa7fffffff7f000001000000086401010000000007ac1e010100000007890f577f000001ac14143ee000000194040100441c60416401010200000008ac141419fffffffb00000000000000030000001000000000000000010000000700000010000000000000000200000007000000180000000000000008000000", @ANYRES32=r8, @ANYBLOB="ac1414aaac141443180000000000000008000000", @ANYRES32=r9, @ANYBLOB="c7a3a2dd7357fc11dd12bcce89bc40fff6f706"], 0x148}, 0x4000801) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'ip6erspan0\x00', {0x2, 0x4e24, @multicast1}}) r10 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x100) r11 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r12 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r12, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fb0003000005e8371f2efe0868327a31a705ec978547"], 0x830200) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r10, 0x4010e501, &(0x7f0000000180)={r11}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000a38000000030a01020000000000000000000000050c00024000000000000000030a000700726f7574000001140000001100010000000000000000000300000a000000000000000000000059f1bde436d456f911c7"], 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 2.932224873s ago: executing program 3 (id=2871): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000001300)="fcec65c848b5948f82dee49c7765d567ec657d710d018b973a4d924419a355cb194a8002bd4198786f6e4207699fe5f7cdad1b9facbbad2b075671884d24001b5c0ba1fefc6c01dcf03ecefbd5c2c8f6407fbddd4263bc5323cde368c55557f1e823886b6abadb7c6b7942245b2a5697865220b61fbbd8", 0x77}, {&(0x7f00000010c0)="16bbc226c97348e21dd1b0a4ac544dedab3aeae21a462142db910fe6e14621b5bb44a9d074c9bba6dcb23ff1a22dce0f8199c65288e6d6ba90492f7019dba69c683898f4bc78d28e4fdd31db98068c60fcf5521574661a8d83fcc84f6ae87fe4b875ae503e4cc7f416f1ac8b0ca7a0a6adf6f8a58e232e", 0x77}, {&(0x7f0000001140)="7e905c9d4324c42d794a49c3fff8fe828c24ba11471d0d6c9cbac36b66b6527ce83f187e8ac3a2259ab220ff0a65a21e358e551fd393c162b9e928b3ac2d567a1796b22a6f2fcaa3f10648d01d8af4b1c885876f4067d978932659b5e7eea8ba2687599322e4cc20c8bc52cf0d46cab4d4ff6aefdd4d5b2942f97b8100c70152b188d1145d5042b2bdd58d6f1a434cf66605fbd1b1a7006032ee3aecad7c4ef976c8fdb7e527e1b124921ec742c3248a1a587e5f2102b4c5ed10d5a4b181f094115f4e2b87ad8adf7d5e59ef13900ea7790b", 0xd2}, {&(0x7f0000001380)="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", 0xe0e}], 0x4, 0x0, 0x0, 0x4000000}], 0x1, 0x0) recvfrom$inet(r1, &(0x7f0000000000)=""/4084, 0xff4, 0x2102, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/90, 0x5a}], 0x1}, 0x20) 2.054103368s ago: executing program 3 (id=2872): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x4, 0x40f57}]}, 0x8) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) getsockname(r0, &(0x7f0000000080)=@tipc=@name, &(0x7f0000000000)=0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x18, 0x29, 0x34, 0x800}}], 0x18}, 0x40c0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x30, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1.879980397s ago: executing program 3 (id=2873): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x14}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x400}], 0xfffffffffffffea1, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000700)="0a1398f8668babb9862aa1c9ea0380d18dafd06547dd62179ba79df1971b787788d854fbec0fe18f84085926de2d9ab0b6f1512c6dbc8a704453c6de009e89414d8518e3dcdd32ecd952f78f6c58a9fd"}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x12, 0xf1, 0x3, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x800000, 0x43, 0x2000001, 0x0, 0x2004cb, 0x7, 0x1000000, 0x1000000068ff, 0x5, 0x9, 0x3], 0xffffffffffffffff, 0x202}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000100)={0x7, 0x4}) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r8, 0x1, 0x2b, &(0x7f00000000c0)=""/202, &(0x7f0000000000)=0xca) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{0x7, 0x1, 0x2, 0x4, 0x2, 0x4, 0x8, 0x1, 0x7, 0x1, 0x4, 0x3, 0x3}, {0x80, 0x4966, 0xfd, 0x0, 0x8, 0x8, 0x40, 0xd6, 0x4, 0x0, 0x2, 0x5, 0x5}, {0x94b5, 0x4, 0x0, 0xc, 0x9, 0x6, 0x1, 0x3, 0x4, 0x5, 0x4, 0x0, 0xa}], 0x3}) 1.723581065s ago: executing program 3 (id=2874): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) close(0x3) r3 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x18, &(0x7f00000000c0)={0x0, 0x5, 0x19, {0x19, 0x23, "ba714c4a9c28d97f1d1397117844fb9c4b5624489302ae"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f00000001c0)={0x0, 0xf, 0xa8, {0x5, 0xf, 0xa8, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0xb, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x5, 0x6, 0x7fff}, @generic={0x7a, 0x10, 0x3, "57dd8654397f246a04833e9949798e8ef37f30992b426bb96373077df5ae64c62a842d2b53e070e008b41e424b63e7749f2e5083c1c863766219e4002fc337aa8f568abcf3016f3803754a2ca2640490f359f3e63e6a3c059f2a481e5c3a9329c2e6aa522b855770e0a0d7a09496b4211b4f0ec7a274d4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xf0, 0x5, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0xc, 0x7, 0x529, 0x2}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x80, 0xc, 0x6, "6b124f8d", "2854e70d"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1b, 0x2, 0x8, 0x4, 0x3, 0x0, 0x100}}}, &(0x7f0000000740)={0x44, &(0x7f0000000300)={0x20, 0xb, 0x78, "76fdabeb9529b7413e6e6f16abb5356e786a3af125d127bc07e9b31612861e9c2a9e38e7f5983ff9e2019083cf37a6a7a59e94199c2ec84099b936707d668a70327aafad386ae80a4d4d26081a2865012cd7b4ca55bb87f64eb2df365e9f3801e25d295085dcb9bbe13474ac0be612e173d02c6945a47980"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1b}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x2, 0x20, [0xf000]}}, &(0x7f0000000480)={0x40, 0x7, 0x2}, &(0x7f00000004c0)={0x40, 0x9, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "9acb"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "b830"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x652}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xb}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xfa}}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @empty, 0xfffff762}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x2000fe, 0x1) vmsplice(r4, 0x0, 0x0, 0x7) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) ioperm(0x9, 0x0, 0x200) syz_emit_ethernet(0x8e, &(0x7f0000000080)=ANY=[], 0x0) 1.217361888s ago: executing program 0 (id=2875): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x6f, 0x20, 0x4, 0x3, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 720.949365ms ago: executing program 3 (id=2876): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x418, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="001005000000e2c62b3d"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x2, 0x80805, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000380), 0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 0s ago: executing program 1 (id=2877): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x6f, 0x20, 0x4, 0x3, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) kernel console output (not intermixed with test programs): 00 [ 718.050710][T14511] [ 718.447817][ T5913] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.003E/input/input88 [ 718.450026][ T5959] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 718.480210][T14508] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 718.486776][T14508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 718.518324][T14508] vhci_hcd vhci_hcd.0: Device attached [ 718.557784][ T5959] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 718.591330][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 718.618905][ T5959] usb 6-1: SerialNumber: syz [ 718.788752][ T5913] appleir 0003:05AC:8241.003E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 718.817322][ T106] usb 40-1: SetAddress Request (2) to port 0 [ 718.830659][ T5913] usb 1-1: USB disconnect, device number 73 [ 718.859699][ T106] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 718.878166][ T5959] usb 6-1: 0:2 : does not exist [ 718.906778][T11600] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 719.030890][T14525] fido_id[14525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 719.116874][ T5959] usb 6-1: USB disconnect, device number 57 [ 719.133031][T11600] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 719.189037][T11600] usb 3-1: config 0 has no interface number 0 [ 719.296266][T11600] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 719.336221][T11600] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 719.435938][T11600] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 719.468705][T14516] vhci_hcd: connection reset by peer [ 719.474440][T11600] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 719.490932][ T7637] vhci_hcd: stop threads [ 719.597596][ T7637] vhci_hcd: release socket [ 719.608670][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.609798][T11600] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 719.625835][ T7637] vhci_hcd: disconnect device [ 719.657062][T11600] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 719.692225][T11600] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 719.701962][T11600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.720090][T11600] usb 3-1: config 0 descriptor?? [ 719.727719][T14523] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 719.735051][T14523] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 719.786807][ T5968] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 719.822124][T11600] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 719.936936][ T5968] usb 1-1: Using ep0 maxpacket: 32 [ 719.952195][ T5968] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 719.972378][ T5968] usb 1-1: config 0 has no interface number 0 [ 719.989960][T14532] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2599'. [ 719.994250][ T5968] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 720.011855][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.028596][ T5968] usb 1-1: Product: syz [ 720.032836][ T5968] usb 1-1: Manufacturer: syz [ 720.038217][ T5968] usb 1-1: SerialNumber: syz [ 720.055089][ T5968] usb 1-1: config 0 descriptor?? [ 720.072960][ T5968] smsc95xx v2.0.0 [ 720.171237][T14521] ldusb 3-1:0.55: Write buffer overflow, 1685414111 bytes dropped [ 720.479146][ T5968] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 720.494315][ T5968] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 720.575831][T14537] fuse: Unknown parameter '蕰G' [ 720.577895][T14538] pimreg: entered allmulticast mode [ 721.001646][T14533] pimreg: left allmulticast mode [ 721.086688][T11600] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 721.268286][T11600] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.288192][T11600] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.306551][T11600] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 721.317408][T11600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 721.325890][T11600] usb 4-1: SerialNumber: syz [ 721.353945][T11600] usb 4-1: 0:2 : does not exist [ 721.574125][T14543] net_ratelimit: 44 callbacks suppressed [ 721.574145][T14543] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 721.586375][T14543] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 721.594422][T14543] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 721.600999][T14543] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 721.609432][T14543] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 721.615889][T14543] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 721.623596][T14543] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 721.630075][T14543] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 721.637571][T14543] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 721.644010][T14543] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 721.666900][ T5925] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 721.714839][ T5924] usb 3-1: USB disconnect, device number 54 [ 721.726090][ T5924] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 721.856912][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 721.867873][ T5925] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 721.891337][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.913122][T14554] tun0: tun_chr_ioctl cmd 1074025675 [ 721.919639][T14554] tun0: persist enabled [ 721.924643][T14554] tun0: tun_chr_ioctl cmd 1074025675 [ 721.930279][ T5925] usb 2-1: Product: syz [ 721.930299][ T5925] usb 2-1: Manufacturer: syz [ 721.930314][ T5925] usb 2-1: SerialNumber: syz [ 721.938900][ T5925] usb 2-1: config 0 descriptor?? [ 721.941052][T14554] tun0: persist disabled [ 721.959955][T14554] netlink: 'syz.5.2606': attribute type 1 has an invalid length. [ 721.996403][T14554] netlink: 'syz.5.2606': attribute type 2 has an invalid length. [ 722.163703][ T5925] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 722.336691][ T5913] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 722.499988][ T5913] usb 6-1: config 86 has an invalid interface number: 125 but max is 1 [ 722.508707][ T5913] usb 6-1: config 86 has an invalid interface descriptor of length 5, skipping [ 722.517764][ T5913] usb 6-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 722.527186][ T5913] usb 6-1: config 86 has no interface number 0 [ 722.533430][ T5913] usb 6-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 722.549362][ T5913] usb 6-1: config 86 interface 125 has no altsetting 0 [ 722.558601][ T5968] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 722.559422][ T5913] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 722.571527][ T5968] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 722.579157][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.600500][ T5913] usb 6-1: Product: 쟣蝖驢趫噑놵秷묮年⧲凉섢肁晒籨膿Ꭵ熡穆밒⬫ର⸣鏗襥ᛤ⛡璺墫攘Ɯ䊝箰쇊㵒 [ 722.614902][ T5913] usb 6-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 722.628025][ T5913] usb 6-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄灈엂Ꮅ錅暑웟쓅㌢陋훇鰴谻⾭꧉琔棝굒㮑匷績둴ᨽ═㮺ﾊ [ 722.976905][ T5913] usb 6-1: USB disconnect, device number 58 [ 723.178096][ T5925] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 723.267007][ T5968] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 723.416935][ T5968] usb 3-1: Using ep0 maxpacket: 32 [ 723.424665][ T5968] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 723.434551][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.448090][ T5968] usb 3-1: config 0 descriptor?? [ 723.659637][T14562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.669908][T14562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.679700][ T5968] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 723.689487][ T5968] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 723.701361][ T5968] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 723.709581][ T5968] usb 3-1: media controller created [ 723.731788][ T5968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 723.798240][ T48] usb 1-1: USB disconnect, device number 74 [ 723.883568][ T5968] az6027: usb out operation failed. (-71) [ 723.896875][ T5925] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 723.915086][T11600] usb 4-1: USB disconnect, device number 57 [ 723.929182][ T5968] az6027: usb out operation failed. (-71) [ 723.936137][ T5968] stb0899_attach: Driver disabled by Kconfig [ 723.961191][ T5968] az6027: no front-end attached [ 723.961191][ T5968] [ 723.964723][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 723.984586][ T5968] az6027: usb out operation failed. (-71) [ 723.988827][ T106] usb 40-1: device descriptor read/8, error -110 [ 723.998707][ T5968] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 724.013396][ T5968] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input89 [ 724.033503][ T5968] dvb-usb: schedule remote query interval to 400 msecs. [ 724.042354][ T5968] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 724.057594][ T5968] usb 3-1: USB disconnect, device number 55 [ 724.065302][ T5925] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.078594][ T5925] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 724.110109][ T5925] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 724.128067][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 724.137596][ T5925] usb 6-1: SerialNumber: syz [ 724.143294][ T5968] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 724.246942][ T48] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 724.258461][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2604'. [ 724.374564][ T5925] usb 6-1: 0:2 : does not exist [ 724.387843][ T106] usb usb40-port1: attempt power cycle [ 724.391213][ T5925] usb 6-1: USB disconnect, device number 59 [ 724.406896][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 724.415509][ T48] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 724.431921][ T48] usb 1-1: config 0 has no interface number 0 [ 724.438951][ T48] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 724.450385][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.452363][ T48] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 724.482045][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.490590][ T48] usb 1-1: Product: syz [ 724.494867][ T48] usb 1-1: Manufacturer: syz [ 724.499668][ T48] usb 1-1: SerialNumber: syz [ 724.511524][ T48] usb 1-1: config 0 descriptor?? [ 724.523425][T14568] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 724.736176][T14568] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 724.968694][ T106] usb usb40-port1: unable to enumerate USB device [ 725.025824][T14582] pimreg: entered allmulticast mode [ 725.038112][T14582] fuse: Unknown parameter '蕰G' [ 725.156021][ T48] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 725.178316][ T48] asix 1-1:0.188: probe with driver asix failed with error -32 [ 725.186788][ T106] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 725.372431][ T106] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.396801][ T106] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 725.421917][ T106] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 725.445035][T11600] usb 2-1: USB disconnect, device number 55 [ 725.470247][ T106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 725.521040][ T106] usb 6-1: SerialNumber: syz [ 725.560174][ T106] usb 6-1: 0:2 : does not exist [ 725.780191][T14576] pimreg: left allmulticast mode [ 725.833352][T14587] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 725.853163][T14587] bond5 (unregistering): Released all slaves [ 726.306886][ T48] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 726.437688][ T5913] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 726.456781][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 726.469212][ T48] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 726.491296][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.500465][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2623'. [ 726.515325][ T48] pvrusb2: Hardware description: Terratec Grabster AV400 [ 726.524293][ T48] pvrusb2: ********** [ 726.531034][ T48] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 726.539791][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2623'. [ 726.542621][ T48] pvrusb2: Important functionality might not be entirely working. [ 726.556595][T14606] futex_wake_op: syz.1.2623 tries to shift op by -1; fix this program [ 726.561434][ T48] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 726.579915][ T48] pvrusb2: ********** [ 726.606444][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 726.613584][ T5913] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 726.625644][ T5913] usb 4-1: config 0 has no interface number 0 [ 726.638714][ T5913] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=bf.ea [ 726.666674][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.674731][ T5913] usb 4-1: Product: syz [ 726.688386][ T5913] usb 4-1: Manufacturer: syz [ 726.693080][ T5913] usb 4-1: SerialNumber: syz [ 726.707374][ T5913] usb 4-1: config 0 descriptor?? [ 726.721474][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.217/input/input90 [ 726.738978][T14597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.757989][T14597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.779042][ T2348] pvrusb2: Invalid write control endpoint [ 726.850313][ T2348] pvrusb2: Invalid write control endpoint [ 726.856289][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 726.871855][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 726.880161][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 726.890917][ T2348] pvrusb2: Device being rendered inoperable [ 726.897740][ T2348] cx25840 13-0044: Unable to detect h/w, assuming cx23887 [ 726.916501][ T2348] cx25840 13-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 726.928099][ T2348] pvrusb2: Attached sub-driver cx25840 [ 726.928415][ T5924] usb 1-1: USB disconnect, device number 75 [ 726.967422][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 726.969613][T14601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.007493][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 727.011463][T14601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.090764][ T5190] bcm5974 4-1:0.217: could not read from device [ 727.100911][ T5906] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 727.111017][ T5190] bcm5974 4-1:0.217: could not read from device [ 727.122396][ T5190] bcm5974 4-1:0.217: could not read from device [ 727.129097][ T5913] usb 4-1: USB disconnect, device number 58 [ 727.270251][ T5906] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 727.282425][ T5906] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 727.296090][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 727.303038][ T5906] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 727.312278][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.322929][ T5906] usb 2-1: config 0 descriptor?? [ 727.356986][ T5924] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 727.516849][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 727.527028][ T5924] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 727.536281][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.545091][ T5924] usb 1-1: Product: syz [ 727.550083][ T5924] usb 1-1: Manufacturer: syz [ 727.554711][ T5924] usb 1-1: SerialNumber: syz [ 727.562327][ T5924] usb 1-1: config 0 descriptor?? [ 727.600575][ T5913] usb 3-1: USB disconnect, device number 56 [ 727.750018][ T5906] koneplus 0003:1E7D:2E22.003F: hidraw0: USB HID vf4.f6 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 727.781938][ T5924] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 727.960780][ T48] usb 2-1: USB disconnect, device number 56 [ 728.013327][T14624] fuse: Unknown parameter '蕰G' [ 728.100155][ T106] usb 6-1: USB disconnect, device number 60 [ 728.180206][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.706963][ T106] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 728.725470][T14634] tun0: tun_chr_ioctl cmd 1074025675 [ 728.734739][T14634] tun0: persist enabled [ 728.750056][T14634] tun0: tun_chr_ioctl cmd 1074025675 [ 728.757899][T14634] tun0: persist disabled [ 728.777515][T14634] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 728.788574][T14634] netlink: 'syz.1.2634': attribute type 2 has an invalid length. [ 728.800518][ T5924] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 728.899018][ T106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.932974][ T106] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 728.966859][ T106] usb 6-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 728.978894][ T106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.998337][ T106] usb 6-1: config 0 descriptor?? [ 729.157179][ T5924] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 729.321039][ T5924] usb 2-1: config 86 has an invalid interface number: 125 but max is 1 [ 729.324506][T14647] syz.5.2632 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 729.340385][ T5924] usb 2-1: config 86 has an invalid interface descriptor of length 5, skipping [ 729.360041][ T5924] usb 2-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 729.373967][ T5924] usb 2-1: config 86 has no interface number 0 [ 729.380937][ T5924] usb 2-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 729.383445][ T5906] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 729.394952][ T5924] usb 2-1: config 86 interface 125 has no altsetting 0 [ 729.420273][ T5924] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 729.430234][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.438815][ T5924] usb 2-1: Product: 쟣蝖驢趫噑놵秷묮年⧲凉섢肁晒籨膿Ꭵ熡穆밒⬫ର⸣鏗襥ᛤ⛡璺墫攘Ɯ䊝箰쇊㵒 [ 729.452280][ T5924] usb 2-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 729.465783][ T5924] usb 2-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄灈엂Ꮅ錅暑웟쓅㌢陋훇鰴谻⾭꧉琔棝굒㮑匷績둴ᨽ═㮺ﾊ [ 729.576688][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 729.608942][ T5906] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 729.633496][ T5906] usb 3-1: config 0 has no interface number 0 [ 729.661431][ T5906] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 729.719404][ T5906] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 729.782269][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.814318][ T5906] usb 3-1: Product: syz [ 729.837920][ T5906] usb 3-1: Manufacturer: syz [ 729.844607][ T5906] usb 3-1: SerialNumber: syz [ 729.862357][ T5906] usb 3-1: config 0 descriptor?? [ 729.890671][T14644] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 729.948705][ T5924] usb 2-1: USB disconnect, device number 57 [ 729.978007][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2626'. [ 730.115707][T14644] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 730.528280][ T5906] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 730.544100][ T5906] asix 3-1:0.188: probe with driver asix failed with error -32 [ 730.600497][T14665] input: syz0 as /devices/virtual/input/input91 [ 730.985331][T14677] Cannot find del_set index 65533 as target [ 731.095944][T14679] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 731.102519][T14679] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 731.144537][T14679] vhci_hcd vhci_hcd.0: Device attached [ 731.218940][T11600] usb 1-1: USB disconnect, device number 76 [ 731.416794][T13280] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 731.424391][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 731.553105][T14693] fuse: Unknown parameter '蕰G' [ 731.588167][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 731.598290][ T9] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 731.650468][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 731.672117][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 731.697393][ T9] usb 4-1: Product: syz [ 731.711245][ T9] usb 4-1: Manufacturer: syz [ 731.724058][ T9] usb 4-1: SerialNumber: syz [ 731.744629][ T9] usb 4-1: config 0 descriptor?? [ 731.761779][ T9] pwc: Philips SPC 880NC USB webcam detected. [ 731.965548][T14679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.977994][T14679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.990550][T14680] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 5 [ 732.012609][ T9] pwc: Warning: more than 1 configuration available. [ 732.020874][ T9] pwc: Failed to set LED on/off time (-71) [ 732.027177][T11538] vhci_hcd: stop threads [ 732.032873][T11538] vhci_hcd: release socket [ 732.037795][T11538] vhci_hcd: disconnect device [ 732.043354][ T9] pwc: send_video_command error -71 [ 732.050223][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 732.058574][ T9] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 732.072721][ T9] usb 4-1: USB disconnect, device number 59 [ 732.182344][T11600] usb 3-1: USB disconnect, device number 57 [ 732.306043][T14700] net_ratelimit: 66 callbacks suppressed [ 732.306077][T14700] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 732.324424][T14699] tun0: tun_chr_ioctl cmd 1074025675 [ 732.331367][T14699] tun0: persist enabled [ 732.337540][T14699] tun0: tun_chr_ioctl cmd 1074025675 [ 732.343445][T14699] tun0: persist disabled [ 732.358374][T14699] netlink: 'syz.1.2648': attribute type 1 has an invalid length. [ 732.367091][T14699] netlink: 'syz.1.2648': attribute type 2 has an invalid length. [ 732.657859][ T5925] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 732.696859][ T5834] Bluetooth: hci5: command 0x0c1a tx timeout [ 732.705872][ T5906] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 732.727357][ T5906] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 732.851506][ T5925] usb 2-1: config 86 has an invalid interface number: 125 but max is 1 [ 732.860511][ T5925] usb 2-1: config 86 has an invalid interface descriptor of length 5, skipping [ 732.870256][ T5925] usb 2-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 732.881350][ T5925] usb 2-1: config 86 has no interface number 0 [ 732.899474][ T5925] usb 2-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 732.929366][ T5925] usb 2-1: config 86 interface 125 has no altsetting 0 [ 732.944525][ T5925] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 732.959628][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.980695][ T5925] usb 2-1: Product: 쟣蝖驢趫噑놵秷묮年⧲凉섢肁晒籨膿Ꭵ熡穆밒⬫ର⸣鏗襥ᛤ⛡璺墫攘Ɯ䊝箰쇊㵒 [ 733.006256][ T5925] usb 2-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 733.021983][ T5925] usb 2-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄灈엂Ꮅ錅暑웟쓅㌢陋훇鰴谻⾭꧉琔棝굒㮑匷績둴ᨽ═㮺ﾊ [ 733.216782][ T5924] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 733.377004][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 733.406060][ T5924] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 733.430488][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.453012][ T5924] usb 4-1: Product: syz [ 733.466895][ T5924] usb 4-1: Manufacturer: syz [ 733.479985][ T5924] usb 4-1: SerialNumber: syz [ 733.512917][ T5924] usb 4-1: config 0 descriptor?? [ 733.559716][ T5925] usb 2-1: USB disconnect, device number 58 [ 733.735283][ T5924] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 734.059272][ T106] usbhid 6-1:0.0: can't add hid device: -32 [ 734.065339][ T106] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 734.375345][T14738] pimreg: entered allmulticast mode [ 734.387203][T14738] fuse: Unknown parameter '蕰G' [ 734.743062][ T5924] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 735.083261][T14735] pimreg: left allmulticast mode [ 735.247216][T11600] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 735.428729][T11600] usb 3-1: config 0 has no interfaces? [ 735.438637][T11600] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 735.452133][T11600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.456924][ T5924] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 735.461249][T11600] usb 3-1: Product: syz [ 735.472199][T11600] usb 3-1: Manufacturer: syz [ 735.477088][T11600] usb 3-1: SerialNumber: syz [ 735.484359][T11600] usb 3-1: config 0 descriptor?? [ 735.616670][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 735.625313][ T5924] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 735.634991][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.643473][ T5924] usb 1-1: Product: syz [ 735.648215][ T5924] usb 1-1: Manufacturer: syz [ 735.652810][ T5924] usb 1-1: SerialNumber: syz [ 735.659982][ T5924] usb 1-1: config 0 descriptor?? [ 735.669085][ T5924] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 735.677751][ T5924] dvb-usb: bulk message failed: -22 (2/0) [ 735.685404][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 735.695996][ T5924] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 735.705602][ T5924] usb 1-1: media controller created [ 735.728738][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 735.763466][T11600] usb 3-1: USB disconnect, device number 58 [ 735.820651][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2656'. [ 735.868021][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 735.898860][ T5924] DVB: Unable to find symbol mt352_attach() [ 735.904848][ T5924] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 735.968248][ T5924] rc_core: IR keymap rc-dvico-portable not found [ 735.974742][ T5924] Registered IR keymap rc-empty [ 735.983704][ T5924] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 735.998440][ T5924] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input92 [ 736.012183][ T5924] dvb-usb: schedule remote query interval to 100 msecs. [ 736.019273][ T5924] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 736.082037][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2664'. [ 736.093064][ T5924] usb 1-1: USB disconnect, device number 77 [ 736.130781][ T5924] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 736.195128][T14767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.261335][T14767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.505082][T14774] tun0: tun_chr_ioctl cmd 1074025675 [ 736.510736][T14774] tun0: persist enabled [ 736.515581][T14774] tun0: tun_chr_ioctl cmd 1074025675 [ 736.521326][T14774] tun0: persist disabled [ 736.526551][T13280] vhci_hcd: vhci_device speed not set [ 736.532821][T14774] netlink: 'syz.2.2670': attribute type 1 has an invalid length. [ 736.541044][T14774] netlink: 'syz.2.2670': attribute type 2 has an invalid length. [ 736.817306][ T5925] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 736.979106][ T5924] usb 4-1: USB disconnect, device number 60 [ 736.986425][T11600] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 737.002602][ T5925] usb 