last executing test programs: 23.854407535s ago: executing program 2 (id=6636): syz_usb_connect(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xdaca7de7ff4502d4, 0xa2071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffc, 0x0, 0x3, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x90f, 0x12, 0x2, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002980)=[{{&(0x7f00000013c0)=@ethernet={0x0, @multicast}, 0x80, 0x0}, 0x3}, {{&(0x7f0000001e80)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=""/40, 0x28}}], 0x4, 0x40002042, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f00000000c0)="2af89cac2b8777babc929e4b9d2f438bb614b53aa71c980ef4719d515362fd56e7cd10f77ba70e430c99b84defb9b964c33310ab3a1373237473fda68f559ec29ad60b4291370dadd57a8063f1111c265f57e75a13639555e5ca2df73ad8f5c8db", 0x61) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) readv(r4, &(0x7f0000000140), 0x2) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 21.775742848s ago: executing program 2 (id=6650): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3ff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0xb19, 0x401, 0x300e, 0x9, 0x9, 0x0, 0x1, 0x4}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003ec0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0x11}, {0x10, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3}}, @TCA_FLOWER_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x40004) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/111, 0x6f}, {&(0x7f0000001480)=""/124, 0x7c}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0xa4, 0x99, 0x40, 0x7d0, 0x4101, 0x3ffc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x51, 0xed, 0x15}}]}}]}}, 0x0) 18.623276107s ago: executing program 2 (id=6664): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0xa) (async) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0xa) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x800, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) sendmsg$nl_netfilter(r3, &(0x7f00000016c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001680)={&(0x7f0000001740)={0x11dc, 0x13, 0xb, 0x201, 0x70bd2b, 0x25dfdbfb, {0x3, 0x0, 0x2}, [@nested={0x18, 0x8b, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @u32=0x9}, @typed={0xc, 0xbb, 0x0, 0x0, @u64=0x9}]}, @nested={0x8, 0x34, 0x0, 0x1, [@nested={0x4, 0x7f}]}, @typed={0xa, 0x8f, 0x0, 0x0, @str='\xe2)\'{)\x00'}, @nested={0x110d, 0x143, 0x0, 0x1, [@typed={0xc, 0xf4, 0x0, 0x0, @u64=0x2}, @generic="85d8ea0a5a6dbd964a6909c9d5d478db8375cc437510cf68f0214f094f98759daf161e15e47b77be4166876be02b6cc19425a8052de29aa31c4f61614437d6b1838df0da11db62e4e1ea6bce9dcc023b4738ba0cbd09ec113af5397d6c8cc26c6f0097129ce2f1b6b389dbf17b42a013f28075d516", @generic="5307f10d8c02e38e3be69b591cc3d875c8e229341ce417f5f8d0982b58606f29b1cc7ae688afe76cb6a276199c0b8703b37faa2b15e37e16ac1255d1749fe04fd0835b2bb0d2a0ff75f55917992c493fe6be85d0a608f0473fcf6bbc453be6c5daea58e910cdcb7727c5c945", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xc3, 0x0, 0x0, @fd=r4}, @generic="6cfdecef7a12a53cccfab6658fa05e548df6c490886f49ab0f7acc5b506b20cc81dfd50062c213d9d068d6e3e5ffa75dc9730e16e8de2abe04112194d0dde92605c835a54170c736fb671de8f64870c30ae601be46e34881bffed6497aee010153291e65af206941486f95df2398b9168a4560368a16b692a9d4ec01fc880a596546bfbb2fb186a48266868e92044b04c4ac2f55d49a00fe3ae4bdf6c9daf534e470919c6a148948bcdc63438fdcca8f935bc07315bbb30736c7b79876987aeb9efe307dcb98321570d4ce07dfb798a5fc9a7d49a4598eba4002ff39e724c673bd716195249ded69bc4f5504fe1ad5493027e48a4955d63efd73eeced8752aa90f5acfc28ab0fb008b0e4f0eb8a244db7af4a069cc7f136c760d11e2f2c48479ad29ffbf6aac6a63b2643b2a18e11d295f0d3764d3ab2e4defe2ff5e6ad54626bc0eb2d2719cc9f8f57178e5e0dd37fc997544ef7747c262494220de9f2c708ea6d0689775c32e3227e239b2fabfba46bacf519c513f123e72a3f82b347f45aa81e4e93b7f9b527d28fb246f9db53bb37bf0314bac18368c33513f8220ab0d3526b99941381543d24fd1871fa957abe40ec22d25fad49467d53ec509b875ead6a18b72e65723c047ef8d7cb8463372ce6dfbaa51115ba002cc54ce8d79706c33082cd9de27126ae21912faa55870e9dc9e5d78ac28c3dc838943e495856a4899f0ff77f4d10adda98de83d50910bb8465bd27815e4db3846a3c539b2560b0ea50b5ce22277d925b858190b39f2526ac72093267bcd4b5dd58e60fd1e235e990990d0788b86635b8eeccabc32481da943fbcaab83f4874bd7063885eb81d8a3a3f98564bf021d838f5dffa7af7efe80fd856a60f106bf6f3dacf43d891d1a8c3b268fcfb45f6518e2a74886dd2adbdc0f1e90fbd21aaa5a568f498ff44c86db417bb09572bb734f32f3513936cb916e181b2877e024819702d1251b020dab59fe0d2c28dd456316ddd76a1de9a1718b751b02c1fdfd0db5691bdc8e7940518cd7152db7da039700226952e26192c57531e03782ae792710a5c7d609c3804ea4cd4d30fae2c1b10b9860ec87737150fadbf5b1738cb0851214714481b4e90cf657448b5044ae17f1a91b72cc186aefb00b4088a5867c069465bb5752f35db8c6283881284b19bab41925e364fc39f9a7ca31755ac1e05da15802db9894a872c6b99dca8d3633f088d6e656463e8dc6b31e979aef313e1589fa9c6fe19a7402772d26842acb9d712222a2e81f556b3b43ec495df4a25f8eb208c5a6a7f0b37102991dd1626d6ee4a350c7072f6fd1838274b6c0a00cb97dd69875132fd9623b1f15e884bfeda452b3bee40ad816c1c7f114cd5fc9791d57a28880d0955168e71c0d5a053d41984f8bdd643f4b2c2e7b0407c7467863f239233473a8d5030c9ffb9bea7a78bac3bcf95f764ef6b21b2c32b3907a55f4b65519e1d626f63fe85c269c676798caaf70cc01a1eefcc7e75bdb6353efdd61a04e19bdfdea004589d623b9371966cc99e6e8ad78b5fcab6347956485b02e510ef53e3d5c0979e966819298caa8692cccbd072f41402c2aa060b9218b16e072116c362c9c1f099d499c6bbe7a79bd660a63cee113a8a8d3ecdec998c04c00f716fb46b182a00642b30544d4bcc1e87a06bb1d9fd281d9ef0e5db4fd64c95456f4babbaa884df2b14774267cfa1b7fa2293d0d34981dc3add8e338a57f4976c6ac14905fb32293f6304e0318a49d1328de363a4ad106adc02d45f63b9d55d757ebf3a61a27f33497b209bd80b85db833d7416b1785addea0947bb717c3615b9d3b5bbeca859250035e752b40dfb8589a58cd32f04bf40f97b074d2419e296495d865dae8de30673d187333f0910acae0f9a0718310e04b920bfe0704f0b9c8dff4a98baf8481797df90815e2957f93ef02198d9e29e37deb39615d87493d341ab1ded17873c2f4163796b8feacdc5b8f890315529e6838738df9a8ac462000396c9fc98938669c068cb2060219e99719b1cb146c95e79c3f3c5bcf75491782c9d8a8131f7b6a168162d41652c8f1ff87477c91a200ce8b8077fb93bd17e94dbdb8b337aaa379b737b050115f2aa9141338cf373248d277ff31743a4c75984073b6913efff078f761312fde140c00c3453b8e436e225663051b357e7340586a72b1addae02ab48741dcb391a09b834e00efee1aa3d45da812cb4f89f99fa93175f2fa55b3c0e146777fcd812c47db6afde564433e28295d96b91d7bfb36096dbc1a1dd5e52be5e35831069af27f69748c9cee0902fe7a3495aa2cbba55dea734a451bfa64c41f2265475ffdc4efe108e48b7edf7366708adb7112fa0bed893efbdea3c1133c9eaec14ab0b2e0c6aded9920554d413f3512ff4d21178cb3483aa50fef0971750ed002c1cef49a1eb3434f87dfd75460a795b6e21bf6a268a96411f37ea82dc20a6cd41de3ba0e37d450582186944b524c4da4157ae8d1ac2ba02b0f7e80bad24f152b047648f60d5e13462ed3301080ca6805bfe52d42dd6157b700f739cbbb1508ab7a41b2788fc0fb94afbee272fded625f24155910e9114afb15804ecdc56853d961ce672d96b3d10fab2c4526b96ea273bc75081f821e3356f08b7f6a325cc10fa0769d3458ef3d44fe86345a920a8677d4e91d5d54da07b0e75bb88e954f7e920ad56c9b5db585cb17780c4658d3b7d3da19a19ced5377e1496567bea4ceada24fa5028b16b86a379c4f26d1f38731b9c052b5a39a8e8de143ab04d1c3b8b30b086204ac0b46383dbf9c8e3355f2f90a641e563dd752cdf52d59584b1754bdcc4c9a19a27fc338ed1409d04695fa7df9cdc58f012e370ebdf7ea10cdb2ee52da561c7d02bb444552f724ea15a16e8f5187d4eb910d9028ebee42f3ab7b974bcadad637f634dce89e33919a399a46967fa60dffc961dc7eb347e76885ecb52513b0357584bafe2582ca4cb2979f3d68844d9b1addc5d72788a1ea2b369fb0d0d3a39b89151f45646fe533f9a1c19661dc441eeade8cc361eff2d9665f0f194c632a658ab9e1a3daf79f02fe8deb3d6249e293ce0c448e2b77c66c2bcc289e4b36a05b46e87758515c458ca48fe7016467c0cba0399583748454713452b7d6df63c05a44340d0e1a2acf4cae034cf74d5d38c30761977f917e58b90052537758416a61e3451fe03759740dcdbfbba1302fde47a6072cbdbe1690d51c0ce543bcc8aa80a655af1bd12e12442b4f03c5eea0fc6ea8304bf6ea544200956024727150207b6f0a4451dfafcbc6975353114d2ee5d079a0a098eddb1cdcbf5c43061bb363611b379eb2349f39db33bbd23a593b8e980721af5b2935014b0784e6b5686dfa9592283cd91e555cd2faac0007b68fb9d0de667676fc64671effb5b6c941dc1ef696799f885711aed54b644d71797179847673cb2b9eef77eecfc3f63f17c3174ac165c0159ed7a30b93e43bca1208aca97bc807abae41e8c4f7d7eca91104dd5efff928d3c8730a88cbc75d3e4db34ddeb8980e14bf018588da4352ca895833a45e65171c4aa8f664ff59260b4b325a0cfdd19996c180bfdccb728d69447fd4e1d2bcbf97f45a66b7a7109317fd7c1a5f2440e33cfc14da1716ee08b6d0f602001ab4778334a9f0d033ea521d7dd56f76b9465d12470c082411aea811dd9ac8ff73f864d98601e5ec225557c100e979f2624a6eac6f2c894aa9e5aa2514b0570b9bc365f4ad2059ec60a8f37606f041e6279fb864c40c98507e76434cd19065f1c712425e1430f601579afb4c49e8ea1dc0f8561d3b9ef8175b381a728529a7ee083071f1ad683c29856f015ec4645e3227873ce79e3fc1cf4133950b9eb5a435be9a0e6b1b9375e266b86d4e855522c73c8cbc89c2bb4c71e7dae1a9a17819d797993be90b5e038316c681b4146cec01b1a2f343931115213127f77241ec8ea1f57529eaf3070d646bb373f2d0044a751a6840341c49cb9b095ee6737abed65e94314ffe67cc61881a62e6561409ba0a62b13308018c62f1238662ab5ee83752bcd827946cbb1ad5e3cd4fd841bce16f07a0b523ef16d701f808991389aa691f47116540da8170b599acab98c5111e003ce6ba4f48f021ee4c851b64c6266bb1f16bf0981490d22fa4d187917ab761de9167ab303a310cb65e9ba11700ac4906555eab8bbc757a2cd22d7373ad13c2ae0fb78c9b26aeb443ae6c2469cbbffaf05a64605b3dfa11bc7c423a4c9a5786829b34110bd082b174971c82af2aa34cb941dc14139b719198d6344c5b1a1bfd8f4a63c4d9d9824dd3470c0598782bb6ad6771b8921b371da8066cf20a7bee960969fc21d82cdccc043c585c85f6ae62496e423b09a727d19762669c3427c79c8ff6a2450effec553bcc6d2d70ae47ae186f7ace7eb1f8f1624a4a91adddb9f43524566fe8152b97e54771379458159db42bc637aa7e56ce7e118c1f968fa40a8e5f2b4e6255b49986a4a2637b8fc81139b5b46aeef939c154d89fa2983a369d24f84e7e37a51cb4e4de4ce3652b43b7d4d7f54031321f1d2f0bb55da1007a9fac50c40a1ab746bf23127d528723051f5e7275ac3abc7f9a14eca1e22b590da5219013c82567d54b8f33c08e0cdd00494e95de93263bc783090e9369cc9814c10cb298f94fb19488ecd1f1a7d184c20905bfbc54724216abd243486bcafdd75ede34a45956d2dd075fdc9c7890c01f2354a477683c6ba1be32bda9a6e1da19769fd52accfec5f498b97143103ead409e3428318c506d03706b024e2141dc9a485fba63bd6290c61a238a42bcd39a6c5ae9ab4d4162f0228f0398bb630898a38ab81c6cfa53f34af1d7dcf8ff995566029ebfaf29b52eb63db3e98af8778549d374ebe8bd6c7b5c2be4db3b4a018072895afc1fe2eaf3bff298b12d2524210db2be758c18304809211538a4c8e74c6a99e6beb504e59b28fb59d0bd15189942055c452dc5f52add6de7990806a951c5be978d81abdcb53a04ef61bb5108c43edfdab5400fcd57487de1a5afaa6a78e21a166b5d24b6c52cc05b1a446454e4477019bd4c577a20f6595a3e67b23789f7c7b84295ff9651e49a83a116e812e846a1bf89b68338bf1d16564f3f59d18527d3b87cea3e686f568c6feebd9e2b59aacfe997ed0b66d2bad7b87807e79a6d9248b0d173f6d89aad6f208f7c4c37c13076c4e6cd266d3ebc26cb5bf4405ab6fbecf9fa5876a27bc5e1543e792d2761f1f6f94104bd29a284f2092017faa6be336142eeb9676e656dbe752e6de928bb75a7adb16c08f7168ba43a09e8c17e3abfc1de85ac379687168733a2583a588b56f8f9120c18599a35af9ffb3439a5e0aa7bbb10af1cbf2eeb3146873ca041dfefe9b6e50bb951f96a1fe23c44207d4c7c13b6d0f67241ed747888970251aae4178e6bda7577dcfc8550d2d86ccc885904a5e38f698613f9bb0b46fc21930c442f1958cc0aba676b9c74cd442f23c6133194369e1ddcbeff432724e9b80cf1e5473485517539f0fcf8435d60958f23ed63b08fa5eb5f4e7c7e8c1a00e4d2e471cb707d542ac9c9b6a10c4bbd070d0c56e5851a3c4e0a910ffdeee37502d61b732d9bc223c7563b96137f53984fb8db67ff261e2bce552a2d12eff4574259d74107921ca6ac1bf7347f9048b8eb408395165f53fbf2cef819a58e3df66df05a21c477de4b80002ae179ee642ba2f290bf8df5b7a93cc24610d7e8992af3abbeefb31f66a3ce1c971b59d00c81d13e21b36949e6d5c7"]}, @nested={0x8c, 0x44, 0x0, 0x1, [@generic="43e927ba4a0e8ab02c5fea9d147efe4c21df5b1305f8de208fee8565ca5f60ea11555fb0f066a3a54e03cae5d103c6a6d978e770a2708cd6899538e704f20c4a77adeb33077c24ccd4942284d4005e9fe3752cff1cbc535da1c5ea736b5e7c6edbfc668045d6d9cb82b31b5bdc3984b31253c11bad5025ad62a61af553f8a40ed1bf86c9af25533d"]}]}, 0x11dc}, 0x1, 0x0, 0x0, 0x4000}, 0x881) socketpair(0x29, 0x2, 0x0, &(0x7f0000000a40)) (async) socketpair(0x29, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001700)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcc, 0x73, 0x9f, 0x20, 0x4a4, 0x14, 0xc957, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x4, 0xce, 0x10, 0x0, [], [{{0x9, 0x5, 0x0, 0xc, 0x40, 0xa4, 0x8, 0x8}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3, 0xfc, 0x1, [@generic={0x7, 0x5, "910e3a85ea"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x7, 0x1}}]}}]}}]}}, 0x0) io_setup(0xf, &(0x7f0000000480)) (async) io_setup(0xf, &(0x7f0000000480)=0x0) r8 = syz_pidfd_open(0x0, 0x0) openat$nvram(0xffffff9c, &(0x7f00000005c0), 0x8000, 0x0) (async) r9 = openat$nvram(0xffffff9c, &(0x7f00000005c0), 0x8000, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) (async) close_range(r10, 0xffffffffffffffff, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x2b) ioctl$sock_inet_SIOCSARP(r11, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e20, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x8, {0x2, 0xfffd, @multicast2}, 'veth1_virt_wifi\x00'}) (async) ioctl$sock_inet_SIOCSARP(r11, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e20, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x8, {0x2, 0xfffd, @multicast2}, 'veth1_virt_wifi\x00'}) io_submit(r7, 0x6, &(0x7f0000000980)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x29d, r8, &(0x7f00000004c0)="412c0967b875f40c7811593939f549b498da55c893650f451a709a2d148d9c22ad2ae2ef44aad4bbbaabb293c9e1dac152c81ba913846318a8dd41e9eed8a87f05bccf253e069c626c39155b5128846c8e2bca6d4d437711420bd862105f3c501dd5ec15bf608af59150beccbb2cb8221d69dd856c2d27e82e432cad7e860cd64a3cf62fc1b9a477cc368de6522bbed680e403a05a687536c78ea96b85b1a7721fcb4cce234e91db070c8f59663b57b1ef5d27d3127ae8392617932ab36f0aa324e7ed09533ad4f1d0e2398dfdb88f6f1565", 0xd2, 0xfffffffffffffffc, 0x0, 0x0, r9}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x8, r2, &(0x7f0000000640)="8049cc314ec2ce008682192fabbe3eb6c52fe76c2f2ffc2111f8131e", 0x1c, 0xb5, 0x0, 0x0, r3}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f00000006c0)="9baf8d18706f5721628d1d1a4fd318a3d8fb5360371201c6dff66bd8b7fb9164509b6bc8a53c5d9c44f8a6ff156d711f3433a6f017e1850331a31ed018b495ba0216afacb9e66fe8113322a9ed14c5c6f2a4a38b10ebca88803da27f6729ff87158e19605074148b7d5f520442c865728c48f7d71af363955de148b7c0659681b9097d4469", 0x85, 0x0, 0x0, 0x0, r6}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x8, 0xc, r0, &(0x7f00000007c0)="3ef1a715a1b5e88c0ebda29beb3ccf344e2e8b1924b125544051820f26ea61e962b29524f4ed14c6984e792d8a218087b2814b4bad3bffe7686b", 0x3a, 0xa0ec, 0x0, 0x3, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f0000000840)="4524e386db83d0c5d9b94fdf7270c000b6cd9d4d3c959e7756ea429695a4bdfb0741148e0ba52652c4c8370369e167b75a7d5233e2cb22f8bc1539f74f5d7c5a6bb6f8ed8ffe5efe0496619880a795a0ec86b1cfc6ca1c388f8cd0ea77", 0x5d, 0x1, 0x0, 0x1, r1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x4, r5, &(0x7f0000000900)="976f8d1a9d", 0x5, 0x8, 0x0, 0x1, r11}]) syz_usb_connect$cdc_ncm(0x4, 0x196, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x184, 0x2, 0x1, 0x8, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "1db5849b"}, {0x5, 0x24, 0x0, 0x1a4c}, {0xd, 0x24, 0xf, 0x1, 0x86, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x6, 0x4, 0xac, 0x14ab, 0x8b}, @mdlm={0x15, 0x24, 0x12, 0x400}, @mdlm_detail={0xec, 0x24, 0x13, 0x5, "9770d8870e883e33e59e8d54871777cbf0247838e781922bc54a4021fffaf99100b88ab040cb6af58a52c3e81a32464a0c309708d172b9ebd6ad29e28d72079230b38169ca896918a44be5736b3be1fdb7e8bfc84060e283c917d6187306709da3da54fe71d402f3de07fcee2abce9497306f431d2f43fef924ca6b625ea07e6d11cf47eded25f8e2de2a4742ba9bdba75b3566c0c00e3a3ded90966e6430c1a4b674fb780af620bf2daedc4d4fda263d2003b733155e131c6fc94b97a217b6136f4aba1fae1943d62f87cc93ff79efd16f579e1f1b4e3052c6f4b3521afa41471897583a93c34ee"}, @country_functional={0x10, 0x24, 0x7, 0xc, 0xe, [0x101, 0x6, 0x6, 0x0, 0xb]}, @dmm={0x7, 0x24, 0x14, 0x7, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xc0, 0x14, 0xed}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x658, 0x4, 0x80, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x998ada2fdca454bf, 0x6, 0xc, 0xff}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0xfb, 0x0, 0x1, 0x20, 0x4}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x429}}, {0x10, &(0x7f0000000300)=@string={0x10, 0x3, "6255eb7bb1a1958f3fc04f1ede8d"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44a}}]}) 16.255414478s ago: executing program 2 (id=6672): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {{}, {0x0, 0x4101}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000040)={0x1000, 0x4000, 0x8}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25}]}]}, 0xb0}}, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x100000}) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 15.464938941s ago: executing program 4 (id=6675): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003380)=[{{&(0x7f00000001c0), 0x80, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000003240)=""/23, 0x17}, {&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000600)=""/61, 0x3d}, {&(0x7f0000000640)=""/141, 0x8d}, {&(0x7f0000000300)=""/32, 0x20}], 0x9, &(0x7f00000007c0)=""/51, 0x33}, 0x7}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/126, 0x7e}, {&(0x7f0000000880)=""/139, 0x8b}], 0x3, &(0x7f0000002b40)=""/189, 0xbd}, 0x8}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002c80)=""/177, 0xb1}, {&(0x7f0000002d40)=""/191, 0xbf}, {&(0x7f0000002e00)=""/71, 0x47}], 0x3, &(0x7f0000002ec0)=""/196, 0xc4}, 0x3ff}, {{&(0x7f0000002fc0)=@vsock, 0x80, &(0x7f0000003280)=[{&(0x7f0000003040)=""/11, 0xb}, {&(0x7f0000003080)=""/145, 0x91}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/4096, 0x1000}, {&(0x7f0000003180)=""/141, 0x8d}, {&(0x7f0000003240)}], 0x6, &(0x7f00000032c0)=""/173, 0xad}, 0x9}], 0x4, 0x20010142, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x200, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0xb}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYRESHEX=r1], 0x50}}, 0x4008840) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x80001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = inotify_init() fgetxattr(r4, &(0x7f0000000940)=ANY=[@ANYBLOB="c1daf3e89970def4a7b372b47d924187963248fc972f3269a91bbad9844219288e84db5e10ef3f619300d830a25ac8fa7291ed8417e53ed78fa4a27c77d00eb428596068290f10c89e7420e1cc8aa07566fa6188bfd0c787da443bb2691099900f5b6807bc4b79f596ef2c18c7789b816f1243e0ba3b0bafbe33c0de4fdf162464716abbeda53ea97760255412116a843833d9d71c12ed7fef3824cc6feb31219f83bbaa84f6e736a88a50c01165b7145cd4fc91e744340d9f56c9ebb509a47be5a3cd462ef92abf78eb34bd65a70c43a04d1669bc4ffcf9987e40dac4152113951cf16f2e052657f4455d23d9c13bdd919b5cc3103e6fa6c728c709cb5192d50debd60f92aa5fa6f9f0d7adbd65fb1e5dca639128e6b3d9e3048571ea9a91ce50a39e9d09819a434f8b7fc0601d7a1ed58e9d16dfbf572e63f033c1263ac1fd046343cc3e12e3185147e99531fd4678707dc523b3d8c60eb3eb6abb3aac7bfa67b65f9988a3980368c76a68afbb36ca93663f2d4cc091a2ec110c7331c7211212f149d072d3f221d4733436967c54541a9a3a806ef318ff3608"], 0x0, 0x0) preadv(r3, &(0x7f0000010540)=[{&(0x7f0000010680)=""/222, 0xde}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 15.405495101s ago: executing program 1 (id=6676): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000002b80), 0x80c80, 0x0) poll(&(0x7f0000002c80)=[{r0, 0x204}], 0x1, 0xa) rt_sigsuspend(0x0, 0x0) 15.39547632s ago: executing program 3 (id=6677): creat(&(0x7f0000000000)='./file0/file0\x00', 0x20) 15.270647658s ago: executing program 1 (id=6678): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x4, 0x10000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x11) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 15.24999478s ago: executing program 0 (id=6679): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0xc00, 0x80600}) (fail_nth: 3) 15.22885733s ago: executing program 3 (id=6680): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x0, 0xffffffff, 0xffdfffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001440)=""/126, 0x7e, 0x41) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, '\x00'}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xd0, 0x80c40, 0x23456}) io_uring_enter(r2, 0x47f4, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) ioctl$KVM_SET_XCRS(r8, 0x4188aea7, &(0x7f0000000100)={0x0, 0x21000}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000001c0)={0x48, r11, 0x805, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x54}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8001, 0x6b}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setresuid(0x0, 0x0, 0xffffffffffffffff) openat$vimc1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) 14.553099448s ago: executing program 2 (id=6681): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='veth0_to_team\x00', 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000040e974c93edec81f58b0ce376bbf55e334c1a6f94ea7b8bf82eea1563671a60aaf3af39c17e5440bd96478fd262be4ec1aeda59ffb8449878460a74228c8eecbed6d56b12290629a4ceea3e87a19595d4b52714a92e3638ce74181d5f1967481f231cea17fbb8d7b5720665749cefa6ee2ed88c9b9119ece5b7b77744657bb43d41469eaef6deeb13eac6cad918ec553720b79ee3589d2a1ce42effeb9acccffefd6351a9116e8f22ef0ec0b942e4e7a64e5a8cb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3c}, 0x94) r8 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) socket$kcm(0x2, 0x1000000000000002, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$isdn(0x22, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 14.552414673s ago: executing program 0 (id=6691): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1010010, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 14.551942797s ago: executing program 1 (id=6682): userfaultfd(0x801) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902"], 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106}}, 0x20) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 14.365756085s ago: executing program 0 (id=6683): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback={0xbbff0200000000}, 0x0, 0x300, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 14.229998748s ago: executing program 4 (id=6684): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vimc2(0xffffff9c, &(0x7f0000002840), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000002880)={0x8, 0x3, 0x3, 0x0, 0xf4}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x1ff, 0x0, 0xc3ac}, 0x0, 0x0) 10.630857207s ago: executing program 0 (id=6685): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0xfffffffc}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setresuid(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000000000000000000000000a00ba0905000100070000000900020071797a32000000000900020073797a3000000000aa4c4f2caa0ea04d38390d8a0e25b4a5d6fe060000000000000000d332b96daabc717a1da7ca914d297299232873ac8f400fd04c643199f4100f188bcb6b70246a3c906e002af88be3381f592f89533d2c632394263c90196176260fad44fdcccc6e4ec83de7ab2858fbf7c5f5f49204e3db9c3f809b419cc2b7c8c62f91cd645d956dc35b1f9d2ee402da6815faf2e07fd46a29e51874c8f2db47a2911495ddc9155c5aca0a0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x1, 0xf}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xb7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x2400c084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) r10 = openat$null(0xffffff9c, &(0x7f0000000380), 