last executing test programs: 4m49.652279363s ago: executing program 4 (id=3982): semop(0x0, &(0x7f0000000140)=[{0x4, 0x800}, {0x1}, {0x2, 0x2, 0x800}, {0x1, 0x1e, 0x1000}, {0x4, 0x4fc4, 0x1800}], 0x5) 4m49.495183305s ago: executing program 4 (id=3984): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b7507250102020700090501"], 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002"], 0x20, 0x6044}, 0x6) 4m47.133270268s ago: executing program 4 (id=4000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x4000, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 4m47.016650127s ago: executing program 4 (id=4002): mkdirat(0xffffffffffffff9c, &(0x7f0000008b00)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r3, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000080)) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000003c0)={0x102, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x0, 0x0, &(0x7f0000000300)) fsopen(&(0x7f0000000140)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000080)='discard', &(0x7f0000008b40)="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", 0x2c6) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x20b0002, &(0x7f0000008880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r2, @ANYBLOB="2c67915bd4f1001000003c560300a42bbfaf252becc343e364276f65d8ad5b2c2fe9d02665abf94671dcb8f342a47bdcf2e9fcb80bb087a35b771230c6e8d438e00f4c0791ec671abae59655f4d5b71f5bfe8d0f0629bde401a667e18e1be83fe4977cddb74c9b15b4f74cb34073bdb4cfcba3336cd7a7535712e94bb1060d9fe00e9c446e3e2b1a2c1ca0c07333f8bc93faa0baf2ecf73285c2ae92c232f63c", @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c626c6b73697a653d3078303030303030303030303030313030302c6d61785f726561643d3078303030303030303030303030303230302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030322c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303766662c7375626a5f757365723dc724262c657569643d", @ANYRESDEC=r4, @ANYBLOB=',func=POLICY_CHECK,subj_user=fuse\x00,fowner>', @ANYRESDEC=r4, @ANYBLOB=',smackfsdef=(,\x00'], 0x1, 0x0, &(0x7f0000000300)="06fdccde2e44d78716157078e7fc0cce5c56c18230738aa53fdc6513e1dd6f79ff15df9f4c0ca1b46419c261a78319dec90e835a01b92ed8d61fd2984499b85d80fb3d608a24fb1e1c795e23ec35ad17024efb823af7d5a736b7fc96e736da677e6775bdeb47ba67ef443aae9797c41a78baa8b501333c1dfb137702f7e16171a4ef043cd6e55533e4ea5937585c6016a511") getdents64(r6, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r3) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000600)={0x4d8, 0x0, 0x10001}) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) 4m46.023650937s ago: executing program 4 (id=4006): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x75) madvise(&(0x7f00008f1000/0x4000)=nil, 0x4000, 0xa) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f00006e7000/0x4000)=nil, &(0x7f0000ff0000/0xe000)=nil, 0x4000}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r4, 0xf}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r5, 0x3, 0x3, 0x0, 0xa, 0x1}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x3}, 0x8) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m44.579312968s ago: executing program 4 (id=4015): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e"], 0x22) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}, {0x0}], 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @local, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0x4010) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)={r4, 0x32eb, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x7f, 0x1, 0x200, 0xdf8, 0x2661, 0x8, 0x3, 0x6, r4}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) 4m44.19976087s ago: executing program 32 (id=4015): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e"], 0x22) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}, {0x0}], 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @local, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0x4010) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)={r4, 0x32eb, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x7f, 0x1, 0x200, 0xdf8, 0x2661, 0x8, 0x3, 0x6, r4}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) 11.246568442s ago: executing program 2 (id=5421): fanotify_init(0x200, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_io_uring_setup(0x6ef9, &(0x7f00000001c0)={0x0, 0x6e02, 0x4000, 0x1, 0x2ec}, &(0x7f0000000240), &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x14, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000004c0)={0x28, 0x2, 0x0, {0x4, 0x4, 0x4}}, 0x28) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100006c042b20711f0633231b01020301090212000100fde0000904d10500a0eed80289aceee2f8f11d3af5c3d9de24e9496e1c41d6bf10773244df9e2cd68b1f64a13c103787d113e9c5ae3223a66535a5d949c493796ec129f292cd759737bc78665bae0f9c2a540372fbbc8e8517c9e2440892cf3fa31962888c161f3a4322c0e08d379902701962005f609de48571bfc3ba006d4c20012c403b849305a4465f32cc13fb9594c39a672f7685bf525fd602594f91"], 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mkdir(&(0x7f0000000140)='./file0\x00', 0x6c) syz_usb_connect(0x1, 0x370, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xe, 0x51, 0x23, 0x20, 0x424, 0x9d01, 0x5cab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35e, 0x2, 0x5, 0xf7, 0x20, 0x4, [{{0x9, 0x4, 0xa9, 0xf8, 0xb, 0xc9, 0x83, 0xc7, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0xf073, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x5, 0x29, 0x5, 0x6, 0x2}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x0, "0a9f44d36b"}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x5, "3a3f60a4"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x1, 0x0, 0x5, 0x80}, @processing_unit={0xb, 0x24, 0x7, 0x5, 0x1, 0x2, "90216217"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x40, 0x2, 0x3, 0x2, [@generic={0x8, 0x5, "979928b87566"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0xf5, 0x5, 0x4b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9}]}}, {{0x9, 0x5, 0x87, 0x14, 0x400, 0x8e, 0x80, 0x98, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x9, 0x1}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x9, 0x0, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x76, 0x3, 0xff, [@generic={0x7, 0x11, "cd6df9ba7e"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0x1, 0x22, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x9}]}}, {{0x9, 0x5, 0xf, 0x18, 0x8, 0x6, 0x7, 0x97, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8dd}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x8, 0x0, 0xc8, [@generic={0x88, 0x4, "aa7708cd143dc5163a7cf6a1aec4af7adc2821a4e361385da83d02a93000b15f0280ddd77c8ea6c8ee22b8174ad3a4a56387a7ac1cdc8d006e24328810c274ba25e96fd11319e310491b84780bb6683807c1408e7b39662d79d1b34189143c719db81de4bf0e409bac2513617884e5b702841c06b3ec5550dd492fc0d4f8070d88ad0f42b7ed"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xb, 0x1, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x92, 0x7, 0x9, [@generic={0x9, 0x0, "46616630baea87"}, @generic={0x48, 0xe, "6d0c515dd5135154c99390412ac93dc7adc9ac1541e2d654ebdcdda60ff785a9c01d90fc4184724733459c257c0084337bfc36e22c276477ce21c03dc9923709ef2cbcd1b0f3"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x5, 0x1, 0xe, [@generic={0x92, 0x23, "fd97b3c83633650ed6d77dc6c9586d8f5942e1d3ab4adf4ec75c3b5dddabc1308120b0fc2cba4dd3bd21caefc528ab5f26a78d299eee552c71559fa72b738f70e977f0b5ec0577eccdfb0602647de4ce61e224672eba1dfca5a63d5796c8b8282d83bc0573c88a4c88d6437eabfd31b37aaa0ca37761cdef87c7cf3079dcdd176336ebace823772114a84a5454194a00"}, @generic={0x4f, 0xc, "f096c528237b953f3b4cd22ef1a4a193d7b6c5bc0803d37383f3204ad5ed8e503390ab195a9629b1a91ff9d66963552f8848235a8d1b590896cbb7cab6d48c8792de539b5899981256d9877a4d"}]}}]}}, {{0x9, 0x4, 0x25, 0x60, 0x3, 0xdb, 0x4b, 0x91, 0x9, [@generic={0x77, 0x10, "c3fab89513d22fbed8e129be51b4a5e86d3bcfc8b6eb1fd5547ae000265ebb3bb52850d6490ed2b54304217863845197714587ed2616b25c26fe17a02c7b8917fc87a854fac00b3965102e550603c743f3f81d358f5bf61b6f4331381643f6757b88c769c82fe119d4410e3240d8c89ab2b11d08ca"}], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0x8, 0xc, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xb}]}}, {{0x9, 0x5, 0x6, 0x14, 0x40, 0x81, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x5}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x3, 0x7, 0x4}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xa6, 0x8, 0x0, 0x40, 0x1}, 0xc4, &(0x7f0000000ac0)={0x5, 0xf, 0xc4, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xf, 0x4, 0x8000}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "442864a71b963c7cf0cf2c7d42e5274c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x4, 0xa7, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x74, "6cf4bf2d3bd91260556bdd275fda216d"}, @generic={0x80, 0x10, 0x1, "8ceab2dd0a6cf073bbe8975e798e03fdb39e4da0c077322f9f18d7e183ed9f7776c6f6f65aa83eee3d3dfea48ed5f24ac935cbea7c637c509c40340c7c31cad1cebfe11d6e76d57518149c6c7cd219936076bb368c476d2ae5c1846e9d7617999e799a7ae70fca22c082a3b7fb5e7b01da5d4d5fabb89324a9e5664903"}]}, 0x3, [{0x88, &(0x7f0000000640)=@string={0x88, 0x3, "123780cf20c83237bb78b63a5b804a094b36385bbcdbbf31ec2fafd6ca878252f5ec7a9fa0882062b54ec70f36ccfffddb48504d424005d3961f54787778817703f060b211f4a8f5d30ec9c1379a32766fd0fb6cc50bea0110b76bb2b23965f8ec4483e262df2642d408c261b38afd89b691ac49971a627378db1add02a24868fa5c18ec424f"}}, {0xd8, &(0x7f0000000bc0)=@string={0xd8, 0x3, "a53289416281a5c72236993e8738bf336105375902e8f7051eab549bc2dbe6be2ee4fba5fb90f5e125944fcde7a635891285ae3e5367e97f9508eeaaf2559f87bddf69bce1609b0906c4eef55ab22ec9e0dbefffc3d47824215dde4baf31d1c81aaf9df032b0e11f864c18613c0527510666f7d74b60a86aa9bbfe1f38e76ab56a1de0057be06063758a2e1955013e405fe561e24bc92781ca81e7b0c495adefc7d51848fb9753597c3d36bba1f6eb699c041aa3075643d30951709c9b30078ee645fcb8893afa2fff26f7fb7bc29f2e7a4489fa4ad9"}}, {0xd2, &(0x7f0000000cc0)=@string={0xd2, 0x3, "995e753259a25ebb217ebd48e0e98b610f237272f907738a4f937edcd6d5ad3e36f8aff4ccea0a7fe42d90475ddd3f311fdca87e571ba3199d1b427e27a1d42166ff7e6fe9a65d35f5bc6cf618d612ad50dbea8ae82a23a329e0d5a256379172772cc2c7a361657c499e1dec0bf9e9a83502f9cc4cde49c91b99ebcc8c7dc1ac8654d34032c7937a3c9f834cab53c075b52d321e7040907594e68c581f0ec48a1605cada1a9ccf9cc3c2c7c324bb46fb322bb418358639ddc122ea5636d88d9fca85d1d358d3bf5b1d18d71094abaf43"}}]}) r3 = syz_open_dev$radio(&(0x7f0000000500), 0x1, 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000540)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000002100)={{r0}, r4, 0xa, @inherit={0x50, &(0x7f0000000580)={0x1, 0x1, 0xfff, 0xdb, {0x2, 0x5, 0x0, 0x9, 0x3ff}, [0x6]}}, @subvolid=0x3}) pselect6(0x40, &(0x7f0000000180)={0x9, 0xfffffffffffffffe, 0x5, 0x56c, 0x3, 0x7, 0x81}, 0x0, &(0x7f0000000280)={0xdb, 0xdfed, 0x2, 0x7fff, 0x1, 0x3, 0x9, 0x1}, &(0x7f0000000340), 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r5 = syz_open_dev$media(&(0x7f0000000180), 0x7, 0x0) inotify_init1(0x80000) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) 8.923714807s ago: executing program 5 (id=5431): socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 8.817828174s ago: executing program 5 (id=5432): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x62, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) 8.435574378s ago: executing program 5 (id=5434): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x33, 0x5, 0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x1}, {0x4, 0x4}, {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = creat(0x0, 0x122) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0) 7.775767574s ago: executing program 2 (id=5437): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @multicast2}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x4, {0x2, 0x4e23, @rand_addr=0x64010100}, 'pimreg\x00'}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) close(r1) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r5], &(0x7f0000000200), &(0x7f0000000580)=[r6], &(0x7f00000000c0)}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[{}, {}, {}, {}], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x6, 0x3, 0x0, r5}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='team_slave_1\x00', 0x10) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x920) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="4007490000002a4e22f5c5196e03ba8bebf15b08cd06a12351c5524c3c5649fed85d8ccbb74527e74636849e944f932f50821243fe106afba1842d46ec710cb202fb49d1771543d1939ff4a29127c4798a0dee6e9ae5cf"], 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) 7.18999863s ago: executing program 3 (id=5440): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008804) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0x32feb97c}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$read(0xb, r4, &(0x7f0000000140), 0xfffffffffffffe16) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dcd69f205a04105201010102030109022400010000100009042e00027e3a110009050202000001000009058202"], 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000100)=0x0) write$cgroup_pid(r6, &(0x7f0000000140)=r7, 0x12) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000011140100000000000008000008004a0002000000080003000400000008004b"], 0x38}, 0x1, 0x0, 0x0, 0x480d1}, 0x40800) socketpair(0x10, 0x2, 0x8, &(0x7f0000000000)) 5.67265928s ago: executing program 5 (id=5442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000104, 0x7}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x81e5, 0x8, 0x0, 0x2d2, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f0000000600)=0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2020) waitid$P_PIDFD(0x3, r6, &(0x7f0000000280), 0x2, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="14020000100001000000000800000000e0000001000000001000000031e6404d605ab5e9c5db05c5520f48000000000000000000000000000000000000008000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x214}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0xfffffffffffffc7a, 0x1, 0x0, 0x0, r5}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a18ad9"], 0x0) 5.518967498s ago: executing program 3 (id=5443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000ff0c01020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.299847127s ago: executing program 3 (id=5444): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x51}, 0x0) 3.885921966s ago: executing program 3 (id=5447): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) memfd_create(&(0x7f00000000c0)='\x00', 0x3) r0 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5040}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_getoverrun(r3) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000025bd832a05829df9cfc62389577fed00010324bd464a3052df25150000180c0013000400000000000000"], 0x20}}, 0x0) 3.881099286s ago: executing program 2 (id=5448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) poll(&(0x7f00000000c0)=[{r0, 0xa8}, {r0, 0x110}], 0x2, 0x3) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x503802, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = semget$private(0x0, 0x7, 0x3c0) semop(r2, &(0x7f0000000180)=[{0x3, 0x8001, 0x1000}], 0x1) semop(r2, &(0x7f0000000440)=[{0x2, 0xb7, 0x1800}, {0x3, 0x8, 0x1000}, {0x4, 0x7, 0x800}, {0x4, 0x40, 0x1000}, {0x0, 0x9, 0x1800}, {0x4, 0x4, 0x1800}, {0x4, 0x65, 0x800}, {0x0, 0x9, 0x800}, {0x3, 0x3, 0x800}], 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000001000/0x400000)=nil) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xfe63) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xffff}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008814}, 0x4010) 3.608064659s ago: executing program 1 (id=5450): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x29, 0x0, 0x1, 0x0, 0x24, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x11, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) 3.432416974s ago: executing program 1 (id=5451): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x20400, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000040)={0x0, 0x6, 0x8001}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x568cb6e300f545fd) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5, 0xa9612, 0x17e5e9, 0x100000000000000}) write$binfmt_misc(r7, &(0x7f0000000140)="9f8c2f4e0f76fc48ae59ba4b2a952b338055cc0111a15ebac38cd51e3664c8409594786ea5da77bbc2d7b0e4d15d60e4ad811b8e5490ef27000000", 0x3b) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d9607fc350000000000009db600e60080b8785d960001000000000000000000000700", "2809e80000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 2.903675523s ago: executing program 0 (id=5453): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) 2.790706163s ago: executing program 2 (id=5454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r1, 0x1, 0x4070bd28, 0x1, {0xf, 0x0, 0xf0}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) 2.767944325s ago: executing program 0 (id=5455): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x24, 0x40, 0x119, 0xfffffffe, 0xf0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1a}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.629902702s ago: executing program 2 (id=5456): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = creat(0x0, 0x122) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91", 0x30, 0x404c801, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000000)={0x8, 'veth0_to_team\x00', {'batadv_slave_0\x00'}, 0x20}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) 2.627526513s ago: executing program 5 (id=5457): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000140)=[{0x4, 0x800}, {0x4, 0x4fc4, 0x1800}], 0x2) 2.539715064s ago: executing program 0 (id=5458): open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b1b", @ANYRES64=r0]) 1.770320923s ago: executing program 1 (id=5459): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d80000007b008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 1.6604373s ago: executing program 5 (id=5460): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c3400000000001090224000100", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) 1.479512149s ago: executing program 1 (id=5461): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r5 = gettid() r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r6, 0x0, 0x0}, 0x20) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004, @tid=r5}, 0x0) sched_setattr(r5, 0x0, 0x0) write$sndseq(r4, &(0x7f0000001380), 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) migrate_pages(r5, 0x10000, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0xf) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000040)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = dup(r3) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATFS(r9, &(0x7f00000001c0)={0x43, 