3-1: config 86 has an invalid interface number: 125 but max is 1 [ 737.037995][ T5925] usb 3-1: config 86 has an invalid interface descriptor of length 5, skipping [ 737.054496][ T5925] usb 3-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 737.069869][ T5925] usb 3-1: config 86 has no interface number 0 [ 737.087296][ T5925] usb 3-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 737.111504][ T5925] usb 3-1: config 86 interface 125 has no altsetting 0 [ 737.137290][ T5925] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 737.156796][T11600] usb 1-1: Using ep0 maxpacket: 8 [ 737.158175][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.172586][ T5925] usb 3-1: Product: 쟣蝖驢趫噑놵秷묮年⧲凉섢肁晒籨膿Ꭵ熡穆밒⬫ର⸣鏗襥ᛤ⛡璺墫攘Ɯ䊝箰쇊㵒 [ 737.190690][ T5925] usb 3-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 737.205321][T11600] usb 1-1: unable to get BOS descriptor or descriptor too short [ 737.207254][ T5925] usb 3-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄灈엂Ꮅ錅暑웟쓅㌢陋훇鰴谻⾭꧉琔棝굒㮑匷績둴ᨽ═㮺ﾊ [ 737.229009][T11600] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 737.259122][T11600] usb 1-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 737.296404][T11600] usb 1-1: config 12 interface 0 has no altsetting 0 [ 737.305545][T11600] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 737.318266][T11600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.328033][T11600] usb 1-1: Product: syz [ 737.332318][T11600] usb 1-1: Manufacturer: syz [ 737.337621][T11600] usb 1-1: SerialNumber: syz [ 737.343903][T14800] Dead loop on virtual device ip6_vti0, fix it urgently! [ 737.548567][ T5925] usb 3-1: USB disconnect, device number 59 [ 737.570719][T11600] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 737.580659][T11600] usb 1-1: selecting invalid altsetting 0 [ 737.604569][T11600] usb 1-1: USB disconnect, device number 78 [ 737.644819][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.859228][T14805] pimreg: entered allmulticast mode [ 737.869196][T14805] fuse: Unknown parameter '蕰G' [ 738.229728][T14800] syz.3.2675 (14800) used greatest stack depth: 18592 bytes left [ 738.411657][T11600] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 738.436643][T11600] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 738.446720][ T106] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 738.464446][T14813] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20005 [ 738.618170][ T106] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.649164][T14802] pimreg: left allmulticast mode [ 738.656214][ T106] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 738.689778][ T106] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 738.706495][ T106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 738.731940][ T106] usb 1-1: SerialNumber: syz [ 738.964114][ T106] usb 1-1: 0:2 : does not exist [ 738.987445][ T106] usb 1-1: USB disconnect, device number 79 [ 739.025763][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 739.156432][T11600] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 739.326651][T11600] usb 2-1: Using ep0 maxpacket: 8 [ 739.345875][T11600] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 739.355464][T11600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.363947][T11600] usb 2-1: Product: syz [ 739.368716][T11600] usb 2-1: Manufacturer: syz [ 739.373437][T11600] usb 2-1: SerialNumber: syz [ 739.381579][T11600] usb 2-1: config 0 descriptor?? [ 739.590021][T11600] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 739.625435][T14836] tun0: tun_chr_ioctl cmd 1074025675 [ 739.641856][T14836] tun0: persist enabled [ 739.650724][T14836] tun0: tun_chr_ioctl cmd 1074025675 [ 739.656547][T14836] tun0: persist disabled [ 739.665005][T14836] netlink: 'syz.0.2688': attribute type 1 has an invalid length. [ 739.673673][T14836] netlink: 'syz.0.2688': attribute type 2 has an invalid length. [ 739.986624][ T106] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 740.161221][ T106] usb 1-1: config 86 has an invalid interface number: 125 but max is 1 [ 740.169927][ T106] usb 1-1: config 86 has an invalid interface descriptor of length 5, skipping [ 740.179029][ T106] usb 1-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 740.188447][ T106] usb 1-1: config 86 has no interface number 0 [ 740.194722][ T106] usb 1-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 740.210427][ T106] usb 1-1: config 86 interface 125 has no altsetting 0 [ 740.220193][ T106] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 740.229369][ T106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.237778][ T106] usb 1-1: Product: 쟣蝖驢趫噑놵秷묮年⧲凉섢肁晒籨膿Ꭵ熡穆밒⬫ର⸣鏗襥ᛤ⛡璺墫攘Ɯ䊝箰쇊㵒 [ 740.250797][ T106] usb 1-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 740.264028][ T106] usb 1-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄灈엂Ꮅ錅暑웟쓅㌢陋훇鰴谻⾭꧉琔棝굒㮑匷績둴ᨽ═㮺ﾊ [ 740.620906][T11600] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 740.695925][ T106] usb 1-1: USB disconnect, device number 80 [ 740.885193][T14853] fuse: Unknown parameter '蕰G' [ 741.472417][T14856] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 741.484553][T14856] bond4 (unregistering): Released all slaves [ 741.712602][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2684'. [ 742.166693][ T106] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 742.293526][T14870] input: syz0 as /devices/virtual/input/input93 [ 742.328554][ T106] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.338834][ T106] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.349405][ T106] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 742.358568][ T106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 742.367182][ T106] usb 4-1: SerialNumber: syz [ 742.546469][ T5925] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 742.582009][ T106] usb 4-1: 0:2 : does not exist [ 742.599423][ T106] usb 4-1: USB disconnect, device number 61 [ 742.698633][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.709189][ T5925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 742.718583][ T5925] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 742.728162][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.738912][ T5925] usb 1-1: config 0 descriptor?? [ 742.748028][ T5925] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 742.754705][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 742.762836][ T5925] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 742.772546][ T5925] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 742.780058][ T5925] usb 1-1: media controller created [ 742.787516][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 742.802254][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 742.810614][ T5925] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 742.820161][ T5925] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input94 [ 742.833861][ T5925] dvb-usb: schedule remote query interval to 150 msecs. [ 742.841725][ T5925] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 742.998265][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 743.004491][ T5925] dvb-usb: error while querying for an remote control event. [ 743.176484][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 743.182287][ T5925] dvb-usb: error while querying for an remote control event. [ 743.231807][T14882] netlink: 'syz.3.2700': attribute type 8 has an invalid length. [ 743.311935][ T5925] usb 2-1: USB disconnect, device number 59 [ 743.348340][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 743.355352][ T5924] dvb-usb: error while querying for an remote control event. [ 743.476584][ T106] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 743.516908][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 743.534855][ T5925] dvb-usb: error while querying for an remote control event. [ 743.626416][ T106] usb 4-1: Using ep0 maxpacket: 32 [ 743.637563][ T106] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.666734][ T106] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.687696][ T106] usb 4-1: config 0 interface 0 has no altsetting 0 [ 743.703496][ T106] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 743.706886][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 743.726902][ T106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.729293][ T5924] dvb-usb: error while querying for an remote control event. [ 743.776608][ T106] usb 4-1: config 0 descriptor?? [ 743.926904][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 743.932935][ T5925] dvb-usb: error while querying for an remote control event. [ 744.096471][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 744.102743][ T5925] dvb-usb: error while querying for an remote control event. [ 744.264150][T14888] Dead loop on virtual device ip6_vti0, fix it urgently! [ 744.275017][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 744.282275][ T5925] dvb-usb: error while querying for an remote control event. [ 744.288119][ T106] usbhid 4-1:0.0: can't add hid device: -71 [ 744.307859][ T106] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 744.329972][ T106] usb 4-1: USB disconnect, device number 62 [ 744.414010][T14896] tun0: tun_chr_ioctl cmd 1074025675 [ 744.420329][T14896] tun0: persist enabled [ 744.425138][T14896] tun0: tun_chr_ioctl cmd 1074025675 [ 744.431536][T14896] tun0: persist disabled [ 744.437911][T14896] netlink: 'syz.3.2705': attribute type 1 has an invalid length. [ 744.445646][T14896] netlink: 'syz.3.2705': attribute type 2 has an invalid length. [ 744.446943][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 744.460406][ T5925] dvb-usb: error while querying for an remote control event. [ 744.626720][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 744.632723][ T5925] dvb-usb: error while querying for an remote control event. [ 744.796811][ T5925] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 744.805803][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 744.812375][ T5924] dvb-usb: error while querying for an remote control event. [ 744.959377][ T5925] usb 4-1: config 86 has an invalid interface number: 125 but max is 1 [ 744.968131][ T5925] usb 4-1: config 86 has an invalid interface descriptor of length 5, skipping [ 744.977655][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 744.983495][ T5925] usb 4-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 744.992931][ T5924] dvb-usb: error while querying for an remote control event. [ 745.001543][ T5925] usb 4-1: config 86 has no interface number 0 [ 745.008538][ T5925] usb 4-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 745.023991][ T5925] usb 4-1: config 86 interface 125 has no altsetting 0 [ 745.033435][ T5925] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 745.042995][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.051504][ T5925] usb 4-1: Product: 쟣蝖驢趫噑놵秷묮年⧲凉섢肁晒籨膿Ꭵ熡穆밒⬫ର⸣鏗襥ᛤ⛡璺墫攘Ɯ䊝箰쇊㵒 [ 745.064931][ T5925] usb 4-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 745.078394][ T5925] usb 4-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄灈엂Ꮅ錅暑웟쓅㌢陋훇鰴谻⾭꧉琔棝굒㮑匷績둴ᨽ═㮺ﾊ [ 745.166991][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 745.173124][ T5924] dvb-usb: error while querying for an remote control event. [ 745.342078][ T48] dvb-usb: bulk message failed: -22 (1/0) [ 745.353323][ T48] dvb-usb: error while querying for an remote control event. [ 745.453849][T14903] pimreg: entered allmulticast mode [ 745.510140][T14903] fuse: Unknown parameter '蕰G' [ 745.528653][ T48] dvb-usb: bulk message failed: -22 (1/0) [ 745.528941][ T106] usb 1-1: USB disconnect, device number 81 [ 745.534563][ T48] dvb-usb: error while querying for an remote control event. [ 745.639433][ T5925] usb 4-1: USB disconnect, device number 63 [ 745.669704][ T106] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 746.016451][ T106] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 746.075672][T14900] pimreg: left allmulticast mode [ 746.192569][ T106] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.213543][ T106] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 746.225576][ T106] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 746.236228][ T106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 746.247784][ T106] usb 1-1: SerialNumber: syz [ 746.271597][ T106] usb 1-1: 0:2 : does not exist [ 746.284617][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2710'. [ 747.126159][T14917] netlink: zone id is out of range [ 747.133736][T14917] netlink: zone id is out of range [ 747.139308][T14917] netlink: zone id is out of range [ 747.144659][T14917] netlink: zone id is out of range [ 747.150944][T14917] netlink: zone id is out of range [ 747.156897][T14917] netlink: zone id is out of range [ 747.162363][T14917] netlink: zone id is out of range [ 747.167904][T14917] netlink: zone id is out of range [ 747.173317][T14917] netlink: zone id is out of range [ 747.340370][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.347004][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.184134][T14932] pimreg: entered allmulticast mode [ 748.201252][T14932] fuse: Unknown parameter '蕰G' [ 748.312496][T14934] tun0: tun_chr_ioctl cmd 1074025675 [ 748.323851][T14934] tun0: persist enabled [ 748.332009][T14934] tun0: tun_chr_ioctl cmd 1074025675 [ 748.344486][T14934] tun0: persist disabled [ 748.358387][T14934] netlink: 'syz.1.2718': attribute type 1 has an invalid length. [ 748.374774][T14934] netlink: 'syz.1.2718': attribute type 2 has an invalid length. [ 748.747224][ T5925] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 748.757717][ T106] usb 1-1: USB disconnect, device number 82 [ 748.894623][T14929] pimreg: left allmulticast mode [ 748.928618][ T5925] usb 2-1: config 86 has an invalid interface number: 125 but max is 1 [ 748.938511][ T5925] usb 2-1: config 86 has an invalid interface descriptor of length 5, skipping [ 748.948755][ T5925] usb 2-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 748.958587][ T5925] usb 2-1: config 86 has no interface number 0 [ 748.975757][ T5925] usb 2-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 748.997079][ T5925] usb 2-1: config 86 interface 125 has no altsetting 0 [ 749.012614][ T5925] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 749.022290][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.032744][ T5925] usb 2-1: Product: 쟣蝖驢趫噑놵秷묮年⧲凉섢肁晒籨膿Ꭵ熡穆밒⬫ର⸣鏗襥ᛤ⛡璺墫攘Ɯ䊝箰쇊㵒 [ 749.046183][ T5925] usb 2-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 749.059806][ T5925] usb 2-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄灈엂Ꮅ錅暑웟쓅㌢陋훇鰴谻⾭꧉琔棝굒㮑匷績둴ᨽ═㮺ﾊ [ 749.111596][ T9] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 749.138159][ T9] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 749.156517][ T106] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 749.336433][ T106] usb 1-1: Using ep0 maxpacket: 8 [ 749.343673][ T106] usb 1-1: unable to get BOS descriptor or descriptor too short [ 749.353888][ T106] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 749.365289][ T106] usb 1-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 749.379049][ T106] usb 1-1: config 12 interface 0 has no altsetting 0 [ 749.389381][ T106] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 749.400512][ T106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.409683][ T106] usb 1-1: Product: syz [ 749.413968][ T106] usb 1-1: Manufacturer: syz [ 749.420521][ T106] usb 1-1: SerialNumber: syz [ 749.461757][ T5925] usb 2-1: USB disconnect, device number 60 [ 749.581372][T14943] binder: 14942:14943 unknown command 0 [ 749.587139][T14943] binder: 14942:14943 ioctl c0306201 80000080 returned -22 [ 749.598003][T14943] binder: 14942:14943 ioctl c0306201 80000180 returned -14 [ 749.605893][T14943] binder: 14942:14943 ioctl c0306201 80000300 returned -11 [ 749.644768][ T106] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 749.653080][ T106] usb 1-1: selecting invalid altsetting 0 [ 749.675324][ T106] usb 1-1: USB disconnect, device number 83 [ 749.732672][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 750.422494][T14957] net_ratelimit: 45 callbacks suppressed [ 750.422511][T14957] netlink: set zone limit has 4 unknown bytes [ 750.697388][T14965] FAULT_INJECTION: forcing a failure. [ 750.697388][T14965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.710906][T14965] CPU: 1 UID: 0 PID: 14965 Comm: syz.3.2729 Not tainted syzkaller #0 PREEMPT(full) [ 750.710921][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 750.710928][T14965] Call Trace: [ 750.710933][T14965] [ 750.710938][T14965] dump_stack_lvl+0x189/0x250 [ 750.710955][T14965] ? __pfx____ratelimit+0x10/0x10 [ 750.710970][T14965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.710981][T14965] ? __pfx__printk+0x10/0x10 [ 750.711000][T14965] should_fail_ex+0x414/0x560 [ 