last executing test programs: 19m18.954916541s ago: executing program 0 (id=4001): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8, 0x0, 0x0, 0x0, 0x50}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 19m18.539186653s ago: executing program 0 (id=4005): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fanotify_mark(r1, 0x101, 0x40000038, r2, 0x0) fanotify_mark(r1, 0x1, 0x48001050, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000000c0)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000d40), 0x0}, 0x20) 19m17.076550742s ago: executing program 0 (id=4015): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x8001) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000003f00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "0180000000000000000000001700"}}) 19m16.364879183s ago: executing program 0 (id=4016): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000000c0)=0xfffffff8, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x14002, 0x0, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x160, 0x0, 0x1, [{{0x0, 0x2, 0xb, 0x96a, 0x80000001, 0xffffffff, {0x5, 0x1, 0x1, 0x7d, 0x9, 0x26ef, 0x1000, 0xc, 0x18000000, 0xd000, 0x9, r4, 0x0, 0x19, 0x80}}, {0x1, 0xac4, 0x2, 0x2, '..'}}, {{0x4, 0x0, 0x1c, 0x6, 0x4, 0xbb5, {0x3, 0x4, 0x401, 0x9, 0xe, 0x1, 0x4, 0x6, 0x2, 0x6000, 0xbc7, r4, r5, 0x100, 0x5}}, {0x5, 0x6, 0x13, 0x2, '\']}$^.{\\,{:^\'L-#{]@'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000000040)=""/42, 0x2a) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000) setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) setrlimit(0x0, &(0x7f00000000c0)={0x0, 0x1}) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="06000e000802f81c"], 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x40800) 19m15.827408451s ago: executing program 0 (id=4021): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000000010000001800000006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='dns_resolver\x00', &(0x7f0000002240)='#/d\x00O\xec\x9a\xba\xe6)\xfe\x94\f/\x83\xc28\x99\"\x05S\xfa\r\xc7\x801\xec\xf5\x8e\x1e\xae<\x82c#\x8cV\xbe\xdbI\xff\x82B\xf0\xfa\xf8\xf2\x97\x9a\xe5v\x0f\x9f\x9d\xa7]=\x81\xd1oK\xfe\x15\xe8E\x1c\x9ej\xc4\xc62\xd1\r\xc8\xc4z\xdb\xbf\x0e\xe0Y!\v\x06D\xfbV\xc2\xe8\xb4\x9aam\x8d\xacG\xedD\x1e\xce\xd8\'\x87\x9bC\xd3\xff\v;,\xa1\xbe\xa9\x97O`K\xd0\xffI<\xbd\xc7\x05\x00\x00\x00\xd9\xd1\x14]\x17H5i\x95\xf0z$\xe3\x9f(\x9c\f<\x84\x89\xda\xc6\xd5A1\x16\xe57S\b\x96;B\xba+\xa4\xe1\xd0\x1at\x88)\x11;\xff<\xbe\xf78\xf8]\x06\xd2G\xab\xc6\xdc^\xc5\xd3\xd6T\x11r\xea\x02/\x9f\x83\r\x1e\xd5\xf5\xf0\x85]\x04\xa4ZkP\x91E$\xcb\xc9\x1f\fA\x99Q\x94\xc6\x1d\b\x16\bIz\x9d3\xbf\x9fYvHe/\xd3\x89\xaf\xbe\xc4\xdf\xcc\x81\xda7.\x95') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000000c0)) 19m14.78644311s ago: executing program 0 (id=4027): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) listen(0xffffffffffffffff, 0x8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) 19m14.342748912s ago: executing program 32 (id=4027): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) listen(0xffffffffffffffff, 0x8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) 13m26.074549502s ago: executing program 4 (id=5251): syz_io_uring_setup(0x6b5c, &(0x7f0000000000)={0x0, 0x925f, 0x10, 0x2, 0x304}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x3d2, &(0x7f0000000140)={0x0, 0xc9e9, 0x2, 0x0, 0x86}, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a7260180", @ANYRES32], 0x26c0}}, 0x4010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) r5 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f0000000340)={0x0, 0x0, {0x2, 0x0, 0x7f, 0x3, 0x3fffc}, 0x20db3f5a}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r7, r7, 0x0, 0x7) write$apparmor_current(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) personality(0x619641b6fb4b8591) signalfd4(r7, &(0x7f00000002c0)={[0x7]}, 0x8, 0x40000) uname(&(0x7f0000000180)=""/224) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x6d, 0x0, @fd=r3, 0x2, {0x0, r4}, 0x80000000, 0xd, 0x0, {0x0, 0x0, r5}}) syz_usb_connect(0x5, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904000b2402010302057ff49bfd052406000105240000080624037f000109050602ff"], 0x0) 13m24.211161298s ago: executing program 4 (id=5254): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfffffffd, 0x0, 0xb49, 0x7, 0x8, 0x0, 0xb}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfe, 0x8000}, 0xc) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x2004804d}, 0x20008010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000200001c0"]) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500000001040101000000000000000400d900010001000000"], 0x1c}}, 0x0) 13m23.767889154s ago: executing program 4 (id=5256): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) 13m23.45110655s ago: executing program 4 (id=5258): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010711e102000000000000109022d977c134f"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x20, 0x66, 0x4, 0xac}, {0x9, 0x5, 0xd, 0x2, 0x400, 0x0, 0x5, 0x6}, {0x9, 0x5, 0x8, 0x3, 0x400, 0x1, 0x9, 0x1}}}}}}]}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) chroot(&(0x7f0000000780)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5], 0x40}}, 0x44) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000100088fb"], 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') syz_usb_control_io(r0, 0x0, 0x0) 13m21.481663775s ago: executing program 4 (id=5267): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r3, 0x0) 13m21.29802914s ago: executing program 4 (id=5268): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) 13m20.76017585s ago: executing program 33 (id=5268): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) 10.667145293s ago: executing program 6 (id=7975): syz_usb_connect(0x7, 