0x9, 0x1, {0x4b0, 0xa3, 0x4, 0x8000000000000001, 0xb6, 0x0, 0x1, 0x401, 0x7fff}}, 0x43) 1.470022304s ago: executing program 3 (id=5462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="00000000e5ff"}, 0x14) 1.072622401s ago: executing program 2 (id=5463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7496, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x6, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r12, 0x21eae}}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40080) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x3fe, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x1, 0x40, 0x7f, 0x20}}}, 0x3f) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000000c0)=@ll={0x11, 0x19, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x62, 0xc, "b3195d93c2ead0bf9b047fa54c6edc9686c7b960a909f362c847509e240933ca5fce5c214dd62df19c7016c0ff81cb9aaa882a9cba643dd9dbd8a5da96e216dc496c2a220a6e56f8027a9b03e8b895980c6d6ad2fcb0333a9314878c8a18"}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ae"}]}], {0x14}}, 0xfc}}, 0x0) 1.030760966s ago: executing program 3 (id=5464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000104, 0x7}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x81e5, 0x8, 0x0, 0x2d2, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f0000000600)=0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r10, &(0x7f0000002140)={0x2020}, 0x2020) waitid$P_PIDFD(0x3, r6, &(0x7f0000000280), 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="14020000100001000000000800000000e0000001000000001000000031e6404d605ab5e9c5db05c5520f48000000000000000000000000000000000000008000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x214}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0xfffffffffffffc7a, 0x1, 0x0, 0x0, r5}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a18ad9"], 0x0) 667.59752ms ago: executing program 0 (id=5465): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x18}], 0x1, 0x0) 580.065097ms ago: executing program 1 (id=5466): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca", 0x2f, 0x404c801, 0x0, 0x241) 503.159617ms ago: executing program 0 (id=5467): syz_emit_ethernet(0xa6, &(0x7f0000000780)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x4, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, '\x00'/12}]}}}}}}, 0x0) (fail_nth: 2) 355.091883ms ago: executing program 1 (id=5468): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1ff, 0xe2a00) ioctl$I2C_PEC(r0, 0x708, 0x40) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x80000001, 0x1}}, './file0\x00'}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000100)={0x0, 0x401}) (async) ioctl$SG_BLKTRACESTART(r1, 0x1274, 0x0) (async) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0x0, 0x7b6a4c72, 0x7ff, 0x401, 0x5, 0x5}) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000200)={0x6, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x76a9}}, './file0/../file0\x00'}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000280)=0x20, 0x4) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000002c0)) syz_usb_connect(0x3, 0x42b, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x52, 0x88, 0x66, 0x10, 0x2040, 0x4201, 0xa0b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x419, 0x1, 0xbc, 0x4a, 0x30, 0x10, [{{0x9, 0x4, 0xa3, 0xff, 0x10, 0x5b, 0x86, 0xae, 0xb, [@hid_hid={0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x5ec}}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0xe, 0x28, 0x9, [@generic={0x95, 0x23, "bbbb90ede23db83f2ad90f5e832067f028338b883af1ec2767beafb36a58ced2723e02f9e7be1701e4356f7ef94eb64cc8484e18db0080f9bfac26cb7d768af5a7ded4c6fa070dae024776f2d952297469be154b6695b7b96327ed2f46ee9f1dd0d7394a9690e167637507bcb6f60c50b8d3777b23c99c3ea2125137e6134fe1b4721394d6a555133abca81658bdf6980f0c6b"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x1, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9c, 0x1}]}}, {{0x9, 0x5, 0x8b, 0x0, 0x40, 0x8, 0x7, 0xd}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xcc, 0x81, 0x6, [@generic={0xf6, 0x11, "4b5b55dfe1b8df10618cffef4bb0f36e2ddc640074a26450e858044b50d0b13afabd7ad54268d0bf5e783588ce559ffc2247b9cedb529687c646038df03c4933e11a6e9cfbe553a306983432a980c908925bf29daaec45f182e59e9e4f33f04a15ca753cc51608eeaece120d6fdc9f5bce0e80cdc14e4a0eb03342cc8a205b66e572ab4103001e30e0d8e7a8797594e48447187f1b94998bba8d6e93916e67ebe716001d0c4c58d7cef68de6dc2406982b65acea7ea9d057b18065339457e12d358a497208fde60241fc9a6545f10ed0394b9c64b9e1c2b2ea1599cdee41992eee966a1f055aa870595555615d6d7a7d579b5bcc"}, @generic={0xae, 0x6, "d1a344a10d2da4b9d66803d4b11ad48278c2950091396c297088ef1aed760304d5e4cf0753d590a39d522b7a99a135e889be7a9668e7f8f3504df4e008db4cf0445e43823ada86e3a7ebb119a72e372bc07bc58325cd42d55aab99bdfbd56aa771ac7ab0c7a95cd7d2196a3f40383167e79e4ccc4b96c334e9ece1866539c3baeb43a39963dcbd831538412461daa7ab8a9f6cc1fb9c2c0e68f02f641e80f5b87fb2bf2a7466af7bf422504f"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0x10, 0x2, 0x1}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x2, 0x6, 0x6}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x6, 0xc8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x19}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x8, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2b, 0x10}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x1, 0x30, 0x5}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x0, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf9, 0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xb, 0x0, 0x7}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x4, 0x8, 0x9}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0xfc, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xd, 0x40}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x5, 0xff, 0x9, [@generic={0xfd, 0x8, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xe}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xff, 0x10}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x9, 0x0, 0x5}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x6, 0xb4, 0x8, 0x8, 0xc}, 0x1c, &(0x7f0000000780)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "ebd3174e39cc8ac6b3e4ac2c7d238a54"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xeab9}}, {0x21, &(0x7f0000000800)=@string={0x21, 0x3, "21176eaf82fa42e0dda0885cb50b1d232599b8ac04016a3e82b826afbd96d9"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2409}}]}) (async) epoll_pwait2(r1, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={0x77359400}, &(0x7f0000000a40)={[0x23]}, 0x8) (async) msgget$private(0x0, 0x490) (async) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000a80)) (async, rerun: 64) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000ac0)={0x8f, 0x0, 0x9}) (rerun: 64) fstat(r3, &(0x7f0000000b40)) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c00)=@o_path={&(0x7f0000000bc0)='./file0/../file0\x00', 0x0, 0x18, r0}, 0x18) ioctl$int_in(r4, 0x5452, &(0x7f0000000c40)=0x6) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000c80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file1\x00'}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000cc0)=0x800) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000d00)={"b22c60eecbfaf768621a0c19b55f8697", 0x0, 0x0, {0x5, 0x9}, {0x5, 0xfffffffc}, 0x430, [0x9, 0x3542, 0x1, 0x8000, 0x9, 0x6a, 0x8, 0x6, 0x6, 0x100, 0x2, 0x7, 0xffffffff, 0xffffffff, 0x200, 0xe5]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000e80)={{r6}, r7, 0xa, @inherit={0x58, &(0x7f0000000e00)={0x1, 0x2, 0x2, 0x8, {0x4, 0x4, 0x6, 0xfffffffffffffff8, 0x9}, [0xff, 0x400]}}, @name="b238f9dc5088576383329bdae927c923c70a04703706e2076536f6f5092f6623512eefff552bd2ee709cbbffd6da8ee9ab1c2ec29933ea8dd927f87794c98c4f3f039f5911dd08bcdd99fc4d955dbd42e6ce19b36a569d5349c818019e20c187f3b30ae776c5cc0b877591adf3339e643e40964d644b9c3f62eb04c2d35e7a111caaf0f40cd96db58460cd21cb7713300d5de6f3260bd26f7f43206b82dd5688c2686d4fe51dcfb9a5f408c97e4213e762bfe034c4c8d7137f6571914c2154c0f54f4472d612e3e67a5a7d9bb86da87a04e4311f9ac4384b8eae49349fffb861b86159ada38920f874d05907a246c56c47fa09f78b16ebef6c91eb806f87414621dfdd707b9b79c4826a9321525bf26bbbfc84c47e0fbc60e59b178926095dc3355075bde92cdcbbabe421cd53c9117e0118cc16726912ef1e905b2d8dd44185f1815181dd4a771267a689c01667634073cce04df23ded7215e9b6968ef49af628047db93beb0d309686c46944b1d8608e322391cbb6cf65a78be7b95f20948d303938feb07f58b5f5c1729cd2a1a1ca168ae8b6ae8fea7ceb1d117eb2903a57f6ec4008f8195776ab1148dd9a6818e7d66cc2c81a6dff7b2a3b788ce4e83e739f109ccf1bf80e9ff3a88023085cd2c12e30356e23f5bdbb1b01e00242d93660b73af4866f52bcd5fc8ab680b867f98b873eed0fdaf3f6c6e073d3e570667d386ec4a9eadbaad1fe251b736e33a16436aaebbb6c439f6376008b5399fa725f2cde53c24b9c5ba2c004718029a59cefeb09d55a0e7c12a175e65d261d377bd6326eb2076d221637adf76e966e8a079b1b385450c92ce8b95da0ad9ebddd748315786ca831d64aa071a4b0c4a0bd581761002c74b5c01ef273668d7bcd98aad42a8e7e3279bd9da44001638abe93ee0940a95efcd1319a0c31ddee3906655ef1e0ceb5e3f994b64cc816e86ba7dc70d320260fa0ab5f956da13fc313e7fe5cef0b9be054388de67887f0bbe96cc0824d7db4365e001bb838708bf76b5381836eee6b1e24424890aa411ce923ac79550a44bd9d2e1b9141c13c181df6385d0fefbbf3f48dd22caaac9bbbe93d5228844de0f84ff96db3b2be506497acc08f87625985ef5e917e2785ddd07e270c06a3ec641110735c10d5a7316e4da61f295dfda84d6283fd979c0a16454064c964fce71e2c78aa93840e06a33fe2ef05f6cc4dbdfa15c4cc65a5ad3bc834cff018cfdf3e12fc30264093ab860cbc39eaaa1a1c4db276e95de19cd99d58885ace97aa29d6425b95a5e2cf8cc3d05c901892d573fac2fbdfd91ca8ac74d767af4f6ec99e65acaf02d636822961b1cd7efa9c7667fb25a3c9dc966dc50327032d5798d6bc7e3ebe721fef5d4b2012d875488c550f7db6ec340e7f746e2e32fd933df5224e847953d5d3d1330d955f2d68d63cb3ac0031fea62734e8b86d4d61fb91a176f6c628b6bda83f2c25d6d73376213a66f8edf1941f1466c152b1f9e4bbb51d6248918abb5e81873ce3a1dfb18069e53d03a49f0596e2aeccaba3bc25cd5f8722e985e63a715df08e63eb8a1825d530e23556e3d562853d550c2cbeb35122a75a02f7a9b682086bc81cadc71ccdca6278fcbe92d447cd82e353aff78de6df879a0525220c8565708311c0fb7ea6914a6edc98884ac8b7bc1a7d833267cb1b202ef1ac4e12c40cc2d5064d2175248cc4f1df17d254e0d921d7f3ce11756d3b52b3d868279a5989fa88e02c91a3d1c6026c004bfd71382fbd939d4c839d9608379695b9dcb3be66a88ca64b1c6b04f99ce7031c3a5c4d69891efb237dcad545470fd4d210d1a905bca289f7306049f9ed918291a77cef4a8eb8b31592c0a036a488e3ac234f943bcc9f32dea964383d388c51b4afaffda612317d008b025df9bff081c142cd2127247009c4c1b25e2b6e77dedc79740c9e079d2a1ed4c76a4d5a7ec32da5dc431638fba670c36b73e1aa0ab488e70848012ff1a6ec2bef28d46d4fdc0dce053157a32914c2fc9eac0f3d84425287a5091c027a9a56005f480b8e318c091032dd4cc5c2bdbc66226dc1e76debecc113de2ab27011cf82f1663d5ca330f113027b206ccc5d008a4b6018556e008adf11f73b25d42638b5eb7268702b4343a792161bff49576ea914b628deab9058b4bc8dda0f55007db3cbbb72c23b4dafcb3d3384ebb37facf0fbc471bbae0bf976d9ae407282a6b1fb5eb8e1d0aa10c050199cdea8dad8c5ee07092d8bb4069a98585d14b03bcd65dc3da22e5f8610ca088482cfd920c7dd2df3d89aac6cf0b3bfe8f55610dddd5725bc43ffa1653e0793371c4cca2d7401524be9a5b4526bb4c2c5f1aad88bad9f557e219143f39b3f43458acf3d1392859eab580e1271f37c1365e8e0244ecdd0e7cafd3431260a298df903faaa6665246f263578edc48870df73b81ba2d2ee7c6fb744151cea6594a2441b49f3ce1dd8eb50bbc8b65862c2c65bd0fd03c07c558d702ae8b25b942397647668be379421b75c7dbcd74dc4cb8e6f4ad2357ccd89d5752fd657d057df6a79c94faf16a322f3d8577f64a1521f03ab16545bdf8191225e37172594173393d063a8c853ae3754cc24ba4ed0f60d328849597245275c63841040c3216ee24e56be06a15687ead1e0363e1662a34b2755ee0cedd44345a703381faa803e018568edb1f89ad40eb76fb5319024f7e5838282ab047e4307c2f3818e2d98ff8f035701be490a6a56048ebb5a1d94a84bef41eb9c00bb131e87fba517ff9433364a348c0d512d128e8345f66cac1003849d9a970b97d4853aecda7490f6b1f22e4c2289f1164943b2e8e399ef1fd1724c9cea454a3a99bb49c814242917936631c7f7b27326178279f33a80676df5ae1cc9a08079e2598e9481ff670cee6456d4fe6bbc0f94f33934ab4237174342bc18f249a47bbfc0e525135915b323949365227ecc8321b8df0bdc82768d86261ef6448b0b897cef8c6422c73595e691149d9f48a449a3c9b3d17019adefeb5479239edb31cd5ca1d43ab58c53f97963126f885adadabf6d8034416c74f4ceb57ab5db33a860349e4ccf6c705086dca1e548ff20612a85dd43310ecc200d42333398e8616bb1f917704693a6bd1be02e5eb0d07211c4bcc898411160955184ef47f21e3f8b9dea2e84384ac74598d2ea1796bbbae661380cd6d886d67f28e26266b4f33ecd617dc3e999310a74dce3bb10b69126b9825ecd1f59f52023379b0b0f7996b0d8d6c2f3e86a43f16eb28d771e3b15cc9b2be0487dfdbab77855d176d43548b7865fe28370a8ecf0585401a9d75e5d0d93974add99d075ce22cb0c855659c0f27ccf439d0e6c7c076b29e81a49b55abbf3cac0101144c0a0830ce2aa5da20de91ad9c570528946a0ef04bf4233e49c672be0e3ffc4c7120d0cb79bcb82161a9eaf35b941ffa39378849988e5e80d853edc71b3e3d5a19c912b9f56d3ae17d14879d36fac39a7b51f0ce42fb01681efa6670d0780014127cae4d37e84798506be7efe99000d3f444a8040d2c2f0cc5a0cf18337bf3d3ca700f8d6bcc9cf9b193d65ebdf7b1399cb0764adc1e2f1690bf4fc166ce71aed27ec6492718b06fff77dc3ba3e71eba7559a3822ccce4259ae23bd2904d5816baf3a5e1ac290fbbcd5acd7320066836ad82f476e06c3a42158d1a89da82535588c85e0772573f67449a258ce31062761e49af83a5f72b61e517366a2e7c51602a6fd6ed81e97361256db34d6234ea5934428ad7170387f5b0dcaf9afccffa4fecb7eb733477b5b262d41e3eaa0c924d72128c1304b2e31a495e721d0ee994cdc260a050ac0a7db2c9991c759613f47f868d12611316b714e5f75921c9d237ea9c0630ef838a8d3b55c2074c3aedbbab7ce7ac45e3690f302e0e0993e6c1a354eacb93e4ef64c78cb00036c2522838faaacf886d577a112cebb7b67ebc823ac2265ec15a7e1f57adacb77a5f62edc2eae94e40845c1d03bd67208428082d6b3fd07ebecbc1213c060983ac0a857880dcc32f5d23004da27b676bc0e103fd73f094058572ad06c77985f2533266092be66620162c3323629889b0325b79b505f1c8208d193466eec4dce294a2896d0305af315affc4f3dd34cdff107151ea14c604abc7d7ee8456ec7139429dc333ca890ee23d2b8dd1fdab833c0d82ec83a999aa644f4cdb5a288f19711b7656efc05c9e39133ee25095d36e88c5b886973830799ebde08bb8e0d7e387a4e578defacc549af68ce3b6b8d701d880058c372a3cdc4da326029b9a60ea18f15537f6bbdc8c63053c734de5afe0adc751f08f8242b3bd798dda826b9e317344ed79701ca624172d04458f77669803385ad762f1d557878b887c93a554295f007db819016f847882bbf7f02e01b6c8abdf86795c5b5cc2bcb8ffad47540f4dba7ee8b52700b11a405190cc2d6838c5c3c9f0d7b7fe653c793d34e393621055fbe632987f8b5b7bb2a9e6188c89b708c524efd183be0945130728d4bf9a9f9b624077ca20b258f912a84418c66c699bb31d20169953416ce9bf82cd394235b8c8f0a34ef9b7e359e7e53406cc0d965fdb49f2b84feacc6516952855c1cb3111d637fd70f06c730465d4e413bea1b49322a1b5731ee784301e3b0499791bab10072a121e84ac5f5860a7e8f5b5e3bf5c26004eccc47e3d2cc3b136f0f0bf48fd235d75e4ff18dfd62e9c9481a741958a951ecfa16aa8bc64f6b08ed2bacd389f5f7338831e7eccf3dd6ef18bd3c36222e2f73f5b6dec2b186d6210cf8cee11ed8afe07bf63f72ae520042310ca230bb5cc66f113874d5f7264ce70e879ca2fb32526b7c3b2913ca5c0c54a38a10a82a47df4139dc8500a0a4773cb121e961d53034aad70be46ed56782354cb401706507c663dfbbab4c7de7bbfaf1b925c5eccce19264bfcff8357891ce2e565b2f2680432b5a940c1e860731c5c12cb98f02af254a6f5bdff2c2764eb88f58a8fba518328220246f5083adc54594af02fdb0730e5e58ffc2dc9c16bac0cf2450c57b8a2e3bdbbb83f009e953c020174df54dac28ce01f2962a7405ba601dcc46f381eb5a9f4ae2578a78db6aa5585698ad93a701dedca6dbf43b2e1ea6747a9cc95b8a4ebaa62cfeabc6029d00a8becbdec63882aedfb37ea5f3054e0a0066f6d8bd94f8b7d8a0217b4a462fa969eaefba650a335e71dc9ab548c86ba4de85f01dd580dfc99a9a90a28c83e3d58ff9cca698312360d14fd4cd88cc63f73f923d55eb93289b3f9cc0b099a0f67c09c1f4f64b0df552b64fc6bdf18300c8bcc83db222296cef0de4a623bfc84be0086578618fe5e46cb25349c4d9b1a5924d89c72a1c54fd2362aa3b7344f2e9db038901a1b2c920ae242c49ffe2ae3206d2fa769bb9e1460fc7ed33d8ab370ee6946348ab520b94632b773ab88e883c942de1f0b2f2014b5353ff9e5c7cde583fbc39805710e46a32ae50a987d1d62aabe04371e2dfbec2580fca1e1ef51edf673e06354ecace2b70a2f1f1f431d1802d5b06fac1a1263c6e7b279650722e19bd1a0c5a86abf36b5707ca2d1edd331078c4dd034863b6f62e741c676005b3d058cf8a587a12ccb468fa828660df6372fb92cc2feed4c8a51817b01286535eee6ff00d735c2e9a73a4927f0f6f039ae32788acf2b052127d078a2a25bde33d6a0f4f586a39e47494e92b37f870"}) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000001e80)=0x9, 0x4) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000001ec0)=""/143) 0s ago: executing program 0 (id=5469): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x20400, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000040)={0x0, 0x6, 0x8001}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x568cb6e300f545fd) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5, 0xa9612, 0x17e5e9, 0x100000000000000}) write$binfmt_misc(r7, &(0x7f0000000140)="9f8c2f4e0f76fc48ae59ba4b2a952b338055cc0111a15ebac38cd51e3664c8409594786ea5da77bbc2d7b0e4d15d60e4ad811b8e5490ef27000000", 0x3b) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d9607fc350000000000009db600e60080b8785d960001000000000000000000000700", "2809e80000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) kernel console output (not intermixed with test programs): sing attributes in process `syz.5.4953'. [ 1989.351877][T27977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4959'. [ 1989.376513][T27978] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1989.438071][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4957'. [ 1989.449773][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4957'. [ 1989.460163][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4957'. [ 1989.469675][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4957'. [ 1989.479090][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4957'. [ 1989.488612][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4957'. [ 1989.817718][T23608] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1989.968030][T23608] usb 2-1: Using ep0 maxpacket: 8 [ 1989.977044][T23608] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1989.993258][T23608] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1990.028486][T23608] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1990.046700][T23608] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1990.136436][T23608] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1990.146926][T13801] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1990.231841][T23608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.266942][ T49] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1990.464681][T23608] usb 2-1: GET_CAPABILITIES returned 0 [ 1990.474724][T23608] usbtmc 2-1:16.0: can't read capabilities [ 1990.672968][T23608] usb 2-1: USB disconnect, device number 115 [ 1990.871099][T23176] usb 3-1: USB disconnect, device number 125 [ 1991.687906][T28037] netlink: 'syz.0.4981': attribute type 21 has an invalid length. [ 1991.967182][T23608] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1992.129106][T23608] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1992.143318][T23608] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1992.159463][T23608] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1992.169336][T23608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.196906][T23608] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1992.254178][T23608] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1992.258425][T23816] udevd[23816]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1992.307714][ T49] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1992.400533][ T5935] usb 6-1: USB disconnect, device number 42 [ 1992.487501][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 1992.513330][ T49] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1992.553941][ T49] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1992.582629][ T49] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1992.603776][ T49] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1992.620804][ T49] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1992.647113][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.663557][T28072] __nla_validate_parse: 38 callbacks suppressed [ 1992.663570][T28072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4995'. [ 1992.794960][T28082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4998'. [ 1992.889391][ T49] usb 2-1: GET_CAPABILITIES returned 0 [ 1992.894965][ T49] usbtmc 2-1:16.0: can't read capabilities [ 1992.937947][T23608] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1993.093581][ T49] usb 2-1: USB disconnect, device number 116 [ 1993.111610][T23608] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1993.138040][T23608] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 1993.149117][ T5934] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1993.167987][T23608] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1993.197611][T23608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.219964][T23608] usb 4-1: config 0 descriptor?? [ 1993.230652][T28072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1993.329818][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 1993.404915][ T5934] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1993.417623][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1993.432900][ T5934] usb 3-1: config 0 has no interface number 0 [ 1993.442745][ T5934] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1993.462115][ T5934] usb 3-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1993.491041][ T5934] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1993.505379][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.519810][ T5934] usb 3-1: Product: syz [ 1993.527070][ T5934] usb 3-1: Manufacturer: syz [ 1993.535659][ T5934] usb 3-1: SerialNumber: syz [ 1993.558632][ T5934] usb 3-1: config 0 descriptor?? [ 1993.566774][ T5934] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1993.580284][ T5934] nokiaca42v2 ttyUSB0: required endpoint is missing [ 1993.797847][ T5934] usb 3-1: USB disconnect, device number 126 [ 1993.817919][ T5934] cypress_m8 3-1:0.35: device disconnected [ 1994.096977][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1994.096994][ T30] audit: type=1326 audit(1764693864.668:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bc58f749 code=0x7ffc0000 [ 1994.126016][ C1] vkms_vblank_simulate: vblank timer overrun [ 1994.195719][ T30] audit: type=1326 audit(1764693864.668:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f84bc58f749 code=0x7ffc0000 [ 1994.263085][ T30] audit: type=1326 audit(1764693864.668:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bc58f749 code=0x7ffc0000 [ 1994.297509][T23608] ath6kl: Failed to submit usb control message: -110 [ 1994.306960][T23608] ath6kl: unable to send the bmi data to the device: -110 [ 1994.317244][T23608] ath6kl: Unable to send get target info: -110 [ 1994.329005][T23608] ath6kl: Failed to init ath6kl core: -110 [ 1994.336447][T23608] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1994.368982][T28107] bond2: up delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 1994.388333][ T30] audit: type=1326 audit(1764693864.668:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84bc58f749 code=0x7ffc0000 [ 1994.410688][ C1] vkms_vblank_simulate: vblank timer overrun [ 1994.426937][T25032] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1994.462966][T28107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1994.504052][ T30] audit: type=1326 audit(1764693865.068:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bc58f749 code=0x7ffc0000 [ 1994.526580][ C1] vkms_vblank_simulate: vblank timer overrun [ 1994.593143][T28112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1994.603247][T25032] usb 2-1: device descriptor read/64, error -71 [ 1994.611166][ T30] audit: type=1326 audit(1764693865.068:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28106 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bc58f749 code=0x7ffc0000 [ 1994.613373][T28114] openvswitch: netlink: Key 26 has unexpected len 0 expected 16 [ 1994.847079][T25032] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1994.977036][T25032] usb 2-1: device descriptor read/64, error -71 [ 1995.047422][ T49] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1995.087144][T25032] usb usb2-port1: attempt power cycle [ 1995.117259][T23608] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1995.206938][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 1995.214136][ T49] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1995.226072][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1995.238359][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1995.249880][ T49] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1995.259410][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1995.271114][ T49] usb 1-1: config 0 descriptor?? [ 1995.278347][T23608] usb 6-1: Using ep0 maxpacket: 32 [ 1995.284819][T28120] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1995.297318][T23608] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1995.306674][ T49] hub 1-1:0.0: USB hub found [ 1995.309615][T23608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1995.325016][T23608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1995.339088][T23608] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1995.348421][T23608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1995.360176][T23608] usb 6-1: config 0 descriptor?? [ 1995.366034][T28122] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1995.375795][T23608] hub 6-1:0.0: USB hub found [ 1995.427337][T25032] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1995.448097][T25032] usb 2-1: device descriptor read/8, error -71 [ 1995.488959][T28126] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1995.506561][T28126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1995.517775][T28126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1995.527352][T28126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1995.536590][T28126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1995.552121][T28126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1995.563882][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1995.574593][ T49] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1995.590706][T23608] hub 6-1:0.0: 2 ports detected [ 1995.591971][ T49] usbhid 1-1:0.0: can't add hid device: -71 [ 1995.602658][T28126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1995.613368][T28126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1995.646768][ T49] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1995.703304][T25032] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1995.740098][ T49] usb 1-1: USB disconnect, device number 26 [ 1995.770168][T25032] usb 2-1: device descriptor read/8, error -71 [ 1995.799004][ T5934] usb 4-1: USB disconnect, device number 19 [ 1995.887470][T25032] usb usb2-port1: unable to enumerate USB device [ 1996.421518][T23608] usb 6-1: USB disconnect, device number 43 [ 1996.597080][ T49] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1996.647461][T25032] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1996.737470][ T49] usb 1-1: device descriptor read/64, error -71 [ 1996.828840][T25032] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1996.840433][T25032] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1996.866968][T25032] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1996.886597][T25032] usb 4-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1996.900194][T25032] usb 4-1: config 16 interface 0 has no altsetting 0 [ 1996.906988][T25032] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 1996.916052][T25032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1997.012020][ T49] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1997.157463][ T49] usb 1-1: device descriptor read/64, error -71 [ 1997.281678][T28136] bridge5: entered promiscuous mode [ 1997.397831][ T49] usb usb1-port1: attempt power cycle [ 1997.421269][T25032] usb 4-1: string descriptor 0 read error: -71 [ 1997.457207][T25032] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1997.617693][T25032] imon 4-1:16.0: unable to initialize intf0, err -19 [ 1997.657347][T25032] imon:imon_probe: failed to initialize context! [ 1997.665206][T25032] imon 4-1:16.0: unable to register, err -19 [ 1997.730316][T25032] usb 4-1: USB disconnect, device number 20 [ 1997.737551][ T49] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1997.757739][ T49] usb 1-1: device descriptor read/8, error -71 [ 1998.106976][ T49] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1998.138547][ T49] usb 1-1: device descriptor read/8, error -71 [ 1998.242195][T28164] __nla_validate_parse: 34 callbacks suppressed [ 1998.242208][T28164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5027'. [ 1998.247705][ T49] usb usb1-port1: unable to enumerate USB device [ 1998.558480][T28172] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1998.658207][ T5934] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1998.886926][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 1998.893797][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1998.907610][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1998.919718][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1998.931222][ T5934] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1998.946777][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.966599][ T5934] usb 3-1: config 0 descriptor?? [ 1998.977816][T28168] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1998.987638][ T5934] hub 3-1:0.0: USB hub found [ 1999.201143][ T5934] hub 3-1:0.0: 2 ports detected [ 1999.415253][ T5934] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1999.434420][ T5934] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1999.450228][ T5934] usbhid 3-1:0.0: can't add hid device: -71 [ 1999.466578][ T5934] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1999.476906][T23608] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1999.517635][ T5934] usb 3-1: USB disconnect, device number 127 [ 1999.666903][T23608] usb 2-1: Using ep0 maxpacket: 32 [ 1999.674719][T23608] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1999.683359][T23608] usb 2-1: can't read configurations, error -61 [ 1999.819444][T23608] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1999.840129][T28194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5038'. [ 2000.193014][T23608] usb 2-1: Using ep0 maxpacket: 32 [ 2000.201426][T23608] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2000.209473][T23608] usb 2-1: can't read configurations, error -61 [ 2000.227476][T23608] usb usb2-port1: attempt power cycle [ 2000.378930][ T48] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2000.596949][T23608] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2000.606910][ T49] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2000.617398][T23608] usb 2-1: Using ep0 maxpacket: 32 [ 2000.624822][T23608] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2000.897177][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 2000.905048][ T49] usb 4-1: config 0 has no interfaces? [ 2000.910838][ T49] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2000.926870][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.928604][T23608] usb 2-1: can't read configurations, error -61 [ 2000.968153][ T49] usb 4-1: config 0 descriptor?? [ 2001.028811][T28200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5041'. [ 2001.097217][T23608] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2001.127366][T23608] usb 2-1: Using ep0 maxpacket: 32 [ 2001.140343][T23608] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2001.154198][T23608] usb 2-1: can't read configurations, error -61 [ 2001.167508][T23608] usb usb2-port1: unable to enumerate USB device [ 2001.230106][ T49] usb 4-1: USB disconnect, device number 21 [ 2001.267890][T28206] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.5042'. [ 2001.277979][ T5935] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2001.430369][T28213] kvm: user requested TSC rate below hardware speed [ 2001.440732][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2001.457228][ T5935] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 2001.472142][ T5935] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2001.481513][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.502602][ T5935] usb 3-1: config 0 descriptor?? [ 2001.525123][T28200] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2001.764960][ T5935] ath6kl: Failed to submit usb control message: -71 [ 2001.782146][ T5935] ath6kl: unable to send the bmi data to the device: -71 [ 2001.791649][ T5935] ath6kl: Unable to send get target info: -71 [ 2001.804224][ T5935] ath6kl: Failed to init ath6kl core: -71 [ 2001.823743][ T5935] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2001.863442][ T5935] usb 3-1: USB disconnect, device number 2 [ 2001.881719][T28226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5049'. [ 2002.373836][ T5935] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2002.546878][ T5935] usb 6-1: Using ep0 maxpacket: 8 [ 2002.556227][ T5935] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2002.568305][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.621780][ T5935] usb 6-1: Product: syz [ 2002.644351][ T5935] usb 6-1: Manufacturer: syz [ 2002.654831][ T5935] usb 6-1: SerialNumber: syz [ 2002.675565][ T5935] usb 6-1: config 0 descriptor?? [ 2002.900090][ T5935] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2003.346905][ T49] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2003.520318][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 2003.529942][ T49] usb 1-1: config 0 has no interfaces? [ 2003.535479][ T49] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2003.546102][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.558862][ T49] usb 1-1: config 0 descriptor?? [ 2003.616914][T24442] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2003.771854][ T49] usb 1-1: USB disconnect, device number 31 [ 2003.781323][T24442] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 2003.797254][T24442] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2003.804975][T24442] usb 3-1: can't read configurations, error -61 [ 2003.826972][T23608] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2003.997146][T23608] usb 4-1: Using ep0 maxpacket: 8 [ 2004.008072][T23608] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2004.020027][T23608] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2004.037485][T24442] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2004.037982][T23608] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2004.055790][T23608] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2004.069406][T23608] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2004.079101][T23608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.197998][T24442] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 2004.211472][T24442] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2004.221251][T15958] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2004.223494][T24442] usb 3-1: can't read configurations, error -61 [ 2004.277362][T24442] usb usb3-port1: attempt power cycle [ 2004.295339][T23608] usb 4-1: GET_CAPABILITIES returned 0 [ 2004.306346][T23608] usbtmc 4-1:16.0: can't read capabilities [ 2004.502973][ T5934] usb 4-1: USB disconnect, device number 22 [ 2004.617456][T24442] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2004.648661][T24442] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 2004.714660][T24442] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2004.720029][ T5935] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2004.746279][T24442] usb 3-1: can't read configurations, error -61 [ 2004.769608][ T5935] usb 6-1: USB disconnect, device number 44 [ 2004.786035][T28279] netlink: 'syz.0.5065': attribute type 32 has an invalid length. [ 2004.807452][T28279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5065'. [ 2004.911846][T28279] bond2: Setting coupled_control to off (0) [ 2004.927488][T24442] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2004.989346][T24442] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 2005.008498][T24442] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2005.016087][T24442] usb 3-1: can't read configurations, error -61 [ 2005.026065][T24442] usb usb3-port1: unable to enumerate USB device [ 2005.137093][ T5935] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2005.156934][ T49] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2005.171763][T28289] syzkaller1: entered promiscuous mode [ 2005.177553][T28289] syzkaller1: entered allmulticast mode [ 2005.227425][T25032] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2005.266956][ T5935] usb 6-1: device descriptor read/64, error -71 [ 2005.297329][ T49] usb 2-1: device descriptor read/64, error -71 [ 2005.376892][T25032] usb 1-1: device descriptor read/64, error -71 [ 2005.526921][ T5935] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2005.597213][ T49] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2005.666913][ T5935] usb 6-1: device descriptor read/64, error -71 [ 2005.706900][T25032] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2005.726884][ T49] usb 2-1: device descriptor read/64, error -71 [ 2005.777355][ T5935] usb usb6-port1: attempt power cycle [ 2005.847621][ T49] usb usb2-port1: attempt power cycle [ 2005.853127][T25032] usb 1-1: device descriptor read/64, error -71 [ 2005.968308][T25032] usb usb1-port1: attempt power cycle [ 2006.117177][ T5935] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2006.158724][ T5935] usb 6-1: device descriptor read/8, error -71 [ 2006.207674][ T49] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2006.248289][ T49] usb 2-1: device descriptor read/8, error -71 [ 2006.331401][T25032] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2006.370000][T25032] usb 1-1: device descriptor read/8, error -71 [ 2006.403708][ T5935] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2006.433785][ T5935] usb 6-1: device descriptor read/8, error -71 [ 2006.517468][ T49] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2006.547896][ T5935] usb usb6-port1: unable to enumerate USB device [ 2006.585385][ T49] usb 2-1: device descriptor read/8, error -71 [ 2006.619954][T25032] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2006.658756][T25032] usb 1-1: device descriptor read/8, error -71 [ 2006.710926][ T49] usb usb2-port1: unable to enumerate USB device [ 2006.800085][T25032] usb usb1-port1: unable to enumerate USB device [ 2008.125705][T28324] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 2008.145409][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5077'. [ 2008.157595][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5077'. [ 2008.169940][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5077'. [ 2008.193089][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5077'. [ 2008.204199][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5077'. [ 2008.213842][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5077'. [ 2008.223342][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5077'. [ 2008.233304][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5077'. [ 2008.242781][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5077'. [ 2008.446955][ T5935] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2008.569139][ T49] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2008.616993][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 2008.625025][ T5935] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2008.638866][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2008.662181][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2008.699230][ T5935] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2008.723449][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.737385][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 2008.746519][ T5935] usb 6-1: config 0 descriptor?? [ 2008.751774][ T49] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2008.758066][T28317] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2008.828926][ T49] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2008.958357][ T5935] hub 6-1:0.0: USB hub found [ 2008.977079][ T49] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2008.997132][ T49] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2009.011903][ T49] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2009.080337][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.210766][ T5935] hub 6-1:0.0: 2 ports detected [ 2009.352615][ T49] usb 1-1: GET_CAPABILITIES returned 0 [ 2009.368467][ T49] usbtmc 1-1:16.0: can't read capabilities [ 2009.545645][ T49] usb 1-1: USB disconnect, device number 36 [ 2010.024946][ T5935] usb 6-1: USB disconnect, device number 49 [ 2010.055040][T28342] qrtr: Invalid version 48 [ 2010.407446][ T49] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2010.416988][T24442] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2010.566927][T24442] usb 4-1: device descriptor read/64, error -71 [ 2010.577036][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 2010.586281][ T49] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2010.599552][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2010.616156][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2010.623914][T28353] tipc: Enabled bearer , priority 0 [ 2010.629815][ T49] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2010.707954][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.728485][T28352] tipc: Disabling bearer [ 2010.738591][ T49] usb 2-1: config 0 descriptor?? [ 2010.744534][T28344] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2010.755559][ T49] hub 2-1:0.0: USB hub found [ 2010.837494][T24442] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2011.014636][T24442] usb 4-1: device descriptor read/64, error -71 [ 2011.026980][ T49] hub 2-1:0.0: 2 ports detected [ 2011.196305][T24442] usb usb4-port1: attempt power cycle [ 2011.229811][ T49] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 2011.244659][ T49] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 2011.256539][ T49] usbhid 2-1:0.0: can't add hid device: -71 [ 2011.264159][ T49] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2011.459626][ T49] usb 2-1: USB disconnect, device number 3 [ 2011.626896][T24442] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2011.778150][T24442] usb 4-1: device descriptor read/8, error -71 [ 2012.066909][T24442] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2012.088278][T24442] usb 4-1: device descriptor read/8, error -71 [ 2012.215879][T24442] usb usb4-port1: unable to enumerate USB device [ 2012.257284][ T5935] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2012.417378][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 2012.425832][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2012.440139][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2012.471085][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2012.503624][ T5935] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2012.526439][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.569680][T24442] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2012.584892][ T5935] usb 2-1: config 0 descriptor?? [ 2012.592103][T28374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2012.609543][ T5935] hub 2-1:0.0: USB hub found [ 2012.726892][T24442] usb 6-1: Using ep0 maxpacket: 32 [ 2012.734197][T24442] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2012.746430][T24442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2012.758596][T24442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2012.767112][T21830] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2012.778111][T24442] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2012.787247][T24442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.805318][T24442] usb 6-1: config 0 descriptor?? [ 2012.808361][ T5935] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 2012.813419][T28378] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2012.834280][T24442] hub 6-1:0.0: USB hub found [ 2012.926912][T21830] usb 1-1: Using ep0 maxpacket: 8 [ 2012.934124][T21830] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2012.945828][T21830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2012.956343][T21830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2012.967105][T21830] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2012.980601][T21830] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2012.989906][T21830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.025395][ T5935] usbhid 2-1:0.0: can't add hid device: -71 [ 2013.039208][ T5935] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2013.039673][T24442] hub 6-1:0.0: 2 ports detected [ 2013.068937][ T5935] usb 2-1: USB disconnect, device number 4 [ 2013.204696][T21830] usb 1-1: GET_CAPABILITIES returned 0 [ 2013.214610][T21830] usbtmc 1-1:16.0: can't read capabilities [ 2013.245715][T28382] ipvlan2: entered promiscuous mode [ 2013.254120][T28382] bridge0: port 3(ipvlan2) entered blocking state [ 2013.261447][T28382] bridge0: port 3(ipvlan2) entered disabled state [ 2013.268415][T28382] ipvlan2: entered allmulticast mode [ 2013.273761][T28382] bridge0: entered allmulticast mode [ 2013.280950][T28382] ipvlan2: left allmulticast mode [ 2013.286035][T28382] bridge0: left allmulticast mode [ 2013.409497][ T49] usb 1-1: USB disconnect, device number 37 [ 2013.636643][T28389] macvtap1: entered allmulticast mode [ 2013.649580][T28389] dummy0: entered allmulticast mode [ 2013.667113][T28389] dummy0: left allmulticast mode [ 2013.676277][T24442] usb 6-1: USB disconnect, device number 50 [ 2015.026478][T28401] syz.2.5103 (28401): drop_caches: 2 [ 2015.670987][ T30] audit: type=1326 audit(1764693886.248:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.1.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bc58f749 code=0x7ffc0000 [ 2015.705889][ T30] audit: type=1326 audit(1764693886.248:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.1.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bc58f749 code=0x7ffc0000 [ 2015.726909][T21830] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2015.791843][ T30] audit: type=1326 audit(1764693886.268:5726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.1.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84bc58df90 code=0x7ffc0000 [ 2015.824524][ T30] audit: type=1326 audit(1764693886.268:5727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.1.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f84bc58e1ff code=0x7ffc0000 [ 2015.860950][ T30] audit: type=1326 audit(1764693886.268:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.1.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f84bc58e1ff code=0x7ffc0000 [ 2015.897523][ T30] audit: type=1326 audit(1764693886.268:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.1.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f84bc58f749 code=0x7ffc0000 [ 2015.926905][ T5935] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2015.934549][T21830] usb 3-1: device descriptor read/64, error -71 [ 2016.086873][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 2016.096606][ T5935] usb 4-1: config 0 has no interfaces? [ 2016.102405][ T5935] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2016.113851][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.134222][ T5935] usb 4-1: config 0 descriptor?? [ 2016.139546][ T5934] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2016.178653][T21830] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2016.306931][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 2016.314849][ T5934] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2016.340806][T21830] usb 3-1: device descriptor read/64, error -71 [ 2016.354067][ T5934] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2016.362264][T24442] usb 4-1: USB disconnect, device number 27 [ 2016.420215][ T5934] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2016.438915][ T5934] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2016.547800][T21830] usb usb3-port1: attempt power cycle [ 2016.554762][ T5934] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2016.564114][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.786552][ T5934] usb 2-1: GET_CAPABILITIES returned 0 [ 2016.792324][ T5934] usbtmc 2-1:16.0: can't read capabilities [ 2016.896947][T21830] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2016.918369][T21830] usb 3-1: device descriptor read/8, error -71 [ 2017.000139][ T5934] usb 2-1: USB disconnect, device number 5 [ 2017.187344][T21830] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2017.218536][T21830] usb 3-1: device descriptor read/8, error -71 [ 2017.357512][T21830] usb usb3-port1: unable to enumerate USB device [ 2017.619743][T28451] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 2017.655009][T28451] __nla_validate_parse: 33 callbacks suppressed [ 2017.655055][T28451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 2017.674322][T28451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 2017.686764][T28451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 2017.706320][T28451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 2017.715766][T28451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 2017.725608][T28451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 2017.735036][T28451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 2017.744654][T28451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 2017.753983][T28451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 2017.857543][T28451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 2018.146914][ T49] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2018.302565][ T49] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2018.317687][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.406952][ T49] usb 6-1: Product: syz [ 2018.411216][ T49] usb 6-1: Manufacturer: syz [ 2018.416561][ T49] usb 6-1: SerialNumber: syz [ 2018.427843][ T49] usb 6-1: config 0 descriptor?? [ 2018.597041][ T5934] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2018.786898][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 2018.820654][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2018.840921][ T49] usb 6-1: Firmware: major: 15, minor: 97, hardware type: UNKNOWN (127) [ 2018.842644][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2018.897081][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2018.933865][ T5934] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2018.963906][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.985461][ T5934] usb 2-1: config 0 descriptor?? [ 2018.991733][T28469] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2019.002961][ T5934] hub 2-1:0.0: USB hub found [ 2019.051258][ T49] usb 6-1: Firmware: build ;(m [ 2019.156871][T24442] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2019.204608][ T5934] hub 2-1:0.0: 2 ports detected [ 2019.307419][T24442] usb 3-1: Using ep0 maxpacket: 8 [ 2019.314998][T24442] usb 3-1: config 0 has no interfaces? [ 2019.321041][ T49] usb 6-1: failed to fetch extended address, random address set [ 2019.331879][T24442] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2019.347384][ T49] usb 6-1: atusb_probe: initialization failed, error = -524 [ 2019.365184][T24442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.377551][ T49] atusb 6-1:0.0: probe with driver atusb failed with error -524 [ 2019.391317][T24442] usb 3-1: config 0 descriptor?? [ 2019.455984][ T49] usb 6-1: USB disconnect, device number 51 [ 2019.464347][ T5934] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 2019.492012][ T5934] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 2019.546062][ T5934] usbhid 2-1:0.0: can't add hid device: -71 [ 2019.635584][ T5934] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2019.794038][ T5934] usb 2-1: USB disconnect, device number 6 [ 2019.917940][ T5935] usb 3-1: USB disconnect, device number 11 [ 2020.177159][ T49] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2020.346902][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 2020.353550][ T49] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2020.361249][T28504] veth0: entered promiscuous mode [ 2020.365446][ T49] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2020.403758][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.405449][T28504] veth0 (unregistering): left promiscuous mode [ 2020.462659][ T49] usb 6-1: config 0 descriptor?? [ 2020.539667][ T49] hub 6-1:0.0: bad descriptor, ignoring hub [ 2020.567002][ T49] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2020.575150][ T49] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2020.666442][T28510] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 2021.477096][ T5934] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2021.628391][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2021.641693][ T5934] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 2021.652651][ T5934] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2021.662157][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2021.680183][ T5934] usb 1-1: config 0 descriptor?? [ 2021.686649][T28507] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2021.908359][ T5934] ath6kl: Failed to submit usb control message: -71 [ 2021.915057][ T5934] ath6kl: unable to send the bmi data to the device: -71 [ 2021.923734][ T5934] ath6kl: Unable to send get target info: -71 [ 2021.957802][ T5934] ath6kl: Failed to init ath6kl core: -71 [ 2021.964973][ T5934] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2022.020822][ T5934] usb 1-1: USB disconnect, device number 38 [ 2022.057650][ T5935] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2022.153489][ T6304] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2022.216945][ T5935] usb 2-1: Using ep0 maxpacket: 8 [ 2022.231002][ T5935] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2022.255946][ T5935] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2022.267651][ T5935] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2022.285688][ T5935] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2022.296394][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.310803][ T5935] usb 2-1: Product: syz [ 2022.316290][ T5935] usb 2-1: Manufacturer: syz [ 2022.321051][ T5935] usb 2-1: SerialNumber: syz [ 2022.516914][ T5934] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2022.677225][T21830] usb 6-1: USB disconnect, device number 52 [ 2022.688248][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 2022.702888][ T5934] usb 4-1: config 0 has no interfaces? [ 2022.712108][ T5934] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2022.741322][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.788485][ T5934] usb 4-1: config 0 descriptor?? [ 2022.910182][ T30] audit: type=1326 audit(1764693893.488:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.0.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2022.967461][ T30] audit: type=1326 audit(1764693893.508:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.0.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2022.989843][ C1] vkms_vblank_simulate: vblank timer overrun [ 2023.037405][T24442] usb 4-1: USB disconnect, device number 28 [ 2023.059429][ T30] audit: type=1326 audit(1764693893.508:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.0.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2023.125823][ T30] audit: type=1326 audit(1764693893.508:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.0.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2023.149319][ T49] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2023.189586][ T30] audit: type=1326 audit(1764693893.508:5734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.0.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2023.253928][ T30] audit: type=1326 audit(1764693893.508:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.0.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2023.276474][ C1] vkms_vblank_simulate: vblank timer overrun [ 2023.310715][ T49] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2023.325657][ T49] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2023.346151][ T49] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2023.358499][ T30] audit: type=1326 audit(1764693893.508:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.0.