750.711016][T14965] _copy_to_user+0x31/0xb0 [ 750.711028][T14965] simple_read_from_buffer+0xe1/0x170 [ 750.711045][T14965] proc_fail_nth_read+0x1b3/0x220 [ 750.711060][T14965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 750.711074][T14965] ? rw_verify_area+0x2a6/0x4d0 [ 750.711086][T14965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 750.711100][T14965] vfs_read+0x200/0xa30 [ 750.711117][T14965] ? fdget_pos+0x247/0x320 [ 750.711136][T14965] ? __pfx___mutex_lock+0x10/0x10 [ 750.711153][T14965] ? __pfx_vfs_read+0x10/0x10 [ 750.711173][T14965] ? __fget_files+0x2a/0x420 [ 750.711192][T14965] ? __fget_files+0x3a0/0x420 [ 750.711200][T14965] ? __fget_files+0x2a/0x420 [ 750.711214][T14965] ksys_read+0x145/0x250 [ 750.711225][T14965] ? exc_page_fault+0x82/0x100 [ 750.711241][T14965] ? __pfx_ksys_read+0x10/0x10 [ 750.711255][T14965] ? __do_fast_syscall_32+0xbe/0x570 [ 750.711267][T14965] __do_fast_syscall_32+0x1f7/0x570 [ 750.711277][T14965] ? rcu_is_watching+0x15/0xb0 [ 750.711288][T14965] ? do_fast_syscall_32+0x34/0x80 [ 750.711300][T14965] do_fast_syscall_32+0x34/0x80 [ 750.711310][T14965] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 750.711322][T14965] RIP: 0023:0xf700d539 [ 750.711333][T14965] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 750.711342][T14965] RSP: 002b:00000000f53fd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 750.711362][T14965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53fd620 [ 750.711369][T14965] RDX: 000000000000000f RSI: 00000000f73a6ff4 RDI: 0000000000000000 [ 750.711375][T14965] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 750.711381][T14965] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 750.711387][T14965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 750.711402][T14965] [ 750.948973][ T106] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 751.152565][ T106] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 751.167554][ T106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 751.185058][ T106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 751.197236][ T106] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 751.210669][ T106] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 751.266734][ T106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.292376][ T106] usb 1-1: config 0 descriptor?? [ 751.311439][T14963] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 751.316526][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 751.486450][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 751.508508][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 751.531931][ T9] usb 4-1: config 0 has no interface number 0 [ 751.549208][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 751.564852][T14981] netlink: set zone limit has 4 unknown bytes [ 751.577874][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.585965][ T9] usb 4-1: Product: syz [ 751.590854][ T9] usb 4-1: Manufacturer: syz [ 751.606680][ T9] usb 4-1: SerialNumber: syz [ 751.617678][ T9] usb 4-1: config 0 descriptor?? [ 751.633744][ T9] smsc95xx v2.0.0 [ 751.744812][ T106] plantronics 0003:047F:FFFF.0042: reserved main item tag 0xd [ 751.779789][ T106] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 752.030701][ T106] usb 1-1: USB disconnect, device number 84 [ 752.038951][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 752.052626][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 753.302949][T15007] netlink: set zone limit has 4 unknown bytes [ 753.490046][T15009] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 753.502717][T15009] bond3 (unregistering): Released all slaves [ 753.701224][T15014] FAULT_INJECTION: forcing a failure. [ 753.701224][T15014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.714555][T15014] CPU: 1 UID: 0 PID: 15014 Comm: syz.1.2746 Not tainted syzkaller #0 PREEMPT(full) [ 753.714580][T15014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 753.714592][T15014] Call Trace: [ 753.714600][T15014] [ 753.714609][T15014] dump_stack_lvl+0x189/0x250 [ 753.714633][T15014] ? __pfx____ratelimit+0x10/0x10 [ 753.714651][T15014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 753.714661][T15014] ? __pfx__printk+0x10/0x10 [ 753.714674][T15014] ? __might_fault+0xb0/0x130 [ 753.714693][T15014] should_fail_ex+0x414/0x560 [ 753.714717][T15014] _copy_from_iter+0x1cd/0x1630 [ 753.714741][T15014] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 753.714774][T15014] ? policy_nodemask+0x27c/0x720 [ 753.714793][T15014] ? __pfx__copy_from_iter+0x10/0x10 [ 753.714815][T15014] ? set_page_refcounted+0xa0/0x1e0 [ 753.714830][T15014] ? page_copy_sane+0x4e/0x280 [ 753.714845][T15014] copy_page_from_iter+0xdd/0x170 [ 753.714870][T15014] tun_get_user+0x1d40/0x3dc0 [ 753.714894][T15014] ? tun_get_user+0x6fc/0x3dc0 [ 753.714924][T15014] ? aa_file_perm+0x44c/0x1530 [ 753.714941][T15014] ? __pfx_tun_get_user+0x10/0x10 [ 753.714954][T15014] ? __lock_acquire+0x6b6/0x2cf0 [ 753.714965][T15014] ? kstrtoull+0x12f/0x1d0 [ 753.714982][T15014] ? ref_tracker_alloc+0x318/0x460 [ 753.714998][T15014] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 753.715025][T15014] ? tun_get+0x1c/0x2f0 [ 753.715049][T15014] ? tun_get+0x1c/0x2f0 [ 753.715066][T15014] ? tun_get+0x1c/0x2f0 [ 753.715088][T15014] tun_chr_write_iter+0x113/0x200 [ 753.715100][T15014] vfs_write+0x5c9/0xb30 [ 753.715115][T15014] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 753.715126][T15014] ? __pfx_vfs_write+0x10/0x10 [ 753.715150][T15014] ? __fget_files+0x2a/0x420 [ 753.715174][T15014] ksys_write+0x145/0x250 [ 753.715194][T15014] ? exc_page_fault+0x82/0x100 [ 753.715218][T15014] ? __pfx_ksys_write+0x10/0x10 [ 753.715239][T15014] ? __do_fast_syscall_32+0xbe/0x570 [ 753.715251][T15014] __do_fast_syscall_32+0x1f7/0x570 [ 753.715261][T15014] ? rcu_is_watching+0x15/0xb0 [ 753.715272][T15014] ? do_fast_syscall_32+0x34/0x80 [ 753.715284][T15014] do_fast_syscall_32+0x34/0x80 [ 753.715294][T15014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 753.715313][T15014] RIP: 0023:0xf7f03539 [ 753.715329][T15014] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 753.715345][T15014] RSP: 002b:00000000f53f6520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 753.715364][T15014] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000340 [ 753.715376][T15014] RDX: 0000000000000036 RSI: 00000000f7396ff4 RDI: 0000000000000000 [ 753.715386][T15014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 753.715392][T15014] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 753.715397][T15014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 753.715412][T15014] [ 754.087046][T15017] FAULT_INJECTION: forcing a failure. [ 754.087046][T15017] name failslab, interval 1, probability 0, space 0, times 0 [ 754.100429][T15017] CPU: 1 UID: 0 PID: 15017 Comm: syz.0.2747 Not tainted syzkaller #0 PREEMPT(full) [ 754.100451][T15017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 754.100461][T15017] Call Trace: [ 754.100468][T15017] [ 754.100475][T15017] dump_stack_lvl+0x189/0x250 [ 754.100500][T15017] ? __pfx____ratelimit+0x10/0x10 [ 754.100522][T15017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.100538][T15017] ? __pfx__printk+0x10/0x10 [ 754.100561][T15017] ? __pfx___might_resched+0x10/0x10 [ 754.100576][T15017] ? fs_reclaim_acquire+0x7d/0x100 [ 754.100599][T15017] should_fail_ex+0x414/0x560 [ 754.100624][T15017] should_failslab+0xa8/0x100 [ 754.100649][T15017] __kmalloc_noprof+0xcb/0x800 [ 754.100667][T15017] ? tomoyo_encode+0x28b/0x550 [ 754.100691][T15017] tomoyo_encode+0x28b/0x550 [ 754.100714][T15017] tomoyo_realpath_from_path+0x58d/0x5d0 [ 754.100736][T15017] ? tomoyo_domain+0xd8/0x130 [ 754.100759][T15017] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 754.100782][T15017] tomoyo_path_number_perm+0x1e8/0x5a0 [ 754.100807][T15017] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 754.100831][T15017] ? __lock_acquire+0x6b6/0x2cf0 [ 754.100878][T15017] ? __fget_files+0x2a/0x420 [ 754.100897][T15017] ? __fget_files+0x3a0/0x420 [ 754.100910][T15017] ? __fget_files+0x2a/0x420 [ 754.100929][T15017] security_file_ioctl_compat+0xcb/0x2d0 [ 754.100953][T15017] __ia32_compat_sys_ioctl+0x128/0x840 [ 754.100978][T15017] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 754.100997][T15017] ? __fget_files+0x3a0/0x420 [ 754.101018][T15017] ? fput+0xa0/0xd0 [ 754.101033][T15017] ? ksys_write+0x22a/0x250 [ 754.101052][T15017] ? exc_page_fault+0x82/0x100 [ 754.101075][T15017] ? __pfx_ksys_write+0x10/0x10 [ 754.101100][T15017] ? __do_fast_syscall_32+0xbe/0x570 [ 754.101121][T15017] __do_fast_syscall_32+0x1f7/0x570 [ 754.101138][T15017] ? rcu_is_watching+0x15/0xb0 [ 754.101166][T15017] ? do_fast_syscall_32+0x34/0x80 [ 754.101188][T15017] do_fast_syscall_32+0x34/0x80 [ 754.101206][T15017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 754.101226][T15017] RIP: 0023:0xf7f42539 [ 754.101242][T15017] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 754.101257][T15017] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 754.101276][T15017] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b0f [ 754.101289][T15017] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.101300][T15017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 754.101309][T15017] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 754.101318][T15017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 754.101345][T15017] [ 754.102238][T15017] ERROR: Out of memory at tomoyo_realpath_from_path. [ 754.427316][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 754.465373][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 754.491419][ T9] usb 4-1: USB disconnect, device number 64 [ 754.797089][T13280] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 754.948526][T13280] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.966858][T13280] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 754.981797][T13280] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 754.991390][T13280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 755.002352][T13280] usb 2-1: SerialNumber: syz [ 755.025890][T13280] usb 2-1: 0:2 : does not exist [ 755.696780][ T48] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 755.846827][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 755.853842][ T48] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 755.862760][ T48] usb 1-1: config 0 has no interface number 0 [ 755.869479][ T48] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 755.882461][ T48] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 755.892018][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.900509][ T48] usb 1-1: Product: syz [ 755.904694][ T48] usb 1-1: Manufacturer: syz [ 755.909846][ T48] usb 1-1: SerialNumber: syz [ 755.918109][ T48] usb 1-1: config 0 descriptor?? [ 755.924106][T15037] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 756.142263][T15037] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 756.553983][ T48] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 756.564963][ T48] asix 1-1:0.188: probe with driver asix failed with error -61 [ 757.640343][T13280] usb 2-1: USB disconnect, device number 61 [ 757.675242][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.996565][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 758.046743][T13280] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 758.176799][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 758.187700][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.199513][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.210060][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 758.220090][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.228792][T13280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 758.240927][T13280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.251675][ T9] usb 4-1: config 0 descriptor?? [ 758.257008][T13280] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 758.266125][T13280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.280527][T13280] usb 2-1: config 0 descriptor?? [ 758.469637][ T106] usb 1-1: USB disconnect, device number 85 [ 758.519956][T15053] FAULT_INJECTION: forcing a failure. [ 758.519956][T15053] name failslab, interval 1, probability 0, space 0, times 0 [ 758.533284][T15053] CPU: 1 UID: 0 PID: 15053 Comm: syz.0.2758 Not tainted syzkaller #0 PREEMPT(full) [ 758.533309][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 758.533321][T15053] Call Trace: [ 758.533328][T15053] [ 758.533336][T15053] dump_stack_lvl+0x189/0x250 [ 758.533359][T15053] ? __pfx____ratelimit+0x10/0x10 [ 758.533384][T15053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.533403][T15053] ? __pfx__printk+0x10/0x10 [ 758.533430][T15053] ? __pfx___might_resched+0x10/0x10 [ 758.533446][T15053] ? fs_reclaim_acquire+0x7d/0x100 [ 758.533475][T15053] should_fail_ex+0x414/0x560 [ 758.533501][T15053] should_failslab+0xa8/0x100 [ 758.533526][T15053] __kmalloc_noprof+0xcb/0x800 [ 758.533546][T15053] ? tomoyo_encode+0x28b/0x550 [ 758.533571][T15053] tomoyo_encode+0x28b/0x550 [ 758.533595][T15053] tomoyo_realpath_from_path+0x58d/0x5d0 [ 758.533625][T15053] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 758.533649][T15053] tomoyo_path_number_perm+0x1e8/0x5a0 [ 758.533676][T15053] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 758.533700][T15053] ? __lock_acquire+0x6b6/0x2cf0 [ 758.533754][T15053] ? __fget_files+0x2a/0x420 [ 758.533775][T15053] ? __fget_files+0x3a0/0x420 [ 758.533799][T15053] ? __fget_files+0x2a/0x420 [ 758.533819][T15053] security_file_ioctl_compat+0xcb/0x2d0 [ 758.533845][T15053] __ia32_compat_sys_ioctl+0x128/0x840 [ 758.533870][T15053] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 758.533891][T15053] ? __fget_files+0x3a0/0x420 [ 758.533913][T15053] ? fput+0xa0/0xd0 [ 758.533929][T15053] ? ksys_write+0x22a/0x250 [ 758.533948][T15053] ? exc_page_fault+0x82/0x100 [ 758.533972][T15053] ? __pfx_ksys_write+0x10/0x10 [ 758.533997][T15053] ? __do_fast_syscall_32+0xbe/0x570 [ 758.534019][T15053] __do_fast_syscall_32+0x1f7/0x570 [ 758.534037][T15053] ? rcu_is_watching+0x15/0xb0 [ 758.534052][T15053] ? do_fast_syscall_32+0x34/0x80 [ 758.534065][T15053] do_fast_syscall_32+0x34/0x80 [ 758.534075][T15053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 758.534087][T15053] RIP: 0023:0xf7f42539 [ 758.534097][T15053] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 758.534110][T15053] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 758.534128][T15053] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085618 [ 758.534140][T15053] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 758.534152][T15053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 758.534162][T15053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 758.534173][T15053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 758.534201][T15053] [ 758.534735][T15053] ERROR: Out of memory at tomoyo_realpath_from_path. [ 758.700528][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 758.825543][T13280] chicony 0003:04F2:0418.0043: reserved main item tag 0xe [ 758.829299][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 758.842945][T13280] chicony 0003:04F2:0418.0043: hidraw0: USB HID v0.01 Device [HID 04f2:0418] on usb-dummy_hcd.1-1/input0 [ 758.862279][ T9] usb 4-1: USB disconnect, device number 65 [ 758.959251][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2755'. [ 758.976271][T15046] netlink: 'syz.1.2755': attribute type 7 has an invalid length. [ 758.985280][T15046] netlink: 'syz.1.2755': attribute type 8 has an invalid length. [ 758.994812][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2755'. [ 759.009103][ T48] usb 2-1: USB disconnect, device number 62 [ 759.226871][ T5925] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 759.376889][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 759.383607][ T5925] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 759.393317][ T5925] usb 1-1: config 0 has no interface number 0 [ 759.402350][ T5925] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 759.412014][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.420472][ T5925] usb 1-1: Product: syz [ 759.424723][ T5925] usb 1-1: Manufacturer: syz [ 759.429789][ T5925] usb 1-1: SerialNumber: syz [ 759.437837][ T5925] usb 1-1: config 0 descriptor?? [ 759.444822][ T5925] smsc95xx v2.0.0 [ 759.526772][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 759.700423][ T9] usb 4-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 759.709577][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.718261][ T9] usb 4-1: Product: syz [ 759.722469][ T9] usb 4-1: Manufacturer: syz [ 759.727845][ T9] usb 4-1: SerialNumber: syz [ 759.738742][ T9] usb 4-1: config 0 