0x3d, &(0x7f0000000680)=ANY=[@ANYBLOB="120150025f7c8a101e041f40b68f0102030109022b000105e0000609043f100206a91c0209050a082000060a080905000408000108080725010209020064ef1d618736cd8e5f6cc9d3c25e3c4782a3c1ce16b4b6c0c2a7ca59235b26fb29cfa7780b1e516bce596a2cbd38c56cb91b5a0d297838bd76c4b339d82ac40eaf98b31eca2ae6c2174e4d25517677e56dab338cb7fcdd897a464f9aafaf20fb9dc4204d954a8809cf8233fe56a580091233f39ce163b0af164652c9f52f0c611ebd29edfcca189fd84cec978f30b0403279b0e21f111ffa47ecd788cca2ba3eceb312b950760232bd998ffd1cc2a875ebb7"], 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x2}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x80000, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000780)="a8a8ced8be5481f14bff6a38a5596fcf1c3276d4baaed35b8b89d2420e839bd8265be2b4064e4aab6b068995344365a96c622da6b0662e6d67b4fee98850f5d62bf7ae897887a0cb0ee7df0682383a4227f00d348f5a455868c9bf2b799f0312e643123e2770da076ae5ef3b2f519eb6d38a65128b0d4f77f8cdecfd89a69c119fad34633892db078363e58aa90b52df0e673d3f111957b07e965f88bd8f8bb94734da6b561abeaa570629e122918999ddbb41138e9233282688dc404ef5607c8e4ac9463d26694958f8f036aa") ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000280)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{0x6, 0x0, 0xb183}], 0x1, 0x3, 0x79dc8089b2c841c4, 0x0, 0xa5, 0x5c}) io_submit(0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e7000701"], 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001800)=""/183, 0xb7}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x70, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x7, 0x40, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "842f"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xffff, 0x4, 0x40}, {0x6, 0x24, 0x1a, 0xfff9, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x88, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x72, 0xfb}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x80, 0x25, 0x9, 0xff, 0xe}, 0x59, &(0x7f0000000600)={0x5, 0xf, 0x59, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x9, 0x6, 0xa, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "b0efbda1d90ed1a9a8ba86d979bbb6bf"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "029ab23a4e7d5eb6c3d903c116c78f4e"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x6, 0xff, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3, 0x6, 0x2, 0xfd}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x1, 0x99, 0x9, 0x3}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x853, 0x313, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x8c, 0x2, 0x3, 0x1, 0x5, 0x2, {0x9, 0x21, 0x400, 0x4a, 0x1, {0x22, 0xd72}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x4, 0x9}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x5a, 0x7, 0x8, 0xff}, 0x84, &(0x7f00000000c0)={0x5, 0xf, 0x84, 0x1, [@generic={0x7f, 0x10, 0x2, "d111c48cd940b6a8bf87891a663ae0746494c22b554f602277a2951e9f5efdb083a7aa20bbcc633882f2f90962115736bbf34af17ecdb6bd0a81bd15ff864363da246fd16464056fe723993b0ee335ba1575afdbe8cd9e96f87c24e89fc890cfae364799f252af1e0e095af18a5db742a577d89dae035c55276f5333"}]}, 0x3, [{0xff, &(0x7f0000000180)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1407}}, {0x2f, &(0x7f00000002c0)=@string={0x2f, 0x3, "e918eeafd3b24ab12d707ef807d84af27f6135a1783b26756f46bac5ad6adf6c9546903525a4169bffb14b5f14"}}]}) 9.879375711s ago: executing program 1 (id=7979): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000600)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x3}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0xfffeffff, @private1, 0x9}, @in6={0xa, 0x4e24, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}], 0x58) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000a80)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000055c0)=[{&(0x7f0000005640)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000300)={@remote, @private=0xa010101, 0xffffffffffffffff, "4c40de99cc90c1b5d371cdc557ce3995c80c82570b4a7754ce192d4bce2fd7a1", 0xfffffffb, 0x1, 0x34, 0x3}, 0x3c) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r8, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x11, 0x4) recvmmsg(r8, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x40000000000021f, 0x1000400000de, 0x0) syz_open_dev$swradio(&(0x7f00000002c0), 0x1, 0x2) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000180)="c461ff7c090f01c466baf80cb848ef7e83ef66bafc0c66ed2667650f0173000f79430966baf80cb8dcb8cf82ef66bafc0cb8e6000000ef3ef30f09c74424004e7b0000c7442402ce4399b8c7442406000000000f011c2448b8cc9e0000000000000f23d00f21f835100000090f23f866ba4100ed", 0x74}], 0x1, 0x48, &(0x7f00000002c0), 0x0) 9.002181217s ago: executing program 1 (id=7983): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) socket$nl_route(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7.680476236s ago: executing program 2 (id=7986): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0004070000000507a7ea31"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.536447375s ago: executing program 6 (id=7987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x62, &(0x7f0000000200)=0xad52, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x80002, 0x2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x3}) socket$inet6(0xa, 0x3, 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="6368616ec34c939f764deca63130303030325e2f6465762f7474795333005d9944212f7474795333002f6465762f747479533300ceb500"], 0x41) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x383940, 0x0) r9 = epoll_create(0x4000100) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000300)={0xb0000004}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000380)="2e6726f30fc7ffba6100b072ee6766c7442400000001006766c7442402000000006766c744240600000000670f011c2466b92d0300000f323e0f01fc0f01c90f01c566b8f2a97e630f23d00f21f86635300000050f23f8ba2100b000ee6766c7442400530000006766c7442402050000006766c744240600000000670f011c24", 0x80}], 0x1, 0x43, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r11, 0x6000000) 7.063477899s ago: executing program 5 (id=7988): syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f00000000c0)='.