0x101000, 0x0) syz_clone3(&(0x7f00000003c0)={0x12024000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x4}, &(0x7f00000001c0)=""/52, 0x34, &(0x7f0000000200)=""/152, &(0x7f0000000340)=[r9], 0x1, {r10}}, 0x58) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r11, &(0x7f0000000380)={0xa, 0x4e24, 0x6, @empty, 0x8}, 0x1c) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000180)=ANY=[@ANYRES64=r8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r10) 9.978369057s ago: executing program 4 (id=6686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_submit(0x0, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) (async, rerun: 64) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB="0635d3fb90fe59"], 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) (async, rerun: 32) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={0x0, 0x0, 0x18}, 0x18) (async, rerun: 32) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, &(0x7f0000000080)='\x00') r4 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x40000000, 0x0) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000003980)={0x2020}, 0x2020) 9.929046123s ago: executing program 1 (id=6687): r0 = socket(0x400000000010, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r1, @in6={{0xa, 0x9, 0xb9, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x88, 0xb5}, 0x88) socket(0x10, 0x803, 0x0) r2 = syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0x3, 0x5, 0xc1c930e756ad54f5, 0xa}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x2a, &(0x7f0000000240)=@string={0x2a, 0x3, "5f37c84527961791cedf4d931e7560a0b6e7c50d0f2e55f186145e537c09d090e019cfbda0d01546"}}, {0x54, &(0x7f0000000440)=@string={0x54, 0x3, "635652fa9b571b649419ba58794c4b8b4a4a37a50e403972897a02a9ff9a591ae622ac567f096a6b0d9c0eb9eac8858f6c62cd796975cad83187ca6d17f05931905de40195c2a27039948019eb8c635a561e"}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000340)={0xc, &(0x7f00000004c0)={0x40, 0x10, 0xe1, {0xe1, 0xb, "cb81c7cbd79626433997df89660de292d76e58e3fa37b66195957067d0617ad598324dcc38185a69a8130b0a8e876ad70f922c50d5ca948e906c617026a78c07d57ce236008885407585a08f62e715225ae7997114b8132f791bfd238f27d589d6d68d9df268ea10286a2fab613d3ea8277e46ed3eaec54b5acd35f407d19a8b1dd106713711b4f43738dee7a9627702d480c9ae4b0ea37643ffbe6cc04232df45e69c18877cae6a70cdac3db7daf8189c20810bf2c0f50d4ec7dea9ec65e94056420f13e8a569c46a6e659d3652a5ca8c9af3f13a8179b855a3f174098ba8"}}, &(0x7f00000005c0)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "c2f3f8296c183c15a48f7717cee7de0bd45216e64ef9fbef46fbbce6d5f264cfab51500baab4c297cd5b0c9568853463317b9a0decab10dfe709d55d3cf5bb1cfd5dcc7e112a8b63607630a0d84d2e38cdbd0fbd4995514bc3f2075083151403c2b5ea19e63f34aed51278d0fa7361d596e7a15597879dfc0ec2d20922a96a6ee9beded1a772775bde065b78"}}}, &(0x7f0000000880)={0x24, &(0x7f0000000680)={0x40, 0x14, 0x2c, "7ad65f44990083714c39bf0e406db121359dd42f0a3a4d198a6511eb0bb07738e08e76b766f22986d6f63e75"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x81, 0x2, "47f1"}, &(0x7f0000000780)={0x20, 0x82, 0x1, '\f'}, &(0x7f00000007c0)={0x20, 0x83, 0x1, "a1"}, &(0x7f0000000800)={0x20, 0x84, 0x3, "1cdc9b"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "934977"}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) 8.168028522s ago: executing program 4 (id=6688): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x5, &(0x7f0000001000)=[{0x19, 0x48, 0x9, 0x4}, {0x9, 0x6, 0x1, 0x8}, {0x1, 0x5, 0xbf, 0x8}, {0x1ff, 0x25, 0xf7, 0x1}, {0x4, 0x7, 0x6f, 0x1}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket(0x10, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x4}, 0x48) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) r2 = syz_io_uring_setup(0x3dfc, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f041}) r5 = epoll_create1(0x0) r6 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pivot_root(&(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r8, r7}, 0xc) madvise(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0xa) gettid() fstat64(r5, 0x0) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000002180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) socket$inet6(0xa, 0x3, 0x3c) syz_clone(0x1008000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.319779809s ago: executing program 3 (id=6689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300d0000000ffffdfffffff080211000000505050505050000004"], 0x55}}, 0x0) 5.474757181s ago: executing program 3 (id=6690): creat(&(0x7f0000000000)='./file0/file0\x00', 0x20) 4.319003106s ago: executing program 0 (id=6692): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a400000000008000640ffffff000900010073797a3000000000080005400000001c0900020073797a32000000000800034000000088080008400000000014000000100001"], 0x7c}}, 0x0) 4.316692587s ago: executing program 1 (id=6693): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0xffffffff, 0x10100, 0x4, 0x3}, 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000100)=0x5, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x77}, 0x7}}, 0x5, 0x3, 0xffffffff, 0x7, 0x8, 0x44, 0xff}, 0x9c) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) r5 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000102505a8a4400001020301090224000101084009090400000207010181f80421026000ff03b00905820200000d03d0536ab1327c0896d86cc35f9c389b428008f76acc316bbcf50eaa452c7f17d0597ffda97d0c20c75dcc5e9fa32a61b890a1c5d447fefc1cfa369f0b12ed1184c7935af19a3777ce97b7ac2c96071d71564feb4b7b324b9adab133"], &(0x7f0000000200)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x5d, 0xeb, 0x4, 0x10, 0x1}, 0x172, &(0x7f0000000300)={0x5, 0xf, 0x172, 0x4, [@ptm_cap={0x3}, @generic={0x94, 0x10, 0x2, "5eeb92c889efe8b1b965853cf389ba829b2ff0b114061b475ab8c0222707e1e82a30f7cc60e504cd0f4f52ab3fb8caf524dfb63ac7051266beed0a7c26841bf87f5eefc6e6c15eefb2e862054f35f1adfbb3a62eafba5cc2fa48aab31bcdac3ae38dacbfd3eafed81a86c4f07191d0feaee1787cb103ad59c9894e499b31c8bf928496bf6273de887e82098712f0505ace"}, @generic={0x76, 0x10, 0xa, "d33b62998e6a43e0bd0d54bcdc8e14c825b0786fac409bdcb7e12edbac6c1da62596e08210bc37fa3a6db75c924c0b314f5329379a487816ca61f3f9a610ec48bcb16ba97e154c4caa343ddc3ee456bb567c45e0af98e7ceb40316e32821ffd6ed701b6fb6241d0873ac0f13988f609f8ba9cd"}, @generic={0x60, 0x10, 0x3, "8678162f6494e68d142a48e4a39024a0d4910a7ce0f49203998dfeccfda648a1f9f7c85952d41dc243cc72a4081779cd2b64919b21cb56d28eef9313b406839ca98faa8409c15b80ec5b0dfc84b1aff48c31e226aabcad258a1d255f37"}]}, 0x2, [{0xaa, &(0x7f0000000480)=@string={0xaa, 0x3, "7ecb5e04492157d16f5fc8278dfe37727be71dcde517f683b894f2b3c5123f3828e985ddb21d32898f39260233ecf662a701ba415ccf08f81e3fa6abde477d307c52a7d3ee0a689c949e8f7bb8c88412f36bc060aafab7573ed4e83e460a2d9749dbc2d78cb2da07ea80bd8d2db740308327fa3c718382cda309850534bda96305720733bceac681949f6ebd6fcec62df4b51b52a0a2f3d58f82b4ee038924eac21ed6d6a7635e44"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_ep_write(r5, 0x1, 0x81, &(0x7f0000000540)="22720a72107fc05fc7a4671a73ead0e74bf78c03ee56f2111c4537eb47c8c44a8587ebfd5bf5685f2c9211990d9c411ea30538f2fe46ce0d8c914163ea8efd4e09a6dda82b7463c3faa8793dde6aded42d6b054f902e49bc2033478e1bb0b088da22c7943e7f6255044ad83ad5284a0c9b117c37f2e27aabd39e28dad1e7e30153") sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0xffffffff, 0x10100, 0x4, 0x3}, 0x0, 0x0) (async) timerfd_create(0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000100)=0x5, 0x4) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r4, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x77}, 0x7}}, 0x5, 0x3, 0xffffffff, 0x7, 0x8, 0x44, 0xff}, 0x9c) (async) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000102505a8a4400001020301090224000101084009090400000207010181f80421026000ff03b00905820200000d03d0536ab1327c0896d86cc35f9c389b428008f76acc316bbcf50eaa452c7f17d0597ffda97d0c20c75dcc5e9fa32a61b890a1c5d447fefc1cfa369f0b12ed1184c7935af19a3777ce97b7ac2c96071d71564feb4b7b324b9adab133"], &(0x7f0000000200)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x5d, 0xeb, 0x4, 0x10, 0x1}, 0x172, &(0x7f0000000300)={0x5, 0xf, 0x172, 0x4, [@ptm_cap={0x3}, @generic={0x94, 0x10, 0x2, "5eeb92c889efe8b1b965853cf389ba829b2ff0b114061b475ab8c0222707e1e82a30f7cc60e504cd0f4f52ab3fb8caf524dfb63ac7051266beed0a7c26841bf87f5eefc6e6c15eefb2e862054f35f1adfbb3a62eafba5cc2fa48aab31bcdac3ae38dacbfd3eafed81a86c4f07191d0feaee1787cb103ad59c9894e499b31c8bf928496bf6273de887e82098712f0505ace"}, @generic={0x76, 0x10, 0xa, "d33b62998e6a43e0bd0d54bcdc8e14c825b0786fac409bdcb7e12edbac6c1da62596e08210bc37fa3a6db75c924c0b314f5329379a487816ca61f3f9a610ec48bcb16ba97e154c4caa343ddc3ee456bb567c45e0af98e7ceb40316e32821ffd6ed701b6fb6241d0873ac0f13988f609f8ba9cd"}, @generic={0x60, 0x10, 0x3, "8678162f6494e68d142a48e4a39024a0d4910a7ce0f49203998dfeccfda648a1f9f7c85952d41dc243cc72a4081779cd2b64919b21cb56d28eef9313b406839ca98faa8409c15b80ec5b0dfc84b1aff48c31e226aabcad258a1d255f37"}]}, 0x2, [{0xaa, &(0x7f0000000480)=@string={0xaa, 0x3, "7ecb5e04492157d16f5fc8278dfe37727be71dcde517f683b894f2b3c5123f3828e985ddb21d32898f39260233ecf662a701ba415ccf08f81e3fa6abde477d307c52a7d3ee0a689c949e8f7bb8c88412f36bc060aafab7573ed4e83e460a2d9749dbc2d78cb2da07ea80bd8d2db740308327fa3c718382cda309850534bda96305720733bceac681949f6ebd6fcec62df4b51b52a0a2f3d58f82b4ee038924eac21ed6d6a7635e44"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}]}) (async) syz_usb_ep_write(r5, 0x1, 0x81, &(0x7f0000000540)="22720a72107fc05fc7a4671a73ead0e74bf78c03ee56f2111c4537eb47c8c44a8587ebfd5bf5685f2c9211990d9c411ea30538f2fe46ce0d8c914163ea8efd4e09a6dda82b7463c3faa8793dde6aded42d6b054f902e49bc2033478e1bb0b088da22c7943e7f6255044ad83ad5284a0c9b117c37f2e27aabd39e28dad1e7e30153") (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 4.311658192s ago: executing program 3 (id=6694): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r5, 0x300000b, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000000000000060000000400000000800000dac700000900000000000000000000400800000072470000080000000400000000000000000000000a000000ff030002000000000000000000000000000000800600000003000000090000000300000000000000"]) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4376a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r6, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8ffff05002900010000009cda5649764fc0ff4639ee34acf15ae0f376c5a09ec6a84ace6a91586993bd410eb1e7a5f2bcfc052b1163d99a0a12beed06af0ad5dc4fee027cde1f7e694f3556297cb9a25ad3f1f711e0723c98b8c75c62a907619318073d3034178540"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000000b000000d503000006000059cda03300020000000000000000000200000900000000000000"]) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000d1}, 0x4000004) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) 4.288050178s ago: executing program 4 (id=6695): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ecm(0x1, 0x50, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x3, 0x50, 0xf2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x8, 0x24, 0x6, 0x0, 0x0, ';->'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x44c, 0x7, 0x6, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x63, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x58, 0x7}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x1, 0x0, 0x51, 0x0, 0x34e69e0723d60fed, 0x63}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x5, [{0xed, &(0x7f0000000180)=@string={0xed, 0x3, "5bfa637afb4b9e441cb19343cad75fcc50a8184e3103af53f1f1854070d4b2ffdbda9657da37a2386a4e74c2900b81eb3eec81cd1a178ced74494feeadbad4c1bafac438bb8295a4a4be6b3994c0c8b514a28e35d86cbf677dbb78d1067f5d6ecc9b74a8bc874855fcd48c5016ff66a5e421afb7db10f8d38921c3704eaa00d134c16ad67e0f2adb25d3af4db36a0869e9b362fdc39f5fbfcc33702c4b1ce568ba99322b0ea68b752f2f7e869888f21785574e00e2b1ff080090ddb92316fdab5f618df0cb7642486522037c8e54c75bba8ed7568844655bf03881a3c8301d3c6545aeac34f488db6254eb"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100a}}, {0xae, &(0x7f00000002c0)=@string={0xae, 0x3, "d81f5bb29f427462529ac3849ec619d01be3b34620e99cc02b2da9aced2dd2686d729ca90766857992c9c0e104b7f67bb96e75f62587fcbd376fe2b1c666176db6ea7e3a583e0bb07ab27228d56bc5f715de9166cc16f3e68025ab9e25a0938d03fea99460908d2ce6e9bceeb51cff9904971d56ed2812fbd1e721bb8a73b9cf6dfdbe467cc1faecee59bacdb1ee2d1d0a39b2843c44e94ab175193caff46a4ec06f64d67bfe6942553d2f24"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x406}}, {0x58, &(0x7f00000003c0)=@string={0x58, 0x3, "2f0835de98061cd6778dabe66a28b8ace884f1147eafcb960d63facaa1b78c767d63227bb13323a67704950439622b771dd2117a56ceddb19f91f596b974afe10718ac6c54fb32cc23d005446ec149ed1b46b20b6234"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000540)={0xc, &(0x7f0000000480)={0x20, 0x6, 0x69, {0x69, 0x5, "56a238fce7646d6919ac0362dd57ef1f6474721537752de313536c6954fa7e7f8d0ae3c57822c8c6a624b7f0a4a16618f814624bda92740de68493dc1f0f1820ec32d220af3dd72b67edf93691d43de71fafecf688a3975dfdc5fbacc1b71265aa5b08d74b3309"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x10, &(0x7f0000000580)={0x20, 0x9, 0x2a, "0172eaffbe0b6c70dd756b7700f2642ecf0f10be31f769dfbe59ce6866df14f1b9268b6c4c9ed5d15340"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x85, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x3a7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x5, 0x3}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x3, 0x6, 0x7, 0x40, 0x7}, 0x2b, &(0x7f0000000700)={0x5, 0xf, 0x2b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x0, 0xa9a4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x0, 0x401}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xf1, 0xf9, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x6, 0x6}]}, 0x6, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1847}}, {0xbd, &(0x7f0000000780)=@string={0xbd, 0x3, "e5b2f057eabdb5e1bad9fb0a14469fb3adf3d3f0d4fc4e6a4bbb568166047f6a5e7ba04155d2474aba25f92307d6b3cfbb066834bb216754cfd3f3005b0515b5e2ca55d30325337fe388f696bbb093e2aa17e93db2e255bda2bfd147e4f294432b6b67f81014b0bc70a8fc7bc6d9c6760a5a667b6c32e1d731229548ff719478bbd6c76e3b98862bf7f2938dc1578cd33721bd08a85c941107b5f1a8d6ef54d71a913ee7889e88d8dc07ac33b625bfa8d96918397437d3ecbc33a0"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0xc26e1c72a9cea84f}}, {0x6f, &(0x7f0000000880)=@string={0x6f, 0x3, "5c02c722b56b3bcc9baedad0bac78b36dbac89967df908556486a0013cdffd82eaf476a2c1715599e767bdd909013204d4b184d091b91db4654c94e543d2ba5c555d4649ff52f2f357708710f671214e549c743a894161e9283858d939601f8ea9cea1ab0e5e754df084f2259d"}}, {0xbe, &(0x7f0000000900)=@string={0xbe, 0x3, "0b8045028904f4f241e2c13ee08352054ddc8206c454856fca3bf760d55ac0e910d3750507f51ad999c76ae3b0ad8528f33dac992ae0e4285738853c472bdc1e0a20874bd764f4dd4067c1b164670fce9123b97905597bf133567107da2863ad3170ed1c4e8bea8cf4db6dbbf4f1110421152bc9def8ab5a7751f85ba08ce1db3ff977a1125df49dd70d169210f8efab16543c1cb46c3cfa6cac6a2b109da0e50f040e3fc5e03b65667e2c5fc241f0f34215cae0d325b75034cb9558"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1407}}]}) (async) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x85, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x3a7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x5, 0x3}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x3, 0x6, 0x7, 0x40, 0x7}, 0x2b, &(0x7f0000000700)={0x5, 0xf, 0x2b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x0, 0xa9a4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x0, 0x401}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xf1, 0xf9, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x6, 0x6}]}, 0x6, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1847}}, {0xbd, &(0x7f0000000780)=@string={0xbd, 0x3, "e5b2f057eabdb5e1bad9fb0a14469fb3adf3d3f0d4fc4e6a4bbb568166047f6a5e7ba04155d2474aba25f92307d6b3cfbb066834bb216754cfd3f3005b0515b5e2ca55d30325337fe388f696bbb093e2aa17e93db2e255bda2bfd147e4f294432b6b67f81014b0bc70a8fc7bc6d9c6760a5a667b6c32e1d731229548ff719478bbd6c76e3b98862bf7f2938dc1578cd33721bd08a85c941107b5f1a8d6ef54d71a913ee7889e88d8dc07ac33b625bfa8d96918397437d3ecbc33a0"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0xc26e1c72a9cea84f}}, {0x6f, &(0x7f0000000880)=@string={0x6f, 0x3, "5c02c722b56b3bcc9baedad0bac78b36dbac89967df908556486a0013cdffd82eaf476a2c1715599e767bdd909013204d4b184d091b91db4654c94e543d2ba5c555d4649ff52f2f357708710f671214e549c743a894161e9283858d939601f8ea9cea1ab0e5e754df084f2259d"}}, {0xbe, &(0x7f0000000900)=@string={0xbe, 0x3, "0b8045028904f4f241e2c13ee08352054ddc8206c454856fca3bf760d55ac0e910d3750507f51ad999c76ae3b0ad8528f33dac992ae0e4285738853c472bdc1e0a20874bd764f4dd4067c1b164670fce9123b97905597bf133567107da2863ad3170ed1c4e8bea8cf4db6dbbf4f1110421152bc9def8ab5a7751f85ba08ce1db3ff977a1125df49dd70d169210f8efab16543c1cb46c3cfa6cac6a2b109da0e50f040e3fc5e03b65667e2c5fc241f0f34215cae0d325b75034cb9558"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1407}}]}) r2 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x17, 0x80, 0xd, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x9, 0x1, 0xa}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x51, 0xc, 0x10}}]}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x110, 0x6, 0x5, 0xe7, 0x10, 0x83}, 0x1f4, &(0x7f0000000b00)={0x5, 0xf, 0x1f4, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "d40b6f30d4feac440aff5ce291b96684"}, @generic={0x5a, 0x10, 0xb, "6ed647cea7e1e672add18def85e2b8f16bb43d9e4be7f6f268eb246aa8327392fe43dac6dc38ea851b2501b5b54373d967a923cbdc01979b001c6c0e9d883c35071ed601fbf70673b7c27a8f6bc60a7de0b3ba39258441"}, @generic={0x75, 0x10, 0x0, "7548283b80353ce600cba47b3e2881a4f8ab3678afa1db82a8308dc468a06a21b9af396af2e98c42af489c4613e58895531b10448947c4ddecdafa3957f9969b8a280eccaed19dc33b7801a34e9e2c4c8ee6996d7c2b3270987bc276517694964aee4d9d9f2f83dc2e2c306a4286eea7c0ed"}, @generic={0x102, 0x10, 0x3, "097bf0b3527423058c9750ff7fa61e31a3af47a058a55a85b179c08b1c40216bdb0e5a7a396ccc5e819ecbe96db607bf6d7af3d7b994a2ef7558f3fe3b0c537a105391f9e5270b1fff1c47d247bed333cd565cc865d269e3d8f90e116bea96b2f0de9617340b274a4e01ca57543cca1ee627eba961ea0a4430271822f71627c0e56b631cf1e06321aa0ac28ffa329c25535c3f9532d7e90858202a2b4b90231c7f11b739952d0e24bcd31994b0df90e8f66effce07e94d18717a5ae52ca10d901bc2fe6419532bac3042a5d2c45aa981ac955a5005c58a5170701cd89ec8f4904eb7f4983ad998a3383881db1ef7c39148b406a2757c447e048aa04c61d270"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xa, 0x7, 0xfff}]}, 0x1, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x414}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000e80)={0xc, &(0x7f0000000d80)={0x0, 0x7, 0x16, {0x16, 0xf, "1baa13ae6d8e578487d9bc10c05e4630fda72354"}}, &(0x7f0000000dc0)={0x0, 0x3, 0xb1, @string={0xb1, 0x3, "793fb4e080b700d2b119906eab77d87e867b6d2061aca35e515fc772b0d0015087fc4ec7eb33b86c544d5dade80ea24ff7e546b8e06dafb5b2076ee7c9d8fd9a6eb6f952a2d498548d5f4760dbe1288f8e3f80a93d644b7b069bfaf008847ba837a5126ceed8a1e88b66f7e571b2772ce813da0e6c8f25832090515ce123a88047dd3c8dcfdf5ea88ce4fddef7499ca8cca4f124247b0eb28cf0a658be9e94990b8cdf753c3385cf1ce7d95c5ec728"}}}, &(0x7f0000001180)={0x1c, &(0x7f0000000ec0)={0x40, 0x14, 0x92, "8f101a0d66ef74d96cf144c9c61556fc7992e1395bd495e94dbfa15eb98d7d4e07e5b78bb0689474fb7a521ed929aa9858bebfd21bb557b0761aa5e5b849433249bc83b5f11c42fe671f33ece7099ff37ef5f8aafc6af20754a4bd8c6a01180f15c9a87b2ecd1bc6c6bb3254d811eae3b3d13bdd5fe1768834b891390b2037cb64efcd10c9eabdff4d835d250da506a9f41d"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x63}, &(0x7f0000001000)={0x20, 0x0, 0xdd, {0xdb, "ea07e67ba748247515ad66db9f376b86cebc47781623efe956bd4b213cd05d53d4bd3cf876d356ab39b2497208e48decaaf92e6e330109b24f73f710946fef050b3a23fb0d8366d2b61cf2e9e1bb14abc3c575a34b5741a3357c893cefaf1ebf567f5b5a11489ef843dca0ce9ca035cf64538e2d979e750c6be81b5622138dcfb6259bafd71012ced5651b17fb750542a401ce4e931d8b565b05c88f1c4f08862258cd2cbb98a9705996a404badc5f4442f3e02821a1bffb1fa545fabe187545501c2780a4909d381b45c24d9fd6c370757c07334a27dfd33df80f"}}, &(0x7f0000001100)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000001140)={0x20, 0x0, 0x1, 0x7}}) fsmount(0xffffffffffffffff, 0x0, 0xb) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0xb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x1e, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0xa}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @generic={0x7, 0x8, 0x7, 0x5, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3d2ce3ec77d6f9ce}}}, &(0x7f00000014c0)='GPL\x00', 0x4, 0x12, &(0x7f0000001500)=""/18, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001580)={0x3, 0x5, 0x2, 0xed}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000015c0)=[0x1, 0x1], &(0x7f0000001600)=[{0x0, 0x4, 0xa, 0x1}, {0x5, 0x2, 0x3, 0xb}, {0x4, 0x2, 0x3, 0xb}, {0x5, 0x4, 0x3, 0xb}], 0x10, 0x40}, 0x94) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) pipe2$watch_queue(&(0x7f0000001700), 0x80) (async) pipe2$watch_queue(&(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = openat$zero(0xffffff9c, &(0x7f0000001740), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001800)={{0x1, 0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000001880)='%pK \x00'}, 0x1c) pipe(&(0x7f0000001900)) (async) pipe(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0xa, 0x3, &(0x7f00000011c0)=@raw=[@cb_func={0x18, 0x9}, @jmp={0x5, 0x0, 0x1, 0x1, 0x3, 0x4, 0x4}], &(0x7f0000001200)='GPL\x00', 0x4, 0xd5, &(0x7f0000001240)=""/213, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1, r3, 0x8, &(0x7f0000001340)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x4, 0xc, 0x2, 0x9}, 0x10, 0x0, r4, 0x5, &(0x7f0000001940)=[r5, r6, r7, r8, r9, r10, 0x1], &(0x7f0000001980)=[{0x5, 0x3, 0x9, 0x9}, {0x5, 0x2, 0xf, 0x2}, {0x1, 0x3, 0x10, 0x8}, {0x1, 0x4, 0xb, 0x8}, {0x4, 0x1, 0xe, 0x5}], 0x10, 0xf}, 0x94) syz_clone(0x400, &(0x7f0000001ac0)="8b2cdd9e9d8f456bd40c6ed984ee1572d71ddbc3a9f647c9e0b02d792e076c42e9105aa1549cc716c26f1e450eb7a2d2052bbdfc4c6025be4c4bddb01df46f39336322039fe7ba5e17d3854caec4f1f54c319338698ff599858049bfce4833fdbcdbef7592b108715659c20919fff2bb4ee3ead4780adc69fbaef9b4441c0a001f3f3783f22f76c4c2c4c303175d5c623ddd19030d1743227f8c44da82e478a4a065d50b8853a4d3ad86d4c970991dd8f82900fa4f", 0xb5, &(0x7f0000001b80), &(0x7f0000001bc0), &(0x7f0000001c00)="08d6629977f817c8c3a0bb47c3d1023f88e0c3d65e7e088d4ca02bef031ed85835d9732285c70702bade44f79fbe87e144004e070f") socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x70, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000040) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x70, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000040) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x29}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x850) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x29}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x850) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000001ec0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x2, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "e04c6a661b"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0xbdce, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x6b, 0xaed}, @acm={0x4, 