descriptor?? [ 759.746873][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 759.849989][ T5925] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 759.861424][ T5925] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 759.952390][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2761'. [ 759.961447][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2761'. [ 759.975269][ T9] gspca_sn9c20x: Write register 1000 failed -71 [ 759.984020][ T9] gspca_sn9c20x: Device initialization failed [ 759.990303][ T9] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 760.013519][ T9] usb 4-1: USB disconnect, device number 66 [ 760.916963][ T48] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 761.086004][ T48] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 761.118724][ T48] usb 4-1: config 0 has no interface number 1 [ 761.124956][ T48] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 761.166774][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.201829][ T48] usb 4-1: config 0 descriptor?? [ 761.238082][ T48] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 761.262313][ T48] usb 4-1: MIDIStreaming interface descriptor not found [ 761.360331][ T48] gspca_main: spca561-2.14.0 probing abcd:cdee [ 761.806498][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 761.907844][ T48] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 761.959624][ T9] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 761.970445][ T9] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 761.981295][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 761.990457][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 762.000588][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.008741][ T9] usb 2-1: Product: syz [ 762.012920][ T9] usb 2-1: Manufacturer: syz [ 762.017566][ T9] usb 2-1: SerialNumber: syz [ 762.025453][T15078] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 762.033177][T15078] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 762.092132][ T5925] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 762.104843][ T5925] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 762.122067][ T5925] usb 1-1: USB disconnect, device number 86 [ 763.053205][ T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4e:3b:d8:0a:b8:0d [ 763.109272][ T9] rtl8150 2-1:1.0: eth5: rtl8150 is detected [ 763.130279][ T9] usb 2-1: USB disconnect, device number 63 [ 763.588191][ T5925] usb 4-1: USB disconnect, device number 67 [ 763.850405][T15086] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 763.875765][T15086] bond3 (unregistering): Released all slaves [ 764.036916][ T5925] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 764.102313][T15097] tun0: tun_chr_ioctl cmd 1074025675 [ 764.109431][T15097] tun0: persist enabled [ 764.114802][T15097] tun0: tun_chr_ioctl cmd 1074025675 [ 764.120978][T15097] tun0: persist disabled [ 764.128455][T15097] netlink: 'syz.1.2774': attribute type 1 has an invalid length. [ 764.136973][T15097] netlink: 'syz.1.2774': attribute type 2 has an invalid length. [ 764.187140][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 764.194410][ T5925] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 764.203594][ T5925] usb 4-1: config 0 has no interface number 0 [ 764.213063][ T5925] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 764.223274][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.232003][ T5925] usb 4-1: Product: syz [ 764.238135][ T5925] usb 4-1: Manufacturer: syz [ 764.243397][ T5925] usb 4-1: SerialNumber: syz [ 764.251325][ T5925] usb 4-1: config 0 descriptor?? [ 764.271458][ T5925] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 764.474730][ T5925] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 764.488936][ T5925] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 764.507091][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 764.654175][T15100] FAULT_INJECTION: forcing a failure. [ 764.654175][T15100] name failslab, interval 1, probability 0, space 0, times 0 [ 764.667210][T15100] CPU: 0 UID: 0 PID: 15100 Comm: syz.0.2775 Not tainted syzkaller #0 PREEMPT(full) [ 764.667239][T15100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 764.667249][T15100] Call Trace: [ 764.667254][T15100] [ 764.667259][T15100] dump_stack_lvl+0x189/0x250 [ 764.667275][T15100] ? __pfx____ratelimit+0x10/0x10 [ 764.667301][T15100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.667318][T15100] ? __pfx__printk+0x10/0x10 [ 764.667345][T15100] ? __pfx___might_resched+0x10/0x10 [ 764.667362][T15100] ? fs_reclaim_acquire+0x7d/0x100 [ 764.667389][T15100] should_fail_ex+0x414/0x560 [ 764.667408][T15100] should_failslab+0xa8/0x100 [ 764.667424][T15100] __kmalloc_noprof+0xcb/0x800 [ 764.667436][T15100] ? percpu_ref_get_many+0x18c/0x1e0 [ 764.667451][T15100] ? io_cache_alloc_new+0x40/0x100 [ 764.667477][T15100] io_cache_alloc_new+0x40/0x100 [ 764.667502][T15100] io_msg_alloc_async+0x1b2/0x2d0 [ 764.667528][T15100] io_sendmsg_prep+0x344/0x5f0 [ 764.667551][T15100] io_submit_sqes+0xad3/0x2140 [ 764.667577][T15100] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 764.667587][T15100] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 764.667602][T15100] ? vfs_write+0x956/0xb30 [ 764.667631][T15100] ? ksys_write+0x1cb/0x250 [ 764.667654][T15100] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 764.667671][T15100] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 764.667689][T15100] ? __pfx_vfs_write+0x10/0x10 [ 764.667706][T15100] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 764.667718][T15100] ? __fget_files+0x3a0/0x420 [ 764.667731][T15100] ? fput+0xa0/0xd0 [ 764.667740][T15100] ? ksys_write+0x22a/0x250 [ 764.667752][T15100] ? exc_page_fault+0x82/0x100 [ 764.667774][T15100] ? __pfx_ksys_write+0x10/0x10 [ 764.667800][T15100] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 764.667821][T15100] __do_fast_syscall_32+0x1f7/0x570 [ 764.667840][T15100] ? rcu_is_watching+0x15/0xb0 [ 764.667852][T15100] ? do_fast_syscall_32+0x34/0x80 [ 764.667865][T15100] do_fast_syscall_32+0x34/0x80 [ 764.667875][T15100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 764.667886][T15100] RIP: 0023:0xf7f42539 [ 764.667896][T15100] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 764.667907][T15100] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 764.667926][T15100] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000003516 [ 764.667938][T15100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 764.667949][T15100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 764.667960][T15100] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 764.667970][T15100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 764.667997][T15100] [ 764.953475][ T9] usb 2-1: config 86 has an invalid interface number: 125 but max is 1 [ 764.962231][ T9] usb 2-1: config 86 has an invalid interface descriptor of length 5, skipping [ 764.971352][ T9] usb 2-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 764.980764][ T9] usb 2-1: config 86 has no interface number 0 [ 764.988366][ T9] usb 2-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 765.001710][ T9] usb 2-1: config 86 interface 125 has no altsetting 0 [ 765.011378][ T9] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 765.020763][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.029094][ T9] usb 2-1: Product: 쟣蝖驢趫噑놵秷묮年⧲凉섢肁晒籨膿Ꭵ熡穆밒⬫ର⸣鏗襥ᛤ⛡璺墫攘Ɯ䊝箰쇊㵒 [ 765.043194][ T9] usb 2-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 765.058175][ T9] usb 2-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄灈엂Ꮅ錅暑웟쓅㌢陋훇鰴谻⾭꧉琔棝굒㮑匷績둴ᨽ═㮺ﾊ [ 765.087060][T15101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2772'. [ 765.106906][T15101] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2772'. [ 765.387107][ T5925] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 765.464539][ T9] usb 2-1: USB disconnect, device number 64 [ 765.526797][ T5925] usb 1-1: device descriptor read/64, error -71 [ 765.766783][ T5925] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 765.896985][ T5925] usb 1-1: device descriptor read/64, error -71 [ 766.007424][ T5925] usb usb1-port1: attempt power cycle [ 766.346740][ T5925] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 766.367604][ T5925] usb 1-1: device descriptor read/8, error -71 [ 766.386890][ T5924] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 766.539177][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 766.545996][ T5924] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 766.555689][ T5924] usb 2-1: config 0 has no interface number 0 [ 766.564813][ T5924] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 766.574258][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.582394][ T5924] usb 2-1: Product: syz [ 766.586622][ T5924] usb 2-1: Manufacturer: syz [ 766.591246][ T5924] usb 2-1: SerialNumber: syz [ 766.599912][ T5924] usb 2-1: config 0 descriptor?? [ 766.608511][ T5925] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 766.619039][ T5924] smsc95xx v2.0.0 [ 766.637320][ T5925] usb 1-1: device descriptor read/8, error -71 [ 766.742889][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 766.743288][ T9] usb 4-1: USB disconnect, device number 68 [ 766.751273][ T5925] usb usb1-port1: unable to enumerate USB device [ 766.764015][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 766.796284][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 766.813433][ T9] quatech2 4-1:0.51: device disconnected [ 767.023060][ T5924] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 767.034103][ T5924] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 767.986505][ T5925] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 768.138909][ T5925] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 768.147669][ T5925] usb 4-1: config 0 has no interface number 0 [ 768.154716][ T5925] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 768.167106][ T5925] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 768.178796][ T5925] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 768.191888][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.204345][ T5925] usb 4-1: config 0 descriptor?? [ 768.241400][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2781'. [ 768.260700][T15115] macvtap5: entered promiscuous mode [ 768.266238][T15115] macvtap5: entered allmulticast mode [ 768.420555][ T9] usb 4-1: USB disconnect, device number 69 [ 768.566444][T13280] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 769.216424][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 769.229377][T13280] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 769.243344][T13280] usb 1-1: can't read configurations, error -71 [ 769.255550][ T5924] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 769.281389][ T5924] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 769.303362][ T5924] usb 2-1: USB disconnect, device number 65 [ 769.376741][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 769.384056][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.395068][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.404921][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 769.414119][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.424070][ T9] usb 4-1: config 0 descriptor?? [ 769.586630][T13280] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 769.756740][T13280] usb 1-1: Using ep0 maxpacket: 32 [ 769.765680][T13280] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 769.775202][T13280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.793244][T13280] usb 1-1: Product: syz [ 769.800571][T13280] usb 1-1: Manufacturer: syz [ 769.805655][T13280] usb 1-1: SerialNumber: syz [ 769.815040][T13280] usb 1-1: config 0 descriptor?? [ 769.824536][T13280] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 769.982642][T15124] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 769.994813][T15124] bond3 (unregistering): Released all slaves [ 770.035884][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 770.044849][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 770.071983][ T9] usb 4-1: USB disconnect, device number 70 [ 770.620918][T15131] tun0: tun_chr_ioctl cmd 1074025675 [ 770.626274][T15131] tun0: persist enabled [ 770.632476][T15131] tun0: tun_chr_ioctl cmd 1074025675 [ 770.638495][T15131] tun0: persist disabled [ 770.645385][T15131] netlink: 'syz.3.2786': attribute type 1 has an invalid length. [ 770.653607][T15131] netlink: 'syz.3.2786': attribute type 2 has an invalid length. [ 770.839110][T13280] gspca_stk1135: reg_w 0x7 err -71 [ 770.847292][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 770.853660][T13280] gspca_stk1135: Sensor write failed [ 770.859365][ T106] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 770.867272][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 770.873723][T13280] gspca_stk1135: Sensor write failed [ 770.880431][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 770.887115][T13280] gspca_stk1135: Sensor read failed [ 770.892331][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 770.899096][T13280] gspca_stk1135: Sensor read failed [ 770.904293][T13280] gspca_stk1135: Detected sensor type unknown (0x0) [ 770.911081][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 770.917577][T13280] gspca_stk1135: Sensor read failed [ 770.922771][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 770.929160][T13280] gspca_stk1135: Sensor read failed [ 770.934369][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 770.940932][T13280] gspca_stk1135: Sensor write failed [ 770.946233][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 770.953760][T13280] gspca_stk1135: Sensor write failed [ 770.959210][T13280] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 770.969731][T13280] usb 1-1: USB disconnect, device number 92 [ 771.016984][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 771.036418][ T106] usb 2-1: Using ep0 maxpacket: 32 [ 771.043040][ T106] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.054252][ T106] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.064201][ T106] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 771.073296][ T106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.083401][ T106] usb 2-1: config 0 descriptor?? [ 771.169869][ T9] usb 4-1: config 86 has an invalid interface number: 125 but max is 1 [ 771.178433][ T9] usb 4-1: config 86 has an invalid interface descriptor of length 5, skipping [ 771.187681][ T9] usb 4-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 771.196761][ T9] usb 4-1: config 86 has no interface number 0 [ 771.203977][ T9] usb 4-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 771.218293][ T9] usb 4-1: config 86 interface 125 has no altsetting 0 [ 771.227645][ T9] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 771.236812][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.245396][ T9] usb 4-1: Product: 쟣蝖驢趫噑놵秷묮年⧲凉섢肁晒籨膿Ꭵ熡穆밒⬫ର⸣鏗襥ᛤ⛡璺墫攘Ɯ䊝箰쇊㵒 [ 771.260001][ T9] usb 4-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 771.273827][ T9] usb 4-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄灈엂Ꮅ錅暑웟쓅㌢陋훇鰴谻⾭꧉琔棝굒㮑匷績둴ᨽ═㮺ﾊ [ 771.636256][ T9] usb 4-1: USB disconnect, device number 71 [ 771.694848][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 771.703046][ T106] usbhid 2-1:0.0: can't add hid device: -32 [ 771.709169][ T106] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 771.723852][ T106] usb 2-1: USB disconnect, device number 66 [ 771.756670][ T5925] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 771.908439][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 771.919941][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.931428][ T5925] usb 1-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 771.940987][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.951470][ T5925] usb 1-1: config 0 descriptor?? [ 772.365840][ T5925] chicony 0003:04F2:0418.0044: reserved main item tag 0xe [ 772.375942][ T5925] chicony 0003:04F2:0418.0044: hidraw0: USB HID v0.01 Device [HID 04f2:0418] on usb-dummy_hcd.0-1/input0 [ 772.517111][ T5924] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 772.570492][T15134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2787'. [ 772.579769][T15134] netlink: 'syz.0.2787': attribute type 7 has an invalid length. [ 772.588615][T15134] netlink: 'syz.0.2787': attribute type 8 has an invalid length. [ 772.596593][T15134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2787'. [ 772.610106][ T5925] usb 1-1: USB disconnect, device number 93 [ 772.646944][ T5924] usb 2-1: device descriptor read/64, error -71 [ 772.886750][ T5924] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 773.016874][ T5924] usb 2-1: device descriptor read/64, error -71 [ 773.127359][ T5924] usb usb2-port1: attempt