\x00', 0x800, 0xd0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x10000000000000) 6.990117675s ago: executing program 2 (id=7989): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a000905040200000000"], 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) read(r4, 0x0, 0x58) bpf$MAP_CREATE(0xc00000000000018, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500400083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7021000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x805, 0x0) 6.909605458s ago: executing program 1 (id=7990): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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"/272, 0x110}, {&(0x7f00000002c0)="04811ff500139d", 0x7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424", 0xda}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="c54bf6a98ab7385352e2250e609e265e9af572d90dcb8dab076f8e096f4d7c9747683b850472ff12104f6a8cf2", 0x2d}, {&(0x7f0000000380)="f2be0f0195eb17ae1a4ab4b88df54802c7134fab2121c88f01aaf9edaeae6bf059d0bf6d14a966d2e9578e3f3c218055676f00503c5d199ed75c44e3c715f968a6ab39e110c592cb50d395feacdeab93a46a412418794804b929fa629ad5f1227e346d782c84628c136288996bb546", 0x6f}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.908538879s ago: executing program 3 (id=7991): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x197302, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x80000000000b49, 0x8, 0x1000000000008, 0x0, 0x80000003}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r3 = fcntl$getown(r1, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) sched_getattr(r3, &(0x7f00000000c0)={0x38}, 0x38, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="64f5ff000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20401, 0x30) writev(r6, &(0x7f00000003c0)=[{&(0x7f00000004c0)='V', 0x1}, {&(0x7f0000000180)="fc", 0x1}], 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 6.709282278s ago: executing program 5 (id=7992): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'vlan1\x00', 0x0}) (async) r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f733e1a00000000", 0xe, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) (async) sendto$inet(r6, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r6, 0x0, 0xb, 0x0, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)'], 0x28}, 0x4080) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.544978012s ago: executing program 5 (id=7993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80000001) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000002c0)="65660f38f6a144006766c74424000f0000006766c7442402000000006766c744240600000000670f011c2466b800a0000066ba000000000f300f01322e0f320f001066b8921f00000f23c00f21f8663500000d00500f23f8baf80c66b85428028e66efbafc0ced8c008ed8640fc79a000166b8010000000f01d9b82f000f00d0", 0x80}], 0x1, 0x10, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0x8}}}, 0x24}}, 0x40004) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect(r4, &(0x7f0000000000)=@generic={0x0, "a580f1724e779971ec8449b37f662c740dd6f32f4192451be94d20d79c1885f5affd021e978c1ba6d87d9bb35f8e73bbb763abcc60fba685174814fbdec7624b87f7ddc441cc67fdf1cb839bea4a7b3f9a0fc44711bdd6913b7381dea622ac79bc252f10f96b9b201e9e4a736d999a2cf671690e4a1b12da522173e13a5f"}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000080)) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r4, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.969484947s ago: executing program 6 (id=7994): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xe13b, 0x2, 0xfffeffff, 0x10001, 0x5, 0xffffffffffffffff}) ptrace$poke(0x5, r2, &(0x7f0000000100), 0x3ff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, 0x0, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x1000040c, 0xffff}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80f81, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r3, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.868674731s ago: executing program 1 (id=7995): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008009200b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) io_setup(0x30, &(0x7f0000000600)=0x0) (async, rerun: 32) pipe2$9p(&(0x7f00000000c0), 0x4000) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x24}]) shutdown(0xffffffffffffffff, 0x1) 5.571393704s ago: executing program 1 (id=7996): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x110, r1, 0x51857000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x4, 0x36f273, 0x22272d}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010800000000000000000b000000080003", @ANYRES32=0x0, @ANYBLOB="08005084e8fa05"], 0x24}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xe, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0xf7, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8001, 0xffff, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x1, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x2, 0x4}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ff"], 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000340)=@data_frame={@msdu=@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4a62}, @device_a, @random="b1c0553d1e08", @device_b, {0x3, 0x10}, "", @value={0x0, 0x0, 0x0, 0x0, 0x28}, @value=@ver_80211n={0x0, 0xe7, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xb2, "6044ce6a449b6d9fd3bcd0a260df704b3b655907ebec6c78fb649f5ab7772d21cd1272b9c6f97ef62d34dad7f06e8f97ad4ed4dad94f768a7561181ad27608108bb7470a016245f447790d36df58a85e10966f234195f1f1d8c8cf349651fdb128463d2c7cb2a4bb7a1ee2bbfb265c9d0428f91254af694a4117c06c48def6402da837cb9ed6d72b00f19650a21605a20df5db2a3f951d6143b23652214595c53d85950d53bdb137bb1e7d352beb4b80881e"}, {@device_a, @device_b, 