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2023.382934][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.480935][T28543] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2023.489415][ T30] audit: type=1326 audit(1764693893.508:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.0.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2023.623474][ T49] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2023.764028][ T30] audit: type=1326 audit(1764693893.508:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.0.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2023.883214][T24442] usb 6-1: USB disconnect, device number 53 [ 2023.911877][ T30] audit: type=1326 audit(1764693893.508:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.0.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2023.939112][T28561] __nla_validate_parse: 77 callbacks suppressed [ 2023.939127][T28561] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.5155'. [ 2024.156209][T28568] syzkaller0: entered promiscuous mode [ 2024.180805][T28568] syzkaller0: entered allmulticast mode [ 2024.271853][T28564] tipc: Enabled bearer , priority 0 [ 2024.407153][ T5934] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2024.450806][T28562] tipc: Resetting bearer [ 2024.491742][T28562] tipc: Disabling bearer [ 2024.553275][ T5934] usb 4-1: device descriptor read/64, error -71 [ 2024.561707][ T5935] usb 2-1: 0:2 : does not exist [ 2024.627787][ T5935] usb 2-1: USB disconnect, device number 7 [ 2024.632406][T28575] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5160'. [ 2024.709728][T23816] udevd[23816]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2024.744392][T28579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5161'. [ 2024.827321][ T5934] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2024.996909][ T5934] usb 4-1: device descriptor read/64, error -71 [ 2025.128875][ T5934] usb usb4-port1: attempt power cycle [ 2025.252864][T28591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5165'. [ 2025.497109][ T5934] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2025.551966][ T5934] usb 4-1: device descriptor read/8, error -71 [ 2025.776960][T21830] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2025.829395][ T5934] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2025.895135][ T49] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2025.924786][ T5934] usb 4-1: device descriptor read/8, error -71 [ 2025.986346][T21830] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2025.995616][T21830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.013362][T21830] usb 1-1: config 0 descriptor?? [ 2026.022647][T21830] cp210x 1-1:0.0: cp210x converter detected [ 2026.037403][ T5934] usb usb4-port1: unable to enumerate USB device [ 2026.206947][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 2026.214164][ T49] usb 2-1: config 0 has no interfaces? [ 2026.222991][ T49] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2026.232659][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.245514][ T49] usb 2-1: config 0 descriptor?? [ 2026.412423][T28608] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5171'. [ 2026.432038][T28608] netlink: 364 bytes leftover after parsing attributes in process `syz.5.5171'. [ 2026.452708][T28611] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5172'. [ 2026.465097][T21830] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2026.487536][T21830] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2026.507319][ T49] usb 2-1: USB disconnect, device number 8 [ 2026.543521][T28608] bond1: option min_links: invalid value (18446744073709551608) [ 2026.566144][T28608] bond1: option min_links: allowed values 0 - 2147483647 [ 2026.579759][T28608] bond1 (unregistering): Released all slaves [ 2026.635917][T28615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5174'. [ 2027.257081][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2027.458277][T28629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5178'. [ 2027.808796][T24442] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2027.970748][T24442] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2027.980972][T24442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.165484][T24442] usb 6-1: config 0 descriptor?? [ 2028.203367][T24442] cp210x 6-1:0.0: cp210x converter detected [ 2028.409631][ T5934] usb 1-1: USB disconnect, device number 39 [ 2028.442250][ T5934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2028.731932][ T5934] cp210x 1-1:0.0: device disconnected [ 2028.929270][T24442] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2028.967931][T24442] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2029.068701][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2029.068717][ T30] audit: type=1326 audit(1764693899.648:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2029.187554][ T30] audit: type=1326 audit(1764693899.688:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2029.217223][ T30] audit: type=1326 audit(1764693899.688:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2029.267223][ T30] audit: type=1326 audit(1764693899.848:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2029.305616][ T30] audit: type=1326 audit(1764693899.848:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c438f749 code=0x7ffc0000 [ 2030.719438][T28673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5190'. [ 2030.893845][T28677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5192'. [ 2030.953606][T28677] openvswitch: netlink: Flow key attr not present in new flow. [ 2031.657077][ T5935] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2031.807074][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 2031.813849][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2031.829873][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2031.841493][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2031.856405][ T5935] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2031.866225][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.885612][ T5935] usb 4-1: config 0 descriptor?? [ 2031.891684][T28691] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2031.894365][T24442] usb 6-1: USB disconnect, device number 54 [ 2031.911817][T24442] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2031.915316][ T5935] hub 4-1:0.0: USB hub found [ 2031.939227][T24442] cp210x 6-1:0.0: device disconnected [ 2032.103505][ T5935] hub 4-1:0.0: 2 ports detected [ 2032.109286][T28697] syzkaller0: entered promiscuous mode [ 2032.114807][T28697] syzkaller0: entered allmulticast mode [ 2032.402588][ T1153] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2032.918757][T28717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5202'. [ 2033.607239][ T5935] usb 4-1: USB disconnect, device number 33 [ 2033.815084][T28721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5204'. [ 2034.111819][T24442] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2034.279704][T24442] usb 1-1: Using ep0 maxpacket: 16 [ 2034.289388][T24442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2034.321349][T24442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2034.389209][T24442] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 2034.408155][T24442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.437580][T24442] usb 1-1: config 0 descriptor?? [ 2034.456691][T28737] netlink: 212892 bytes leftover after parsing attributes in process `syz.2.5208'. [ 2034.584681][T28744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5211'. [ 2034.629007][ T5935] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2034.641906][T28746] dvmrp1: entered allmulticast mode [ 2034.685022][T28746] program syz.1.5213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2034.808931][ T5935] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2034.827130][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.854024][ T5935] usb 6-1: config 0 descriptor?? [ 2034.873116][ T5935] cp210x 6-1:0.0: cp210x converter detected [ 2034.893818][T24442] lua 0003:1E7D:2C2E.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 2035.074998][ T5935] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2035.082749][ T5935] cp210x 6-1:0.0: querying part number failed [ 2035.092319][T28723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2035.106587][T28723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2035.117612][ T5935] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2035.128169][T28723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2035.140710][T28723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2035.152423][ T5935] usb 1-1: USB disconnect, device number 40 [ 2035.740975][T28759] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5215'. [ 2035.807020][ T5935] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2036.070561][ T5935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2036.090114][ T5935] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2036.099974][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.109017][ T5935] usb 3-1: Product: syz [ 2036.113591][ T5935] usb 3-1: Manufacturer: syz [ 2036.118450][ T5935] usb 3-1: SerialNumber: syz [ 2036.166884][T23608] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2036.224087][ T3532] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2036.338170][T23608] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2036.361869][T23608] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 2036.391550][T23608] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2036.409628][T24442] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2036.450716][T23608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.477087][T23608] usb 4-1: config 0 descriptor?? [ 2036.494332][T28759] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2036.618827][T24442] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2036.629142][T24442] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 2036.661191][T24442] usb 2-1: config 220 has no interface number 2 [ 2036.683365][T24442] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2036.720114][T24442] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2036.733368][T24442] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2036.761133][T24442] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2036.780159][T24442] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2036.796636][T24442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.812549][T24442] usb 2-1: Product: syz [ 2036.825632][T24442] usb 2-1: Manufacturer: syz [ 2036.834917][T24442] usb 2-1: SerialNumber: syz [ 2036.847712][T25032] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2037.009044][T25032] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2037.022969][T25032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.044284][T25032] usb 1-1: config 0 descriptor?? [ 2037.061433][T25032] cp210x 1-1:0.0: cp210x converter detected [ 2037.121882][T28780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5221'. [ 2037.131089][T28780] netlink: 'syz.1.5221': attribute type 14 has an invalid length. [ 2037.154035][ T5935] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2037.160582][ T5935] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 2037.168824][ T5935] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2037.195720][T28781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.238356][T28781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.254518][T28780] vxlan0: entered promiscuous mode [ 2037.291277][ T1153] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2037.329725][T28781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.342140][ T1153] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2037.347790][T28781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.359030][ T1153] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2037.369583][T28780] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 2037.379919][ T1153] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2037.399461][T28780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5221'. [ 2037.488952][T25032] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2037.505603][T25032] usb 1-1: cp210x converter now attached to ttyUSB1 [ 2037.505800][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.518925][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.578264][T23608] ath6kl: Failed to submit usb control message: -110 [ 2037.585279][T23608] ath6kl: unable to send the bmi data to the device: -110 [ 2037.595320][T23608] ath6kl: Unable to send get target info: -110 [ 2037.602194][ T5935] cdc_ncm 3-1:1.0: setting tx_max = 72 [ 2037.626850][T23608] ath6kl: Failed to init ath6kl core: -110 [ 2037.648855][T23608] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2037.682092][ T5935] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2037.722528][ T5935] usb 3-1: USB disconnect, device number 12 [ 2037.759068][ T5935] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 2037.798504][ T30] audit: type=1400 audit(1764693908.378:5750): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 4-1: USB disconnect, device number 34 [ 2038.744263][T28790] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.5223'. [ 2038.958380][ T49] usb 6-1: USB disconnect, device number 55 [ 2038.988171][ T49] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2039.018830][ T49] cp210x 6-1:0.0: device disconnected [ 2039.138830][T24442] usb 2-1: selecting invalid altsetting 0 [ 2039.174332][T24442] usb 2-1: selecting invalid altsetting 0 [ 2039.202900][T24442] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2039.230016][T24442] uvcvideo 2-1:220.0: No valid video chain found. [ 2039.261860][T24442] usb 2-1: selecting invalid altsetting 0 [ 2039.278952][T28810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2039.328847][T24442] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2039.342471][T24442] usb 2-1: USB disconnect, device number 9 [ 2039.411400][T25032] usb 1-1: USB disconnect, device number 41 [ 2039.463207][T25032] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 2039.496654][T25032] cp210x 1-1:0.0: device disconnected [ 2039.506370][T28815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5230'. [ 2039.597376][ T49] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2039.756981][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 2039.769982][ T49] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2039.779439][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.788586][ T49] usb 3-1: Product: syz [ 2039.792928][ T49] usb 3-1: Manufacturer: syz [ 2039.799090][ T49] usb 3-1: SerialNumber: syz [ 2039.814092][ T49] usb 3-1: config 0 descriptor?? [ 2039.827631][ T49] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2039.997237][T25032] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2040.073588][T28826] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.5234'. [ 2040.157347][T25032] usb 1-1: Using ep0 maxpacket: 32 [ 2040.165453][T25032] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2040.180353][T25032] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2040.217742][T25032] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2040.247642][T25032] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2040.268068][T25032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.298022][T25032] usb 1-1: config 0 descriptor?? [ 2040.312470][T28820] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2040.323828][T25032] hub 1-1:0.0: USB hub found [ 2040.520775][T28825] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5233'. [ 2040.581524][T25032] hub 1-1:0.0: 2 ports detected [ 2040.716910][T24442] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2040.770593][T25032] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 2040.785166][T25032] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 2040.800437][T25032] usbhid 1-1:0.0: can't add hid device: -71 [ 2040.808415][T25032] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2040.817032][ T5935] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2040.837879][T25032] usb 1-1: USB disconnect, device number 42 [ 2040.889742][T24442] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2040.905824][T24442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.907007][ T5934] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2040.915514][T24442] usb 4-1: Product: syz [ 2040.943842][T24442] usb 4-1: Manufacturer: syz [ 2040.953624][T24442] usb 4-1: SerialNumber: syz [ 2040.975551][T24442] usb 4-1: config 0 descriptor?? [ 2040.989716][ T5935] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2041.002635][ T5935] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 2041.013341][ T5935] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2041.023004][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.048213][ T5935] usb 6-1: config 0 descriptor?? [ 2041.057544][T28825] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2041.087229][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 2041.095582][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2041.140124][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2041.154492][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2041.167328][ T5934] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2041.184940][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.205299][ T5934] usb 2-1: config 0 descriptor?? [ 2041.211367][T28836] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 2041.213557][T24442] usb 4-1: USB disconnect, device number 35 [ 2041.252263][ T5934] hub 2-1:0.0: USB hub found [ 2041.274987][ T5935] ath6kl: Failed to submit usb control message: -71 [ 2041.312122][ T5935] ath6kl: unable to send the bmi data to the device: -71 [ 2041.333057][ T5935] ath6kl: Unable to send get target info: -71 [ 2041.355762][ T5935] ath6kl: Failed to init ath6kl core: -71 [ 2041.384153][ T5935] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2041.407297][ T49] gspca_sonixj: reg_w1 err -110 [ 2041.412095][ T5935] usb 6-1: USB disconnect, device number 56 [ 2041.441201][ T5934] hub 2-1:0.0: 2 ports detected [ 2041.488333][ T49] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 2041.776982][T24442] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 2041.890904][T28842] FAULT_INJECTION: forcing a failure. [ 2041.890904][T28842] name failslab, interval 1, probability 0, space 0, times 0 [ 2041.922228][T28842] CPU: 0 UID: 0 PID: 28842 Comm: syz.3.5240 Not