0x24, 0x2, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x2, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x49, 0x10, 0x12, 0x8a}}}}}]}}]}}, &(0x7f0000002200)={0xa, &(0x7f0000001f40)={0xa, 0x6, 0x250, 0x4e, 0x3, 0x7, 0x8, 0xe8}, 0x2d, &(0x7f0000001f80)={0x5, 0xf, 0x2d, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x7ff30e0, 0xf, 0xffff, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0xf2, 0x9, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x67, 0x6b, 0x4, 0x2}, @ptm_cap={0x3}]}, 0x4, [{0x6c, &(0x7f0000001fc0)=@string={0x6c, 0x3, "6e1332f570dd8f31e5b720d5ec14e8c960d14c4175dddac54f70e39619b17a9dc2fe72347c058a8c80f4bf0ea6832051097ed30147772cbb224cd8dedbcaf5fa6a46ecafd267d677a61b33e700d433a79ada052d55fa6f96ccda926c0349b32202c3f8eea8f38b01d1d1"}}, {0x6d, &(0x7f0000002040)=@string={0x6d, 0x3, "ee2e3baace1ebb02a0937caa03d5da691491f9a208719411963e6e6f1890c27a34f66bb64510ca4efdf97017e977169c609d3dddc7b0460f32c15e2c2a48204502cdf80f171c5b3854b7f0ee4a7eb01dac0697898e77d7aa6040e639216daa66497b5e150348d1113d8138"}}, {0x1d, &(0x7f00000020c0)=@string={0x1d, 0x3, "eb6e9059c194c3bda05eca24c5a3941297f67af73747e388b94a13"}}, {0xf0, &(0x7f0000002100)=@string={0xf0, 0x3, "ac79406116b1741964a37000aae1c98b305d6317787dfc707990a1a7585f11323ab10b54b87bacaa5e9240d6ecb68923baf6bf24171b32c91e58fd7fd77246a2a933646dbc6f9a2c04567cdc240160ab30797e2ae867180bb722098d4974f7d3cdd76219236770e8ebf2dfb4645af1cad6fac3d5de31d223650da957d988c802d143384e1e46c943564a027822e5ddc305bede51bec5483c52e70f5235aae22abe2aaf1db3a1262e712ec8c17111f61d17480a9e6f6faeac3c036053d41c5955b4fd121d6d4911255237d0ba1108bd5b30d8f4a022f1aa5280980a63b38b7f771385f02e9f253e47a196ee2cdae3"}}]}) (async) r12 = syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000001ec0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x2, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "e04c6a661b"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0xbdce, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x6b, 0xaed}, @acm={0x4, 0x24, 0x2, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x2, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x49, 0x10, 0x12, 0x8a}}}}}]}}]}}, &(0x7f0000002200)={0xa, &(0x7f0000001f40)={0xa, 0x6, 0x250, 0x4e, 0x3, 0x7, 0x8, 0xe8}, 0x2d, &(0x7f0000001f80)={0x5, 0xf, 0x2d, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x7ff30e0, 0xf, 0xffff, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0xf2, 0x9, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x67, 0x6b, 0x4, 0x2}, @ptm_cap={0x3}]}, 0x4, [{0x6c, &(0x7f0000001fc0)=@string={0x6c, 0x3, "6e1332f570dd8f31e5b720d5ec14e8c960d14c4175dddac54f70e39619b17a9dc2fe72347c058a8c80f4bf0ea6832051097ed30147772cbb224cd8dedbcaf5fa6a46ecafd267d677a61b33e700d433a79ada052d55fa6f96ccda926c0349b32202c3f8eea8f38b01d1d1"}}, {0x6d, &(0x7f0000002040)=@string={0x6d, 0x3, "ee2e3baace1ebb02a0937caa03d5da691491f9a208719411963e6e6f1890c27a34f66bb64510ca4efdf97017e977169c609d3dddc7b0460f32c15e2c2a48204502cdf80f171c5b3854b7f0ee4a7eb01dac0697898e77d7aa6040e639216daa66497b5e150348d1113d8138"}}, {0x1d, &(0x7f00000020c0)=@string={0x1d, 0x3, "eb6e9059c194c3bda05eca24c5a3941297f67af73747e388b94a13"}}, {0xf0, &(0x7f0000002100)=@string={0xf0, 0x3, "ac79406116b1741964a37000aae1c98b305d6317787dfc707990a1a7585f11323ab10b54b87bacaa5e9240d6ecb68923baf6bf24171b32c91e58fd7fd77246a2a933646dbc6f9a2c04567cdc240160ab30797e2ae867180bb722098d4974f7d3cdd76219236770e8ebf2dfb4645af1cad6fac3d5de31d223650da957d988c802d143384e1e46c943564a027822e5ddc305bede51bec5483c52e70f5235aae22abe2aaf1db3a1262e712ec8c17111f61d17480a9e6f6faeac3c036053d41c5955b4fd121d6d4911255237d0ba1108bd5b30d8f4a022f1aa5280980a63b38b7f771385f02e9f253e47a196ee2cdae3"}}]}) syz_usb_control_io(r12, &(0x7f00000024c0)={0x18, &(0x7f0000002240)={0x20, 0x2, 0x35, {0x35, 0x1, "9f43deeb3e3ccdbc57313f2f3e8acd6944ce1f37221e4d3ec0f1b3ad006f6c81e0fe8701e0d9df8981ac373a88f072891d989f"}}, &(0x7f0000002280)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f00000023c0)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x3, 0x0, 0x5, [0xc0f0, 0xc000, 0x3f37]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ad4e569c8395f20b583e971a0778069c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6b, 0x0, 0x1}]}}, &(0x7f0000002440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x2, 0x5, 0x5, "b269a0ba", "29ee8dcf"}}, &(0x7f0000002480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x25, 0x1, 0xb, 0xf, 0xe, 0x5, 0xd6}}}, &(0x7f00000029c0)={0x44, &(0x7f0000002500)={0x20, 0xa, 0xee, "365e61016f39e272cb489b5ef0690a2ae00d36b2d8d7bb3859d6bf7e200c7aab5fc566fa37dae439567b92f6a86b0216bdf285e5256699f09cd757190b552cc44789ec08542b724950b969bf355aed6bae3bbf7245adcaa90c903eadd096728776236c5cc543af22b48f7cd284900c2d1b10c2e0d806b36b32deaa836c4ac30d8251c5769dc1dfba1c34f4c75013d429745db244199ccac79f9ecde3fb5f300d8e1ca4c355d588408ef27cb9a47620c32d25efc72a2a1feb7f4bf964bc0c39a072929dfc12744922155b24f6655c4f66802537bb71df994ba58bb07398a485b5b2fd736a77515c404c25eabe3cdc"}, &(0x7f0000002600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002640)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002680)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000026c0)={0x20, 0x0, 0x8, {0x2, 0x80, [0xf0]}}, &(0x7f0000002700)={0x40, 0x7, 0x2, 0x88e8}, &(0x7f0000002740)={0x40, 0x9, 0x1}, &(0x7f0000002780)={0x40, 0xb, 0x2, "d522"}, &(0x7f00000027c0)={0x40, 0xf, 0x2, 0xe7}, &(0x7f0000002800)={0x40, 0x13, 0x6}, &(0x7f0000002840)={0x40, 0x17, 0x6}, &(0x7f0000002880)={0x40, 0x19, 0x2, "c263"}, &(0x7f00000028c0)={0x40, 0x1a, 0x2}, &(0x7f0000002900)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000002940)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000002980)={0x40, 0x21, 0x1, 0x9}}) open(&(0x7f0000002a40)='./file0\x00', 0x10a40, 0x100) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0185649, &(0x7f0000002b00)={0x9d0000, 0x6, 0x9, r3, 0x0, &(0x7f0000002ac0)={0x990a94, 0x2, '\x00', @p_u8=&(0x7f0000002a80)=0xe}}) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0185649, &(0x7f0000002b00)={0x9d0000, 0x6, 0x9, r3, 0x0, &(0x7f0000002ac0)={0x990a94, 0x2, '\x00', @p_u8=&(0x7f0000002a80)=0xe}}) r13 = syz_usb_connect$uac1(0x2, 0xf7, &(0x7f0000002b40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x2, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x7f}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0x36, "451c24"}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x0, "4924bbb4"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x303, 0x3, 0x6, 0x2d}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0xc, 0x13, "0262640b9b"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x2, "eea9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0x6, 0xc, "53ed", "d05acc"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x2, 0x5, "943fbc8d"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x4, 0x7, 0x3, "e8047662a9d8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x1}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x33, 0x1, 0x8, 'W'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x3, 0x9, "7757923fc886d229"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x3, 0x5, {0x7, 0x25, 0x1, 0x6, 0x7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xe, 0x4, 0x1c, 0x6, "66794ed140fee6e1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x7, 0x7, {0x7, 0x25, 0x1, 0x0, 0x6, 0x9}}}}}}}]}}, &(0x7f0000002e00)={0xa, &(0x7f0000002c40)={0xa, 0x6, 0x310, 0x1, 0x8, 0x2, 0x8, 0x5}, 0x13c, &(0x7f0000002c80)={0x5, 0xf, 0x13c, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x4, 0xf000, 0x9, [0xff0000, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x0, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1f, 0x5, 0x101}, @generic={0xce, 0x10, 0x4, "7d785e4868ec2eb1c2f764bdeb6028feeb0d8c56cf06b68c6d5625b644e5efc165e84b64df5b175fdf5c25e19a43744bbfa802ed76cbcb60e6e6e4917678efdca490b3525baf67bec7e7275694918c2737bed989d5224994ed50348256aac455fdf5bd86b7c4b986c3928cb5f44cb487c46b3d2fe213b98a72c551c3e02bcdeded95a9b73fac925511ee7d5f86754f97a1c299c336dc2bb924c3f4a7e03b8c2acc527e1ad872d7f80a777af3265234e8d862bdee746348d563464b1eb6a88a773c4e232cfbd83c0008a37f"}, @generic={0x41, 0x10, 0x4, "78bee818267871633d07538bc266b9a405e917a22ceda6dcce7c23d8bd7c95625ea5d603866e0298a337134dd293be17f66f18a51371f6c46dc0f8a64d11"}]}, 0x1, [{0x4, &(0x7f0000002dc0)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_control_io$uac1(r13, &(0x7f0000002f40)={0xc, &(0x7f0000002e40)={0x0, 0x23, 0xb2, {0xb2, 0x6, "1247fd93f11859d679f2336955bdc137037b87c354791976f8fe002328768c173167c9555bfde3fc9538176f6cf58715f6498ec934060692af2841f67e3b745965a7c6c11e30977fad728b1eb3dca88fdc0f654bb570d56f778f8e471bccc34d942dcdff2ad132f5c85434c3d46908db200cb85ec27f9c6d7afbdc8278e5c15779c562bc23e42a111f6a7b4ad74124689b8a3cd36cf02c4989b19e54eeb11a15622c2cc7e8e04a5524d6b6830bf95d73"}}, &(0x7f0000002f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x102a}}}, &(0x7f00000031c0)={0x24, &(0x7f0000002f80)={0x40, 0xd, 0x4c, "5fcfcbf98cf9e30775c55342814298ccde387f2c21a24c4ee72c9aacec36eb2332a9b59b031bf9ec80065dad1796b60ad5b9021bbe0afc7788d5423f285201cd5a4c3f7a28282f0778bc1cbc"}, &(0x7f0000003000)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000003040)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000003080)={0x20, 0x81, 0x3, "742ad8"}, &(0x7f00000030c0)={0x20, 0x82, 0x2, "847e"}, &(0x7f0000003100)={0x20, 0x83, 0x2, "02b7"}, &(0x7f0000003140)={0x20, 0x84, 0x1, '['}, &(0x7f0000003180)={0x20, 0x85, 0x3, "1eb87e"}}) read(r4, &(0x7f0000003200)=""/169, 0xa9) r14 = socket$inet_tcp(0x2, 0x1, 0x0) accept4(r14, &(0x7f00000032c0)=@ieee802154={0x24, @short}, &(0x7f0000003340)=0x80, 0x0) (async) accept4(r14, &(0x7f00000032c0)=@ieee802154={0x24, @short}, &(0x7f0000003340)=0x80, 0x0) 2.873878953s ago: executing program 2 (id=6696): lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000002100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, 0x0) mbind(&(0x7f00002b6000/0x3000)=nil, 0x3000, 0xc000, 0x0, 0x20000, 0x4) syz_open_dev$dri(0x0, 0x1ff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa}}, 0x26) 514.313739ms ago: executing program 0 (id=6697): r0 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x9, {0x3, 0x401, 0x200, 0x6}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r1 = socket$inet6(0xa, 0x4, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r7, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x2000000000000140, &(0x7f0000001900)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000c40)=@x86={0xab, 0xd, 0x18, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0xc, 0xfd, 0x0, 0x1, 0x9, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) r9 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r9, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0xfffffffffffffedc) 319.334527ms ago: executing program 1 (id=6698): userfaultfd(0x801) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902"], 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106}}, 0x20) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x1001}], 0x2) 177.342022ms ago: executing program 3 (id=6699): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x0, 0xffffffff, 0xffdfffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001440)=""/126, 0x7e, 0x41) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, '\x00'}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xd0, 0x80c40, 0x23456}) io_uring_enter(r2, 0x47f4, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) ioctl$KVM_SET_XCRS(r8, 0x4188aea7, &(0x7f0000000100)={0x0, 0x21000}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000001c0)={0x48, r11, 0x805, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x54}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8001, 0x6b}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setresuid(0x0, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc04c561a, &(0x7f00000000c0)={0xea9, "09e89b863482f701af83143997626ba32056525c1b41b66623c9358def24b3f0", 0x2, 0x7, 0x1, 0x400000, 0x802, 0x2}) 0s ago: executing program 4 (id=6700): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x0, 0xffffffff, 0xffdfffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001440)=""/126, 0x7e, 0x41) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, '\x00'}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xd0, 0x80c40, 0x23456}) io_uring_enter(r2, 0x47f4, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) ioctl$KVM_SET_XCRS(r8, 0x4188aea7, &(0x7f0000000100)={0x0, 0x21000}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000001c0)={0x48, r11, 0x805, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x54}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8001, 0x6b}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setresuid(0x0, 0x0, 0xffffffffffffffff) openat$vimc1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) kernel console output (not intermixed with test programs): number 100 using dummy_hcd [ 1501.224623][ T5918] usb 5-1: config 0 has no interfaces? [ 1501.240874][ T5918] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1501.275362][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.361484][ T5918] usb 5-1: Product: syz [ 1501.408924][ T5918] usb 5-1: Manufacturer: syz [ 1501.427944][ T5918] usb 5-1: SerialNumber: syz [ 1501.460136][ T5918] usb 5-1: config 0 descriptor?? [ 1501.821239][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1501.985024][T20728] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1501.991670][T20728] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1502.022087][ T5847] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1502.101977][T20728] vhci_hcd vhci_hcd.0: Device attached [ 1502.151506][T20769] vhci_hcd vhci_hcd.0: port 0 already used [ 1502.158102][ T5977] vhci_hcd: vhci_device speed not set [ 1502.192872][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1502.264976][T20610] chnl_net:caif_netlink_parms(): no params data found [ 1502.286133][ T5847] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.328185][ T5847] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1502.388190][ T5847] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1502.403879][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.421853][T10331] usb 42-1: SetAddress Request (82) to port 0 [ 1502.442057][T10331] usb 42-1: new SuperSpeed USB device number 82 using vhci_hcd [ 1502.449660][ T5847] usb 1-1: Product: syz [ 1502.498955][T31842] Bluetooth: hci3: command tx timeout [ 1502.504904][ T5847] usb 1-1: Manufacturer: 噣禍垛搛ᦔ墺䱹譋䩊ꔷ䀎爹窉꤂髿ᩙ⋦嚬ॿ歪鰍뤎죪辅扬种畩蜱淊ㅙ嶐Ǥ슕炢鐹ᦀ賫婣Ṗ [ 1502.504930][ T5847] usb 1-1: SerialNumber: syz [ 1502.536450][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1502.676542][ T36] netdevsim netdevsim3  (unregistering): left allmulticast mode [ 1502.704463][ T36] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1503.080217][T20837] openvswitch: netlink: Actions may not be safe on all matching packets [ 1503.168507][T20610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.168642][T20610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.168867][T20610] bridge_slave_0: entered allmulticast mode [ 1503.191473][T20610] bridge_slave_0: entered promiscuous mode [ 1503.203517][T20610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.211567][T20610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.212929][T20610] bridge_slave_1: entered allmulticast mode [ 1503.229438][T20610] bridge_slave_1: entered promiscuous mode [ 1503.533036][T20729] vhci_hcd: connection reset by peer [ 1503.534774][T16532] vhci_hcd: stop threads [ 1503.534793][T16532] vhci_hcd: release socket [ 1503.534861][T16532] vhci_hcd: disconnect device [ 1503.631271][T20610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.646805][T20610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.757268][T14408] usb 5-1: USB disconnect, device number 100 [ 1503.882193][ T5977] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1503.915590][T20926] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1503.915616][T20926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1503.915707][T20926] vhci_hcd vhci_hcd.0: Device attached [ 1503.968562][T20610] team0: Port device team_slave_0 added [ 1503.988144][T20610] team0: Port device team_slave_1 added [ 1504.033028][ T5977] usb 3-1: Using ep0 maxpacket: 8 [ 1504.035163][ T5977] usb 3-1: config 0 has no interfaces? [ 1504.039815][ T5977] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1504.039842][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.039885][ T5977] usb 3-1: Product: syz [ 1504.039900][ T5977] usb 3-1: Manufacturer: syz [ 1504.039915][ T5977] usb 3-1: SerialNumber: syz [ 1504.064927][ T5977] usb 3-1: config 0 descriptor?? [ 1504.173006][ T9760] usb 33-1: new low-speed USB device number 10 using vhci_hcd [ 1504.296778][ T36] batadv0: left allmulticast mode [ 1504.296803][ T36] batadv0: left promiscuous mode [ 1504.297012][ T36] bridge0: port 1(batadv0) entered disabled state [ 1504.434184][T14408] usb 3-1: USB disconnect, device number 102 [ 1504.559582][T31842] Bluetooth: hci3: command tx timeout [ 1505.097444][ T36] bond3 (unregistering): (slave geneve3): Releasing active interface [ 1505.819269][T20927] vhci_hcd: connection reset by peer [ 1505.828386][ T5847] usb 1-1: 0:2 : does not exist [ 1505.836695][ T36] bond0 (unregistering): (slave bridge2): Removing an active aggregator [ 1505.863464][T14655] vhci_hcd: stop threads [ 1505.867750][T14655] vhci_hcd: release socket [ 1505.881516][ T36] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 1505.932077][T14655] vhci_hcd: disconnect device [ 1505.939969][ T5847] usb 1-1: USB disconnect, device number 27 [ 1505.943903][ T36] bridge2 (unregistering): left promiscuous mode [ 1506.001734][ T36] bridge2 (unregistering): left allmulticast mode [ 1506.065142][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.124520][T21017] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6244'. [ 1506.632061][T31842] Bluetooth: hci3: command tx timeout [ 1507.241024][ T36]  (unregistering): Released all slaves [ 1507.330834][ T36] bond1 (unregistering): Released all slaves [ 1507.353589][ T36] bond2 (unregistering): Released all slaves [ 1507.512323][T10331] usb 42-1: device descriptor read/8, error -110 [ 1507.930780][T10331] usb usb42-port1: attempt power cycle [ 1507.952317][ T5977] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1508.041342][ T36] bond0 (unregistering): Released all slaves [ 1508.119131][ T36] bond3 (unregistering): Released all slaves [ 1508.140520][T21049] openvswitch: netlink: Actions may not be safe on all matching packets [ 1508.158314][ T5977] usb 3-1: config 0 has no interfaces? [ 1508.172378][ T5977] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1508.184935][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.207558][ T5977] usb 3-1: Product: syz [ 1508.207570][ T5977] usb 3-1: Manufacturer: syz [ 1508.207585][ T5977] usb 3-1: SerialNumber: syz [ 1508.227918][ T5977] usb 3-1: config 0 descriptor?? [ 1508.258537][T20610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1508.258555][T20610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.258601][T20610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1508.276621][T20610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1508.383826][T20610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.383906][T20610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1508.438593][T21029] FAULT_INJECTION: forcing a failure. [ 1508.438593][T21029] name failslab, interval 1, probability 0, space 0, times 0 [ 1508.466377][T21029] CPU: 0 UID: 0 PID: 21029 Comm: syz.1.6245 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1508.466394][T21029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1508.466400][T21029] Call Trace: [ 1508.466406][T21029] [ 1508.466411][T21029] dump_stack_lvl+0x189/0x250 [ 1508.466428][T21029] ? __pfx____ratelimit+0x10/0x10 [ 1508.466444][T21029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1508.466456][T21029] ? __pfx__printk+0x10/0x10 [ 1508.466473][T21029] ? __pfx___might_resched+0x10/0x10 [ 1508.466484][T21029] ? fs_reclaim_acquire+0x7d/0x100 [ 1508.466500][T21029] should_fail_ex+0x414/0x560 [ 1508.466517][T21029] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 1508.466532][T21029] should_failslab+0xa8/0x100 [ 1508.466546][T21029] __kvmalloc_node_noprof+0x161/0x5f0 [ 1508.466559][T21029] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 1508.466576][T21029] alloc_netdev_mqs+0x8e5/0x11e0 [ 1508.466599][T21029] rtnl_create_link+0x31f/0xd10 [ 1508.466618][T21029] rtnl_newlink_create+0x25c/0xb00 [ 1508.466633][T21029] ? __mutex_lock+0x51b/0xe80 [ 1508.466646][T21029] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1508.466657][T21029] ? rtnl_newlink+0x8db/0x1c70 [ 1508.466669][T21029] ? __pfx___mutex_lock+0x10/0x10 [ 1508.466685][T21029] ? ns_capable+0x8a/0xf0 [ 1508.466698][T21029] rtnl_newlink+0x16d6/0x1c70 [ 1508.466710][T21029] ? netlink_sendmsg+0x805/0xb30 [ 1508.466730][T21029] ? __pfx_rtnl_newlink+0x10/0x10 [ 1508.466753][T21029] ? kasan_quarantine_put+0xdd/0x220 [ 1508.466764][T21029] ? lockdep_hardirqs_on+0x9c/0x150 [ 1508.466782][T21029] ? nlmon_xmit+0xb0/0x100 [ 1508.466792][T21029] ? kmem_cache_free+0x18f/0x400 [ 1508.466808][T21029] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1508.466819][T21029] ? lockdep_hardirqs_on+0x9c/0x150 [ 1508.466834][T21029] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1508.466845][T21029] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1508.466859][T21029] ? __dev_queue_xmit+0x27e/0x3a70 [ 1508.466880][T21029] ? __lock_acquire+0xab9/0xd20 [ 1508.466905][T21029] ? __pfx_rtnl_newlink+0x10/0x10 [ 1508.466915][T21029] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1508.466928][T21029] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1508.466938][T21029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1508.466948][T21029] ? ref_tracker_free+0x63a/0x7d0 [ 1508.466961][T21029] ? __copy_skb_header+0xa7/0x550 [ 1508.466976][T21029] ? __pfx_ref_tracker_free+0x10/0x10 [ 1508.466996][T21029] netlink_rcv_skb+0x208/0x470 [ 1508.467009][T21029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1508.467020][T21029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1508.467039][T21029] ? netlink_deliver_tap+0x2e/0x1b0 [ 1508.467051][T21029] ? netlink_deliver_tap+0x2e/0x1b0 [ 1508.467065][T21029] netlink_unicast+0x75c/0x8e0 [ 1508.467083][T21029] netlink_sendmsg+0x805/0xb30 [ 1508.467100][T21029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1508.467114][T21029] ? __import_iovec+0x5d4/0x7f0 [ 1508.467124][T21029] ? aa_sock_msg_perm+0x94/0x160 [ 1508.467140][T21029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1508.467155][T21029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1508.467167][T21029] __sock_sendmsg+0x219/0x270 [ 1508.467179][T21029] ____sys_sendmsg+0x505/0x830 [ 1508.467195][T21029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1508.467217][T21029] ___sys_sendmsg+0x21f/0x2a0 [ 1508.467231][T21029] ? __pfx____sys_sendmsg+0x10/0x10 [ 1508.467264][T21029] ? __fget_files+0x2a/0x420 [ 1508.467277][T21029] ? __fget_files+0x3a0/0x420 [ 1508.467295][T21029] __sys_sendmsg+0x164/0x220 [ 1508.467309][T21029] ? __pfx___sys_sendmsg+0x10/0x10 [ 1508.467329][T21029] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1508.467339][T21029] ? lockdep_hardirqs_on+0x9c/0x150 [ 1508.467355][T21029] __do_fast_syscall_32+0xb6/0x2b0 [ 1508.467366][T21029] ? lockdep_hardirqs_on+0x9c/0x150 [ 1508.467382][T21029] do_fast_syscall_32+0x34/0x80 [ 1508.467392][T21029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1508.467405][T21029] RIP: 0023:0xf70be539 [ 1508.467414][T21029] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1508.467423][T21029] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1508.467434][T21029] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000080000280 [ 1508.467441][T21029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1508.467448][T21029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1508.467453][T21029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1508.467459][T21029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1508.467474][T21029] [ 1509.000975][T10331] usb usb42-port1: unable to enumerate USB device [ 1509.016693][T31842] Bluetooth: hci3: command tx timeout [ 1509.152757][ T36] tipc: Disabling bearer [ 1509.158267][ T36] tipc: Disabling bearer [ 1509.196239][ T36] tipc: Disabling bearer [ 1509.220264][T20610] hsr_slave_0: entered promiscuous mode [ 1509.226618][T20610] hsr_slave_1: entered promiscuous mode [ 1509.232951][T20610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1509.240897][T20610] Cannot create hsr debugfs directory [ 1509.261752][ T5977] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1509.269284][ T36] tipc: Left network mode [ 1509.269850][ T9760] vhci_hcd: vhci_device speed not set [ 1509.388264][T21091] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 1509.394906][T21091] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1509.404039][T21091] vhci_hcd vhci_hcd.0: Device attached [ 1509.438113][T21110] vhci_hcd vhci_hcd.0: port 0 already used [ 1509.487654][ T5977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.500431][ T5977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1509.569170][ T5977] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1509.608949][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.643467][ T5977] usb 2-1: Product: syz [ 1509.670029][ T5977] usb 2-1: Manufacturer: 噣禍垛搛ᦔ墺䱹譋䩊ꔷ䀎爹窉꤂髿ᩙ⋦嚬ॿ歪鰍뤎죪辅扬种畩蜱淊ㅙ嶐Ǥ슕炢鐹ᦀ賫婣Ṗ [ 1509.695430][ T10] usb 38-1: SetAddress Request (94) to port 0 [ 1509.710647][ T10] usb 38-1: new SuperSpeed USB device number 94 using vhci_hcd [ 1509.720542][ T5977] usb 2-1: SerialNumber: syz [ 1510.139957][T21175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6253'. [ 1510.209433][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1510.209448][ T30] audit: type=1326 audit(1752255401.671:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21151 comm="syz.4.6253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1510.444233][ T30] audit: type=1326 audit(1752255401.671:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21151 comm="syz.4.6253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1510.565035][ T5918] usb 3-1: USB disconnect, device number 103 [ 1510.659835][T21093] vhci_hcd: connection reset by peer [ 1510.963887][ T2131] vhci_hcd: stop threads [ 1510.974162][ T30] audit: type=1326 audit(1752255401.671:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21151 comm="syz.4.6253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1511.012930][ T2131] vhci_hcd: release socket [ 1511.066626][ T2131] vhci_hcd: disconnect device [ 1511.144226][T21197] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6255'. [ 1511.168653][ T30] audit: type=1326 audit(1752255401.671:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21151 comm="syz.4.6253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=220 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1511.247404][ T30] audit: type=1326 audit(1752255401.671:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21151 comm="syz.4.6253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1511.247453][ T30] audit: type=1326 audit(1752255401.681:7360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21151 comm="syz.4.6253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1511.247495][ T30] audit: type=1326 audit(1752255401.681:7361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21151 comm="syz.4.6253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1511.247535][ T30] audit: type=1326 audit(1752255401.681:7362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21151 comm="syz.4.6253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=220 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1511.247575][ T30] audit: type=1326 audit(1752255401.681:7363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21151 comm="syz.4.6253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1511.247615][ T30] audit: type=1326 audit(1752255401.681:7364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21151 comm="syz.4.6253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1511.371479][ T36] hsr_slave_0: left promiscuous mode [ 1511.390695][ T36] hsr_slave_1: left promiscuous mode [ 1511.467313][ T36] pim6reg (unregistering): left allmulticast mode [ 1511.660142][T21208] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1511.660174][T21208] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1511.660273][T21208] vhci_hcd vhci_hcd.0: Device attached [ 1511.891878][T10331] usb 35-1: new low-speed USB device number 9 using vhci_hcd [ 1512.746348][T21227] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6258'. [ 1513.252310][T21210] vhci_hcd: connection reset by peer [ 1513.267911][ T5977] usb 2-1: 0:2 : does not exist [ 1513.295424][ T5977] usb 2-1: USB disconnect, device number 107 [ 1513.353399][ T2131] vhci_hcd: stop threads [ 1513.377864][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1513.401718][ T2131] vhci_hcd: release socket [ 1513.412525][ T2131] vhci_hcd: disconnect device [ 1514.618624][T21277] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6262'. [ 1514.791833][ T10] usb 38-1: device descriptor read/8, error -110 [ 1515.383675][ T10] usb usb38-port1: attempt power cycle [ 1515.385298][ T36] IPVS: stop unused estimator thread 0... [ 1515.793457][ T9] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1515.978683][T20610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1516.021172][ T9] usb 3-1: config 0 has no interfaces? [ 1516.055694][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1516.085249][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.098152][T20610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1516.128284][ T9] usb 3-1: Product: syz [ 1516.142159][T20610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1516.149913][ T9] usb 3-1: Manufacturer: syz [ 1516.190470][ T9] usb 3-1: SerialNumber: syz [ 1516.205213][T20610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1516.256523][ T9] usb 3-1: config 0 descriptor?? [ 1516.314927][ T10] usb usb38-port1: unable to enumerate USB device [ 1517.017275][T21357] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 1517.023920][T21357] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1517.032477][T10331] vhci_hcd: vhci_device speed not set [ 1517.146881][T21357] vhci_hcd vhci_hcd.0: Device attached [ 1517.239674][T20610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.249395][T21362] vhci_hcd vhci_hcd.0: port 0 already used [ 1517.300806][T20610] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.327309][ T2131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.334463][ T2131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.360603][T14655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.367820][T14655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.412898][ T9] usb 38-1: SetAddress Request (98) to port 0 [ 1517.419350][ T9] usb 38-1: new SuperSpeed USB device number 98 using vhci_hcd [ 1517.910496][T20610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1518.143852][T21383] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1518.150434][T21383] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1518.159501][T21383] vhci_hcd vhci_hcd.0: Device attached [ 1518.217974][T20610] veth0_vlan: entered promiscuous mode [ 1518.233032][T20610] veth1_vlan: entered promiscuous mode [ 1518.247192][ T10] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 1518.359832][T20610] veth0_macvtap: entered promiscuous mode [ 1518.401982][T10331] usb 33-1: new low-speed USB device number 11 using vhci_hcd [ 1518.440871][T20610] veth1_macvtap: entered promiscuous mode [ 1518.512744][T20610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.532521][T21358] vhci_hcd: connection reset by peer [ 1518.541158][ T2131] vhci_hcd: stop threads [ 1518.551552][ T2131] vhci_hcd: release socket [ 1518.622935][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1518.632704][ T2131] vhci_hcd: disconnect device [ 1518.680088][T20610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.697723][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.744576][ T10] usb 2-1: Product: syz [ 1518.788590][T20610] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.826914][T20610] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.863995][ T10] usb 2-1: Manufacturer: syz [ 1518.871077][T20610] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.924526][ T10] usb 2-1: SerialNumber: syz [ 1518.929414][T20610] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.010212][ T10] usb 2-1: config 0 descriptor?? [ 1519.267783][ T5847] usb 3-1: USB disconnect, device number 104 [ 1519.370328][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.441276][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.710904][ T10] airspy 2-1:0.0: Board ID: 05 [ 1519.715958][ T10] airspy 2-1:0.0: Firmware version:  [ 1519.735543][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.764360][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.165218][T21384] vhci_hcd: connection reset by peer [ 1520.170767][ T36] vhci_hcd: stop threads [ 1520.175965][ T36] vhci_hcd: release socket [ 1520.187767][ T36] vhci_hcd: disconnect device [ 1520.236285][T21419] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6223'. [ 1520.478560][T21424] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6284'. [ 1520.628511][T21432] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6272'. [ 1520.862780][T21437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6273'. [ 1520.969312][ T10] airspy 2-1:0.0: Registered as swradio24 [ 1521.024904][ T10] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1521.035795][T21437] batadv0: entered promiscuous mode [ 1521.058091][T21437] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1521.229811][ T10] usb 2-1: USB disconnect, device number 108 [ 1521.785391][T14196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1521.795346][T14196] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1521.813677][T14196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1521.823175][T14196] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1521.830691][T14196] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1521.904592][T21465] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6276'. [ 1522.388270][T21483] input: syz1 as /devices/virtual/input/input138 [ 1522.438183][T21483] input: failed to attach handler mousedev to device input138, error: -4 [ 1522.549782][ T3530] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.562010][ T9] usb 38-1: device descriptor read/8, error -110 [ 1522.603965][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1522.831836][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1522.844420][ T10] usb 2-1: config 0 has no interfaces? [ 1522.854441][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1522.866523][ T3530] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.874681][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.885219][ T10] usb 2-1: Product: syz [ 1522.889394][ T10] usb 2-1: Manufacturer: syz [ 1522.894232][ T10] usb 2-1: SerialNumber: syz [ 1522.906403][ T10] usb 2-1: config 0 descriptor?? [ 1522.969820][ T9] usb usb38-port1: attempt power cycle [ 1523.037185][ T3530] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.190085][ T3530] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.215007][T21394] usb 2-1: USB disconnect, device number 109 [ 1523.510546][T10331] vhci_hcd: vhci_device speed not set [ 1523.553766][ T9] usb usb38-port1: unable to enumerate USB device [ 1523.744347][T21466] chnl_net:caif_netlink_parms(): no params data found [ 1523.915505][T14196] Bluetooth: hci2: command tx timeout [ 1524.351798][ T5977] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1524.511760][ T5977] usb 2-1: device descriptor read/64, error -71 [ 1524.762209][ T5977] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1524.917137][ T5977] usb 2-1: device descriptor read/64, error -71 [ 1525.041907][ T5977] usb usb2-port1: attempt power cycle [ 1525.402012][ T5977] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1525.437666][ T5977] usb 2-1: device descriptor read/8, error -71 [ 1525.491406][T21700] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6295'. [ 1525.683959][ T5977] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1525.724233][ T5977] usb 2-1: device descriptor read/8, error -71 [ 1525.837968][ T3530] bond0 (unregistering): (slave lo): Releasing backup interface [ 1525.846511][ T3530] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1525.858036][ T5977] usb usb2-port1: unable to enumerate USB device [ 1525.865088][ T3530] lo: left promiscuous mode [ 1525.873771][ T3530] bond0 (unregistering): Released all slaves [ 1525.893169][ T3530] bond1 (unregistering): Released all slaves [ 1526.000028][T31842] Bluetooth: hci2: command tx timeout [ 1526.092157][ T3530] bond2 (unregistering): Released all slaves [ 1526.144654][T21672] tipc: Started in network mode [ 1526.149523][T21672] tipc: Node identity 5ea123032168, cluster identity 4711 [ 1526.174602][T21672] tipc: Enabled bearer , priority 0 [ 1526.330448][T21672] tipc: Disabling bearer [ 1526.382080][ T3530] tipc: Disabling bearer [ 1526.390035][ T3530] tipc: Disabling bearer [ 1526.411536][ T3530] tipc: Left network mode [ 1526.525994][T21466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.535883][T21466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.543869][T21466] bridge_slave_0: entered allmulticast mode [ 1526.555555][T21466] bridge_slave_0: entered promiscuous mode [ 1526.568237][T21466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.581041][T21466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.588801][T21466] bridge_slave_1: entered allmulticast mode [ 1526.601531][T21466] bridge_slave_1: entered promiscuous mode [ 1526.713482][T21466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.741072][T21466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.833282][T21466] team0: Port device team_slave_0 added [ 1526.870850][T21466] team0: Port device team_slave_1 added [ 1526.989112][T21466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.000152][T21466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.071227][T21466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1527.152664][ T3530] hsr_slave_0: left promiscuous mode [ 1527.161526][ T3530] hsr_slave_1: left promiscuous mode [ 1527.236726][ T3530] veth1_macvtap: left promiscuous mode [ 1527.249138][ T3530] veth0_macvtap: left promiscuous mode [ 1527.432024][T31842] Bluetooth: hci5: command 0x0406 tx timeout [ 1527.472026][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1527.571458][ T3530] pim6reg (unregistering): left allmulticast mode [ 1527.631990][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1527.637928][ T9] usb 3-1: no configurations [ 1527.648170][ T9] usb 3-1: can't read configurations, error -22 [ 1527.850308][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1528.006211][T10331] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1528.041966][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1528.052406][ T9] usb 3-1: no configurations [ 1528.057024][ T9] usb 3-1: can't read configurations, error -22 [ 1528.082385][T14196] Bluetooth: hci2: command tx timeout [ 1528.392296][ T5847] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1528.426339][T10331] usb 4-1: config 0 has no interfaces? [ 1528.447093][T10331] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1528.480114][ T9] usb usb3-port1: attempt power cycle [ 1528.488530][T10331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.509277][T10331] usb 4-1: Product: syz [ 1528.525625][T21897] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6307'. [ 1528.550991][T10331] usb 4-1: Manufacturer: syz [ 1528.631895][ T5847] usb 5-1: config 0 has no interfaces? [ 1528.653361][ T5847] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1528.662614][T10331] usb 4-1: SerialNumber: syz [ 1528.732071][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.742920][T10331] usb 4-1: config 0 descriptor?? [ 1528.751874][ T5847] usb 5-1: Product: syz [ 1528.756248][ T5847] usb 5-1: Manufacturer: syz [ 1528.811997][ T5847] usb 5-1: SerialNumber: syz [ 1528.823016][ T5847] usb 5-1: config 0 descriptor?? [ 1528.934661][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1528.972615][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1528.978301][ T9] usb 3-1: no configurations [ 1528.984562][ T9] usb 3-1: can't read configurations, error -22 [ 1529.143837][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1529.152450][T21891] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1529.159038][T21891] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1529.169304][T21891] vhci_hcd vhci_hcd.0: Device attached [ 1529.188909][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1529.196989][ T9] usb 3-1: no configurations [ 1529.202080][ T9] usb 3-1: can't read configurations, error -22 [ 1529.218269][ T9] usb usb3-port1: unable to enumerate USB device [ 1529.233235][T21907] vhci_hcd vhci_hcd.0: port 0 already used [ 1529.309083][T21879] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1529.315818][T21879] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1529.343192][T21879] vhci_hcd vhci_hcd.0: Device attached [ 1529.377364][T21879] vhci_hcd vhci_hcd.0: port 0 already used [ 1529.436100][ T5911] usb 42-1: SetAddress Request (86) to port 0 [ 1529.445839][ T5911] usb 42-1: new SuperSpeed USB device number 86 using vhci_hcd [ 1529.632423][T10331] usb 40-1: SetAddress Request (114) to port 0 [ 1529.638919][T10331] usb 40-1: new SuperSpeed USB device number 114 using vhci_hcd [ 1529.775727][T21466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.787132][T21466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.813772][T21466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1530.042810][T21466] hsr_slave_0: entered promiscuous mode [ 1530.050273][T21466] hsr_slave_1: entered promiscuous mode [ 1530.059176][T21466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1530.070027][T21466] Cannot create hsr debugfs directory [ 1530.152294][T14196] Bluetooth: hci2: command tx timeout [ 1530.462596][ T3530] IPVS: stop unused estimator thread 0... [ 1530.484107][T22020] openvswitch: netlink: IP tunnel dst address not specified [ 1530.522780][T21910] vhci_hcd: connection reset by peer [ 1530.570620][ T12] vhci_hcd: stop threads [ 1530.603973][ T12] vhci_hcd: release socket [ 1530.630768][ T5977] usb 4-1: USB disconnect, device number 118 [ 1530.643992][ T12] vhci_hcd: disconnect device [ 1530.754925][T22037] netlink: 200108 bytes leftover after parsing attributes in process `syz.1.6312'. [ 1530.768333][T22037] openvswitch: netlink: Message has 5 unknown bytes. [ 1531.072424][T22060] netlink: 'syz.3.6313': attribute type 5 has an invalid length. [ 1531.160898][ T10] usb 5-1: USB disconnect, device number 101 [ 1531.186290][T21905] vhci_hcd: connection reset by peer [ 1531.197094][T16529] vhci_hcd: stop threads [ 1531.201521][T16529] vhci_hcd: release socket [ 1531.247617][T16529] vhci_hcd: disconnect device [ 1531.375379][T22068] FAULT_INJECTION: forcing a failure. [ 1531.375379][T22068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1531.429163][T22068] CPU: 1 UID: 0 PID: 22068 Comm: syz.1.6314 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1531.429189][T22068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1531.429201][T22068] Call Trace: [ 1531.429209][T22068] [ 1531.429217][T22068] dump_stack_lvl+0x189/0x250 [ 1531.429243][T22068] ? __pfx____ratelimit+0x10/0x10 [ 1531.429268][T22068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1531.429295][T22068] ? __pfx__printk+0x10/0x10 [ 1531.429319][T22068] ? __might_fault+0xb0/0x130 [ 1531.429352][T22068] should_fail_ex+0x414/0x560 [ 1531.429382][T22068] _copy_to_iter+0x1db/0x16f0 [ 1531.429413][T22068] ? __pfx__copy_to_iter+0x10/0x10 [ 1531.429435][T22068] ? chacha_block_generic+0x53/0xc80 [ 1531.429463][T22068] get_random_bytes_user+0x1a0/0x380 [ 1531.429491][T22068] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1531.429521][T22068] ? __pfx_vfs_write+0x10/0x10 [ 1531.429552][T22068] ? import_ubuf+0xfb/0x1d0 [ 1531.429576][T22068] __ia32_sys_getrandom+0x16d/0x260 [ 1531.429602][T22068] ? __pfx___ia32_sys_getrandom+0x10/0x10 [ 1531.429623][T22068] ? ksys_write+0x22a/0x250 [ 1531.429651][T22068] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1531.429670][T22068] ? lockdep_hardirqs_on+0x9c/0x150 [ 1531.429697][T22068] __do_fast_syscall_32+0xb6/0x2b0 [ 1531.429716][T22068] ? lockdep_hardirqs_on+0x9c/0x150 [ 1531.429745][T22068] do_fast_syscall_32+0x34/0x80 [ 1531.429763][T22068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1531.429784][T22068] RIP: 0023:0xf70be539 [ 1531.429800][T22068] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1531.429815][T22068] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000163 [ 1531.429834][T22068] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 00000000ffffff9a [ 1531.429847][T22068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1531.429858][T22068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1531.429869][T22068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1531.429880][T22068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1531.429908][T22068] [ 1531.715304][T22073] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6315'. [ 1532.936536][T22102] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6318'. [ 1533.074483][T21466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1533.115228][T21466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1533.165936][T21466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1533.207397][T21466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1533.439620][T22133] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6321'. [ 