0xb6, "2e74187f33e3dc43288437731dcc94f8b6b430021f548e5b42ce6c1de324509090ac7f63911f5041f14138c6914e6c122ae909327b0c7cd286f61d55545dca01b31c321cd46c7b755e29e733795c876e8fa729992abcaaf4e09813a5b1941169f6736a6db79a0d48c64345a58f2f5290905b913982fa1fc03fd399647adf1a65e846675778470a4089763dbb2de08546d72047e294a18f920ecb30e32e2df02fcb42ac91fe0e653bdf575a1d89418e190c9ee23d68f1"}]}, 0x1a2) getdents64(r9, &(0x7f00000010c0)=""/4067, 0xfe3) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4008040) 5.198653467s ago: executing program 3 (id=7997): syz_usb_connect(0x7, 0x3d, &(0x7f0000000680)=ANY=[@ANYBLOB="120150025f7c8a101e041f40b68f0102030109022b000105e0000609043f100206a91c0209050a082000060a080905000408000108080725010209020064ef1d618736cd8e5f6cc9d3c25e3c4782a3c1ce16b4b6c0c2a7ca59235b26fb29cfa7780b1e516bce596a2cbd38c56cb91b5a0d297838bd76c4b339d82ac40eaf98b31eca2ae6c2174e4d25517677e56dab338cb7fcdd897a464f9aafaf20fb9dc4204d954a8809cf8233fe56a580091233f39ce163b0af164652c9f52f0c611ebd29edfcca189fd84cec978f30b0403279b0e21f111ffa47ecd788cca2ba3eceb312b950760232bd998ffd1cc2a875ebb7"], 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x2}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x80000, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000780)="a8a8ced8be5481f14bff6a38a5596fcf1c3276d4baaed35b8b89d2420e839bd8265be2b4064e4aab6b068995344365a96c622da6b0662e6d67b4fee98850f5d62bf7ae897887a0cb0ee7df0682383a4227f00d348f5a455868c9bf2b799f0312e643123e2770da076ae5ef3b2f519eb6d38a65128b0d4f77f8cdecfd89a69c119fad34633892db078363e58aa90b52df0e673d3f111957b07e965f88bd8f8bb94734da6b561abeaa570629e122918999ddbb41138e9233282688dc404ef5607c8e4ac9463d26694958f8f036aa") ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000280)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{0x6, 0x0, 0xb183}], 0x1, 0x3, 0x79dc8089b2c841c4, 0x0, 0xa5, 0x5c}) io_submit(0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e7000701"], 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001800)=""/183, 0xb7}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x70, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x7, 0x40, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "842f"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xffff, 0x4, 0x40}, {0x6, 0x24, 0x1a, 0xfff9, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x88, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x72, 0xfb}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x80, 0x25, 0x9, 0xff, 0xe}, 0x59, &(0x7f0000000600)={0x5, 0xf, 0x59, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x9, 0x6, 0xa, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "b0efbda1d90ed1a9a8ba86d979bbb6bf"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "029ab23a4e7d5eb6c3d903c116c78f4e"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x6, 0xff, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3, 0x6, 0x2, 0xfd}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x1, 0x99, 0x9, 0x3}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x853, 0x313, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x8c, 0x2, 0x3, 0x1, 0x5, 0x2, {0x9, 0x21, 0x400, 0x4a, 0x1, {0x22, 0xd72}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x4, 0x9}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x5a, 0x7, 0x8, 0xff}, 0x84, &(0x7f00000000c0)={0x5, 0xf, 0x84, 0x1, [@generic={0x7f, 0x10, 0x2, "d111c48cd940b6a8bf87891a663ae0746494c22b554f602277a2951e9f5efdb083a7aa20bbcc633882f2f90962115736bbf34af17ecdb6bd0a81bd15ff864363da246fd16464056fe723993b0ee335ba1575afdbe8cd9e96f87c24e89fc890cfae364799f252af1e0e095af18a5db742a577d89dae035c55276f5333"}]}, 0x3, [{0xff, &(0x7f0000000180)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1407}}, {0x2f, &(0x7f00000002c0)=@string={0x2f, 0x3, "e918eeafd3b24ab12d707ef807d84af27f6135a1783b26756f46bac5ad6adf6c9546903525a4169bffb14b5f14"}}]}) 4.036660748s ago: executing program 6 (id=7998): syz_usb_connect(0x4, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x94, 0x73, 0x8, 0x1199, 0x6821, 0x9859, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x37, 0x5d, 0xd2}}]}}]}}, 0x0) socket(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2, 0x3, 0x8000000000000001, 0x3, 0x4, 0xffffffff7fffffff, 0xfff, 0x3, 0x9b9, 0xfff, 0xe, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x20106}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000007c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x4a, 0xfd, 0xd4, 0x80, 0x0, 0x4, 0x7, 0x4}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0x9, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x5, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xb000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x21, 0x1, 0xfc}, {0x6000, 0x6000, 0x8, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x4, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x0, 0x5, 0x2000, 0x5000, [0xffffffffffffff47, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xd5dd0001, 0x800b, 0xfffdfffb, 0xfffffffc, 0x0, [{0xc, 0x9, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x5}, {0x8, 0x10, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x4, '\x00', 0x27}, {0x0, 0x4, 0x5, '\x00', 0x7}, {0x1, 0x4, 0x80, '\x00', 0x4}, {0x3, 0xf5, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x4, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x4}, {0xf, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x53, '\x00', 0x1}, {0x9, 0x2, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0xac, 0x8, 0xfa, '\x00', 0x42}]}}) 3.463319942s ago: executing program 5 (id=7999): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0xa0, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x2, 0x1, 0x1, 0x0, 0x78, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "f015"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x6, 