tainted syzkaller #0 PREEMPT(full) [ 2041.922256][T28842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2041.922268][T28842] Call Trace: [ 2041.922280][T28842] [ 2041.922290][T28842] dump_stack_lvl+0x189/0x250 [ 2041.922315][T28842] ? __pfx____ratelimit+0x10/0x10 [ 2041.922339][T28842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2041.922350][T28842] ? __pfx__printk+0x10/0x10 [ 2041.922366][T28842] ? __pfx___might_resched+0x10/0x10 [ 2041.922380][T28842] should_fail_ex+0x414/0x560 [ 2041.922396][T28842] should_failslab+0xa8/0x100 [ 2041.922418][T28842] __kmalloc_noprof+0xcb/0x7e0 [ 2041.922449][T28842] ? kfree+0x4d/0x6b0 [ 2041.922468][T28842] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2041.922494][T28842] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2041.922507][T28842] ? tomoyo_domain+0xd9/0x130 [ 2041.922522][T28842] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2041.922532][T28842] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2041.922544][T28842] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2041.922576][T28842] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2041.922617][T28842] ? __fget_files+0x2a/0x420 [ 2041.922640][T28842] ? __fget_files+0x3a0/0x420 [ 2041.922651][T28842] ? __fget_files+0x2a/0x420 [ 2041.922663][T28842] security_file_ioctl+0xcb/0x2d0 [ 2041.922680][T28842] __se_sys_ioctl+0x47/0x170 [ 2041.922698][T28842] do_syscall_64+0xfa/0xf80 [ 2041.922714][T28842] ? lockdep_hardirqs_on+0x98/0x140 [ 2041.922740][T28842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.922759][T28842] ? clear_bhb_loop+0x60/0xb0 [ 2041.922781][T28842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.922795][T28842] RIP: 0033:0x7fc60558f749 [ 2041.922805][T28842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2041.922814][T28842] RSP: 002b:00007fc6064fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2041.922826][T28842] RAX: ffffffffffffffda RBX: 00007fc6057e5fa0 RCX: 00007fc60558f749 [ 2041.922834][T28842] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000006 [ 2041.922841][T28842] RBP: 00007fc6064fa090 R08: 0000000000000000 R09: 0000000000000000 [ 2041.922847][T28842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2041.922858][T28842] R13: 00007fc6057e6038 R14: 00007fc6057e5fa0 R15: 00007fc60590fa28 [ 2041.922889][T28842] [ 2041.922918][T28842] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2042.249021][ T5935] usb 3-1: USB disconnect, device number 13 [ 2042.628292][ T5934] usb 2-1: USB disconnect, device number 10 [ 2042.721771][T28855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5244'. [ 2043.147153][ T5934] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 2043.257075][ T49] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2043.707090][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 2043.716538][ T49] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2043.767953][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2043.803950][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2043.854193][ T49] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2043.899721][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.947584][ T49] usb 2-1: config 0 descriptor?? [ 2043.982561][T28865] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2044.023940][ T49] hub 2-1:0.0: USB hub found [ 2044.214462][ T49] hub 2-1:0.0: 2 ports detected [ 2044.419295][ T49] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 2044.433158][ T49] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 2044.479563][ T49] usbhid 2-1:0.0: can't add hid device: -71 [ 2044.485742][ T49] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2044.523969][ T49] usb 2-1: USB disconnect, device number 11 [ 2045.817254][T24442] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2045.977177][ T49] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2045.990062][T24442] usb 2-1: Using ep0 maxpacket: 8 [ 2046.004276][T24442] usb 2-1: config 0 has no interfaces? [ 2046.019628][T24442] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2046.032191][T24442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.050223][T24442] usb 2-1: config 0 descriptor?? [ 2046.127801][ T49] usb 3-1: device descriptor read/64, error -71 [ 2046.367276][ T49] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2046.387466][T24442] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2046.506871][ T49] usb 3-1: device descriptor read/64, error -71 [ 2046.548079][T24442] usb 1-1: Using ep0 maxpacket: 8 [ 2046.561507][T24442] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2046.573041][T24442] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2046.585322][T24442] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2046.596820][T24442] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2046.678535][ T49] usb usb3-port1: attempt power cycle [ 2046.708627][T24442] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2046.718325][T24442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.943542][T24442] usb 1-1: GET_CAPABILITIES returned 0 [ 2046.950440][T24442] usbtmc 1-1:16.0: can't read capabilities [ 2047.037394][ T49] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2047.047812][ T5934] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2047.057641][ T49] usb 3-1: device descriptor read/8, error -71 [ 2047.170698][T24442] usb 1-1: USB disconnect, device number 44 [ 2047.206932][ T5934] usb 6-1: Using ep0 maxpacket: 8 [ 2047.230245][ T5934] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2047.256935][ T5934] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2047.278293][ T5934] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2047.302654][ T5934] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2047.324500][ T5934] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2047.334750][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.352048][ T49] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2047.389040][ T49] usb 3-1: device descriptor read/8, error -71 [ 2047.498730][ T49] usb usb3-port1: unable to enumerate USB device [ 2047.563858][ T5934] usb 6-1: GET_CAPABILITIES returned 0 [ 2047.571984][ T5934] usbtmc 6-1:16.0: can't read capabilities [ 2047.792195][ T5934] usb 6-1: USB disconnect, device number 57 [ 2048.186918][ T5935] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 2048.337135][ T5935] usb 1-1: Invalid ep0 maxpacket: 64 [ 2048.479196][ T5935] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 2048.636938][ T5935] usb 1-1: Invalid ep0 maxpacket: 64 [ 2048.785308][ T5935] usb usb1-port1: attempt power cycle [ 2048.944756][T24442] usb 2-1: USB disconnect, device number 12 [ 2049.039988][T28962] openvswitch: netlink: Key 26 has unexpected len 0 expected 16 [ 2049.075279][T28965] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5282'. [ 2049.140596][T28965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5282'. [ 2049.174067][ T5935] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 2049.197538][ T5935] usb 1-1: Invalid ep0 maxpacket: 64 [ 2049.426477][ T5935] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 2049.467575][ T5935] usb 1-1: Invalid ep0 maxpacket: 64 [ 2049.473791][ T5935] usb usb1-port1: unable to enumerate USB device [ 2049.567449][T24442] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2049.671913][T28984] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5287'. [ 2049.728356][T24442] usb 2-1: Using ep0 maxpacket: 32 [ 2049.742281][T24442] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2049.791147][T24442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2049.819983][T24442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2049.840955][T24442] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2049.851632][T24442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.864852][T24442] usb 2-1: config 0 descriptor?? [ 2049.872397][T28967] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2049.884467][T24442] hub 2-1:0.0: USB hub found [ 2050.115317][T24442] hub 2-1:0.0: 2 ports detected [ 2050.197002][ T49] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2050.347855][ T49] usb 6-1: Using ep0 maxpacket: 8 [ 2050.375502][ T49] usb 6-1: config 0 has no interfaces? [ 2050.382323][ T49] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2050.399408][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.420894][ T49] usb 6-1: config 0 descriptor?? [ 2050.959450][T24442] usb 2-1: USB disconnect, device number 13 [ 2052.036915][ T5935] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 2052.221351][ T5935] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2052.232084][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.248982][ T5935] usb 2-1: Product: syz [ 2052.257056][ T5935] usb 2-1: Manufacturer: syz [ 2052.265471][ T5935] usb 2-1: SerialNumber: syz [ 2052.279023][ T5935] usb 2-1: config 0 descriptor?? [ 2052.507617][ T5935] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2052.879036][T29076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5321'. [ 2052.974324][ T5934] usb 6-1: USB disconnect, device number 58 [ 2053.229907][T29085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2053.287178][T21830] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2053.376942][ T5934] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 2053.447491][T21830] usb 1-1: Using ep0 maxpacket: 16 [ 2053.455038][T21830] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2053.464695][T21830] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2053.477551][T21830] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 2053.487836][T21830] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 2053.499778][T21830] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2053.509350][T21830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.518227][T21830] usb 1-1: Product: syz [ 2053.522524][T21830] usb 1-1: Manufacturer: syz [ 2053.527186][T21830] usb 1-1: SerialNumber: syz [ 2053.539489][ T5934] usb 6-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 2053.550211][ T5934] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2053.559473][ T5934] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice=22.00 [ 2053.569421][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.580612][ T5934] usb 6-1: config 0 descriptor?? [ 2053.947405][T23608] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2054.129401][T23608] usb 4-1: Using ep0 maxpacket: 8 [ 2054.138119][T15958] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2054.151369][T23608] usb 4-1: config 0 has no interfaces? [ 2054.158519][ T5934] usb 6-1: string descriptor 0 read error: -71 [ 2054.167811][T23608] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2054.179764][ T5934] usb 6-1: USB disconnect, device number 59 [ 2054.187326][T23608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.205196][T23608] usb 4-1: config 0 descriptor?? [ 2054.249754][T21830] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 2054.269742][T21830] cdc_ncm 1-1:1.0: bind() failure [ 2054.288326][T21830] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2054.295241][T21830] cdc_ncm 1-1:1.1: bind() failure [ 2054.318064][T21830] usb 1-1: USB disconnect, device number 49 [ 2054.351847][T29050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2054.368225][T29050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2054.429312][ T5934] usb 4-1: USB disconnect, device number 36 [ 2054.588751][ T5935] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2054.615266][ T5935] usb 2-1: USB disconnect, device number 14 [ 2054.819161][T29106] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2054.859711][T29106] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2055.337820][T24442] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2055.369884][T29115] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.5336'. [ 2055.527498][T24442] usb 4-1: Using ep0 maxpacket: 8 [ 2055.547393][T24442] usb 4-1: config 0 has no interfaces? [ 2055.552891][T24442] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2055.566949][T24442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.596150][T24442] usb 4-1: config 0 descriptor?? [ 2055.840936][T24442] usb 4-1: USB disconnect, device number 37 [ 2056.176963][ T5935] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2056.184611][ T49] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2056.336861][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 2056.342297][ T49] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2056.344200][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2056.367271][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.367842][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2056.387225][T24442] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2056.387292][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2056.406626][ T5935] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2056.416388][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.434100][ T49] usb 6-1: config 0 descriptor?? [ 2056.448966][ T49] cp210x 6-1:0.0: cp210x converter detected [ 2056.456221][ T5935] usb 3-1: config 0 descriptor?? [ 2056.467899][T29130] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2056.479963][ T5935] hub 3-1:0.0: USB hub found [ 2056.576884][T24442] usb 1-1: Using ep0 maxpacket: 8 [ 2056.584482][T24442] usb 1-1: config 0 has no interfaces? [ 2056.591041][T24442] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2056.600186][T24442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.612728][T24442] usb 1-1: config 0 descriptor?? [ 2056.691337][ T5935] hub 3-1:0.0: 2 ports detected [ 2056.829558][T21830] usb 1-1: USB disconnect, device number 50 [ 2056.884952][ T49] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2056.902560][ T5935] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 2056.916115][ T5935] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 2056.926345][ T49] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2056.958562][ T5935] usbhid 3-1:0.0: can't add hid device: -71 [ 2056.971696][ T5935] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2057.010292][ T5935] usb 3-1: USB disconnect, device number 19 [ 2058.412948][T29169] FAULT_INJECTION: forcing a failure. [ 2058.412948][T29169] name failslab, interval 1, probability 0, space 0, times 0 [ 2058.446009][T29169] CPU: 0 UID: 0 PID: 29169 Comm: syz.0.5350 Not tainted syzkaller #0 PREEMPT(full) [ 2058.446026][T29169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2058.446034][T29169] Call Trace: [ 2058.446038][T29169] [ 2058.446044][T29169] dump_stack_lvl+0x189/0x250 [ 2058.446060][T29169] ? __pfx____ratelimit+0x10/0x10 [ 2058.446076][T29169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2058.446086][T29169] ? __pfx__printk+0x10/0x10 [ 2058.446102][T29169] ? __pfx___might_resched+0x10/0x10 [ 2058.446115][T29169] should_fail_ex+0x414/0x560 [ 2058.446131][T29169] should_failslab+0xa8/0x100 [ 2058.446145][T29169] __kmalloc_noprof+0xcb/0x7e0 [ 2058.446159][T29169] ? kfree+0x4d/0x6b0 [ 2058.446170][T29169] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2058.446189][T29169] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2058.446202][T29169] ? tomoyo_domain+0xd9/0x130 [ 2058.446217][T29169] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2058.446228][T29169] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2058.446240][T29169] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2058.446259][T29169] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2058.446279][T29169] ? __fget_files+0x2a/0x420 [ 2058.446292][T29169] ? __fget_files+0x3a0/0x420 [ 2058.446302][T29169] ? __fget_files+0x2a/0x420 [ 2058.446315][T29169] security_file_ioctl+0xcb/0x2d0 [ 2058.446331][T29169] __se_sys_ioctl+0x47/0x170 [ 2058.446347][T29169] do_syscall_64+0xfa/0xf80 [ 2058.446356][T29169] ? lockdep_hardirqs_on+0x98/0x140 [ 2058.446370][T29169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2058.446380][T29169] ? clear_bhb_loop+0x60/0xb0 [ 2058.446393][T29169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2058.446402][T29169] RIP: 0033:0x7f55c438f749 [ 2058.446412][T29169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2058.446421][T29169] RSP: 002b:00007f55c52dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2058.446433][T29169] RAX: ffffffffffffffda RBX: 00007f55c45e5fa0 RCX: 00007f55c438f749 [ 2058.446440][T29169] RDX: 00002000000001c0 RSI: 0000000000008918 RDI: 0000000000000003 [ 2058.446447][T29169] RBP: 00007f55c52dc090 R08: 0000000000000000 R09: 0000000000000000 [ 2058.446453][T29169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2058.446459][T29169] R13: 00007f55c45e6038 R14: 00007f55c45e5fa0 R15: 00007f55c470fa28 [ 2058.446476][T29169] [ 2058.446481][T29169] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2058.903480][T21830] usb 6-1: USB disconnect, device number 60 [ 2058.928332][T21830] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2058.971736][T21830] cp210x 6-1:0.0: device disconnected [ 2058.986911][ T5935] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2059.147149][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 2059.166098][ T5935] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2059.178727][ T5935] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2059.195408][ T5935] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2059.207802][ T5935] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2059.223448][ T5935] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2059.232980][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.266882][T24442] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2059.418691][T24442] usb 4-1: Using ep0 maxpacket: 8 [ 2059.427430][T25032] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2059.437174][T24442] usb 4-1: config 0 has no interfaces? [ 2059.442785][T24442] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2059.452155][T24442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.458667][ T5935] usb 3-1: GET_CAPABILITIES returned 0 [ 2059.476415][ T5935] usbtmc 3-1:16.0: can't read capabilities [ 2059.483699][T24442] usb 4-1: config 0 descriptor?? [ 2059.586943][T25032] usb 6-1: Using ep0 maxpacket: 8 [ 2059.593826][T25032] usb 6-1: config 0 has no interfaces? [ 2059.603619][T25032] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2059.623144][T25032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.644143][T25032] usb 6-1: config 0 descriptor?? [ 2059.678774][ T5935] usb 3-1: USB disconnect, device number 20 [ 2059.703900][T25032] usb 4-1: USB disconnect, device number 38 [ 2059.858656][T24442] usb 6-1: USB