power cycle [ 773.417696][ T106] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 773.467074][ T5924] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 773.487195][ T5924] usb 2-1: device descriptor read/8, error -71 [ 773.686971][ T5925] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 773.726897][ T5924] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 773.747504][ T5924] usb 2-1: device descriptor read/8, error -71 [ 773.837686][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 773.844455][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.855181][ T5925] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 773.864908][ T5925] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 773.874533][ T5924] usb usb2-port1: unable to enumerate USB device [ 773.881933][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.892810][ T5925] usb 4-1: config 0 descriptor?? [ 774.097257][ T106] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 774.120506][ T106] usb 1-1: can't read configurations, error -71 [ 775.309887][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2799'. [ 775.318932][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2799'. [ 775.686869][ T5925] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 775.856678][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 775.865212][ T5925] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 775.874828][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.883275][ T5925] usb 2-1: Product: syz [ 775.887977][ T5925] usb 2-1: Manufacturer: syz [ 775.892566][ T5925] usb 2-1: SerialNumber: syz [ 775.899808][ T5925] usb 2-1: config 0 descriptor?? [ 775.957172][ T5924] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 776.110894][ T5925] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 776.138625][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 776.149978][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.160407][ T5924] usb 1-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 776.169871][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.180734][ T5924] usb 1-1: config 0 descriptor?? [ 776.452454][ T48] usb 4-1: USB disconnect, device number 72 [ 776.594733][ T5924] chicony 0003:04F2:0418.0045: reserved main item tag 0xe [ 776.604167][ T5924] chicony 0003:04F2:0418.0045: hidraw0: USB HID v0.01 Device [HID 04f2:0418] on usb-dummy_hcd.0-1/input0 [ 776.794944][T15171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2801'. [ 776.796908][ T48] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 776.804360][T15171] netlink: 'syz.0.2801': attribute type 7 has an invalid length. [ 776.819907][T15171] netlink: 'syz.0.2801': attribute type 8 has an invalid length. [ 776.827942][T15171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2801'. [ 776.843111][ T5924] usb 1-1: USB disconnect, device number 96 [ 776.956802][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 776.963704][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.975114][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.985252][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 776.998783][ T48] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 777.008239][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.020315][ T48] usb 4-1: config 0 descriptor?? [ 777.333079][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'. [ 777.439362][ T48] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 777.455011][ T48] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 777.462655][ T48] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 777.472352][ T48] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 777.482323][ T48] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 777.496204][ T48] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 777.505729][ T48] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 777.514219][ T48] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 777.522570][ T48] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 777.530750][ T48] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 777.559406][ T48] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0046/input/input98 [ 777.584126][ T48] microsoft 0003:045E:07DA.0046: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 777.630248][ T106] usb 4-1: USB disconnect, device number 73 [ 777.665021][T15180] fido_id[15180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 777.786503][ T9] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 777.850259][ T5925] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 777.866239][ T5925] usb 2-1: USB disconnect, device number 71 [ 778.175987][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2805'. [ 778.201546][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2805'. [ 778.213252][T15182] futex_wake_op: syz.3.2805 tries to shift op by -1; fix this program [ 778.376949][T15188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2808'. [ 778.386082][T15188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2808'. [ 778.508365][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 778.516122][ T9] usb 1-1: can't read configurations, error -71 [ 778.757186][ T5924] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 778.917006][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 778.924579][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.957272][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 778.973114][ T5924] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 778.990124][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.024459][T15202] FAULT_INJECTION: forcing a failure. [ 779.024459][T15202] name failslab, interval 1, probability 0, space 0, times 0 [ 779.025254][ T5924] usb 4-1: config 0 descriptor?? [ 779.040168][T15202] CPU: 0 UID: 0 PID: 15202 Comm: syz.1.2815 Not tainted syzkaller #0 PREEMPT(full) [ 779.040192][T15202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.040202][T15202] Call Trace: [ 779.040209][T15202] [ 779.040217][T15202] dump_stack_lvl+0x189/0x250 [ 779.040240][T15202] ? __pfx____ratelimit+0x10/0x10 [ 779.040264][T15202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.040282][T15202] ? __pfx__printk+0x10/0x10 [ 779.040308][T15202] ? __pfx___might_resched+0x10/0x10 [ 779.040324][T15202] ? fs_reclaim_acquire+0x7d/0x100 [ 779.040350][T15202] should_fail_ex+0x414/0x560 [ 779.040376][T15202] should_failslab+0xa8/0x100 [ 779.040400][T15202] __kmalloc_noprof+0xcb/0x800 [ 779.040420][T15202] ? alloc_pipe_info+0x1fd/0x4d0 [ 779.040447][T15202] alloc_pipe_info+0x1fd/0x4d0 [ 779.040477][T15202] splice_direct_to_actor+0xa5d/0xcc0 [ 779.040508][T15202] ? __pfx_aa_file_perm+0x10/0x10 [ 779.040529][T15202] ? __pfx_direct_splice_actor+0x10/0x10 [ 779.040545][T15202] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 779.040571][T15202] do_splice_direct+0x181/0x270 [ 779.040589][T15202] ? __pfx_do_splice_direct+0x10/0x10 [ 779.040603][T15202] ? common_file_perm+0x1b5/0x220 [ 779.040621][T15202] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 779.040640][T15202] ? bpf_lsm_file_permission+0x9/0x20 [ 779.040654][T15202] ? security_file_permission+0x75/0x290 [ 779.040678][T15202] ? rw_verify_area+0x255/0x4d0 [ 779.040701][T15202] do_sendfile+0x4da/0x7e0 [ 779.040725][T15202] ? __pfx_do_sendfile+0x10/0x10 [ 779.040748][T15202] ? __might_fault+0xb0/0x130 [ 779.040772][T15202] __ia32_compat_sys_sendfile+0x120/0x1d0 [ 779.040801][T15202] __do_fast_syscall_32+0x1f7/0x570 [ 779.040818][T15202] ? rcu_is_watching+0x15/0xb0 [ 779.040835][T15202] ? do_fast_syscall_32+0x34/0x80 [ 779.040856][T15202] do_fast_syscall_32+0x34/0x80 [ 779.040873][T15202] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.040892][T15202] RIP: 0023:0xf7f03539 [ 779.040907][T15202] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 779.040921][T15202] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 779.040938][T15202] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 779.040950][T15202] RDX: 0000000080000100 RSI: 000000000000fffd RDI: 0000000000000000 [ 779.040960][T15202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 779.040969][T15202] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 779.040979][T15202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.041004][T15202] [ 779.319985][ T5924] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 779.408564][T15207] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 779.572372][T15211] netlink: 'syz.0.2818': attribute type 3 has an invalid length. [ 779.580800][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2818'. [ 779.957817][ T106] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 780.085771][T15217] tipc: Enabling of bearer rejected, failed to enable media [ 780.636727][ T106] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 780.668240][ T106] usb 1-1: can't read configurations, error -71 [ 780.752979][T15227] pimreg0: tun_chr_ioctl cmd 1074025681 [ 780.908534][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2825'. [ 780.937246][T15231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 781.081668][T15238] FAULT_INJECTION: forcing a failure. [ 781.081668][T15238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.096305][T15238] CPU: 1 UID: 0 PID: 15238 Comm: syz.1.2827 Not tainted syzkaller #0 PREEMPT(full) [ 781.096328][T15238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 781.096339][T15238] Call Trace: [ 781.096345][T15238] [ 781.096353][T15238] dump_stack_lvl+0x189/0x250 [ 781.096377][T15238] ? __pfx____ratelimit+0x10/0x10 [ 781.096399][T15238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.096414][T15238] ? __pfx__printk+0x10/0x10 [ 781.096435][T15238] ? __might_fault+0xb0/0x130 [ 781.096465][T15238] should_fail_ex+0x414/0x560 [ 781.096492][T15238] strncpy_from_user+0x36/0x2c0 [ 781.096517][T15238] getname_flags+0xf3/0x540 [ 781.096545][T15238] __ia32_sys_renameat+0x97/0xd0 [ 781.096572][T15238] __do_fast_syscall_32+0x1f7/0x570 [ 781.096590][T15238] ? rcu_is_watching+0x15/0xb0 [ 781.096609][T15238] ? do_fast_syscall_32+0x34/0x80 [ 781.096632][T15238] do_fast_syscall_32+0x34/0x80 [ 781.096650][T15238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 781.096670][T15238] RIP: 0023:0xf7f03539 [ 781.096685][T15238] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 781.096699][T15238] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 000000000000012e [ 781.096716][T15238] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 781.096726][T15238] RDX: 0000000000000003 RSI: 0000000080000140 RDI: 0000000000000000 [ 781.096735][T15238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 781.096745][T15238] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 781.096754][T15238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 781.096779][T15238] [ 781.266061][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.500308][T13280] usb 4-1: USB disconnect, device number 74 [ 781.751428][T15248] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 781.796722][ T5924] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 781.956565][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 781.969132][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.980849][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 781.996375][ T5924] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 782.005548][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.018178][ T5924] usb 2-1: config 0 descriptor?? [ 782.035407][ T5924] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 782.580080][T15257] netlink: zone id is out of range [ 782.585224][T15257] netlink: zone id is out of range [ 782.591063][T15257] netlink: zone id is out of range [ 782.596173][T15257] netlink: zone id is out of range [ 782.643440][T15257] netlink: set zone limit has 4 unknown bytes [ 782.693961][T15260] input: syz0 as /devices/virtual/input/input99 [ 782.728512][T15260] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 782.807219][ T5924] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 783.146568][T13280] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 783.296494][T13280] usb 4-1: Using ep0 maxpacket: 32 [ 783.303741][T13280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.314876][T13280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.324903][T13280] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 783.334075][T13280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.344471][T13280] usb 4-1: config 0 descriptor?? [ 783.352605][T13280] hub 4-1:0.0: USB hub found [ 783.493679][ T5924] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 783.517126][ T5924] usb 1-1: can't read configurations, error -71 [ 783.549286][T15269] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2838'. [ 783.564891][T13280] hub 4-1:0.0: 1 port detected [ 783.571639][T15269] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2838'. [ 784.580222][ T5924] usb 2-1: USB disconnect, device number 72 [ 784.778463][T13280] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 784.784948][T13280] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 784.795157][T13280] usbhid 4-1:0.0: can't add hid device: -32 [ 784.801209][T13280] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 784.966632][ T5924] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 785.116839][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 785.123672][ T5924] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 785.132094][ T5924] usb 2-1: config 0 has no interface number 0 [ 785.140812][ T5924] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 785.150483][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.159022][ T5924] usb 2-1: Product: syz [ 785.163229][ T5924] usb 2-1: Manufacturer: syz [ 785.168233][ T5924] usb 2-1: SerialNumber: syz [ 785.174991][ T5924] usb 2-1: config 0 descriptor?? [ 785.182896][ T5924] smsc95xx v2.0.0 [ 785.588521][ T5924] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 785.599911][ T5924] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 786.064823][ T5925] usb 4-1: USB disconnect, device number 75 [ 786.188007][T15292] futex_wake_op: syz.3.2845 tries to shift op by 36; fix this program [ 786.213266][T15292] syzkaller0: entered promiscuous mode [ 786.219781][T15292] syzkaller0: entered allmulticast mode [ 786.486713][ T5925] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 786.536658][T13280] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 786.616881][ T5925] usb 4-1: device descriptor read/64, error -71 [ 786.857119][ T5925] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 786.988649][ T5925] usb 4-1: device descriptor read/64, error -71 [ 787.098443][ T5925] usb usb4-port1: attempt power cycle [ 787.209120][T13280] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 787.227623][T13280] usb 1-1: can't read configurations, error -71 [ 787.456868][ T5925] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 787.477355][ T5925] usb 4-1: device descriptor read/8, error -71 [ 787.716671][ T5925] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 787.737461][ T5925] usb 4-1: device descriptor read/8, error -71 [ 787.838069][ T5924] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 787.849461][ T5925] usb usb4-port1: unable to enumerate USB device [ 787.856063][ T5924] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 788.043645][ T9] usb 2-1: USB disconnect, device number 73 [ 788.826754][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 788.976431][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 788.983093][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.993619][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 789.007741][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 789.017382][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.027795][ T9] usb 2-1: config 0 descriptor?? [ 789.038532][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 789.101072][T15306] FAULT_INJECTION: forcing a failure. [ 789.101072][T15306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.115012][T15306] CPU: 1 UID: 0 PID: 15306 Comm: syz.0.2850 Not tainted syzkaller #0 PREEMPT(full) [ 789.115037][T15306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 789.115049][T15306] Call Trace: [ 789.115058][T15306] [ 789.115067][T15306] dump_stack_lvl+0x189/0x250 [ 789.115093][T15306] ? __pfx____ratelimit+0x10/0x10 [ 789.115122][T15306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 789.115144][T15306] ? __pfx__printk+0x10/0x10 [ 789.115177][T15306] should_fail_ex+0x414/0x560 [ 789.115193][T15306] _copy_to_user+0x31/0xb0 [ 789.115205][T15306] simple_read_from_buffer+0xe1/0x170 [ 789.115222][T15306] proc_fail_nth_read+0x1b3/0x220 [ 789.115237][T15306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.115252][T15306] ? rw_verify_area+0x2a6/0x4d0 [ 789.115264][T15306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.115278][T15306] vfs_read+0x200/0xa30 [ 789.115289][T15306] ? fdget_pos+0x247/0x320 [ 789.115301][T15306] ? __pfx___mutex_lock+0x10/0x10 [ 789.115311][T15306] ? __pfx_vfs_read+0x10/0x10 [ 789.115323][T15306] ? __fget_files+0x2a/0x420 [ 789.115335][T15306] ? __fget_files+0x3a0/0x420 [ 789.115343][T15306] ? __fget_files+0x2a/0x420 [ 789.115356][T15306] ksys_read+0x145/0x250 [ 789.115367][T15306] ? exc_page_fault+0x82/0x100 [ 789.115382][T15306] ? __pfx_ksys_read+0x10/0x10 [ 789.115393][T15306] ? arch_syscall_is_vdso_sigreturn+0x175/0x1a0 [ 789.115407][T15306] ? syscall_user_dispatch+0x4f/0x90 [ 789.115421][T15306] __do_fast_syscall_32+0x1f7/0x570 [ 789.115437][T15306] ? rcu_is_watching+0x15/0xb0 [ 789.115448][T15306] ? do_fast_syscall_32+0x34/0x80 [ 789.115460][T15306] do_fast_syscall_32+0x34/0x80 [ 789.115470][T15306] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 789.115482][T15306] RIP: 0023:0xf7f42539 [ 789.115492][T15306] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 789.115501][T15306] RSP: 002b:00000000f5436590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 789.115512][T15306] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5436620 [ 789.115519][T15306] RDX: 000000000000000f RSI: 00000000f73d6ff4 RDI: 0000000000000000 [ 789.115525][T15306] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 789.115530][T15306] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 789.115536][T15306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 789.115552][T15306] [ 789.354457][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.457049][T15310] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 789.464765][T15310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 789.836661][ T5924] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 789.866504][T13280] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 789.986655][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 789.993521][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.005037][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.015189][ T5924] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 790.024914][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.044076][ T5924] usb 1-1: config 0 descriptor?? [ 790.058077][ T5924] hub 1-1:0.0: USB hub found [ 790.259681][ T5924] hub 1-1:0.0: 1 port detected [ 790.562726][T13280] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 790.586489][T13280] usb 4-1: can't read configurations, error -71 [ 790.936689][T13280] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 791.096782][T13280] usb 4-1: Using ep0 maxpacket: 32 [ 791.104419][T13280] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 791.112894][T13280] usb 4-1: config 0 has no interface number 0 [ 791.121298][T13280] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 791.130545][T13280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.138847][T13280] usb 4-1: Product: syz [ 791.143055][T13280] usb 4-1: Manufacturer: syz [ 791.147831][T13280] usb 4-1: SerialNumber: syz [ 791.156028][T13280] usb 4-1: config 0 descriptor?? [ 791.164141][T13280] smsc95xx v2.0.0 [ 791.499188][ T5924] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 791.505875][ T5924] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 791.517966][ T5924] usbhid 1-1:0.0: can't add hid device: -32 [ 791.524061][ T5924] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 791.573334][T13280] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 791.588305][T13280] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 791.608581][ T9] usb 2-1: USB disconnect, device number 74 [ 792.890039][ T9] usb 1-1: USB disconnect, device number 105 [ 793.206703][ T9] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 793.378514][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.388933][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 793.399076][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 793.408255][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 793.417365][ T9] usb 1-1: SerialNumber: syz [ 793.431560][ T9] usb 1-1: 0:2 : does not exist [ 793.629970][T15330] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 793.636485][T15330] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 793.644158][T15330] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 793.650612][T15330] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 793.660834][T15330] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 793.667293][T15330] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 793.675162][T15330] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 793.681692][T15330] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 793.844722][T13280] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 793.861930][T13280] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 793.874192][T13280] usb 4-1: USB disconnect, device number 81 [ 794.677082][ T5924] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 794.746839][T13280] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 794.836870][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 794.844110][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.855633][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.866268][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 794.880143][ T5924] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 794.889586][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.899898][ T5924] usb 4-1: config 0 descriptor?? [ 794.916412][T13280] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 794.925539][T13280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.934869][T13280] usb 2-1: Product: syz [ 794.939882][T13280] usb 2-1: Manufacturer: syz [ 794.944518][T13280] usb 2-1: SerialNumber: syz [ 794.952303][T13280] usb 2-1: config 0 descriptor?? [ 794.964447][T13280] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 795.312355][ T5924] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 795.324398][ T5924] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 795.332266][ T5924] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 795.340319][ T5924] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 795.348279][ T5924] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 795.355659][ T5924] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 795.363381][ T5924] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 795.371767][ T5924] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 795.379511][ T5924] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 795.387325][ T5924] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 795.410028][ T5924] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0047/input/input100 [ 795.430838][ T5924] microsoft 0003:045E:07DA.0047: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 795.540149][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2862'. [ 795.555826][T15338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2862'. [ 795.577223][ T106] usb 4-1: USB disconnect, device number 82 [ 795.694246][ T9] usb 1-1: USB disconnect, device number 106 [ 795.725462][ T9398] udevd[9398]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 796.047746][ T9] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 796.726831][ T5924] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 796.759167][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 796.776433][ T9] usb 1-1: can't read configurations, error -71 [ 796.886777][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 796.894277][ T5924] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 796.905141][ T5924] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 796.914720][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.936028][ T5924] hub 4-1:32.0: bad descriptor, ignoring hub [ 796.943353][ T5924] hub 4-1:32.0: probe with driver hub failed with error -5 [ 797.136469][ T9] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 797.187987][T15340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.207681][T15340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.237525][T13280] gspca_stk1135: reg_w 0x2ff err -71 [ 797.257806][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 797.264157][T13280] gspca_stk1135: Sensor write failed [ 797.274614][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 797.296782][T13280] gspca_stk1135: Sensor write failed [ 797.302124][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 797.316503][T13280] gspca_stk1135: Sensor read failed [ 797.321759][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 797.329034][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 797.347074][T13280] gspca_stk1135: Sensor read failed [ 797.357934][T13280] gspca_stk1135: Detected sensor type unknown (0x0) [ 797.366112][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 797.376519][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 797.382879][T13280] gspca_stk1135: Sensor read failed [ 797.390228][ T9] usb 1-1: config 0 has no interface number 0 [ 797.397434][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 797.403836][T13280] gspca_stk1135: Sensor read failed [ 797.409755][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 797.416167][T13280] gspca_stk1135: Sensor write failed [ 797.422853][T13280] gspca_stk1135: serial bus timeout: status=0x00 [ 797.429872][T13280] gspca_stk1135: Sensor write failed [ 797.435300][T13280] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 797.443492][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 797.457354][T13280] usb 2-1: USB disconnect, device number 75 [ 797.464715][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.481353][ T9] usb 1-1: Product: syz [ 797.486611][ T9] usb 1-1: Manufacturer: syz [ 797.491280][ T9] usb 1-1: SerialNumber: syz [ 797.502714][ T9] usb 1-1: config 0 descriptor?? [ 797.511632][ T9] smsc95xx v2.0.0 [ 797.567276][ T106] usb 4-1: reset high-speed USB device number 83 using dummy_hcd [ 797.832688][T15355] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 797.914567][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 797.928568][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 799.286841][ T5924] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 799.307152][ T5925] usb 4-1: USB disconnect, device number 83 [ 799.436762][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 799.444358][ T5924] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 799.453004][ T5924] usb 2-1: config 0 has no interface number 0 [ 799.461527][ T5924] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 799.471100][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.479635][ T5924] usb 2-1: Product: syz [ 799.483834][ T5924] usb 2-1: Manufacturer: syz [ 799.489105][ T5924] usb 2-1: SerialNumber: syz [ 799.496007][ T5924] usb 2-1: config 0 descriptor?? [ 799.505142][ T5924] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 799.710037][ T5924] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 799.724190][ T5924] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 800.151745][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 800.168055][T15374] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2870'. [ 800.178334][T15374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2870'. [ 800.189191][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 800.291676][T15376] binder: 15375:15376 unknown command 0 [ 800.297562][T15376] binder: 15375:15376 ioctl c0306201 80000080 returned -22 [ 800.308321][T15376] binder: 15375:15376 ioctl c0306201 80000180 returned -14 [ 800.316282][T15376] binder: 15375:15376 ioctl c0306201 80000300 returned -11 [ 800.369326][ T5924] usb 1-1: USB disconnect, device number 108 [ 800.677769][ T5925] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 801.166527][ T9] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 801.316634][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 801.323849][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.335267][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.345332][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 801.358914][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 801.365259][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 801.377230][ T5925] usb 4-1: can't read configurations, error -71 [ 801.377850][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.407054][ T9] usb 1-1: config 0 descriptor?? [ 801.726941][ T5925] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 801.822424][ T9] appleir 0003:05AC:8241.0048: unknown main item tag 0x0 [ 801.829812][ T9] appleir 0003:05AC:8241.0048: unknown main item tag 0x0 [ 801.838008][ T9] appleir 0003:05AC:8241.0048: unknown main item tag 0x0 [ 801.845077][ T9] appleir 0003:05AC:8241.0048: unknown main item tag 0x0 [ 801.859828][ T9] appleir 0003:05AC:8241.0048: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 801.879342][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 801.891261][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.902438][ T5925] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 801.913036][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.937404][ T5925] usb 4-1: config 0 descriptor?? [ 802.057175][ T9] usb 1-1: USB disconnect, device number 109 [ 802.085281][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 802.094317][ T5924] usb 2-1: USB disconnect, device number 76 [ 802.117654][ T5924] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 802.136144][ T5924] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 802.155186][ T5924] quatech2 2-1:0.51: device disconnected [ 802.364130][ T5925] chicony 0003:04F2:0418.0049: reserved main item tag 0xe [ 802.376002][ T5925] chicony 0003:04F2:0418.0049: hidraw0: USB HID v0.01 Device [HID 04f2:0418] on usb-dummy_hcd.3-1/input0 [ 802.467088][ T5924] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 802.567708][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2876'. [ 802.577150][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2876'. [ 802.592672][T15383] ip6gretap0: entered promiscuous mode [ 802.599386][T15383] ip6gretap0: left promiscuous mode [ 802.616689][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 802.623479][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.637181][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.644244][ T9] usb 4-1: USB disconnect, device number 85 [ 802.648815][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 802.677691][ T5924] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 802.687384][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.698136][ T5924] usb 2-1: config 0 descriptor?? [ 803.110624][ T5924] appleir 0003:05AC:8241.004A: unknown main item tag 0x0 [ 803.119413][ T5924] appleir 0003:05AC:8241.004A: unknown main item tag 0x0 [ 803.127470][ T5924] appleir 0003:05AC:8241.004A: unknown main item tag 0x0 [ 803.134646][ T5924] appleir 0003:05AC:8241.004A: unknown main item tag 0x0 [ 803.142191][ T5924] appleir 0003:05AC:8241.004A: unknown main item tag 0x0 [ 803.158273][ T5924] appleir 0003:05AC:8241.004A: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 803.339235][ T9] usb 2-1: USB disconnect, device number 77 [ 808.779467][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.786102][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.219195][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.225663][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 886.216918][ T31] INFO: task kworker/0:4:5906 blocked for more than 143 seconds. [ 886.230152][ T31] Not tainted syzkaller #0 [ 886.235157][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 886.243929][ T31] task:kworker/0:4 state:D stack:20672 pid:5906 tgid:5906 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 886.256289][ T31] Workqueue: events rfkill_op_handler [ 886.261748][ T31] Call Trace: [ 886.265017][ T31] [ 886.268166][ T31] __schedule+0x14bc/0x5000 [ 886.273144][ T31] ? preempt_schedule+0xae/0xc0 [ 886.278273][ T31] ? preempt_schedule+0xae/0xc0 [ 886.283172][ T31] ? __pfx___schedule+0x10/0x10 [ 886.288180][ T31] ? schedule+0x91/0x360 [ 886.292443][ T31] schedule+0x165/0x360 [ 886.296773][ T31] schedule_preempt_disabled+0x13/0x30 [ 886.302248][ T31] __mutex_lock+0x7e6/0x1350 [ 886.307149][ T31] ? __mutex_lock+0x5bb/0x1350 [ 886.311910][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 886.317417][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 886.322548][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 886.327904][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 886.333818][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 886.340456][ T31] ? kobject_uevent_env+0x36b/0x8c0 [ 886.345680][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 886.351587][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 886.356967][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 886.362692][ T31] rfkill_set_block+0x1d2/0x440 [ 886.367864][ T31] rfkill_epo+0x7e/0x180 [ 886.372130][ T31] rfkill_op_handler+0x84/0x240 [ 886.377112][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 886.382860][ T31] process_scheduled_works+0xad1/0x1770 [ 886.388588][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 886.394609][ T31] worker_thread+0x8a0/0xda0 [ 886.399507][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 886.405868][ T31] ? __kthread_parkme+0x7b/0x200 [ 886.410974][ T31] kthread+0x711/0x8a0 [ 886.415060][ T31] ? __pfx_worker_thread+0x10/0x10 [ 886.420225][ T31] ? __pfx_kthread+0x10/0x10 [ 886.424824][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.430354][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 886.435549][ T31] ? __pfx_kthread+0x10/0x10 [ 886.440213][ T31] ret_from_fork+0x599/0xb30 [ 886.444821][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 886.450071][ T31] ? __switch_to_asm+0x39/0x70 [ 886.454843][ T31] ? __switch_to_asm+0x33/0x70 [ 886.459874][ T31] ? __pfx_kthread+0x10/0x10 [ 886.464481][ T31] ret_from_fork_asm+0x1a/0x30 [ 886.469561][ T31] [ 886.472622][ T31] INFO: task kworker/0:5:5913 blocked for more than 143 seconds. [ 886.480408][ T31] Not tainted syzkaller #0 [ 886.485347][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 886.494314][ T31] task:kworker/0:5 state:D stack:21208 pid:5913 tgid:5913 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 886.506473][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 886.513146][ T31] Call Trace: [ 886.516719][ T31] [ 886.519667][ T31] __schedule+0x14bc/0x5000 [ 886.524205][ T31] ? __pfx___schedule+0x10/0x10 [ 886.529212][ T31] ? schedule+0x91/0x360 [ 886.533471][ T31] schedule+0x165/0x360 [ 886.537679][ T31] schedule_preempt_disabled+0x13/0x30 [ 886.543149][ T31] __mutex_lock+0x7e6/0x1350 [ 886.548207][ T31] ? __mutex_lock+0x5bb/0x1350 [ 886.552991][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 886.559277][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 886.564313][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 886.570184][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 886.575925][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 886.582398][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 886.588252][ T31] process_scheduled_works+0xad1/0x1770 [ 886.593829][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 886.599885][ T31] worker_thread+0x8a0/0xda0 [ 886.604511][ T31] kthread+0x711/0x8a0 [ 886.608946][ T31] ? __pfx_worker_thread+0x10/0x10 [ 886.614074][ T31] ? __pfx_kthread+0x10/0x10 [ 886.618961][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.624178][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 886.629499][ T31] ? __pfx_kthread+0x10/0x10 [ 886.634103][ T31] ret_from_fork+0x599/0xb30 [ 886.639035][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 886.644172][ T31] ? __switch_to_asm+0x39/0x70 [ 886.649076][ T31] ? __switch_to_asm+0x33/0x70 [ 886.653849][ T31] ? __pfx_kthread+0x10/0x10 [ 886.658478][ T31] ret_from_fork_asm+0x1a/0x30 [ 886.663264][ T31] [ 886.666289][ T31] INFO: task syz.2.518:7555 blocked for more than 143 seconds. [ 886.674229][ T31] Not tainted syzkaller #0 [ 886.679223][ T31] Blocked by coredump. [ 886.683810][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 886.692756][ T31] task:syz.2.518 state:D stack:26080 pid:7555 tgid:7555 ppid:5848 task_flags:0x40044c flags:0x10080003 [ 886.705144][ T31] Call Trace: [ 886.708521][ T31] [ 886.711444][ T31] __schedule+0x14bc/0x5000 [ 886.715949][ T31] ? __pfx___schedule+0x10/0x10 [ 886.720843][ T31] ? schedule+0x91/0x360 [ 886.725099][ T31] schedule+0x165/0x360 [ 886.729611][ T31] schedule_preempt_disabled+0x13/0x30 [ 886.735098][ T31] __mutex_lock+0x7e6/0x1350 [ 886.739749][ T31] ? __mutex_lock+0x5bb/0x1350 [ 886.744534][ T31] ? rfkill_unregister+0xc8/0x220 [ 886.749711][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 886.754756][ T31] ? __pfx_device_del+0x10/0x10 [ 886.759877][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 886.765278][ T31] ? __cancel_work_sync+0x5c/0x110 [ 886.770571][ T31] rfkill_unregister+0xc8/0x220 [ 886.775451][ T31] hci_unregister_dev+0x374/0x510 [ 886.780820][ T31] vhci_release+0x152/0x1a0 [ 886.785327][ T31] ? __pfx_vhci_release+0x10/0x10 [ 886.790757][ T31] __fput+0x44c/0xa70 [ 886.794821][ T31] task_work_run+0x1d4/0x260 [ 886.799682][ T31] ? __pfx_task_work_run+0x10/0x10 [ 886.804817][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 886.810315][ T31] do_exit+0x6c5/0x2310 [ 886.814489][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 886.820109][ T31] ? do_raw_spin_lock+0x121/0x290 [ 886.825155][ T31] ? __pfx_do_exit+0x10/0x10 [ 886.829954][ T31] do_group_exit+0x21c/0x2d0 [ 886.834570][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 886.839817][ T31] get_signal+0x1285/0x1340 [ 886.844359][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 886.850272][ T31] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 886.855483][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 886.861979][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 886.867591][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 886.872901][ T31] ? rcu_is_watching+0x15/0xb0 [ 886.878728][ T31] __do_fast_syscall_32+0x3cb/0x570 [ 886.883948][ T31] ? rcu_is_watching+0x15/0xb0 [ 886.888989][ T31] ? do_fast_syscall_32+0x34/0x80 [ 886.894027][ T31] do_fast_syscall_32+0x34/0x80 [ 886.898958][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 886.905302][ T31] RIP: 0023:0xf7f93539 [ 886.909818][ T31] RSP: 002b:00000000f5486460 EFLAGS: 00000206 ORIG_RAX: 000000000000010b [ 886.918297][ T31] RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 0000000000000000 [ 886.926270][ T31] RDX: 00000000f5486494 RSI: 00000000f548648c RDI: 00000000f5486494 [ 886.934396][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 886.942534][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 886.950721][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 886.958747][ T31] [ 886.961806][ T31] INFO: task syz.5.2632:14630 blocked for more than 144 seconds. [ 886.969892][ T31] Not tainted syzkaller #0 [ 886.974838][ T31] Blocked by coredump. [ 886.979464][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 886.988298][ T31] task:syz.5.2632 state:D stack:25856 pid:14630 tgid:14629 ppid:11560 task_flags:0x40044c flags:0x10080003 [ 887.000506][ T31] Call Trace: [ 887.003800][ T31] [ 887.006870][ T31] __schedule+0x14bc/0x5000 [ 887.011435][ T31] ? __pfx___schedule+0x10/0x10 [ 887.016680][ T31] ? schedule+0x91/0x360 [ 887.020951][ T31] schedule+0x165/0x360 [ 887.025101][ T31] schedule_preempt_disabled+0x13/0x30 [ 887.030965][ T31] __mutex_lock+0x7e6/0x1350 [ 887.035557][ T31] ? __mutex_lock+0x5bb/0x1350 [ 887.040374][ T31] ? rfkill_unregister+0xc8/0x220 [ 887.045410][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 887.050584][ T31] ? __pfx_device_del+0x10/0x10 [ 887.055450][ T31] ? __cancel_work_sync+0x5c/0x110 [ 887.060808][ T31] rfkill_unregister+0xc8/0x220 [ 887.065682][ T31] nfc_unregister_device+0x96/0x2a0 [ 887.071060][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 887.076846][ T31] virtual_ncidev_close+0x56/0x90 [ 887.081903][ T31] __fput+0x44c/0xa70 [ 887.085899][ T31] task_work_run+0x1d4/0x260 [ 887.090863][ T31] ? __pfx_task_work_run+0x10/0x10 [ 887.096010][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 887.101263][ T31] do_exit+0x6c5/0x2310 [ 887.105522][ T31] ? do_raw_spin_lock+0x121/0x290 [ 887.110719][ T31] ? __pfx_do_exit+0x10/0x10 [ 887.115334][ T31] do_group_exit+0x21c/0x2d0 [ 887.120169][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 887.125381][ T31] get_signal+0x1285/0x1340 [ 887.130241][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 887.135823][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 887.142110][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 887.147935][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 887.153227][ T31] ? rcu_is_watching+0x15/0xb0 [ 887.158036][ T31] __do_fast_syscall_32+0x3cb/0x570 [ 887.163242][ T31] ? rcu_is_watching+0x15/0xb0 [ 887.168118][ T31] ? do_fast_syscall_32+0x34/0x80 [ 887.173157][ T31] do_fast_syscall_32+0x34/0x80 [ 887.178507][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 887.184850][ T31] RIP: 0023:0xf7f87539 [ 887.189059][ T31] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 887.197539][ T31] RAX: 000000000000000b RBX: 0000000000000005 RCX: 00000000800bd000 [ 887.205517][ T31] RDX: 0000000000000318 RSI: 0000000000000000 RDI: 0000000000000000 [ 887.213826][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 887.221873][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 887.230012][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 887.238293][ T31] [ 887.241321][ T31] INFO: task syz-executor:14865 blocked for more than 144 seconds. [ 887.249353][ T31] Not tainted syzkaller #0 [ 887.254290][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 887.265875][ T31] task:syz-executor state:D stack:24376 pid:14865 tgid:14865 ppid:5822 task_flags:0x400000 flags:0x10080002 [ 887.278152][ T31] Call Trace: [ 887.281447][ T31] [ 887.284387][ T31] __schedule+0x14bc/0x5000 [ 887.288954][ T31] ? __pfx___schedule+0x10/0x10 [ 887.293808][ T31] ? schedule+0x91/0x360 [ 887.298173][ T31] schedule+0x165/0x360 [ 887.302347][ T31] schedule_preempt_disabled+0x13/0x30 [ 887.308066][ T31] __mutex_lock+0x7e6/0x1350 [ 887.312657][ T31] ? __mutex_lock+0x5bb/0x1350 [ 887.317556][ T31] ? rfkill_register+0x37/0x8e0 [ 887.322427][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 887.327529][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 887.332849][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 887.338627][ T31] ? device_initialize+0x24b/0x440 [ 887.343750][ T31] rfkill_register+0x37/0x8e0 [ 887.348707][ T31] hci_register_dev+0x3f5/0x890 [ 887.353581][ T31] vhci_create_device+0x39c/0x650 [ 887.358733][ T31] vhci_write+0x3ce/0x4a0 [ 887.363082][ T31] vfs_write+0x5c9/0xb30 [ 887.367570][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 887.372532][ T31] ? __pfx_vhci_write+0x10/0x10 [ 887.377535][ T31] ? __pfx_vfs_write+0x10/0x10 [ 887.382309][ T31] ? expand_files+0x6c8/0x7f0 [ 887.387062][ T31] ksys_write+0x145/0x250 [ 887.391400][ T31] ? __pfx_ksys_write+0x10/0x10 [ 887.396242][ T31] ? __do_fast_syscall_32+0xbe/0x570 [ 887.401892][ T31] __do_fast_syscall_32+0x1f7/0x570 [ 887.407158][ T31] ? rcu_is_watching+0x15/0xb0 [ 887.411931][ T31] ? do_fast_syscall_32+0x34/0x80 [ 887.417170][ T31] do_fast_syscall_32+0x34/0x80 [ 887.422035][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 887.428605][ T31] RIP: 0023:0xf7ff7539 [ 887.432682][ T31] RSP: 002b:00000000ffe41ec0 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 887.441271][ T31] RAX: ffffffffffffffda RBX: 00000000000000ca RCX: 00000000ffe41f1a [ 887.449324][ T31] RDX: 0000000000000002 RSI: 00000000f7486ff4 RDI: 00000000f74b54a8 [ 887.457807][ T31] RBP: 00000000ffe42088 R08: 0000000000000000 R09: 0000000000000000 [ 887.465784][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 887.473799][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 887.481907][ T31] [ 887.484952][ T31] [ 887.484952][ T31] Showing all locks held in the system: [ 887.492937][ T31] 1 lock held by khungtaskd/31: [ 887.497900][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 887.507833][ T31] 2 locks held by getty/5599: [ 887.512505][ T31] #0: ffff888033a9f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 887.522583][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 887.532755][ T31] 4 locks held by kworker/0:4/5906: [ 887.538102][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 887.549388][ T31] #1: ffffc900044ffb80 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 887.560531][ T31] #2: ffffffff8f5e5a68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 887.570371][ T31] #3: ffff88807d95f100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 887.580334][ T31] 3 locks held by kworker/0:5/5913: [ 887.585528][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 887.596640][ T31] #1: ffffc9000456fb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 887.610319][ T31] #2: ffffffff8f5e5a68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 887.621796][ T31] 1 lock held by syz.2.518/7555: [ 887.626776][ T31] #0: ffffffff8f5e5a68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 887.637332][ T31] 1 lock held by syz-executor/11560: [ 887.642607][ T31] #0: ffffffff8f5e5a68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 887.652776][ T31] 2 locks held by syz.5.2632/14630: [ 887.658175][ T31] #0: ffff88807d95f100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 887.668244][ T31] #1: ffffffff8f5e5a68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 887.678702][ T31] 2 locks held by syz-executor/14865: [ 887.684089][ T31] #0: ffff888053d9f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 887.694183][ T31] #1: ffffffff8f5e5a68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 887.704372][ T31] 2 locks held by syz-executor/14886: [ 887.709774][ T31] #0: ffff88807b0fc918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 887.719901][ T31] #1: ffffffff8f5e5a68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 887.730210][ T31] [ 887.732565][ T31] ============================================= [ 887.732565][ T31] [ 887.741133][ T31] NMI backtrace for cpu 0 [ 887.741148][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 887.741166][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.741174][ T31] Call Trace: [ 887.741181][ T31] [ 887.741188][ T31] dump_stack_lvl+0x189/0x250 [ 887.741213][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.741228][ T31] ? __pfx__printk+0x10/0x10 [ 887.741257][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 887.741282][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 887.741304][ T31] ? __pfx__printk+0x10/0x10 [ 887.741329][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 887.741355][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 887.741377][ T31] watchdog+0xf3c/0xf80 [ 887.741403][ T31] ? watchdog+0x1e2/0xf80 [ 887.741428][ T31] kthread+0x711/0x8a0 [ 887.741453][ T31] ? __pfx_watchdog+0x10/0x10 [ 887.741472][ T31] ? __pfx_kthread+0x10/0x10 [ 887.741494][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 887.741518][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 887.741532][ T31] ? __pfx_kthread+0x10/0x10 [ 887.741553][ T31] ret_from_fork+0x599/0xb30 [ 887.741578][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 887.741610][ T31] ? __switch_to_asm+0x39/0x70 [ 887.741628][ T31] ? __switch_to_asm+0x33/0x70 [ 887.741645][ T31] ? __pfx_kthread+0x10/0x10 [ 887.741666][ T31] ret_from_fork_asm+0x1a/0x30 [ 887.741700][ T31] [ 887.741707][ T31] Sending NMI from CPU 0 to CPUs 1: [ 887.887742][ C1] NMI backtrace for cpu 1 [ 887.887760][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 887.887778][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.887789][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 887.887818][ C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 4d 1e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 887.887834][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 887.887849][ C1] RAX: 7df89842430a7000 RBX: ffffffff8197438a RCX: 7df89842430a7000 [ 887.887862][ C1] RDX: 0000000000000001 RSI: ffffffff8d7714ce RDI: ffffffff8bbffae0 [ 887.887874][ C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3 [ 887.887887][ C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f80a070 [ 887.887900][ C1] R13: 1ffff11003957b70 R14: 0000000000000001 R15: 0000000000000001 [ 887.887912][ C1] FS: 0000000000000000(0000) GS:ffff8881261a6000(0000) knlGS:0000000000000000 [ 887.887926][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 887.887943][ C1] CR2: 000056289520c660 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 887.887958][ C1] Call Trace: [ 887.887967][ C1] [ 887.887974][ C1] default_idle+0x13/0x20 [ 887.887992][ C1] default_idle_call+0x73/0xb0 [ 887.888011][ C1] do_idle+0x1ea/0x520 [ 887.888028][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 887.888047][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 887.888063][ C1] ? __pfx_do_idle+0x10/0x10 [ 887.888089][ C1] ? do_idle+0xa/0x520 [ 887.888106][ C1] cpu_startup_entry+0x44/0x60 [ 887.888123][ C1] start_secondary+0x101/0x110 [ 887.888145][ C1] common_startup_64+0x13e/0x147 [ 887.888172][ C1]