0x70}, {0x6, 0x24, 0x1a, 0x8, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x71c, 0xff}, @country_functional={0x10, 0x24, 0x7, 0x4, 0x1, [0x1, 0x4, 0x9, 0xfffc, 0x4]}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0xb, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x89, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x79, 0xf8, 0x7}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xe5, 0xfc, 0x9, 0x40, 0x8}, 0xa8, &(0x7f0000000840)={0x5, 0xf, 0xa8, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0xc5, 0x0, 0x9, 0x11000}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x7, 0xf000, 0x4, [0x3f00, 0xff00c0, 0xc000, 0x804180, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x81, 0x5, 0x0, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x8, 0x76, 0x1, 0x3}, @generic={0x56, 0x10, 0x3, "49880535b6561c6291e39733cbb54e0e9c846b28b52214e9190f712a7f9530495a0393bed7756f42efae011e32049165628c2f87491c01e2fba13f0386e1c5bab5c06b405b28494eb4b4d9d08f8abaa1511dfd"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x28, 0x0, 0xfe, 0x3, 0x9}]}, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1409}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = syz_usb_connect$uac1(0x2, 0xba, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0xcf, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff8, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x5, 0x4, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x21, 0x4, 0xf6, 0x7b, "df546bcf7e19"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x9, 0x7, "c84744", "f0"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x5a8, 0x2, "f7b4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x2, 0x5, {0x7, 0x25, 0x1, 0x100, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x9, 0x8, 0x0, "14a0b0"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xe9, 0x2, 0x3, 0xfa, "476275d7f5b4d7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x0, 0x7, {0x7, 0x25, 0x1, 0x7, 0x0, 0x924}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x7f, 0xf9, 0x2, 0x20, 0xf}, 0x9b, &(0x7f0000000540)=ANY=[@ANYBLOB="050f9b00027b100ad39d39f25fc13e406f3b68412344999f05a80df94812cc76a1efb4d180318acde8265a9d63b04eef76f3e0de4b97a564b091f06aa8d2215007dc39ac3ec3d09ea4ed76a894f9e11c2f9f52945c3eb90abe7834f2cbc58a83b7e8a9d84e2adde75df10f64382d08ab22b130fe51b7eb4b5f22faaba69353551b100a142db73a22eed24e6b4475a4c5d7b95ca0330680ffff57d2bb76c71173bee69086b8c69c74a17fc79e2f6bd01e2a492fceec911d2f4d737c6ae171bb66a730f70dc8b1c7b14f2ec3e4fb6377d2a4d46f5af59dcd2d"], 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xcc, &(0x7f0000000280)=@string={0xcc, 0x3, "a65cf5c4e0ac73226092f3dd2fcdacd43c5dd4a9a0e5ea8b38997a6f85a69edc929ced7f94099aca4a5730a181e5334bef04fc516bfe8a14c42a6edef94ffe5c81743b1dfb44ddd382107075140877b20512c70a3f9993c464f789b9ed4dc3b415b3e310d525bde6b975f8fcc8db89f64ce0ab60866f768a29b23ed9c7f5b823a21ec0d1ff18fc729fdcea67c6d0cf5213f38329273d7ee124710597814798b8033f412e76c879fffbbf38f8a17c3558d50b7dc24ced18c0f467a837b4d2b9cae16a58c8fe431ea9f7d4"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xdd, &(0x7f00000003c0)=@string={0xdd, 0x3, "e45f1140b139c0e586f0c2aa5b9b99f796ab8956f9e0b625504d99f1c3401914d31db1ba37d3d67c10bf78b43046853ef0e9c2c87d5b389fac06c5856a3b3220619fbf7f4365d6071d11827f63377ad7b977e8a09b08c207876cdaaf85d054e775140d4d0e7c96aeeb292210f762bf0e4cb246ac6701271012ecff574142571660f6466b6243b8c2ff212bc69398a5d80f6db57189783c6acfed8a5a35322fd2fe6cb45c15ee9baf4c7cb2b63fff6e8481e9d5c6ed67d44d49fd2c0e2790083ada939813d6c1231a1baed5970c401eaf7542273d6510e7d5baca4c"}}]}) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYBLOB="04020000130a050000000000000000000000000708000340000000010900020073797a30000000000900010073797a30"], 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x24048084) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, &(0x7f00000001c0)=0x8) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.375809983s ago: executing program 2 (id=8000): r0 = syz_open_dev$sg(&(0x7f0000000100), 0xf9ba, 0x28540) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x0, 0x401, 0x8a}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7b0ac4ff0000000071103e000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 3.315078878s ago: executing program 2 (id=8001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) rt_sigaction(0x4020, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="f20f8e341b341b2b710026f3440faedac482d902178f491891c6c4617167302e3e660fe6a30e000000f04383720406426e420f01da", 0x0, 0x0}, 0xfffffffffffffcf6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) 3.163158043s ago: executing program 6 (id=8002): unshare(0x60040200) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="0933034f76fae18f6882d48ea826a7ba98d1cfc780e13f1fa2a2e99396fea24624d7c20d9125754ab7ee8c3d2543f853f2da7350f4f4fd25e3c5644a9574e010fed7547192710e5b79b54085e8cec03163d463e85fe815bcad6f12b4bf455138c48d5b73bb4b4d632452a603d8c59f4e12e7cd8e235a24dcf65fff55291a0c5647b3c36369e2f45ea456bf4fe7a16404bb975d", @ANYRES8=r0, @ANYRESDEC=r1], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmod\a=00000000000040000,user_id=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00'], 0xfb, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000004100)={0x2020}, 0x2020) write$vga_arbiter(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="746172676574205043493a5b89d9f46ac070df4e31642e3100"], 0x14) syz_usb_disconnect(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000300)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r10, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x22820adc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 3.141349196s ago: executing program 3 (id=8003): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100e6bd7000f9dbdf25140000000800130003000000080009b7ffba05d239000400000008000f000000000008000e00300200000800"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/193, 0xc1}], 0x1}, 0x7}], 0x1, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) io_setup(0xea, &(0x7f00000000c0)=0x0) io_submit(r5, 0x2, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x5ea, r4, 0x0}, 0x0]) io_cancel(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (async) r9 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, r7, 0xd66771a5e8224ded, 0x4, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x24}}, 0x4008040) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000005ac0)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f00000058c0)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4e22, 0x1, 0x4e24, 0x5, 0x2, 0xa0, 0x1a0, 0x3b}, {0x9, 0x5b, 0x6, 0x2, 0x7, 0xc, 0xb, 0x6}, {0x2, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff2}, 0xa79, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, 0x5}, [@policy_type={0xa, 0x10, {0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44040}, 0x20000004) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 2.8777976s ago: executing program 3 (id=8004): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0xfec1) close(0xffffffffffffffff) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000007080)=[{{&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000008300)=[{&(0x7f0000000240)=""/175, 0xaf}, {&(0x7f0000000e40)=""/87, 0x57}, {&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000140)}, {&(0x7f0000000800)=""/124, 0x7c}, {&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/112, 0x70}, {&(0x7f0000007300)=""/4096, 0x1000}], 0x8}, 0x5}, {{&(0x7f0000005380)=@nfc_llcp, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000980)=""/54, 0x36}, {&(0x7f00000009c0)=""/150, 0x96}, {&(0x7f0000000a80)=""/72, 0x48}, {&(0x7f0000000b00)=""/73, 0x49}, {&(0x7f0000000b80)=""/19, 0x13}], 0x7, &(0x7f0000000c40)=""/12, 0xc}, 0x81}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e40)}, {&(0x7f0000000c80)=""/28, 0x1c}, {&(0x7f0000000d80)=""/154, 0x9a}, {&(0x7f0000000cc0)=""/185, 0xb9}, {&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000ec0)=""/177, 0xb1}], 0x6}, 0xb343}, {{&(0x7f0000001000)=@sco={0x1f, @none}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001080)=""/33, 0x21}, {&(0x7f00000010c0)=""/134, 0x86}, {&(0x7f0000001180)=""/177, 0xb1}, {&(0x7f0000001240)=""/12, 0xc}, {&(0x7f0000001280)=""/209, 0xd1}, {&(0x7f0000001380)=""/41, 0x29}], 0x6, &(0x7f0000001440)=""/19, 0x13}, 0x7}, {{&(0x7f0000001480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000600)=""/62, 0x3e}, {&(0x7f0000001540)=""/235, 0xeb}, {&(0x7f0000001640)=""/133, 0x85}, {&(0x7f0000001700)=""/231, 0xe7}, {&(0x7f0000001800)=""/20, 0x14}, {&(0x7f0000001840)=""/81, 0x51}], 0x6, &(0x7f0000001940)=""/4096, 0x1000}, 0xb}, {{&(0x7f0000002940)=@nfc_llcp, 0x80, &(0x7f0000003e80)=[{&(0x7f0000008380)=""/193, 0xc1}, {&(0x7f0000002a80)=""/162, 0xa2}, {&(0x7f0000000640)=""/63, 0x3f}, {&(0x7f0000002b80)=""/74, 0x4a}, {&(0x7f0000002c00)=""/35, 0x23}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/188, 0xbc}, {&(0x7f0000008480)=""/241, 0xf1}], 0x8, &(0x7f0000003cc0)=""/25, 0x19}, 0x3}, {{&(0x7f0000003d00)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005480)=[{&(0x7f0000003d80)=""/250, 0xfa}, {&(0x7f0000000680)=""/88, 0x58}, {&(0x7f0000003f00)=""/238, 0xee}, {&(0x7f0000004000)=""/212, 0xd4}, {&(0x7f0000004100)=""/83, 0x53}, {&(0x7f0000004180)=""/216, 0xd8}, {&(0x7f0000004280)=""/233, 0xe9}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000008580)=""/239, 0xef}], 0x9, &(0x7f0000005540)}, 0x400}, {{&(0x7f0000005580)=@generic, 0x80, &(0x7f00000069c0)=[{&(0x7f0000005600)}, {&(0x7f0000005640)=""/186, 0xba}, {&(0x7f0000005700)=""/126, 0x7e}, {&(0x7f0000005780)=""/88, 0x58}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000006800)=""/43, 0x2b}, {&(0x7f0000006840)=""/228, 0xe4}, {&(0x7f0000006940)=""/113, 0x71}], 0x8, &(0x7f0000006a40)=""/85, 0x55}, 0x3523}, {{&(0x7f0000003c40)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000006d00)=[{&(0x7f0000006b40)=""/131, 0x83}, {&(0x7f0000006c00)=""/225, 0xe1}], 0x2, &(0x7f0000000880)=""/92, 0x5c}, 0xf}, {{&(0x7f0000006dc0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000006fc0)=[{&(0x7f0000006e40)=""/109, 0x6d}, {&(0x7f0000006ec0)=""/247, 0xf7}], 0x2, &(0x7f0000007000)=""/102, 0x66}, 0x6}], 0xa, 0xb39020f61b89e5ad, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x0, 0x0, 0xb49, 0x40000000009, 0x5, 0x0, 0x3}, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000000004002, 0x0) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$inet6(0xa, 0x1, 0x100) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x103902) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) 2.823289553s ago: executing program 2 (id=8005): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x2, 0x45, 0x0, "00000000000000000000000000000000000000f300000000000000000000000000000000350d0000000000000000000083c0d55760b2d13d000c00cbcd00800000000000000000080000008000"}, 0xd8) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000000c0)=""/111) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0xf, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x6}, [@feature_unit={0x13, 0x24, 0x6, 0x1, 0x3, 0x6, [0x8, 0x8, 0x1, 0x0, 0xa, 0xa], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xfd, 0x1, 0xff, 0xad}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x2, 0x3d}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0xb0, 0x5, {0x7, 0x25, 0x1, 0x2, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x40, 0xfb, {0x7, 0x25, 0x1, 0x0, 0xed, 0x1}}}}}}}]}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) setreuid(0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x90, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x138, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@ip={@private=0x3, @private, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x1d}, 