1533.730432][T21466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.802997][T21466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.873587][T13454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.880784][T13454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.935664][T13454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.942876][T13454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1534.049151][T21466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1534.081653][T21466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1534.214877][T22159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6324'. [ 1534.317852][T21466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1534.552412][ T5911] usb 42-1: device descriptor read/8, error -110 [ 1534.564089][T22175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.576262][T22175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.609857][T21466] veth0_vlan: entered promiscuous mode [ 1534.712547][T10331] usb 40-1: device descriptor read/8, error -110 [ 1534.720457][T22174] loop2: detected capacity change from 0 to 7 [ 1534.729362][T22174] Dev loop2: unable to read RDB block 7 [ 1534.732006][ T5977] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1534.745902][T22174] loop2: unable to read partition table [ 1534.756412][T22174] loop2: partition table beyond EOD, truncated [ 1534.764808][T22174] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1534.823293][ T5218] Dev loop2: unable to read RDB block 7 [ 1534.834637][ T5218] loop2: unable to read partition table [ 1534.836402][T21466] veth1_vlan: entered promiscuous mode [ 1534.872632][ T5218] loop2: partition table beyond EOD, truncated [ 1534.962807][ T5911] usb usb42-port1: attempt power cycle [ 1535.179195][ T5977] usb 4-1: config 0 has no interfaces? [ 1535.202370][ T5977] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1535.211980][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.250770][ T5977] usb 4-1: Product: syz [ 1535.260627][T10331] usb usb40-port1: attempt power cycle [ 1535.270710][ T5977] usb 4-1: Manufacturer: syz [ 1535.324871][ T5977] usb 4-1: SerialNumber: syz [ 1535.348608][T21466] veth0_macvtap: entered promiscuous mode [ 1535.356083][ T5977] usb 4-1: config 0 descriptor?? [ 1535.419847][T21466] veth1_macvtap: entered promiscuous mode [ 1535.535611][ T5911] usb usb42-port1: unable to enumerate USB device [ 1535.840570][T21466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.882557][T10331] usb usb40-port1: unable to enumerate USB device [ 1535.938921][T22217] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1535.945562][T22217] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1535.987924][T21466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1536.027657][T21466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.037716][T21466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.049508][T21466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.059650][T21466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.121945][T22217] vhci_hcd vhci_hcd.0: Device attached [ 1536.152892][T22224] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6332'. [ 1536.229318][T22223] vhci_hcd vhci_hcd.0: port 0 already used [ 1536.412139][T10331] usb 40-1: SetAddress Request (118) to port 0 [ 1536.474190][T10331] usb 40-1: new SuperSpeed USB device number 118 using vhci_hcd [ 1536.541248][T13454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.610307][T13454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.825523][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.884067][ T5977] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1536.936486][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.373391][T22219] vhci_hcd: connection reset by peer [ 1537.382392][ T3530] vhci_hcd: stop threads [ 1537.438078][ T3530] vhci_hcd: release socket [ 1537.442154][T22255] syz_tun: entered allmulticast mode [ 1537.557190][ T3530] vhci_hcd: disconnect device [ 1537.940630][T21394] usb 4-1: USB disconnect, device number 119 [ 1538.649164][T22277] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1538.655726][T22277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1538.697058][T22277] vhci_hcd vhci_hcd.0: Device attached [ 1538.933634][ T3094] usb 33-1: new low-speed USB device number 12 using vhci_hcd [ 1539.312209][T21394] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1539.522406][T21394] usb 4-1: Using ep0 maxpacket: 8 [ 1539.534047][T21394] usb 4-1: config 0 has no interfaces? [ 1539.543642][T21394] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1539.558178][T21394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.689845][T21394] usb 4-1: Product: syz [ 1539.700828][T21394] usb 4-1: Manufacturer: syz [ 1539.735092][T21394] usb 4-1: SerialNumber: syz [ 1539.759070][T21394] usb 4-1: config 0 descriptor?? [ 1540.408006][ T5977] usb 4-1: USB disconnect, device number 120 [ 1540.847530][T22278] vhci_hcd: connection reset by peer [ 1540.855544][T13454] vhci_hcd: stop threads [ 1540.873167][T13454] vhci_hcd: release socket [ 1541.003655][T13454] vhci_hcd: disconnect device [ 1541.165321][T22351] syz_tun: entered allmulticast mode [ 1541.294659][T22350] syz_tun: left allmulticast mode [ 1541.492098][ T5977] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1541.671814][T10331] usb 40-1: device descriptor read/8, error -110 [ 1541.851701][T21394] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1541.925292][ T5977] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1541.949591][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.001349][ T5977] usb 4-1: config 0 descriptor?? [ 1542.039247][ T5977] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1542.125726][T21394] usb 1-1: Using ep0 maxpacket: 8 [ 1542.143386][T10331] usb usb40-port1: attempt power cycle [ 1542.180548][T21394] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1542.218274][T21394] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1542.346831][T21394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 1542.382270][T21394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 1542.455595][ T5977] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1542.544381][T21394] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1542.544721][T14408] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1542.583773][T21394] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1542.593529][T21394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.650499][T21394] usb 1-1: Product: syz [ 1542.671831][T21394] usb 1-1: Manufacturer: syz [ 1542.704242][T10331] usb usb40-port1: unable to enumerate USB device [ 1542.716576][T21394] usb 1-1: SerialNumber: syz [ 1542.761480][T21394] usb 1-1: config 0 descriptor?? [ 1542.800409][T21394] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input139 [ 1542.876908][T14408] usb 2-1: config 0 has no interfaces? [ 1542.909060][T14408] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1542.971815][ T5977] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1543.078422][T14408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.221989][ C1] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 1543.317181][T14408] usb 2-1: Product: syz [ 1543.361709][T14408] usb 2-1: Manufacturer: syz [ 1543.408245][T14408] usb 2-1: SerialNumber: syz [ 1543.486832][T14408] usb 2-1: config 0 descriptor?? [ 1543.549135][ T9] usb 4-1: USB disconnect, device number 121 [ 1543.919172][T22426] netlink: 'syz.4.6349': attribute type 5 has an invalid length. [ 1544.313615][ T3094] vhci_hcd: vhci_device speed not set [ 1544.457431][T22427] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 1544.464069][T22427] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1544.528435][T22427] vhci_hcd vhci_hcd.0: Device attached [ 1544.796307][T22438] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1544.808697][T22432] vhci_hcd vhci_hcd.0: port 0 already used [ 1544.820221][ T9] usb 36-1: SetAddress Request (94) to port 0 [ 1544.836216][ T9] usb 36-1: new SuperSpeed USB device number 94 using vhci_hcd [ 1545.131876][T10331] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1545.294664][T10331] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 1545.308726][T10331] usb 3-1: config 0 has an invalid interface number: 8 but max is 2 [ 1545.330032][ T10] usb 1-1: USB disconnect, device number 28 [ 1545.350583][T10331] usb 3-1: config 0 has no interface number 0 [ 1545.405867][T10331] usb 3-1: config 0 has no interface number 1 [ 1545.455255][T10331] usb 3-1: too many endpoints for config 0 interface 8 altsetting 255: 255, using maximum allowed: 30 [ 1545.726747][T10331] usb 3-1: config 0 interface 8 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1545.750096][T10331] usb 3-1: config 0 interface 8 has no altsetting 0 [ 1545.757788][T10331] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1545.766942][T10331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.799341][T10331] usb 3-1: config 0 descriptor?? [ 1545.835464][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.868864][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.897932][T22428] vhci_hcd: connection reset by peer [ 1545.943586][ T3094] usb 2-1: USB disconnect, device number 115 [ 1545.985811][ T3530] vhci_hcd: stop threads [ 1546.005150][ T3530] vhci_hcd: release socket [ 1546.014382][ T3530] vhci_hcd: disconnect device [ 1546.511762][T14408] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1546.596634][T10331] usb 3-1: Could not set interface, error -71 [ 1546.635010][T10331] usb 3-1: selecting invalid altsetting 0 [ 1546.646791][T10331] usb 3-1: Could not set interface, error -22 [ 1546.653474][ T3094] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1546.662249][T14408] usb 4-1: Using ep0 maxpacket: 8 [ 1546.674478][T14408] usb 4-1: config 0 has no interfaces? [ 1546.684718][T14408] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1547.250821][T10331] usb 3-1: USB disconnect, device number 109 [ 1547.265341][T14408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.304346][ T3094] usb 1-1: config 0 has no interfaces? [ 1547.327662][T14408] usb 4-1: Product: syz [ 1547.345052][ T3094] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1547.355948][T14408] usb 4-1: Manufacturer: syz [ 1547.365506][T14408] usb 4-1: SerialNumber: syz [ 1547.370178][ T3094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.383917][T14408] usb 4-1: config 0 descriptor?? [ 1547.393749][ T3094] usb 1-1: Product: syz [ 1547.404322][ T3094] usb 1-1: Manufacturer: syz [ 1547.430515][ T3094] usb 1-1: SerialNumber: syz [ 1547.452922][ T3094] usb 1-1: config 0 descriptor?? [ 1547.562350][T22519] bond1: (slave geneve2): Releasing active interface [ 1547.570264][T22519] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1547.579514][T22519] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1547.589010][T22519] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1547.598669][T22519] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1547.695969][ T10] usb 4-1: USB disconnect, device number 122 [ 1547.849011][T22529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6360'. [ 1548.079108][T22533] fuse: Unknown parameter ';' [ 1548.406809][T22537] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6362'. [ 1549.161394][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1549.161411][ T30] audit: type=1326 audit(1752255440.641:7380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.4.6364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1549.263351][ T30] audit: type=1326 audit(1752255440.641:7381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.4.6364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1549.386753][ T10] usb 1-1: USB disconnect, device number 29 [ 1549.459167][ T30] audit: type=1326 audit(1752255440.661:7382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.4.6364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1549.581804][ T30] audit: type=1326 audit(1752255440.661:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.4.6364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1549.712174][ T30] audit: type=1326 audit(1752255440.661:7384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.4.6364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1549.736904][ T30] audit: type=1326 audit(1752255440.661:7385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.4.6364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1549.759178][ T30] audit: type=1326 audit(1752255440.661:7386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.4.6364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1549.781742][ T30] audit: type=1326 audit(1752255440.661:7387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.4.6364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1549.813678][ T30] audit: type=1326 audit(1752255440.701:7388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.4.6364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1549.836199][ T30] audit: type=1326 audit(1752255440.701:7389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.4.6364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1549.911927][ T9] usb 36-1: device descriptor read/8, error -110 [ 1549.931799][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1549.991522][T22541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6364'. [ 1550.127051][ T10] usb 1-1: config 0 has no interfaces? [ 1550.175953][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1550.267262][T22564] netlink: 'syz.2.6363': attribute type 5 has an invalid length. [ 1550.329956][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.431429][ T9] usb usb36-port1: attempt power cycle [ 1550.448259][ T10] usb 1-1: Product: syz [ 1550.468210][ T10] usb 1-1: Manufacturer: syz [ 1550.473648][ T10] usb 1-1: SerialNumber: syz [ 1550.611117][ T10] usb 1-1: config 0 descriptor?? [ 1550.865596][T22570] tipc: Enabled bearer , priority 10 [ 1551.072489][ T9] usb usb36-port1: unable to enumerate USB device [ 1551.119576][T22575] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1551.126220][T22575] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1551.155110][T22575] vhci_hcd vhci_hcd.0: Device attached [ 1551.339785][T22579] vhci_hcd vhci_hcd.0: port 0 already used [ 1551.422129][T10331] usb 34-1: SetAddress Request (78) to port 0 [ 1551.428579][T10331] usb 34-1: new SuperSpeed USB device number 78 using vhci_hcd [ 1551.486865][T22591] bridge_slave_0: left allmulticast mode [ 1551.511709][T22591] bridge_slave_0: left promiscuous mode [ 1551.517597][T22591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.588980][T22591] bridge_slave_1: left allmulticast mode [ 1551.602131][ T5977] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1551.640567][T22591] bridge_slave_1: left promiscuous mode [ 1551.680592][T22591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.731377][T22591] bond0: (slave bond_slave_0): Releasing backup interface [ 1551.761768][ T5977] usb 3-1: Using ep0 maxpacket: 8 [ 1551.773250][T22591] bond0: (slave bond_slave_1): Releasing backup interface [ 1551.777277][ T5977] usb 3-1: config 0 has no interfaces? [ 1551.800798][ T5977] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1551.851511][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.860188][ T5977] usb 3-1: Product: syz [ 1551.864829][ T5977] usb 3-1: Manufacturer: syz [ 1551.869648][ T5977] usb 3-1: SerialNumber: syz [ 1551.893575][T22591] team0: Port device team_slave_0 removed [ 1551.913968][T22591] team0: Port device team_slave_1 removed [ 1551.920858][T22591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1551.940393][ T5977] usb 3-1: config 0 descriptor?? [ 1551.952039][T22591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1551.965912][T22591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1551.978347][T22591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1551.982172][T14408] tipc: Node number set to 2143888131 [ 1552.263556][ T5977] usb 3-1: USB disconnect, device number 110 [ 1552.479988][T22609] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6375'. [ 1552.781748][T22576] vhci_hcd: connection reset by peer [ 1552.846578][ T10] usb 1-1: USB disconnect, device number 30 [ 1552.888327][ T2131] vhci_hcd: stop threads [ 1552.974739][ T2131] vhci_hcd: release socket [ 1552.984049][ T2131] vhci_hcd: disconnect device [ 1553.273472][T22627] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6376'. [ 1553.369056][T22629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6378'. [ 1553.431868][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1553.766851][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1553.796221][T22639] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6380'. [ 1554.222416][T22667] tipc: Enabling of bearer rejected, already enabled [ 1554.852976][T22681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6385'. [ 1554.971846][T22681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6385'. [ 1554.981753][ T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1555.291686][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1555.310619][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1555.361675][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1555.401671][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 1555.452059][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 1555.551246][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1555.584717][ T9] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1555.602244][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.618803][ T9] usb 3-1: Product: syz [ 1555.626375][ T9] usb 3-1: Manufacturer: syz [ 1555.631001][ T9] usb 3-1: SerialNumber: syz [ 1555.641837][ T3094] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1555.657719][ T9] usb 3-1: config 0 descriptor?? [ 1555.702767][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input141 [ 1555.752386][ C0] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 1555.804454][ T3094] usb 1-1: Using ep0 maxpacket: 8 [ 1555.841437][ T3094] usb 1-1: config 0 has no interfaces? [ 1555.862190][ T3094] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1555.880618][ T3094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.900954][ T3094] usb 1-1: Product: syz [ 1555.907692][ T3094] usb 1-1: Manufacturer: syz [ 1555.922663][T22706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1555.961828][ T3094] usb 1-1: SerialNumber: syz [ 1555.983281][ T3094] usb 1-1: config 0 descriptor?? [ 1556.771181][T10331] usb 34-1: device descriptor read/8, error -110 [ 1556.983931][ T5911] usb 1-1: USB disconnect, device number 32 [ 1557.148964][T14196] Bluetooth: hci1: Unable to find connection for big 0x65 [ 1557.183037][T10331] usb usb34-port1: attempt power cycle [ 1557.324605][T22728] tipc: Started in network mode [ 1557.345467][T22728] tipc: Node identity aaaaaaaaaa39, cluster identity 4711 [ 1557.346449][T22729] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6395'. [ 1557.359041][T22728] tipc: Enabled bearer , priority 10 [ 1557.547287][T22732] fuse: Unknown parameter '1844674407370955161500000000000000000000' [ 1557.797954][T10331] usb usb34-port1: unable to enumerate USB device [ 1557.918692][T22741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6400'. [ 1557.947566][T22741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6400'. [ 1558.041441][ T9] usb 3-1: USB disconnect, device number 111 [ 1558.351719][ T5911] tipc: Node number set to 9677482 [ 1558.553911][T22763] cgroup: fork rejected by pids controller in /syz3 [ 1558.821926][ T9] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1559.052672][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1559.063906][ T9] usb 5-1: config 0 has no interfaces? [ 1559.086136][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1559.115777][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.133008][ T9] usb 5-1: Product: syz [ 1559.146272][ T9] usb 5-1: Manufacturer: syz [ 1559.180269][T23394] tipc: Started in network mode [ 1559.185932][ T9] usb 5-1: SerialNumber: syz [ 1559.203148][T23394] tipc: Node identity aaaaaaaaaa39, cluster identity 4711 [ 1559.207447][ T9] usb 5-1: config 0 descriptor?? [ 1559.249394][T23394] tipc: Enabled bearer , priority 10 [ 1559.514571][T10331] usb 5-1: USB disconnect, device number 102 [ 1559.546667][T23465] @: renamed from vlan0 (while UP) [ 1560.228941][T23477] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6415'. [ 1560.301244][T23468] pim6reg1: entered promiscuous mode [ 1560.314811][T23468] pim6reg1: entered allmulticast mode [ 1560.382252][ T3094] tipc: Node number set to 9677482 [ 1560.634415][T10331] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1560.821761][T10331] usb 4-1: Using ep0 maxpacket: 8 [ 1560.848895][T10331] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1560.865077][T10331] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1560.877017][T10331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 1560.888815][T10331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 1560.900470][T10331] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1560.920333][T10331] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1560.930301][T10331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.939793][T10331] usb 4-1: Product: syz [ 1560.954317][T10331] usb 4-1: Manufacturer: syz [ 1560.959006][T10331] usb 4-1: SerialNumber: syz [ 1560.976430][T10331] usb 4-1: config 0 descriptor?? [ 1561.006910][T10331] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input142 [ 1561.247390][T23497] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6426'. [ 1561.691886][ T3094] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1561.862830][ T3094] usb 3-1: config 0 has no interfaces? [ 1561.864683][T23521] tipc: Enabling of bearer rejected, already enabled [ 1561.893988][ T3094] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1561.913905][ T3094] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.938884][ T3094] usb 3-1: Product: syz [ 1561.952419][ T3094] usb 3-1: Manufacturer: syz [ 1561.961106][ T3094] usb 3-1: SerialNumber: syz [ 1561.996192][ T3094] usb 3-1: config 0 descriptor?? [ 1562.235474][T23539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6423'. [ 1562.736762][T23540] cgroup: fork rejected by pids controller in /syz1 [ 1562.792402][ T3094] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1562.944714][ T3094] usb 1-1: Using ep0 maxpacket: 8 [ 1562.956934][ T3094] usb 1-1: config 0 has no interfaces? [ 1562.966497][ T3094] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1562.979097][ T3094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.014808][ T3094] usb 1-1: Product: syz [ 1563.029751][ T3094] usb 1-1: Manufacturer: syz [ 1563.050038][ T3094] usb 1-1: SerialNumber: syz [ 1563.064444][ T3094] usb 1-1: config 0 descriptor?? [ 1563.230209][ T5911] usb 4-1: USB disconnect, device number 123 [ 1563.375202][ T5977] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1563.398355][ T3094] usb 1-1: USB disconnect, device number 33 [ 1563.549369][ T5977] usb 5-1: Using ep0 maxpacket: 8 [ 1563.557158][ T5977] usb 5-1: config 0 has no interfaces? [ 1563.573635][ T5977] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1563.589253][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.610898][ T5977] usb 5-1: Product: syz [ 1563.620441][ T5977] usb 5-1: Manufacturer: syz [ 1563.629002][ T5977] usb 5-1: SerialNumber: syz [ 1563.640365][ T5977] usb 5-1: config 0 descriptor?? [ 1563.680739][T24125] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6428'. [ 1563.942191][T10331] usb 5-1: USB disconnect, device number 103 [ 1564.523457][ T9] usb 3-1: USB disconnect, device number 112 [ 1565.130773][T24177] tipc: Started in network mode [ 1565.136036][T24177] tipc: Node identity aaaaaaaaaa39, cluster identity 4711 [ 1565.147222][T24177] tipc: Enabled bearer , priority 28 [ 1565.620622][T24186] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6439'. [ 1566.261713][ T9] tipc: Node number set to 9677482 [ 1566.301688][ T10] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1566.474070][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1566.500026][ T10] usb 2-1: config 0 has no interfaces? [ 1566.521040][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1566.531732][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.540518][T24204] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6443'. [ 1566.545749][ T10] usb 2-1: Product: syz [ 1566.555468][ T10] usb 2-1: Manufacturer: syz [ 1566.560111][ T10] usb 2-1: SerialNumber: syz [ 1566.577061][ T10] usb 2-1: config 0 descriptor?? [ 1566.732195][ T5977] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1566.876827][T10331] usb 2-1: USB disconnect, device number 116 [ 1566.891895][ T5977] usb 3-1: Using ep0 maxpacket: 8 [ 1566.912638][ T5977] usb 3-1: config 0 has no interfaces? [ 1566.922404][ T5977] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1566.933400][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.941411][ T5977] usb 3-1: Product: syz [ 1566.946702][ T5977] usb 3-1: Manufacturer: syz [ 1566.951297][ T5977] usb 3-1: SerialNumber: syz [ 1566.960597][ T5977] usb 3-1: config 0 descriptor?? [ 1567.245707][T10331] usb 3-1: USB disconnect, device number 113 [ 1568.050979][T24243] netlink: 'syz.3.6447': attribute type 10 has an invalid length. [ 1568.063627][T24243] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6447'. [ 1568.078059][ T30] kauditd_printk_skb: 401 callbacks suppressed [ 1568.078072][ T30] audit: type=1326 audit(1752255459.581:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24235 comm="syz.2.6448" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x0 [ 1568.211895][ T10] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1568.377425][ T10] usb 2-1: config 0 has no interfaces? [ 1568.394366][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1568.404965][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.413301][ T10] usb 2-1: Product: syz [ 1568.420863][ T10] usb 2-1: Manufacturer: syz [ 1568.494356][ T10] usb 2-1: SerialNumber: syz [ 1568.520051][ T10] usb 2-1: config 0 descriptor?? [ 1568.619821][T24247] tipc: Enabling of bearer rejected, already enabled [ 1568.816256][T24257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1568.883372][T24258] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 1568.890026][T24258] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1568.908681][T24258] vhci_hcd vhci_hcd.0: Device attached [ 1568.952328][T24266] @: renamed from vlan0 (while UP) [ 1568.975566][T24261] vhci_hcd vhci_hcd.0: port 0 already used [ 1569.172657][ T10] usb 36-1: SetAddress Request (98) to port 0 [ 1569.186908][ T10] usb 36-1: new SuperSpeed USB device number 98 using vhci_hcd [ 1569.428382][T24274] loop2: detected capacity change from 0 to 7 [ 1569.458081][T24274] Dev loop2: unable to read RDB block 7 [ 1569.511662][T24274] loop2: AHDI p3 p4 [ 1569.559646][T24274] loop2: partition table partially beyond EOD, truncated [ 1569.602875][T24274] loop2: p3 size 4211081215 extends beyond EOD, truncated [ 1569.757262][ T5901] udevd[5901]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1569.846084][T24304] syz_tun: entered allmulticast mode [ 1569.853872][T24303] syz_tun: left allmulticast mode [ 1570.024040][T24312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6459'. [ 1570.211835][ T5911] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1570.372001][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 1570.420383][ T5911] usb 1-1: config 0 has no interfaces? [ 1570.462733][ T5911] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1570.472041][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.489294][ T5911] usb 1-1: Product: syz [ 1570.509056][ T5911] usb 1-1: Manufacturer: syz [ 1570.515194][ T5911] usb 1-1: SerialNumber: syz [ 1570.529791][ T5911] usb 1-1: config 0 descriptor?? [ 1570.586624][T24325] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6461'. [ 1570.732415][T24259] vhci_hcd: connection reset by peer [ 1570.738000][T14655] vhci_hcd: stop threads [ 1570.742754][T24328] tipc: Enabling of bearer rejected, already enabled [ 1570.768907][T14655] vhci_hcd: release socket [ 1570.787382][T14655] vhci_hcd: disconnect device [ 1570.805057][T21394] usb 1-1: USB disconnect, device number 34 [ 1571.002182][T24339] @: renamed from vlan0 (while UP) [ 1571.016911][T21394] usb 2-1: USB disconnect, device number 117 [ 1571.771732][ T5977] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1571.921804][ T5977] usb 1-1: Using ep0 maxpacket: 8 [ 1571.936203][ T5977] usb 1-1: config 0 has no interfaces? [ 1571.954257][ T5977] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1572.005156][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.024545][ T5977] usb 1-1: Product: syz [ 1572.054912][ T5977] usb 1-1: Manufacturer: syz [ 1572.059529][ T5977] usb 1-1: SerialNumber: syz [ 1572.075406][ T5977] usb 1-1: config 0 descriptor?? [ 1572.141758][T10331] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1572.153754][T24382] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6475'. [ 1572.311888][T10331] usb 5-1: Using ep0 maxpacket: 8 [ 1572.695195][T10331] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1572.729145][T10331] usb 5-1: config 0 has no interface number 0 [ 1572.736598][T14408] usb 1-1: USB disconnect, device number 35 [ 1572.760840][T10331] usb 5-1: config 0 interface 88 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1572.787739][T10331] usb 5-1: config 0 interface 88 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1572.799780][T10331] usb 5-1: config 0 interface 88 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1572.818509][T10331] usb 5-1: New USB device found, idVendor=0557, idProduct=4000, bcdDevice=ef.e8 [ 1572.828513][T10331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.841105][T10331] usb 5-1: Product: syz [ 1572.846372][T10331] usb 5-1: Manufacturer: syz [ 1572.851246][T10331] usb 5-1: SerialNumber: syz [ 1572.921727][ T5977] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1572.963142][T10331] usb 5-1: config 0 descriptor?? [ 1572.975826][T24370] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1573.094140][ T5977] usb 2-1: config 0 has no interfaces? [ 1573.105408][ T5977] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1573.115061][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.123326][ T5977] usb 2-1: Product: syz [ 1573.127591][ T5977] usb 2-1: Manufacturer: syz [ 1573.132511][ T5977] usb 2-1: SerialNumber: syz [ 1573.148518][ T5977] usb 2-1: config 0 descriptor?? [ 1573.269459][T10331] kaweth 5-1:0.88: Firmware present in device. [ 1573.317749][T10331] kaweth 5-1:0.88: Error reading configuration (-71), no net device created [ 1573.360579][T10331] kaweth 5-1:0.88: probe with driver kaweth failed with error -5 [ 1573.418362][T10331] usbhid 5-1:0.88: couldn't find an input interrupt endpoint [ 1573.432113][T10331] usb 5-1: USB disconnect, device number 104 [ 1573.710930][T24428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1574.453515][ T10] usb 36-1: device descriptor read/8, error -110 [ 1574.470730][T24390] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 1574.477347][T24390] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1574.497881][T24390] vhci_hcd vhci_hcd.0: Device attached [ 1574.629460][T24435] vhci_hcd vhci_hcd.0: port 0 already used [ 1574.712310][ T10] usb 36-1: SetAddress Request (99) to port 0 [ 1574.718646][ T10] usb 36-1: new SuperSpeed USB device number 99 using vhci_hcd [ 1575.649102][T24432] vhci_hcd: connection reset by peer [ 1575.662988][ T3530] vhci_hcd: stop threads [ 1575.675244][ T3530] vhci_hcd: release socket [ 1575.690034][ T3530] vhci_hcd: disconnect device [ 1575.712592][ T9] usb 2-1: USB disconnect, device number 118 [ 1575.951166][T24464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6490'. [ 1576.020670][T24448] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6488'. [ 1576.041428][T24464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6490'. [ 1576.063875][T24467] binder: 24451:24467 ioctl 8917 800000c0 returned -22 [ 1576.123071][T24467] binder: 24451:24467 ioctl c0306201 80000640 returned -22 [ 1576.621702][T21394] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1576.771698][T21394] usb 2-1: Using ep0 maxpacket: 8 [ 1576.791122][T21394] usb 2-1: config 0 has no interfaces? [ 1576.956376][T21394] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1577.005580][T21394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.038160][T21394] usb 2-1: Product: syz [ 1577.091667][T21394] usb 2-1: Manufacturer: syz [ 1577.098564][T21394] usb 2-1: SerialNumber: syz [ 1577.111837][T21394] usb 2-1: config 0 descriptor?? [ 1577.435591][T21394] usb 2-1: USB disconnect, device number 119 [ 1578.658227][T24518] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6502'. [ 1579.102820][T24528] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6504'. [ 1579.834330][ T10] usb 36-1: device descriptor read/8, error -110 [ 1580.013984][T24551] binder: 24539:24551 ioctl 8917 800000c0 returned -22 [ 1580.022766][T24551] binder: 24539:24551 ioctl c0306201 80000640 returned -22 [ 1580.071979][ T10] usb usb36-port1: attempt power cycle [ 1580.381812][ T5911] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1580.646232][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 1580.651906][ T10] usb usb36-port1: unable to enumerate USB device [ 1580.733628][ T5911] usb 3-1: config 0 has no interfaces? [ 1580.788451][ T5911] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1580.801782][ T5925] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1580.833194][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.844916][ T5911] usb 3-1: Product: syz [ 1580.851245][ T5911] usb 3-1: Manufacturer: syz [ 1580.858175][ T5911] usb 3-1: SerialNumber: syz [ 1581.068865][ T5911] usb 3-1: config 0 descriptor?? [ 1581.091740][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 1581.106263][ T5925] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1581.115574][ T5925] usb 5-1: config 1 has an invalid interface descriptor of length 3, skipping [ 1581.138333][ T5925] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1581.151783][ T5925] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1581.162042][ T5925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1581.181192][ T5925] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1581.190538][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.261655][ T5925] usb 5-1: Product: syz [ 1581.269879][ T5925] usb 5-1: Manufacturer: syz [ 1581.288001][ T5925] usb 5-1: SerialNumber: syz [ 1581.412631][ T3094] usb 3-1: USB disconnect, device number 114 [ 1581.637007][ T5925] usb 5-1: 0:2 : does not exist [ 1581.704226][ T5925] usb 5-1: USB disconnect, device number 105 [ 1582.141549][T24619] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6519'. [ 1583.462283][T24641] netlink: 'syz.0.6527': attribute type 10 has an invalid length. [ 1583.476721][T24641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.501472][T24641] bond0: (slave team0): Enslaving as an active interface with an up link [ 1583.684352][T24648] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1583.690907][T24648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1583.725237][T24648] vhci_hcd vhci_hcd.0: Device attached [ 1583.971702][T10331] usb 41-1: new low-speed USB device number 8 using vhci_hcd [ 1584.182031][ T3094] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1584.637074][ T3094] usb 1-1: config 0 has no interfaces? [ 1584.663262][ T5925] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1584.766787][ T3094] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1584.902165][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 1584.943372][ T5925] usb 3-1: config 0 has no interfaces? [ 1584.957553][ T3094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.986088][ T5925] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1585.021486][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.042180][ T3094] usb 1-1: Product: syz [ 1585.044265][ T5925] usb 3-1: Product: syz [ 1585.050871][ T5925] usb 3-1: Manufacturer: syz [ 1585.148929][ T5925] usb 3-1: SerialNumber: syz [ 1585.168112][ T3094] usb 1-1: Manufacturer: syz [ 1585.176311][ T3094] usb 1-1: SerialNumber: syz [ 1585.255168][ T3094] usb 1-1: config 0 descriptor?? [ 1585.475301][ T5925] usb 3-1: config 0 descriptor?? [ 1585.689757][T24672] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1585.696398][T24672] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1585.746477][T24672] vhci_hcd vhci_hcd.0: Device attached [ 1585.801359][ T5911] usb 3-1: USB disconnect, device number 115 [ 1585.993382][T24678] vhci_hcd vhci_hcd.0: port 0 already used [ 1586.021721][T14408] usb 34-1: SetAddress Request (82) to port 0 [ 1586.068984][T14408] usb 34-1: new SuperSpeed USB device number 82 using vhci_hcd [ 1586.416523][ T5925] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1586.575959][ T5925] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1586.871843][T24649] vhci_hcd: connection reset by peer [ 1586.903844][T14655] vhci_hcd: stop threads [ 1586.911450][T14655] vhci_hcd: release socket [ 1586.935854][T14655] vhci_hcd: disconnect device [ 1587.319723][T24674] vhci_hcd: connection reset by peer [ 1587.357587][ T5977] usb 1-1: USB disconnect, device number 36 [ 1587.427880][ T36] vhci_hcd: stop threads [ 1587.434324][T24714] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6536'. [ 1587.471885][ T36] vhci_hcd: release socket [ 1587.481676][ T36] vhci_hcd: disconnect device [ 1588.169417][T24730] netlink: zone id is out of range [ 1588.175134][T24730] netlink: zone id is out of range [ 1588.201687][T24730] netlink: zone id is out of range [ 1588.206850][T24730] netlink: zone id is out of range [ 1588.212202][T24730] netlink: zone id is out of range [ 1588.217299][T24730] netlink: zone id is out of range [ 1588.247515][T24730] netlink: zone id is out of range [ 1588.272858][T24731] FAULT_INJECTION: forcing a failure. [ 1588.272858][T24731] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.276558][T24730] netlink: zone id is out of range [ 1588.300946][T24730] netlink: zone id is out of range [ 1588.315115][T24730] netlink: zone id is out of range [ 1588.333004][T24731] CPU: 1 UID: 0 PID: 24731 Comm: syz.2.6540 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1588.333031][T24731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1588.333043][T24731] Call Trace: [ 1588.333050][T24731] [ 1588.333058][T24731] dump_stack_lvl+0x189/0x250 [ 1588.333085][T24731] ? __pfx____ratelimit+0x10/0x10 [ 1588.333110][T24731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1588.333131][T24731] ? __pfx__printk+0x10/0x10 [ 1588.333160][T24731] ? __pfx___might_resched+0x10/0x10 [ 1588.333185][T24731] should_fail_ex+0x414/0x560 [ 1588.333215][T24731] should_failslab+0xa8/0x100 [ 1588.333239][T24731] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1588.333262][T24731] ? __alloc_skb+0x112/0x2d0 [ 1588.333286][T24731] __alloc_skb+0x112/0x2d0 [ 1588.333310][T24731] netlink_sendmsg+0x5c6/0xb30 [ 1588.333342][T24731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1588.333365][T24731] ? __import_iovec+0x5d4/0x7f0 [ 1588.333383][T24731] ? aa_sock_msg_perm+0x94/0x160 [ 1588.333410][T24731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1588.333434][T24731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1588.333456][T24731] __sock_sendmsg+0x219/0x270 [ 1588.333484][T24731] ____sys_sendmsg+0x505/0x830 [ 1588.333511][T24731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1588.333550][T24731] ___sys_sendmsg+0x21f/0x2a0 [ 1588.333574][T24731] ? __pfx____sys_sendmsg+0x10/0x10 [ 1588.333633][T24731] ? __fget_files+0x2a/0x420 [ 1588.333654][T24731] ? __fget_files+0x3a0/0x420 [ 1588.333686][T24731] __sys_sendmsg+0x164/0x220 [ 1588.333710][T24731] ? __pfx___sys_sendmsg+0x10/0x10 [ 1588.333746][T24731] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1588.333765][T24731] ? lockdep_hardirqs_on+0x9c/0x150 [ 1588.333792][T24731] __do_fast_syscall_32+0xb6/0x2b0 [ 1588.333810][T24731] ? lockdep_hardirqs_on+0x9c/0x150 [ 1588.333838][T24731] do_fast_syscall_32+0x34/0x80 [ 1588.333856][T24731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1588.333876][T24731] RIP: 0023:0xf7f06539 [ 1588.333892][T24731] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1588.333907][T24731] RSP: 002b:00000000f500555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1588.333927][T24731] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 1588.333940][T24731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1588.333950][T24731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1588.333961][T24731] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1588.333972][T24731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1588.334000][T24731] [ 1588.793023][T24730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6540'. [ 1589.112022][T10331] vhci_hcd: vhci_device speed not set [ 1590.237895][T24752] netlink: 'syz.1.6544': attribute type 1 has an invalid length. [ 1590.411779][ T5977] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1590.563405][ T5977] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 1590.591834][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.636624][ T5977] usb 5-1: config 0 has no interface number 0 [ 1590.661883][ T5977] usb 5-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 1590.731744][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.759987][ T5977] usb 5-1: config 0 descriptor?? [ 1590.809740][ T5977] usb 5-1: bad CDC descriptors [ 1591.008700][T10331] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1591.037866][T24778] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1591.044421][T24778] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1591.102091][T24778] vhci_hcd vhci_hcd.0: Device attached [ 1591.311103][T10331] usb 1-1: config 0 has no interfaces? [ 1591.703824][T14408] usb 34-1: device descriptor read/8, error -110 [ 1591.720715][ T5847] usb 37-1: new low-speed USB device number 12 using vhci_hcd [ 1591.770507][T10331] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1591.780055][T10331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.788420][T10331] usb 1-1: Product: syz [ 1591.796073][T10331] usb 1-1: Manufacturer: syz [ 1591.816471][T10331] usb 1-1: SerialNumber: syz [ 1591.903006][T10331] usb 1-1: config 0 descriptor?? [ 1592.111829][T14408] usb usb34-port1: attempt power cycle [ 1592.227995][ T5911] usb 5-1: USB disconnect, device number 106 [ 1592.462566][T24791] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1592.469193][T24791] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1592.531736][T14408] usb 34-1: SetAddress Request (85) to port 0 [ 1592.555443][T14408] usb 34-1: new SuperSpeed USB device number 85 using vhci_hcd [ 1592.617116][T24791] vhci_hcd vhci_hcd.0: Device attached [ 1592.793198][T24795] vhci_hcd vhci_hcd.0: port 0 already used [ 1592.915853][T24806] FAULT_INJECTION: forcing a failure. [ 1592.915853][T24806] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.973522][T24806] CPU: 0 UID: 0 PID: 24806 Comm: syz.1.6553 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1592.973550][T24806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1592.973562][T24806] Call Trace: [ 1592.973571][T24806] [ 1592.973579][T24806] dump_stack_lvl+0x189/0x250 [ 1592.973606][T24806] ? __pfx____ratelimit+0x10/0x10 [ 1592.973632][T24806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1592.973652][T24806] ? __pfx__printk+0x10/0x10 [ 1592.973680][T24806] ? __pfx___might_resched+0x10/0x10 [ 1592.973706][T24806] should_fail_ex+0x414/0x560 [ 1592.973735][T24806] should_failslab+0xa8/0x100 [ 1592.973758][T24806] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1592.973780][T24806] ? __alloc_skb+0x112/0x2d0 [ 1592.973804][T24806] __alloc_skb+0x112/0x2d0 [ 1592.973826][T24806] netlink_sendmsg+0x5c6/0xb30 [ 1592.973855][T24806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.973879][T24806] ? __import_iovec+0x5d4/0x7f0 [ 1592.973897][T24806] ? aa_sock_msg_perm+0x94/0x160 [ 1592.973923][T24806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1592.973947][T24806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.973968][T24806] __sock_sendmsg+0x219/0x270 [ 1592.973988][T24806] ____sys_sendmsg+0x505/0x830 [ 1592.974016][T24806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1592.974060][T24806] ___sys_sendmsg+0x21f/0x2a0 [ 1592.974084][T24806] ? __pfx____sys_sendmsg+0x10/0x10 [ 1592.974141][T24806] ? __fget_files+0x2a/0x420 [ 1592.974161][T24806] ? __fget_files+0x3a0/0x420 [ 1592.974193][T24806] __sys_sendmsg+0x164/0x220 [ 1592.974217][T24806] ? __pfx___sys_sendmsg+0x10/0x10 [ 1592.974252][T24806] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1592.974271][T24806] ? lockdep_hardirqs_on+0x9c/0x150 [ 1592.974297][T24806] __do_fast_syscall_32+0xb6/0x2b0 [ 1592.974316][T24806] ? lockdep_hardirqs_on+0x9c/0x150 [ 1592.974344][T24806] do_fast_syscall_32+0x34/0x80 [ 1592.974362][T24806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1592.974382][T24806] RIP: 0023:0xf70be539 [ 1592.974398][T24806] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1592.974413][T24806] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1592.974432][T24806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 1592.974445][T24806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1592.974456][T24806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1592.974466][T24806] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1592.974480][T24806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1592.974506][T24806] [ 