disconnect, device number 61 [ 2060.189727][T29227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5374'. [ 2060.530417][ T5935] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2060.707771][T24442] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2060.716874][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 2060.796378][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2060.809356][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2060.830919][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2060.894297][T24442] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2060.903688][T24442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.949387][T24442] usb 6-1: config 0 descriptor?? [ 2060.986870][ T5935] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2061.115957][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.384948][ T5935] usb 2-1: config 0 descriptor?? [ 2061.397630][T29230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2061.406644][T29255] FAULT_INJECTION: forcing a failure. [ 2061.406644][T29255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2061.408229][ T5935] hub 2-1:0.0: USB hub found [ 2061.452155][T29255] CPU: 1 UID: 0 PID: 29255 Comm: syz.0.5385 Not tainted syzkaller #0 PREEMPT(full) [ 2061.452181][T29255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2061.452193][T29255] Call Trace: [ 2061.452202][T29255] [ 2061.452210][T29255] dump_stack_lvl+0x189/0x250 [ 2061.452236][T29255] ? __pfx____ratelimit+0x10/0x10 [ 2061.452262][T29255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2061.452281][T29255] ? __pfx__printk+0x10/0x10 [ 2061.452303][T29255] ? __might_fault+0xb0/0x130 [ 2061.452339][T29255] should_fail_ex+0x414/0x560 [ 2061.452367][T29255] _copy_from_user+0x2d/0xb0 [ 2061.452387][T29255] ___sys_sendmsg+0x158/0x2a0 [ 2061.452417][T29255] ? __pfx____sys_sendmsg+0x10/0x10 [ 2061.452449][T29255] ? rcu_read_lock_any_held+0xb3/0x120 [ 2061.452497][T29255] ? __fget_files+0x2a/0x420 [ 2061.452516][T29255] ? __fget_files+0x3a0/0x420 [ 2061.452546][T29255] __x64_sys_sendmsg+0x19b/0x260 [ 2061.452574][T29255] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2061.452608][T29255] ? __pfx_ksys_write+0x10/0x10 [ 2061.452637][T29255] ? do_syscall_64+0xbe/0xf80 [ 2061.452656][T29255] do_syscall_64+0xfa/0xf80 [ 2061.452672][T29255] ? lockdep_hardirqs_on+0x98/0x140 [ 2061.452696][T29255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2061.452713][T29255] ? clear_bhb_loop+0x60/0xb0 [ 2061.452735][T29255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2061.452752][T29255] RIP: 0033:0x7f55c438f749 [ 2061.452769][T29255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2061.452784][T29255] RSP: 002b:00007f55c52dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2061.452804][T29255] RAX: ffffffffffffffda RBX: 00007f55c45e5fa0 RCX: 00007f55c438f749 [ 2061.452818][T29255] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 2061.452830][T29255] RBP: 00007f55c52dc090 R08: 0000000000000000 R09: 0000000000000000 [ 2061.452842][T29255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2061.452853][T29255] R13: 00007f55c45e6038 R14: 00007f55c45e5fa0 R15: 00007f55c470fa28 [ 2061.452884][T29255] [ 2061.702318][ T5935] hub 2-1:0.0: 2 ports detected [ 2062.101240][T29243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2062.121979][T29243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2062.172358][T24442] usb 6-1: Cannot set autoneg [ 2062.177863][T24442] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2062.198396][T24442] usb 6-1: USB disconnect, device number 62 [ 2062.227587][ T49] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2062.367068][T23176] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2062.387125][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 2062.404765][ T49] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2062.433502][ T49] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2062.456996][ T49] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2062.468234][ T49] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2062.486908][ T49] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2062.501516][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.516877][T23176] usb 4-1: Using ep0 maxpacket: 8 [ 2062.524059][T23176] usb 4-1: config 0 has no interfaces? [ 2062.527429][ T5935] usb 2-1: USB disconnect, device number 15 [ 2062.532440][T23176] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2062.546514][T23176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.563566][T23176] usb 4-1: config 0 descriptor?? [ 2062.717997][T24442] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2062.760110][ T49] usb 1-1: GET_CAPABILITIES returned 0 [ 2062.765759][ T49] usbtmc 1-1:16.0: can't read capabilities [ 2062.786661][ T5935] usb 4-1: USB disconnect, device number 39 [ 2062.877252][T24442] usb 6-1: Using ep0 maxpacket: 8 [ 2062.884539][T24442] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2062.895053][T24442] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2062.908576][T24442] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2062.918230][T24442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.931422][T24442] usbtmc 6-1:16.0: bulk endpoints not found [ 2062.975683][ T5935] usb 1-1: USB disconnect, device number 51 [ 2062.997425][T23176] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2063.119915][T29272] qrtr: Invalid version 0 [ 2063.167213][T23176] usb 3-1: Using ep0 maxpacket: 8 [ 2063.173994][T23176] usb 3-1: config 0 has no interfaces? [ 2063.188924][T23176] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2063.198383][T23176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.210983][T23176] usb 3-1: config 0 descriptor?? [ 2063.426112][T23176] usb 3-1: USB disconnect, device number 21 [ 2063.559826][T29287] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 2063.575093][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5395'. [ 2063.585782][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5395'. [ 2063.595848][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5395'. [ 2063.606065][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5395'. [ 2063.615336][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5395'. [ 2063.628009][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5395'. [ 2063.648362][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5395'. [ 2063.682367][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5395'. [ 2063.692400][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5395'. [ 2063.702504][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5395'. [ 2064.298136][T23608] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2064.388314][ T48] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2064.446891][T23608] usb 2-1: Using ep0 maxpacket: 32 [ 2064.452959][T23608] usb 2-1: no configurations [ 2064.458063][T23608] usb 2-1: can't read configurations, error -22 [ 2064.586862][T23608] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2064.736938][T23608] usb 2-1: Using ep0 maxpacket: 32 [ 2064.743150][T23608] usb 2-1: no configurations [ 2064.747972][T23608] usb 2-1: can't read configurations, error -22 [ 2064.754806][T23608] usb usb2-port1: attempt power cycle [ 2065.108884][T23608] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2065.137548][ T5935] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2065.158258][T23608] usb 2-1: Using ep0 maxpacket: 32 [ 2065.166569][T23608] usb 2-1: no configurations [ 2065.183684][T23608] usb 2-1: can't read configurations, error -22 [ 2065.317399][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 2065.318051][T23176] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2065.341460][ T5935] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2065.356858][T24442] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2065.356955][T23608] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2065.392093][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2065.405907][ T49] usb 6-1: USB disconnect, device number 63 [ 2065.427031][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2065.446719][T23608] usb 2-1: Using ep0 maxpacket: 32 [ 2065.458229][T23608] usb 2-1: no configurations [ 2065.462867][T23608] usb 2-1: can't read configurations, error -22 [ 2065.471422][ T5935] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2065.481079][T23608] usb usb2-port1: unable to enumerate USB device [ 2065.490177][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2065.501397][ T5935] usb 1-1: config 0 descriptor?? [ 2065.509243][T29306] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2065.517754][T23176] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2065.530546][T24442] usb 3-1: Using ep0 maxpacket: 8 [ 2065.536589][T23176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2065.548453][T24442] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2065.549235][ T5935] hub 1-1:0.0: USB hub found [ 2065.562362][T23176] usb 4-1: config 0 descriptor?? [ 2065.573272][T29316] openvswitch: netlink: Flow key attr not present in new flow. [ 2065.580653][T24442] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2065.600585][T23176] cp210x 4-1:0.0: cp210x converter detected [ 2065.610460][T24442] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2065.621223][T24442] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2065.635396][T24442] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2065.645767][T24442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2065.715187][T29318] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2065.751340][ T5935] hub 1-1:0.0: 2 ports detected [ 2065.807008][T23176] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2065.815074][T23176] cp210x 4-1:0.0: querying part number failed [ 2065.840128][T23176] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2065.869950][T24442] usb 3-1: GET_CAPABILITIES returned 0 [ 2065.884598][T24442] usbtmc 3-1:16.0: can't read capabilities [ 2066.072565][T23608] usb 3-1: USB disconnect, device number 22 [ 2066.640054][ T5935] usb 1-1: USB disconnect, device number 52 [ 2067.180484][T29334] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 2067.381500][T29332] syzkaller0: entered promiscuous mode [ 2067.388497][T29332] syzkaller0: entered allmulticast mode [ 2068.219001][ T5962] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2068.533396][ T5935] usb 4-1: USB disconnect, device number 40 [ 2068.551697][ T5935] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2068.564627][ T5935] cp210x 4-1:0.0: device disconnected [ 2068.607729][T23176] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2068.727446][T21830] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2068.776938][T23176] usb 1-1: Using ep0 maxpacket: 8 [ 2068.795038][T23176] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2068.810742][T23176] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2068.837023][T23176] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2068.897014][T21830] usb 3-1: Using ep0 maxpacket: 32 [ 2068.902501][T23176] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2068.906892][T21830] usb 3-1: config 0 has an invalid interface number: 209 but max is 0 [ 2068.916970][T23176] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2069.024029][T21830] usb 3-1: config 0 has no interface number 0 [ 2069.089987][T23176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.119820][T21830] usb 3-1: config 0 interface 209 has no altsetting 0 [ 2069.144964][T21830] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 2069.172529][T21830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.203558][T21830] usb 3-1: Product: syz [ 2069.215691][T21830] usb 3-1: Manufacturer: syz [ 2069.231651][T21830] usb 3-1: SerialNumber: syz [ 2069.255059][T21830] usb 3-1: config 0 descriptor?? [ 2069.336955][T24442] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 2069.355535][T23176] usb 1-1: GET_CAPABILITIES returned 0 [ 2069.373839][T23176] usbtmc 1-1:16.0: can't read capabilities [ 2069.477393][T24442] usb 4-1: device descriptor read/64, error -71 [ 2069.477606][T29384] __nla_validate_parse: 37 callbacks suppressed [ 2069.477620][T29384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5427'. [ 2069.562631][ T5935] usb 1-1: USB disconnect, device number 53 [ 2069.735517][T29364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2069.754658][T29364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2069.796931][T24442] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 2069.963488][T24442] usb 4-1: device descriptor read/64, error -71 [ 2070.081308][T24442] usb usb4-port1: attempt power cycle [ 2070.436914][T24442] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 2070.463497][T24442] usb 4-1: device descriptor read/8, error -71 [ 2070.718891][T24442] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 2070.770662][T24442] usb 4-1: device descriptor read/8, error -71 [ 2070.827168][ T5935] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2070.937744][T24442] usb usb4-port1: unable to enumerate USB device [ 2071.006888][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 2071.017529][ T5935] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2071.048430][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2071.089055][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2071.149461][ T5935] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2071.202116][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.224986][T29400] kvm: MWAIT instruction emulated as NOP! [ 2071.246040][ T5935] usb 1-1: config 0 descriptor?? [ 2071.262817][T29391] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 2071.273435][ T5935] hub 1-1:0.0: USB hub found [ 2071.483358][ T5935] hub 1-1:0.0: 2 ports detected [ 2071.681375][ T5935] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 2071.691267][ T5935] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 2071.739850][ T5935] usbhid 1-1:0.0: can't add hid device: -71 [ 2071.745924][ T5935] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2071.790686][ T5935] usb 1-1: USB disconnect, device number 54 [ 2071.814167][T21830] usb 3-1: USB disconnect, device number 23 [ 2072.376473][T29416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5438'. [ 2072.446885][T21830] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2072.604579][T21830] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2072.619189][T21830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2072.632344][T21830] usb 2-1: config 0 descriptor?? [ 2072.647415][T23176] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2072.648535][T21830] cp210x 2-1:0.0: cp210x converter detected [ 2072.816974][ T5935] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 2072.845889][T23176] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2072.856083][T23176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2072.871727][T23176] usb 3-1: config 0 descriptor?? [ 2072.890044][T23176] cp210x 3-1:0.0: cp210x converter detected [ 2072.983390][ T5935] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 2072.997884][ T5935] usb 4-1: config 0 has no interface number 0 [ 2073.008067][ T5935] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2073.025190][ T5935] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2073.047177][ T5935] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2073.061366][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.074062][ T5935] usb 4-1: Product: syz [ 2073.081909][T21830] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2073.090903][ T5935] usb 4-1: Manufacturer: syz [ 2073.106996][ T5935] usb 4-1: SerialNumber: syz [ 2073.128232][ T5935] usb 4-1: config 0 descriptor?? [ 2073.136270][T21830] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2073.170438][ T5935] ums-karma 4-1:0.46: USB Mass Storage device detected [ 2073.297213][ T5935] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5 [ 2073.358078][T29420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5440'. [ 2073.370094][ T49] usb 4-1: USB disconnect, device number 45 [ 2073.402217][T23176] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2073.450883][T23176] usb 3-1: cp210x converter now attached to ttyUSB1 [ 2073.873307][T29429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'. [ 2073.885160][T29429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'. [ 2073.894710][T29429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'. [ 2073.924922][T29429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'. [ 2073.934312][T29429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'. [ 2074.001494][T29429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'. [ 2074.011707][T29429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'. [ 2074.878359][T29436] __nla_validate_parse: 31 callbacks suppressed [ 2074.878375][T29436] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5442'. [ 2075.171298][ T5935] usb 2-1: USB disconnect, device number 20 [ 2075.179347][T21830] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2075.191809][ T5935] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2075.218961][ T5935] cp210x 2-1:0.0: device disconnected [ 2075.457392][T23608] usb 3-1: USB disconnect, device number 24 [ 2075.729956][T21830] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2075.763732][T21830] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 2075.790756][T23608] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 2075.836379][T23608] cp210x 3-1:0.0: device disconnected [ 2075.841911][T21830] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2075.856167][T21830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.891390][T21830] usb 6-1: config 0 descriptor?? [ 2075.944599][T29436] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2076.039332][T29455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5448'. [ 2076.077005][T23905] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2076.115334][T29461] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5450'. [ 2076.155145][T21830] ath6kl: Failed to submit usb control message: -71 [ 2076.161906][T21830] ath6kl: unable to send the bmi data to the device: -71 [ 2076.207222][T21830] ath6kl: Unable to send get target info: -71 [ 2076.228689][T23905] usb 4-1: Using ep0 maxpacket: 32 [ 2076.237185][T23905] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2076.261401][T21830] ath6kl: Failed to init ath6kl core: -71 [ 2076.271237][T23905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2076.283527][T21830] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2076.301727][T23905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2076.319416][T21830] usb 