0x0, 0x1c, 0x90, 0x0, {0x0, 0x1c8}}, @unspec=@NOTRACK={0x20}}, {{@ip={@remote, @local, 0x0, 0x0, 'wg0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xd0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x1, 0x4}, {0x0, 0x2, 0x4}, {0x1, 0x8, 0x7}, 0x4, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2ae) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0xad, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) 2.099507766s ago: executing program 2 (id=8006): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800faf3000040"]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0xd}}, './file0\x00'}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r9 = openat$cgroup_freezer_state(r7, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r11, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902970003010000000904000000010100000a24010000000201021324060000ebffff0800000000000000000000092403fd030300000009829d8d46f8431cfd0924030004020004fc0a2405040050b04dc2ef09060100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010101ea"], 0x0) 1.921297041s ago: executing program 3 (id=8007): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x16, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000600)={0x4040100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000280000/0x1000)=nil, 0x1000, 0xa, 0x4010, r3, 0x5cb9000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = dup(r5) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011146d77"], 0x18}}, 0x8000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x37000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x62, &(0x7f0000000200)=0xad52, 0x4) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x200) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000180)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r9, 0xc1007c01, &(0x7f0000000240)={r10}) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x1) 1.491463481s ago: executing program 1 (id=8008): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xe13b, 0x2, 0xfffeffff, 0x10001, 0x5, 0xffffffffffffffff}) ptrace$poke(0x5, r2, &(0x7f0000000100), 0x3ff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, 0x0, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x1000040c, 0xffff}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80f81, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r3, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 959.478404ms ago: executing program 3 (id=8009): unshare(0x22020600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x8000, @loopback, 0x7}, 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000440)={0x40000001}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1000001, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x412bc8a704fdbeae}], 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) sendto$inet6(r1, &(0x7f0000000280)="32780f6439", 0xffffffffffffff30, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='bic\x00', 0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x404901) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x6}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x11) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f00000000c0)={0x1d, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008d02"]) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="24002bbd7000fbdbdf2504000000080002000800000005000500080000000c0006004e230000060001200a000000080006000200000008701a0e049e5ec0cb88edb19b4c000200"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, 0x0) r10 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r10, 0x80047437, &(0x7f0000000340)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff) r11 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$dsp(r11, &(0x7f0000000480)=""/41, 0x29) 311.508717ms ago: executing program 5 (id=8010): socket$inet(0xa, 0x5, 0x1e) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x58400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlink(&(0x7f0000000000)='./file1\x00') 28.752504ms ago: executing program 5 (id=8011): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a000905040200000000"], 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) read(r4, 0x0, 0x58) bpf$MAP_CREATE(0xc00000000000018, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500400083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7021000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x805, 0x0) 0s ago: executing program 6 (id=8012): syz_usb_connect(0x4, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x94, 0x73, 0x8, 0x1199, 0x6821, 0x9859, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x37, 0x5d, 0xd2}}]}}]}}, 0x0) socket(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2, 0x3, 0x8000000000000001, 0x3, 0x4, 0xffffffff7fffffff, 0xfff, 0x3, 0x9b9, 0xfff, 0xe, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x20106}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000007c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x4a, 0xfd, 0xd4, 0x80, 0x0, 0x4, 0x7, 0x4}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0x9, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x5, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xb000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x21, 0x1, 0xfc}, {0x6000, 0x6000, 0x8, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x4, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x0, 0x5, 0x2000, 0x5000, [0xffffffffffffff47, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xd5dd0001, 0x800b, 0xfffdfffb, 0xfffffffc, 0x0, [{0xc, 0x9, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x5}, {0x8, 0x10, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x4, '\x00', 0x27}, {0x0, 0x4, 0x5, '\x00', 0x7}, {0x1, 