1593.489863][T24779] vhci_hcd: connection reset by peer [ 1593.525388][T13459] vhci_hcd: stop threads [ 1593.529655][T13459] vhci_hcd: release socket [ 1593.569466][T13459] vhci_hcd: disconnect device [ 1593.582372][T10331] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1593.595924][T24816] FAULT_INJECTION: forcing a failure. [ 1593.595924][T24816] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.610133][T24816] CPU: 0 UID: 0 PID: 24816 Comm: syz.1.6556 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1593.610158][T24816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1593.610170][T24816] Call Trace: [ 1593.610178][T24816] [ 1593.610186][T24816] dump_stack_lvl+0x189/0x250 [ 1593.610212][T24816] ? __pfx____ratelimit+0x10/0x10 [ 1593.610248][T24816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1593.610269][T24816] ? __pfx__printk+0x10/0x10 [ 1593.610297][T24816] ? __pfx___might_resched+0x10/0x10 [ 1593.610320][T24816] should_fail_ex+0x414/0x560 [ 1593.610349][T24816] ? nf_tables_newchain+0x1b7e/0x2900 [ 1593.610371][T24816] should_failslab+0xa8/0x100 [ 1593.610394][T24816] __kvmalloc_node_noprof+0x161/0x5f0 [ 1593.610417][T24816] ? nf_tables_newchain+0x1b7e/0x2900 [ 1593.610446][T24816] nf_tables_newchain+0x1b7e/0x2900 [ 1593.610485][T24816] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1593.610543][T24816] ? nfnl_pernet+0x23/0x240 [ 1593.610576][T24816] ? __nla_parse+0x40/0x60 [ 1593.610598][T24816] nfnetlink_rcv+0x1132/0x2520 [ 1593.610656][T24816] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1593.610699][T24816] ? ref_tracker_free+0x63a/0x7d0 [ 1593.610756][T24816] ? __netlink_deliver_tap+0x807/0x850 [ 1593.610785][T24816] ? netlink_deliver_tap+0x2e/0x1b0 [ 1593.610805][T24816] ? netlink_deliver_tap+0x2e/0x1b0 [ 1593.610833][T24816] netlink_unicast+0x75c/0x8e0 [ 1593.610864][T24816] netlink_sendmsg+0x805/0xb30 [ 1593.610896][T24816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1593.610919][T24816] ? __import_iovec+0x5d4/0x7f0 [ 1593.610937][T24816] ? aa_sock_msg_perm+0x94/0x160 [ 1593.610963][T24816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1593.610987][T24816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1593.611008][T24816] __sock_sendmsg+0x219/0x270 [ 1593.611027][T24816] ____sys_sendmsg+0x505/0x830 [ 1593.611053][T24816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1593.611092][T24816] ___sys_sendmsg+0x21f/0x2a0 [ 1593.611117][T24816] ? __pfx____sys_sendmsg+0x10/0x10 [ 1593.611177][T24816] ? __fget_files+0x2a/0x420 [ 1593.611199][T24816] ? __fget_files+0x3a0/0x420 [ 1593.611240][T24816] __sys_sendmsg+0x164/0x220 [ 1593.611265][T24816] ? __pfx___sys_sendmsg+0x10/0x10 [ 1593.611304][T24816] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1593.611324][T24816] ? lockdep_hardirqs_on+0x9c/0x150 [ 1593.611352][T24816] __do_fast_syscall_32+0xb6/0x2b0 [ 1593.611372][T24816] ? lockdep_hardirqs_on+0x9c/0x150 [ 1593.611401][T24816] do_fast_syscall_32+0x34/0x80 [ 1593.611419][T24816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1593.611440][T24816] RIP: 0023:0xf70be539 [ 1593.611456][T24816] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1593.611472][T24816] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1593.611491][T24816] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 1593.611505][T24816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1593.611516][T24816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1593.611527][T24816] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1593.611539][T24816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1593.611568][T24816] [ 1593.942359][T24792] vhci_hcd: connection reset by peer [ 1594.001700][T13459] vhci_hcd: stop threads [ 1594.006102][T13459] vhci_hcd: release socket [ 1594.011899][T13459] vhci_hcd: disconnect device [ 1594.051064][ T3094] usb 1-1: USB disconnect, device number 37 [ 1594.092000][T10331] usb 5-1: device descriptor read/64, error -71 [ 1594.121735][ T5911] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1594.277720][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 1594.285257][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1594.302539][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1594.314403][ T5911] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1594.323578][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.341713][ T5911] usb 4-1: config 0 descriptor?? [ 1594.369543][T10331] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1594.541918][T10331] usb 5-1: device descriptor read/64, error -71 [ 1594.682413][T10331] usb usb5-port1: attempt power cycle [ 1594.735712][T24855] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6563'. [ 1594.765431][T24811] tipc: Enabling of bearer rejected, failed to enable media [ 1594.786974][T24811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.801545][T24811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.061861][T10331] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1595.082697][T10331] usb 5-1: device descriptor read/8, error -71 [ 1595.324633][T10331] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1595.352707][T10331] usb 5-1: device descriptor read/8, error -71 [ 1595.477717][T10331] usb usb5-port1: unable to enumerate USB device [ 1595.817539][T24867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6566'. [ 1596.798786][ T5911] usbhid 4-1:0.0: can't add hid device: -71 [ 1596.820286][ T5911] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1596.853403][ T5911] usb 4-1: USB disconnect, device number 124 [ 1596.913170][ T5847] vhci_hcd: vhci_device speed not set [ 1596.939562][T24891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6569'. [ 1597.226991][T24891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1597.320612][T24927] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1597.376299][T24891] macvlan2: entered promiscuous mode [ 1597.408291][T24891] macvlan2: entered allmulticast mode [ 1597.441799][T24891] bond1: entered promiscuous mode [ 1597.452511][T24891] bridge1: entered promiscuous mode [ 1597.473533][T24891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1597.509062][T24891] bond1: left promiscuous mode [ 1597.517722][T24891] bridge1: left promiscuous mode [ 1597.691964][T14408] usb 34-1: device descriptor read/8, error -110 [ 1597.862035][T14408] usb usb34-port1: unable to enumerate USB device [ 1598.246580][ T5847] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1598.411955][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 1598.422718][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 72, changing to 10 [ 1598.436854][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9353, setting to 1024 [ 1598.488904][ T5847] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1598.546991][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.589867][ T5847] usb 4-1: config 0 descriptor?? [ 1598.605661][T24941] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1598.703655][T24958] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6575'. [ 1598.742295][T24952] fuse: root generation should be zero [ 1598.772803][T24959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6574'. [ 1599.090014][ T5847] savu 0003:1E7D:2D5A.0037: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1599.832079][ T5847] usb 4-1: USB disconnect, device number 125 [ 1600.032210][T14196] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 1600.040249][T14196] Bluetooth: Wrong link type (-22) [ 1600.046285][T14196] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 1600.055468][T14196] Bluetooth: Wrong link type (-22) [ 1600.060632][T14196] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1600.067345][T14196] Bluetooth: Wrong link type (-22) [ 1600.072963][T14196] Bluetooth: hci2: link tx timeout [ 1600.078384][T14196] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1600.851896][T14408] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1601.025267][T14408] usb 4-1: Using ep0 maxpacket: 8 [ 1601.046748][T14408] usb 4-1: config 0 has no interfaces? [ 1601.054983][T14408] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1601.074527][T14408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.094739][T14408] usb 4-1: Product: syz [ 1601.098929][T14408] usb 4-1: Manufacturer: syz [ 1601.144039][T14408] usb 4-1: SerialNumber: syz [ 1601.187996][T14408] usb 4-1: config 0 descriptor?? [ 1601.307903][T25022] netlink: 'syz.4.6590': attribute type 10 has an invalid length. [ 1601.346012][T25022] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1601.477461][T25022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6590'. [ 1601.512601][T14408] usb 4-1: USB disconnect, device number 126 [ 1601.712405][T25040] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1601.718965][T25040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1601.741076][T25022] bond0: (slave bridge0): Releasing backup interface [ 1601.774435][T25040] vhci_hcd vhci_hcd.0: Device attached [ 1602.022020][T14408] usb 35-1: new low-speed USB device number 10 using vhci_hcd [ 1602.156360][T31842] Bluetooth: hci2: command 0x0406 tx timeout [ 1603.995167][T25084] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6605'. [ 1604.008125][T25084] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6605'. [ 1604.027424][T25085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6603'. [ 1604.211721][ T5925] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1604.241988][T14196] Bluetooth: hci1: command 0x0406 tx timeout [ 1604.381776][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 1604.395894][ T5925] usb 1-1: config 0 has no interfaces? [ 1604.405269][ T5925] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1604.424287][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.463217][ T5925] usb 1-1: Product: syz [ 1604.473338][ T5925] usb 1-1: Manufacturer: syz [ 1604.485658][ T5925] usb 1-1: SerialNumber: syz [ 1604.507364][ T5925] usb 1-1: config 0 descriptor?? [ 1604.626101][T25041] vhci_hcd: connection reset by peer [ 1604.641932][ T2131] vhci_hcd: stop threads [ 1604.648558][ T2131] vhci_hcd: release socket [ 1604.669646][ T2131] vhci_hcd: disconnect device [ 1604.870945][ T10] usb 1-1: USB disconnect, device number 38 [ 1605.750171][T25114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6612'. [ 1606.343024][T25135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6617'. [ 1606.603018][T25145] program syz.2.6620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1606.628467][ T5977] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1606.708387][T25152] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6621'. [ 1606.808578][ T5977] usb 1-1: Using ep0 maxpacket: 8 [ 1606.848252][ T5977] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.871672][ T5977] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1606.942112][ T5977] usb 1-1: config 1 has no interface number 1 [ 1606.948263][ T5977] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1607.022356][ T5977] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1607.051001][ T5977] usb 1-1: config 1 interface 2 has no altsetting 0 [ 1607.105472][ T5977] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1607.119361][T14408] vhci_hcd: vhci_device speed not set [ 1607.127700][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.137004][ T5977] usb 1-1: Product: syz [ 1607.141164][ T5977] usb 1-1: Manufacturer: syz [ 1607.148862][ T5977] usb 1-1: SerialNumber: syz [ 1607.287039][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.293479][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.369189][T25135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.393610][T25135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.435659][ T5977] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc [ 1607.456015][ T5977] usb 1-1: selecting invalid altsetting 0 [ 1607.506522][ T5977] usb 1-1: USB disconnect, device number 39 [ 1607.672028][ T5847] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1607.832668][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 1607.839541][ T5847] usb 3-1: config 0 has no interfaces? [ 1607.852719][ T5847] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1607.862304][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.870358][ T5847] usb 3-1: Product: syz [ 1607.875042][ T5847] usb 3-1: Manufacturer: syz [ 1607.879671][ T5847] usb 3-1: SerialNumber: syz [ 1607.893163][ T5847] usb 3-1: config 0 descriptor?? [ 1608.052168][ T5977] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1608.058411][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6629'. [ 1608.148886][ T10] usb 3-1: USB disconnect, device number 116 [ 1608.236073][ T5977] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1608.245996][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.254325][ T5977] usb 4-1: Product: syz [ 1608.258649][ T5977] usb 4-1: Manufacturer: syz [ 1608.263903][ T5977] usb 4-1: SerialNumber: syz [ 1608.277290][ T5977] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1608.295830][T14408] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1608.436859][ T30] audit: type=1326 audit(1752255499.931:7792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25271 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1608.460832][ T30] audit: type=1326 audit(1752255499.941:7793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25271 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1608.484012][ T30] audit: type=1326 audit(1752255499.941:7794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25271 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1608.506092][ C1] vkms_vblank_simulate: vblank timer overrun [ 1608.515900][ T30] audit: type=1326 audit(1752255499.941:7795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25271 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1608.538034][ C1] vkms_vblank_simulate: vblank timer overrun [ 1608.549721][ T30] audit: type=1326 audit(1752255499.941:7796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25271 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1608.571817][ C1] vkms_vblank_simulate: vblank timer overrun [ 1608.586488][ T30] audit: type=1326 audit(1752255499.941:7797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25271 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1608.608545][ C1] vkms_vblank_simulate: vblank timer overrun [ 1608.615458][ T30] audit: type=1326 audit(1752255499.941:7798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25271 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1608.637500][ C1] vkms_vblank_simulate: vblank timer overrun [ 1608.659079][ T30] audit: type=1326 audit(1752255499.941:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25271 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1608.689795][ T30] audit: type=1326 audit(1752255499.941:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25271 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1608.756512][ T10] usb 4-1: USB disconnect, device number 127 [ 1608.794271][ T30] audit: type=1326 audit(1752255499.941:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25271 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1608.880279][T25284] FAULT_INJECTION: forcing a failure. [ 1608.880279][T25284] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.880420][T25285] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6637'. [ 1608.893363][T25284] CPU: 1 UID: 0 PID: 25284 Comm: syz.1.6638 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1608.893388][T25284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1608.893399][T25284] Call Trace: [ 1608.893407][T25284] [ 1608.893416][T25284] dump_stack_lvl+0x189/0x250 [ 1608.893443][T25284] ? __pfx____ratelimit+0x10/0x10 [ 1608.893469][T25284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1608.893489][T25284] ? __pfx__printk+0x10/0x10 [ 1608.893515][T25284] ? __pfx___might_resched+0x10/0x10 [ 1608.893535][T25284] ? fs_reclaim_acquire+0x7d/0x100 [ 1608.893563][T25284] should_fail_ex+0x414/0x560 [ 1608.893593][T25284] should_failslab+0xa8/0x100 [ 1608.893616][T25284] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1608.893638][T25284] ? vfs_parse_monolithic_sep+0x21f/0x310 [ 1608.893666][T25284] kmemdup_nul+0x36/0xf0 [ 1608.893692][T25284] vfs_parse_monolithic_sep+0x21f/0x310 [ 1608.893714][T25284] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 1608.893736][T25284] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 1608.893768][T25284] ? fuse_init_fs_context+0xfd/0x210 [ 1608.893796][T25284] ? alloc_fs_context+0x665/0x7d0 [ 1608.893826][T25284] do_new_mount+0x21a/0xa40 [ 1608.893856][T25284] __se_sys_mount+0x317/0x410 [ 1608.893883][T25284] ? __pfx___se_sys_mount+0x10/0x10 [ 1608.893908][T25284] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1608.893926][T25284] ? __ia32_sys_mount+0x20/0xc0 [ 1608.893951][T25284] __do_fast_syscall_32+0xb6/0x2b0 [ 1608.893969][T25284] ? lockdep_hardirqs_on+0x9c/0x150 [ 1608.893997][T25284] do_fast_syscall_32+0x34/0x80 [ 1608.894015][T25284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1608.894035][T25284] RIP: 0023:0xf70be539 [ 1608.894052][T25284] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1608.894066][T25284] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 1608.894086][T25284] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 1608.894098][T25284] RDX: 0000000080002100 RSI: 0000000001010010 RDI: 0000000080002140 [ 1608.894111][T25284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1608.894121][T25284] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1608.894132][T25284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1608.894158][T25284] [ 1609.263940][T25290] vivid-001: disconnect [ 1609.270640][T25291] FAULT_INJECTION: forcing a failure. [ 1609.270640][T25291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1609.291263][T25288] vivid-001: reconnect [ 1609.298077][T25291] CPU: 0 UID: 0 PID: 25291 Comm: syz.1.6640 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1609.298092][T25291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1609.298099][T25291] Call Trace: [ 1609.298104][T25291] [ 1609.298109][T25291] dump_stack_lvl+0x189/0x250 [ 1609.298125][T25291] ? __pfx____ratelimit+0x10/0x10 [ 1609.298141][T25291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1609.298153][T25291] ? __pfx__printk+0x10/0x10 [ 1609.298167][T25291] ? __might_fault+0xb0/0x130 [ 1609.298185][T25291] should_fail_ex+0x414/0x560 [ 1609.298202][T25291] _copy_from_user+0x2d/0xb0 [ 1609.298214][T25291] copy_uabi_to_xstate+0x397/0x970 [ 1609.298229][T25291] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 1609.298237][T25291] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1609.298253][T25291] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1609.298266][T25291] ? x86_task_fpu+0x4c/0x90 [ 1609.298281][T25291] fpu__restore_sig+0xf75/0x1100 [ 1609.298295][T25291] ? fpu__restore_sig+0xa42/0x1100 [ 1609.298313][T25291] ? __pfx_fpu__restore_sig+0x10/0x10 [ 1609.298342][T25291] ia32_restore_sigcontext+0x449/0x5b0 [ 1609.298354][T25291] ? cgroup_freezing+0x20/0x360 [ 1609.298368][T25291] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 1609.298380][T25291] ? cgroup_freezing+0x2ad/0x360 [ 1609.298401][T25291] ? _raw_spin_unlock_irq+0x23/0x50 [ 1609.298415][T25291] ? lockdep_hardirqs_on+0x9c/0x150 [ 1609.298435][T25291] __ia32_compat_sys_rt_sigreturn+0x140/0x200 [ 1609.298446][T25291] ? __task_pid_nr_ns+0x28/0x470 [ 1609.298465][T25291] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 1609.298479][T25291] ? do_int80_emulation+0xec/0x390 [ 1609.298489][T25291] ? asm_int80_emulation+0x1a/0x20 [ 1609.298499][T25291] do_int80_emulation+0x126/0x390 [ 1609.298510][T25291] ? clear_bhb_loop+0x60/0xb0 [ 1609.298519][T25291] ? clear_bhb_loop+0x60/0xb0 [ 1609.298531][T25291] asm_int80_emulation+0x1a/0x20 [ 1609.298541][T25291] RIP: 0023:0xf70be537 [ 1609.298550][T25291] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1609.298559][T25291] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 [ 1609.298569][T25291] RAX: 0000000000000174 RBX: 0000000000000003 RCX: 0000000080000340 [ 1609.298576][T25291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1609.298581][T25291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1609.298587][T25291] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1609.298593][T25291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1609.298607][T25291] [ 1609.555902][T14408] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1609.563316][T14408] ath9k_htc: Failed to initialize the device [ 1609.573840][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 1609.746271][T25282] netlink: 'syz.2.6636': attribute type 10 has an invalid length. [ 1609.852932][T25282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6636'. [ 1610.122800][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1610.252087][ T9760] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1610.312544][ T10] usb 4-1: device descriptor read/64, error -71 [ 1610.417357][ T9760] usb 1-1: Using ep0 maxpacket: 8 [ 1610.438689][ T9760] usb 1-1: config 0 has no interfaces? [ 1610.447263][ T9760] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1610.457223][ T9760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.507920][ T9760] usb 1-1: Product: syz [ 1610.566958][ T9760] usb 1-1: Manufacturer: syz [ 1610.583980][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1610.601772][ T9760] usb 1-1: SerialNumber: syz [ 1610.657331][ T9760] usb 1-1: config 0 descriptor?? [ 1610.802156][ T10] usb 4-1: device descriptor read/64, error -71 [ 1610.912255][ T10] usb usb4-port1: attempt power cycle [ 1610.993950][ T9760] usb 1-1: USB disconnect, device number 40 [ 1611.020947][T25341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1611.171238][T25354] loop6: detected capacity change from 0 to 524287999 [ 1611.194143][ T5911] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1611.281898][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1611.311682][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1611.453354][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1611.467890][ T5911] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1611.487901][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1611.522378][ T9] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc [ 1611.535575][ T10] usb 4-1: device descriptor read/8, error -71 [ 1611.547145][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.555292][ T5911] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1611.594494][ T9] usb 3-1: Product: syz [ 1611.603574][ T5911] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1611.613805][ T9] usb 3-1: Manufacturer: syz [ 1611.632802][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.652046][ T9] usb 3-1: SerialNumber: syz [ 1611.669775][ T5911] usb 5-1: Product: syz [ 1611.682069][ T9] usb 3-1: config 0 descriptor?? [ 1611.691098][ T5911] usb 5-1: Manufacturer: syz [ 1611.699006][ T9] cypress_m8 3-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 1611.709432][ T5911] usb 5-1: SerialNumber: syz [ 1611.723520][ T9] nokiaca42v2 ttyUSB0: required endpoint is missing [ 1611.744597][T25361] syz_tun: entered allmulticast mode [ 1611.762906][ T5911] usb 5-1: config 0 descriptor?? [ 1611.783859][T25361] dvmrp8: entered allmulticast mode [ 1611.800277][ T5911] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 1611.808985][T25359] syz_tun: left allmulticast mode [ 1611.822326][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1611.882165][ T10] usb 4-1: device descriptor read/8, error -71 [ 1612.002961][ T10] usb usb4-port1: unable to enumerate USB device [ 1612.042362][ T5911] ums-isd200 5-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1612.248417][ T5925] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1612.501665][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 1612.508712][ T5925] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 1612.517604][ T5925] usb 1-1: config 0 has no interface number 0 [ 1612.524089][ T5925] usb 1-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 1612.538878][ T5925] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1612.548801][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.556980][ T5925] usb 1-1: Product: syz [ 1612.561338][ T5925] usb 1-1: Manufacturer: syz [ 1612.566068][ T5925] usb 1-1: SerialNumber: syz [ 1612.580924][ T5925] usb 1-1: config 0 descriptor?? [ 1612.586905][T25375] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1612.681452][T14408] usb 5-1: USB disconnect, device number 111 [ 1613.061403][ T5925] net1080 1-1:0.183: probe with driver net1080 failed with error -71 [ 1613.123596][ T5925] usb 1-1: USB disconnect, device number 41 [ 1613.234069][T25417] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6657'. [ 1613.882004][ T5847] usb 3-1: USB disconnect, device number 117 [ 1613.915716][ T5847] cypress_m8 3-1:0.0: device disconnected [ 1614.539867][ T5925] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1614.760348][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6666'. [ 1614.769817][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6666'. [ 1614.861713][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 1614.868515][ T5925] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 1614.879284][ T5925] usb 3-1: config 0 has no interface number 0 [ 1614.893806][ T5925] usb 3-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1614.905789][ T5925] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 1614.923268][ T5925] usb 3-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 1614.952153][ T5925] usb 3-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 1614.979945][ T5925] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1614.990679][T25463] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1614.997220][T25463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1615.000554][ T5925] usb 3-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1615.021360][T25463] vhci_hcd vhci_hcd.0: Device attached [ 1615.029543][ T5925] usb 3-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 1615.040012][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.048282][ T5925] usb 3-1: Product: syz [ 1615.052722][ T5925] usb 3-1: Manufacturer: syz [ 1615.058083][ T5925] usb 3-1: SerialNumber: syz [ 1615.170855][ T5925] usb 3-1: config 0 descriptor?? [ 1615.212104][T25448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1615.222598][T25448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1615.245104][ T5925] ipaq 3-1:0.19: PocketPC PDA converter detected [ 1615.361825][ T9760] usb 35-1: new low-speed USB device number 11 using vhci_hcd [ 1615.380136][ T5925] usb 3-1: active config #0 != 1 ?? [ 1615.482201][ T5847] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1615.627352][ T5925] usb 3-1: USB disconnect, device number 118 [ 1615.646902][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 1615.698984][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1615.745249][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1615.784274][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1615.839416][ T5847] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1615.909582][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.953870][ T5847] usb 4-1: config 0 descriptor?? [ 1616.376725][ T5847] microsoft 0003:045E:07DA.0038: ignoring exceeding usage max [ 1616.438298][ T5847] microsoft 0003:045E:07DA.0038: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1616.468890][ T5847] microsoft 0003:045E:07DA.0038: no inputs found [ 1616.489102][ T5847] microsoft 0003:045E:07DA.0038: could not initialize ff, continuing anyway [ 1616.587438][ T5847] usb 4-1: USB disconnect, device number 6 [ 1616.945678][T25464] vhci_hcd: connection reset by peer [ 1616.951134][ T2131] vhci_hcd: stop threads [ 1616.966109][ T2131] vhci_hcd: release socket [ 1616.989154][ T2131] vhci_hcd: disconnect device [ 1617.018002][T25543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6674'. [ 1617.360338][T25569] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6675'. [ 1617.415266][T25573] FAULT_INJECTION: forcing a failure. [ 1617.415266][T25573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1617.434382][T25573] CPU: 0 UID: 0 PID: 25573 Comm: syz.0.6679 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1617.434407][T25573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1617.434419][T25573] Call Trace: [ 1617.434428][T25573] [ 1617.434436][T25573] dump_stack_lvl+0x189/0x250 [ 1617.434462][T25573] ? __pfx____ratelimit+0x10/0x10 [ 1617.434488][T25573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1617.434510][T25573] ? __pfx__printk+0x10/0x10 [ 1617.434533][T25573] ? __might_fault+0xb0/0x130 [ 1617.434566][T25573] should_fail_ex+0x414/0x560 [ 1617.434596][T25573] _copy_from_user+0x2d/0xb0 [ 1617.434618][T25573] blkdev_common_ioctl+0xff5/0x2450 [ 1617.434641][T25573] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1617.434664][T25573] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1617.434680][T25573] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1617.434703][T25573] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1617.434724][T25573] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1617.434748][T25573] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1617.434788][T25573] ? __lock_acquire+0xab9/0xd20 [ 1617.434826][T25573] compat_blkdev_ioctl+0x542/0x780 [ 1617.434843][T25573] ? __fget_files+0x2a/0x420 [ 1617.434871][T25573] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1617.434888][T25573] ? __fget_files+0x2a/0x420 [ 1617.434919][T25573] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1617.434943][T25573] __ia32_compat_sys_ioctl+0x540/0x840 [ 1617.434966][T25573] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1617.434986][T25573] ? __fget_files+0x3a0/0x420 [ 1617.435015][T25573] ? fput+0xa0/0xd0 [ 1617.435040][T25573] ? ksys_write+0x22a/0x250 [ 1617.435068][T25573] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1617.435087][T25573] ? lockdep_hardirqs_on+0x9c/0x150 [ 1617.435115][T25573] __do_fast_syscall_32+0xb6/0x2b0 [ 1617.435134][T25573] ? lockdep_hardirqs_on+0x9c/0x150 [ 1617.435163][T25573] do_fast_syscall_32+0x34/0x80 [ 1617.435182][T25573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1617.435203][T25573] RIP: 0023:0xf703e539 [ 1617.435218][T25573] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1617.435234][T25573] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1617.435253][T25573] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000127f [ 1617.435266][T25573] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1617.435277][T25573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1617.435288][T25573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1617.435299][T25573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1617.435327][T25573] [ 1618.381667][ T5847] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1618.522153][T25608] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6683'. [ 1618.537719][T25608] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6683'. [ 1618.631786][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 1620.081345][ T5847] usb 2-1: config 0 has no interfaces? [ 1620.093855][ T5847] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1621.903759][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.392155][ T9760] vhci_hcd: vhci_device speed not set [ 1622.606304][ T5847] usb 2-1: Product: syz [ 1623.424866][ T5847] usb 2-1: Manufacturer: syz [ 1623.429506][ T5847] usb 2-1: SerialNumber: syz [ 1623.782723][ T5847] usb 2-1: config 0 descriptor?? [ 1623.811749][ T5847] usb 2-1: can't set config #0, error -71 [ 1623.991296][ T5847] usb 2-1: USB disconnect, device number 120 [ 1624.721644][T14196] Bluetooth: hci3: command 0x0406 tx timeout [ 1625.337906][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1625.337923][ T30] audit: type=1326 audit(1752255516.841:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25661 comm="syz.4.6688" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e539 code=0x0 [ 1626.851123][T25664] vivid-000: disconnect [ 1627.477489][T25680] vivid-000: reconnect [ 1628.568288][T25687] netlink: 'syz.3.6694': attribute type 8 has an invalid length. [ 1628.622060][ T5977] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1628.629901][ T5847] usb 5-1: new low-speed USB device number 112 using dummy_hcd [ 1628.762580][ T5977] usb 2-1: device descriptor read/64, error -71 [ 1628.794947][ T5847] usb 5-1: No LPM exit latency info found, disabling LPM. [ 1628.888315][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1629.032099][ T5977] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1629.645592][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1629.746630][ T5847] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1629.871821][ T5977] usb 2-1: device descriptor read/64, error -71 [ 1629.941742][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.970203][ T5847] usb 5-1: Product: Ῐ뉛䊟扴驒蓃욞퀙䚳삜⴫격ⷭ棒牭ꦜ昇禅즒뜄篶溹蜥뷼漷뇢曆洗㩾㹘뀋뉺⡲毕暑ᛌ▀麫ꀥ趓︃钩遠ⲍᲵ駿霄嘝⣭﬒묡玊쾹ﵭ䚾셼姮춺ᴭ㤊蒲䐼䫩疱㰙乪激홤ﹻ䉩㵕␯ [ 1630.188668][ T5977] usb usb2-port1: attempt power cycle [ 1630.482234][ T5847] usb 5-1: Manufacturer: ည [ 1630.486884][ T5847] usb 5-1: SerialNumber: І [ 1630.562612][T25690] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1630.570162][T25690] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1630.677170][ T5977] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1630.772947][ T5977] usb 2-1: device descriptor read/8, error -71 [ 1631.080048][T25690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1631.133463][ T5977] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1631.154336][T25708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1631.481502][T25690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.568728][T25708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.881326][ T5977] usb 2-1: device descriptor read/8, error -71 [ 1631.891660][T25690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1631.919769][T25690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.031766][ T5977] usb usb2-port1: unable to enumerate USB device [ 1632.503547][ T5847] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1633.534071][ T5847] usb 5-1: USB disconnect, device number 112 [ 1633.542208][ T9760] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1633.720458][ T9760] usb 2-1: Using ep0 maxpacket: 8 [ 1634.031365][ T9760] usb 2-1: config 0 has no interfaces? [ 1634.243780][ T9760] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1634.273652][ T9760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.282002][ T9760] usb 2-1: Product: syz [ 1634.286319][ T9760] usb 2-1: Manufacturer: syz [ 1634.290925][ T9760] usb 2-1: SerialNumber: syz [ 1634.307204][ T9760] usb 2-1: config 0 descriptor?? [ 1674.183675][ T19] sched: DL replenish lagged too much [ 1740.901554][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1740.908530][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P25758/1:b..l P25748/1:b..l [ 1740.918225][ C0] rcu: (detected by 0, t=10502 jiffies, g=210825, q=815753 ncpus=2) [ 1740.926273][ C0] task:modprobe state:R running task stack:24040 pid:25748 tgid:25748 ppid:12 task_flags:0x40000c flags:0x00004002 [ 1740.940689][ C0] Call Trace: [ 1740.943960][ C0] [ 1740.946881][ C0] __schedule+0x16f5/0x4d00 [ 1740.951382][ C0] ? unwind_get_return_address_ptr+0x70/0xa0 [ 1740.957351][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 1740.962625][ C0] ? __pfx___schedule+0x10/0x10 [ 1740.967457][ C0] ? x64_sys_call+0x21ba/0x21c0 [ 1740.972293][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1740.978431][ C0] ? arch_stack_walk+0x110/0x150 [ 1740.983354][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1740.988623][ C0] preempt_schedule_irq+0xb5/0x150 [ 1740.993718][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1740.999425][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1741.005215][ C0] irqentry_exit+0x6f/0x90 [ 1741.009609][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1741.015571][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0xd/0x40 [ 1741.021705][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 37 b5 32 04 00 <74> 1e 83 3d 5a e5 32 04 00 74 15 65 48 8b 0c 25 08 50 a0 92 31 c0 [ 1741.041290][ C0] RSP: 0018:ffffc900053ef1b0 EFLAGS: 00000202 [ 1741.047337][ C0] RAX: 0000000000000000 RBX: ffffffff90d90b01 RCX: ffffc900053eff60 [ 1741.055291][ C0] RDX: ffffc900053ef201 RSI: dffffc0000000000 RDI: ffffc900053ef290 [ 1741.063245][ C0] RBP: dffffc0000000000 R08: ffffc900053eff48 R09: 0000000000000000 [ 1741.071196][ C0] R10: ffffc900053ef2d8 R11: fffff52000a7de5d R12: ffffc900053eff58 [ 1741.079150][ C0] R13: ffffc900053e8000 R14: ffffc900053ef288 R15: ffffffff8172aae5 [ 1741.087102][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1741.092211][ C0] unwind_next_frame+0x195c/0x2390 [ 1741.097308][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1741.102401][ C0] ? do_syscall_64+0xfa/0x3b0 [ 1741.107061][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1741.113198][ C0] arch_stack_walk+0x11c/0x150 [ 1741.117946][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.123993][ C0] stack_trace_save+0x9c/0xe0 [ 1741.128651][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1741.134009][ C0] save_stack+0xf5/0x1f0 [ 1741.138246][ C0] ? __pfx_save_stack+0x10/0x10 [ 1741.143077][ C0] ? free_unref_folios+0xc66/0x14d0 [ 1741.148255][ C0] ? folios_put_refs+0x559/0x640 [ 1741.153175][ C0] ? free_pages_and_swap_cache+0x4be/0x520 [ 1741.158965][ C0] ? tlb_flush_mmu+0x3a0/0x680 [ 1741.163710][ C0] ? tlb_finish_mmu+0xc3/0x1d0 [ 1741.168471][ C0] ? exit_mmap+0x44c/0xb50 [ 1741.172883][ C0] ? __mmput+0x118/0x420 [ 1741.177113][ C0] ? exit_mm+0x1da/0x2c0 [ 1741.181341][ C0] ? do_exit+0x648/0x22e0 [ 1741.185653][ C0] ? do_group_exit+0x21c/0x2d0 [ 1741.190399][ C0] ? __x64_sys_exit_group+0x3f/0x40 [ 1741.195579][ C0] ? x64_sys_call+0x21ba/0x21c0 [ 1741.200420][ C0] ? do_syscall_64+0xfa/0x3b0 [ 1741.205086][ C0] ? page_ext_put+0x97/0xc0 [ 1741.209576][ C0] __reset_page_owner+0x71/0x1f0 [ 1741.214500][ C0] free_unref_folios+0xc66/0x14d0 [ 1741.219514][ C0] folios_put_refs+0x559/0x640 [ 1741.224271][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1741.229539][ C0] ? free_swap_cache+0x9b/0x300 [ 1741.234375][ C0] free_pages_and_swap_cache+0x4be/0x520 [ 1741.239996][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1741.246131][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 1741.251243][ C0] ? tlb_table_flush+0x36d/0x410 [ 1741.256169][ C0] tlb_flush_mmu+0x3a0/0x680 [ 1741.260746][ C0] ? __pfx_down_write+0x10/0x10 [ 1741.265580][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 1741.270159][ C0] exit_mmap+0x44c/0xb50 [ 1741.274410][ C0] ? uprobe_clear_state+0x20f/0x290 [ 1741.279598][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1741.284341][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1741.289959][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1741.294628][ C0] ? uprobe_clear_state+0x274/0x290 [ 1741.299809][ C0] __mmput+0x118/0x420 [ 1741.303862][ C0] exit_mm+0x1da/0x2c0 [ 1741.307915][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1741.312514][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 1741.317951][ C0] ? rcu_is_watching+0x15/0xb0 [ 1741.322695][ C0] do_exit+0x648/0x22e0 [ 1741.326832][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1741.332189][ C0] ? __pfx_do_exit+0x10/0x10 [ 1741.336763][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1741.341943][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1741.347126][ C0] do_group_exit+0x21c/0x2d0 [ 1741.351718][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1741.356742][ C0] x64_sys_call+0x21ba/0x21c0 [ 1741.361399][ C0] do_syscall_64+0xfa/0x3b0 [ 1741.365880][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1741.371059][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.377106][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1741.381765][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.387635][ C0] RIP: 0033:0x7f179dc9a6c5 [ 1741.392027][ C0] RSP: 002b:00007ffe9a2eab08 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 1741.400418][ C0] RAX: ffffffffffffffda RBX: 00007f179dd9bfe8 RCX: 00007f179dc9a6c5 [ 1741.408375][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 1741.416329][ C0] RBP: 0000000000000001 R08: 00007ffe9a2eaa98 R09: 0000000000000000 [ 1741.424294][ C0] R10: 00007ffe9a2ea930 R11: 0000000000000206 R12: 0000000000000000 [ 1741.432254][ C0] R13: 0000000000000001 R14: 00007f179dd9a680 R15: 00007f179dd9c000 [ 1741.440218][ C0] [ 1741.443221][ C0] task:kworker/u8:5 state:R running task stack:27144 pid:25758 tgid:25758 ppid:2 task_flags:0x8040 flags:0x00004000 [ 1741.456505][ C0] Call Trace: [ 1741.459770][ C0] [ 1741.462685][ C0] __schedule+0x16f5/0x4d00 [ 1741.467183][ C0] ? preempt_schedule_notrace+0xd1/0x110 [ 1741.472803][ C0] ? __pfx___schedule+0x10/0x10 [ 1741.477649][ C0] preempt_schedule_notrace+0xd1/0x110 [ 1741.483091][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1741.489141][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1741.494235][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1741.500370][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 1741.506244][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1741.512385][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1741.517475][ C0] rcu_is_watching+0x7f/0xb0 [ 1741.522046][ C0] lock_acquire+0x5f/0x360 [ 1741.526448][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1741.531548][ C0] ? do_filp_open+0x1fa/0x410 [ 1741.536217][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1741.541307][ C0] unwind_next_frame+0xc2/0x2390 [ 1741.546223][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1741.551315][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1741.556409][ C0] ? path_openat+0x107/0x3830 [ 1741.561065][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1741.567199][ C0] arch_stack_walk+0x11c/0x150 [ 1741.571947][ C0] ? do_filp_open+0x1fa/0x410 [ 1741.576606][ C0] stack_trace_save+0x9c/0xe0 [ 1741.581262][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1741.586620][ C0] save_stack+0xf5/0x1f0 [ 1741.590844][ C0] ? __pfx_save_stack+0x10/0x10 [ 1741.595688][ C0] ? __free_frozen_pages+0xc71/0xe70 [ 1741.600963][ C0] ? __put_partials+0x161/0x1c0 [ 1741.605804][ C0] ? put_cpu_partial+0x17c/0x250 [ 1741.610729][ C0] ? __slab_free+0x2f7/0x400 [ 1741.615309][ C0] ? qlist_free_all+0x97/0x140 [ 1741.620057][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1741.625668][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1741.630672][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1741.636285][ C0] ? security_file_alloc+0x34/0x330 [ 1741.641463][ C0] ? init_file+0x93/0x2f0 [ 1741.645773][ C0] ? alloc_empty_file+0x6e/0x1d0 [ 1741.650691][ C0] ? path_openat+0x107/0x3830 [ 1741.655349][ C0] ? do_filp_open+0x1fa/0x410 [ 1741.660013][ C0] ? page_ext_put+0x97/0xc0 [ 1741.664501][ C0] __reset_page_owner+0x71/0x1f0 [ 1741.669425][ C0] __free_frozen_pages+0xc71/0xe70 [ 1741.674523][ C0] __put_partials+0x161/0x1c0 [ 1741.679195][ C0] put_cpu_partial+0x17c/0x250 [ 1741.683941][ C0] ? put_cpu_partial+0x6d/0x250 [ 1741.688775][ C0] __slab_free+0x2f7/0x400 [ 1741.693174][ C0] ? __phys_addr+0xd3/0x180 [ 1741.697667][ C0] qlist_free_all+0x97/0x140 [ 1741.702242][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1741.707682][ C0] __kasan_slab_alloc+0x22/0x80 [ 1741.712514][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1741.717953][ C0] ? security_file_alloc+0x34/0x330 [ 1741.723133][ C0] security_file_alloc+0x34/0x330 [ 1741.728136][ C0] init_file+0x93/0x2f0 [ 1741.732288][ C0] alloc_empty_file+0x6e/0x1d0 [ 1741.737048][ C0] path_openat+0x107/0x3830 [ 1741.741542][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1741.746649][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1741.751752][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 1741.757049][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1741.762158][ C0] ? __pfx_path_openat+0x10/0x10 [ 1741.767082][ C0] ? stack_depot_save_flags+0x40/0x900 [ 1741.772528][ C0] do_filp_open+0x1fa/0x410 [ 1741.777015][ C0] ? kasan_save_track+0x3e/0x80 [ 1741.781847][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 1741.786849][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1741.791793][ C0] ? do_open_execat+0x93/0x540 [ 1741.796571][ C0] do_open_execat+0x135/0x540 [ 1741.801233][ C0] ? __pfx_do_open_execat+0x10/0x10 [ 1741.806418][ C0] ? rcu_is_watching+0x15/0xb0 [ 1741.811165][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1741.816518][ C0] ? getname_kernel+0x146/0x2f0 [ 1741.821358][ C0] alloc_bprm+0x28/0x5b0 [ 1741.825589][ C0] ? getname_kernel+0x20e/0x2f0 [ 1741.830432][ C0] kernel_execve+0x9b/0x9f0 [ 1741.834925][ C0] call_usermodehelper_exec_async+0x210/0x360 [ 1741.840971][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1741.847546][ C0] ret_from_fork+0x3fc/0x770 [ 1741.852121][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1741.857219][ C0] ? __switch_to_asm+0x39/0x70 [ 1741.861980][ C0] ? __switch_to_asm+0x33/0x70 [ 1741.866733][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1741.873306][ C0] ret_from_fork_asm+0x1a/0x30 [ 1741.878064][ C0] [ 1741.930735][ T5218] udevd[5218]: worker [25725] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 1742.082122][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1742.088466][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1742.124556][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1742.130885][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1747.834474][T25045] Bluetooth: hci2: command 0x0406 tx timeout