6-1: USB disconnect, device number 64 [ 2076.344132][T23905] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2076.362184][T23905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2076.394551][T23905] usb 4-1: config 0 descriptor?? [ 2076.435824][T29451] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2076.455684][T23905] hub 4-1:0.0: USB hub found [ 2076.664955][T23905] hub 4-1:0.0: 2 ports detected [ 2076.963679][T29475] openvswitch: netlink: Key 26 has unexpected len 0 expected 16 [ 2077.396872][ T49] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2077.478988][T23905] usb 4-1: USB disconnect, device number 46 [ 2077.570807][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 2077.582547][ T49] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 2077.606200][ T49] usb 1-1: config 0 has no interface number 0 [ 2077.629796][ T49] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2077.701459][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.709662][ T49] usb 1-1: Product: syz [ 2077.713995][ T49] usb 1-1: Manufacturer: syz [ 2077.718723][ T49] usb 1-1: SerialNumber: syz [ 2077.731739][ T49] usb 1-1: config 0 descriptor?? [ 2077.753677][ T49] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2078.072383][ T49] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2078.095787][ T49] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2078.273703][T29493] syzkaller0: entered promiscuous mode [ 2078.276938][T23905] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2078.283055][T29493] syzkaller0: entered allmulticast mode [ 2078.362091][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2078.374099][ T49] usb 1-1: USB disconnect, device number 55 [ 2078.383905][ T49] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2078.420611][ T49] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2078.436059][ T49] quatech2 1-1:0.51: device disconnected [ 2078.442336][T23905] usb 6-1: Using ep0 maxpacket: 32 [ 2078.451402][T23905] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2078.472836][T23905] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2078.496727][T23905] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2078.528317][T23905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.550964][T23905] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 2078.562008][T23905] usb 6-1: no configuration chosen from 1 choice [ 2078.696262][T29500] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 2078.852836][T29506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2079.237587][T29521] FAULT_INJECTION: forcing a failure. [ 2079.237587][T29521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2079.289677][T29521] CPU: 0 UID: 0 PID: 29521 Comm: syz.0.5467 Not tainted syzkaller #0 PREEMPT(full) [ 2079.289704][T29521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2079.289716][T29521] Call Trace: [ 2079.289724][T29521] [ 2079.289734][T29521] dump_stack_lvl+0x189/0x250 [ 2079.289761][T29521] ? __pfx____ratelimit+0x10/0x10 [ 2079.289788][T29521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2079.289807][T29521] ? __pfx__printk+0x10/0x10 [ 2079.289829][T29521] ? __might_fault+0xb0/0x130 [ 2079.289865][T29521] should_fail_ex+0x414/0x560 [ 2079.289893][T29521] _copy_from_iter+0x1de/0x1790 [ 2079.289921][T29521] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2079.289950][T29521] ? policy_nodemask+0x27c/0x720 [ 2079.289968][T29521] ? __pfx__copy_from_iter+0x10/0x10 [ 2079.289998][T29521] ? set_page_refcounted+0xa0/0x1e0 [ 2079.290015][T29521] ? page_copy_sane+0x4e/0x280 [ 2079.290049][T29521] copy_page_from_iter+0xdd/0x170 [ 2079.290076][T29521] tun_get_user+0x1d40/0x3da0 [ 2079.290199][T29521] ? tun_get_user+0x6fc/0x3da0 [ 2079.290230][T29521] ? aa_file_perm+0x44d/0x1540 [ 2079.290254][T29521] ? __pfx_tun_get_user+0x10/0x10 [ 2079.290272][T29521] ? __lock_acquire+0x6b6/0x2cf0 [ 2079.290299][T29521] ? kstrtoull+0x12f/0x1d0 [ 2079.290363][T29521] ? ref_tracker_alloc+0x318/0x460 [ 2079.290389][T29521] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2079.290414][T29521] ? tun_get+0x1c/0x2f0 [ 2079.290436][T29521] ? tun_get+0x1c/0x2f0 [ 2079.290450][T29521] ? tun_get+0x1c/0x2f0 [ 2079.290468][T29521] tun_chr_write_iter+0x113/0x200 [ 2079.290521][T29521] vfs_write+0x5c9/0xb30 [ 2079.290551][T29521] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2079.290575][T29521] ? __pfx_vfs_write+0x10/0x10 [ 2079.290610][T29521] ? __fget_files+0x2a/0x420 [ 2079.290640][T29521] ksys_write+0x145/0x250 [ 2079.290666][T29521] ? __pfx_ksys_write+0x10/0x10 [ 2079.290694][T29521] ? do_syscall_64+0xbe/0xf80 [ 2079.290715][T29521] do_syscall_64+0xfa/0xf80 [ 2079.290731][T29521] ? lockdep_hardirqs_on+0x98/0x140 [ 2079.290755][T29521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2079.290773][T29521] ? clear_bhb_loop+0x60/0xb0 [ 2079.290795][T29521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2079.290812][T29521] RIP: 0033:0x7f55c438e1ff [ 2079.290830][T29521] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2079.290846][T29521] RSP: 002b:00007f55c52dc000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2079.290866][T29521] RAX: ffffffffffffffda RBX: 00007f55c45e5fa0 RCX: 00007f55c438e1ff [ 2079.290880][T29521] RDX: 00000000000000a6 RSI: 0000200000000780 RDI: 00000000000000c8 [ 2079.290893][T29521] RBP: 00007f55c52dc090 R08: 0000000000000000 R09: 0000000000000000 [ 2079.290905][T29521] R10: 00000000000000a6 R11: 0000000000000293 R12: 0000000000000001 [ 2079.290917][T29521] R13: 00007f55c45e6038 R14: 00007f55c45e5fa0 R15: 00007f55c470fa28 [ 2079.290961][T29521] [ 2079.648101][T29499] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5464'. [ 2079.942578][ T49] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2079.950338][T23176] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2080.107129][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 2080.114877][ T49] usb 2-1: config 188 has an invalid interface number: 163 but max is 0 [ 2080.124000][ T49] usb 2-1: config 188 has no interface number 0 [ 2080.133352][T23176] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2080.149794][ T49] usb 2-1: config 188 interface 163 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 2080.161386][T23176] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 2080.191554][T23176] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2080.202887][ T49] usb 2-1: config 188 interface 163 altsetting 255 bulk endpoint 0x6 has invalid maxpacket 1024 [ 2080.227721][T23176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.239660][ T49] usb 2-1: config 188 interface 163 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 2080.268589][ T49] usb 2-1: config 188 interface 163 altsetting 255 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 2080.280933][T23176] usb 4-1: config 0 descriptor?? [ 2080.289849][T29499] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2080.310769][ T49] usb 2-1: config 188 interface 163 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 2080.343318][ T49] usb 2-1: config 188 interface 163 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 2080.374370][ T49] usb 2-1: config 188 interface 163 altsetting 255 has a duplicate endpoint with address 0xA, skipping [ 2080.485075][ T49] usb 2-1: config 188 interface 163 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 2080.541143][ T49] usb 2-1: config 188 interface 163 altsetting 255 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2080.575574][ T49] usb 2-1: config 188 interface 163 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 2080.630973][ T49] usb 2-1: config 188 interface 163 has no altsetting 0 [ 2080.681215][ T49] usb 2-1: New USB device found, idVendor=2040, idProduct=4201, bcdDevice=a0.b3 [ 2080.702344][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.738435][ T49] usb 2-1: Product: Б [ 2080.751032][ T49] usb 2-1: Manufacturer: ᜡ꽮廒ꃝ岈வ⌝餥겸Ą㹪뢂꼦隽 [ 2080.775625][ T49] usb 2-1: SerialNumber: ࠓ [ 2080.810749][T29526] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2081.015746][T15587] usb 6-1: USB disconnect, device number 65 [ 2081.071053][ T49] usb 2-1: USB disconnect, device number 21 [ 2081.340191][T23176] ath6kl: Failed to submit usb control message: -110 [ 2081.352280][T23176] ath6kl: unable to send the bmi data to the device: -110 [ 2081.370846][T23176] ath6kl: Unable to send get target info: -110 [ 2081.410468][T23176] ath6kl: Failed to init ath6kl core: -110 [ 2081.449393][T23176] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2081.651335][T29569] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.5474'. [ 2081.688750][T21830] usb 4-1: USB disconnect, device number 47 [ 2081.727191][ T49] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2081.907296][ T49] usb 6-1: Using ep0 maxpacket: 8 [ 2081.914449][ T49] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2081.946965][ T49] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2081.970117][ T49] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2082.017016][ T49] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2082.058137][ T49] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2082.077000][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.149561][T29581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5476'. [ 2082.311669][ T49] usb 6-1: GET_CAPABILITIES returned 0 [ 2082.329397][ T49] usbtmc 6-1:16.0: can't read capabilities [ 2082.366948][T21830] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 2082.464755][T29571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5475'. [ 2082.526928][T23608] usb 6-1: USB disconnect, device number 66 [ 2082.540765][T21830] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 2082.573134][T21830] usb 4-1: config 0 has no interface number 0 [ 2082.603132][T21830] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 2082.618068][T21830] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2082.628181][T21830] usb 4-1: config 0 interface 113 has no altsetting 0 [ 2082.638408][T21830] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2082.649077][T21830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.661804][T21830] usb 4-1: Product: syz [ 2082.666004][T21830] usb 4-1: Manufacturer: syz [ 2082.673388][T21830] usb 4-1: SerialNumber: syz [ 2082.687865][T21830] usb 4-1: config 0 descriptor?? [ 2082.699132][ C0] usb 4-1: NFC: Urb failure (status -71) [ 2082.706903][T21830] usb 4-1: NFC: Unable to get FW version [ 2082.713109][T21830] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 2082.722035][T23905] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2082.880391][T23905] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2082.899436][T23905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 2082.919092][T23905] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2082.936563][T21830] usb 4-1: USB disconnect, device number 48 [ 2082.956192][T23905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.977519][T23905] usb 1-1: config 0 descriptor?? [ 2082.984582][T29571] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2083.199742][T23905] ath6kl: Failed to submit usb control message: -71 [ 2083.212207][T23905] ath6kl: unable to send the bmi data to the device: -71 [ 2083.221041][T23905] ath6kl: Unable to send get target info: -71 [ 2083.244115][T23905] ath6kl: Failed to init ath6kl core: -71 [ 2083.251698][T23905] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2083.275409][T23905] usb 1-1: USB disconnect, device number 56 [ 2098.949779][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.956740][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2139.907059][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2160.380164][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.386496][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.819699][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.826127][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2243.577236][ T31] INFO: task kworker/0:0:11229 blocked for more than 143 seconds. [ 2243.585095][ T31] Not tainted syzkaller #0 [ 2243.590531][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2243.599268][ T31] task:kworker/0:0 state:D stack:20096 pid:11229 tgid:11229 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2243.611360][ T31] Workqueue: usb_hub_wq hub_event [ 2243.616582][ T31] Call Trace: [ 2243.620450][ T31] [ 2243.623394][ T31] __schedule+0x17b2/0x4d40 [ 2243.627959][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 2243.632926][ T31] ? __pfx___schedule+0x10/0x10 [ 2243.637848][ T31] ? schedule+0x91/0x360 [ 2243.642112][ T31] schedule+0x165/0x360 [ 2243.646259][ T31] usb_kill_urb+0x1be/0x2d0 [ 2243.651346][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2243.656383][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2243.662547][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2243.667670][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2243.673228][ T31] ? usb_alloc_urb+0x46/0x150 [ 2243.678358][ T31] usb_control_msg+0x232/0x3e0 [ 2243.683120][ T31] hub_port_init+0xbf9/0x2800 [ 2243.687860][ T31] hub_event+0x2532/0x4a20 [ 2243.692311][ T31] ? __pfx_hub_event+0x10/0x10 [ 2243.697112][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2243.702840][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2243.708458][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2243.714182][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2243.719932][ T31] process_scheduled_works+0xad1/0x1770 [ 2243.725499][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2243.731549][ T31] worker_thread+0x8a0/0xda0 [ 2243.736172][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2243.742985][ T31] ? __kthread_parkme+0x7b/0x200 [ 2243.747982][ T31] kthread+0x711/0x8a0 [ 2243.752062][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2243.757208][ T31] ? __pfx_kthread+0x10/0x10 [ 2243.761891][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2243.767498][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2243.772698][ T31] ? __pfx_kthread+0x10/0x10 [ 2243.777313][ T31] ret_from_fork+0x52d/0xa60 [ 2243.781917][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2243.787153][ T31] ? __switch_to_asm+0x39/0x70 [ 2243.791930][ T31] ? __switch_to_asm+0x33/0x70 [ 2243.796736][ T31] ? __pfx_kthread+0x10/0x10 [ 2243.801334][ T31] ret_from_fork_asm+0x1a/0x30 [ 2243.806096][ T31] [ 2243.809639][ T31] [ 2243.809639][ T31] Showing all locks held in the system: [ 2243.817411][ T31] 1 lock held by khungtaskd/31: [ 2243.822268][ T31] #0: ffffffff8df414c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2243.832226][ T31] 2 locks held by getty/5597: [ 2243.837451][ T31] #0: ffff88803345d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2243.847372][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2243.857524][ T31] 5 locks held by kworker/0:0/11229: [ 2243.862808][ T31] #0: ffff8881446fb148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2243.874671][ T31] #1: ffffc9001c6b7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2243.886625][ T31] #2: ffff88814635f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2243.895565][ T31] #3: ffff88814636a518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2243.907300][ T31] #4: ffff8880277a2868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2243.917091][ T31] [ 2243.919412][ T31] ============================================= [ 2243.919412][ T31] [ 2243.927968][ T31] NMI backtrace for cpu 1 [ 2243.927985][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2243.928004][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2243.928014][ T31] Call Trace: [ 2243.928021][ T31] [ 2243.928027][ T31] dump_stack_lvl+0x189/0x250 [ 2243.928054][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2243.928072][ T31] ? __pfx__printk+0x10/0x10 [ 2243.928105][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2243.928128][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2243.928151][ T31] ? __pfx__printk+0x10/0x10 [ 2243.928176][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2243.928202][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2243.928226][ T31] watchdog+0xf3c/0xf80 [ 2243.928250][ T31] ? watchdog+0x1e2/0xf80 [ 2243.928273][ T31] kthread+0x711/0x8a0 [ 2243.928297][ T31] ? __pfx_watchdog+0x10/0x10 [ 2243.928314][ T31] ? __pfx_kthread+0x10/0x10 [ 2243.928332][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2243.928354][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2243.928376][ T31] ? __pfx_kthread+0x10/0x10 [ 2243.928396][ T31] ret_from_fork+0x52d/0xa60 [ 2243.928424][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2243.928458][ T31] ? __switch_to_asm+0x39/0x70 [ 2243.928477][ T31] ? __switch_to_asm+0x33/0x70 [ 2243.928496][ T31] ? __pfx_kthread+0x10/0x10 [ 2243.928517][ T31] ret_from_fork_asm+0x1a/0x30 [ 2243.928554][ T31] [ 2243.928561][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2244.075378][ C0] NMI backtrace for cpu 0 [ 2244.075395][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2244.075414][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2244.075424][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2244.075452][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 14 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2244.075466][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2244.075481][ C0] RAX: a797faba01080d00 RBX: ffffffff819729e7 RCX: a797faba01080d00 [ 2244.075494][ C0] RDX: 0000000000000001 RSI: ffffffff8d762d2a RDI: ffffffff8bbfa900 [ 2244.075506][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883341b R09: 1ffff11017106683 [ 2244.075518][ C0] R10: dffffc0000000000 R11: ffffed1017106684 R12: ffffffff8f801370 [ 2244.075530][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a50 [ 2244.075542][ C0] FS: 0000000000000000(0000) GS:ffff8881260c5000(0000) knlGS:0000000000000000 [ 2244.075556][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2244.075567][ C0] CR2: 0000563f162b8168 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 2244.075583][ C0] Call Trace: [ 2244.075591][ C0] [ 2244.075598][ C0] default_idle+0x13/0x20 [ 2244.075614][ C0] default_idle_call+0x73/0xb0 [ 2244.075632][ C0] do_idle+0x1e7/0x510 [ 2244.075651][ C0] ? __pfx_do_idle+0x10/0x10 [ 2244.075675][ C0] cpu_startup_entry+0x44/0x60 [ 2244.075691][ C0] rest_init+0x2de/0x300 [ 2244.075709][ C0] start_kernel+0x3ae/0x410 [ 2244.075849][ C0] x86_64_start_reservations+0x24/0x30 [ 2244.075891][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2244.075907][ C0] common_startup_64+0x13e/0x147 [ 2244.075947][ C0]