0x4, 0x80, '\x00', 0x4}, {0x3, 0xf5, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x4, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x4}, {0xf, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x53, '\x00', 0x1}, {0x9, 0x2, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0xac, 0x8, 0xfa, '\x00', 0x42}]}}) kernel console output (not intermixed with test programs): -1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2199.740436][T21186] usb 3-1: config 8 has no interface number 0 [ 2199.747241][T21186] usb 3-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2199.766278][T21186] usb 3-1: config 8 interface 39 has no altsetting 0 [ 2199.776244][T21186] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2199.787793][T21186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.797752][T21186] usb 3-1: Product: syz [ 2199.802025][T21186] usb 3-1: Manufacturer: syz [ 2199.903876][T21186] usb 3-1: SerialNumber: syz [ 2200.197540][ T1923] rdma_op ffff888078a5b9f0 conn xmit_rdma 0000000000000000 [ 2200.209664][ T1923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2200.235138][ T1923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2200.259505][ T1923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2200.270724][ T1923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2200.286980][T21186] ipheth 3-1:8.39: Unable to find endpoints [ 2200.325445][T21186] usb 3-1: USB disconnect, device number 102 [ 2200.860402][ T1937] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 2200.868970][ T1937] [U] J"—E:ÀÆ" [ 2200.983255][ T1939] fuse: Bad value for 'fd' [ 2201.021971][ T1430] usb 2-1: USB disconnect, device number 25 [ 2201.145381][T21186] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 2201.314704][T21186] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2201.325020][T21186] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2201.339381][T21186] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2201.348809][T21186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.357056][T21186] usb 4-1: Product: syz [ 2201.361303][T21186] usb 4-1: Manufacturer: syz [ 2201.366777][T21186] usb 4-1: SerialNumber: syz [ 2201.590459][T21186] usb 4-1: 0:2 : does not exist [ 2201.601078][T21186] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2201.626752][T21186] usb 4-1: USB disconnect, device number 46 [ 2201.658117][ T1822] udevd[1822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2204.053066][T21186] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2204.178669][T28979] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2204.452984][T28979] usb 4-1: Using ep0 maxpacket: 8 [ 2204.460166][T28979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2204.480663][T28979] usb 4-1: config 0 has no interfaces? [ 2204.497929][T28979] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 2204.507611][T21186] usb 3-1: Using ep0 maxpacket: 16 [ 2204.518888][T28979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.558510][T21186] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 2204.574125][T21186] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2204.615831][T21186] usb 3-1: config 8 has no interface number 0 [ 2204.621967][T21186] usb 3-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2204.635413][T28979] usb 4-1: Product: syz [ 2204.639893][T28979] usb 4-1: Manufacturer: syz [ 2204.644745][T28979] usb 4-1: SerialNumber: syz [ 2204.652303][T28979] usb 4-1: config 0 descriptor?? [ 2204.659506][T21186] usb 3-1: config 8 interface 39 has no altsetting 0 [ 2204.802972][T21186] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2204.823080][T21186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.831113][T21186] usb 3-1: Product: syz [ 2204.841686][T21186] usb 3-1: Manufacturer: syz [ 2204.846629][T21186] usb 3-1: SerialNumber: syz [ 2204.991115][ T1980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7497'. [ 2205.165492][ T1430] usb 4-1: USB disconnect, device number 47 [ 2205.219717][ T1973] rdma_op ffff888079c081f0 conn xmit_rdma 0000000000000000 [ 2205.230296][ T1973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2205.310131][ T1973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2205.383513][ T1973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2205.453919][ T1973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2205.474764][T21186] ipheth 3-1:8.39: Unable to find endpoints [ 2205.532830][T21186] usb 3-1: USB disconnect, device number 103 [ 2205.569567][ T1997] loop3: detected capacity change from 0 to 1 [ 2205.596376][ T1997] Dev loop3: unable to read RDB block 1 [ 2205.614371][ T1997] loop3: unable to read partition table [ 2205.633116][ T1997] loop3: partition table beyond EOD, truncated [ 2205.639341][ T1997] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2205.912324][ T30] audit: type=1326 audit(1756447925.950:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2002 comm="syz.3.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2205.943774][ T2004] FAULT_INJECTION: forcing a failure. [ 2205.943774][ T2004] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.963026][ T30] audit: type=1326 audit(1756447925.980:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2002 comm="syz.3.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2205.985826][ T2004] CPU: 0 UID: 0 PID: 2004 Comm: syz.3.7504 Not tainted syzkaller #0 PREEMPT(full) [ 2205.985849][ T2004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2205.985858][ T2004] Call Trace: [ 2205.985865][ T2004] [ 2205.985873][ T2004] dump_stack_lvl+0x189/0x250 [ 2205.985897][ T2004] ? __pfx____ratelimit+0x10/0x10 [ 2205.985921][ T2004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2205.985939][ T2004] ? __pfx__printk+0x10/0x10 [ 2205.985967][ T2004] ? __pfx___might_resched+0x10/0x10 [ 2205.985983][ T2004] ? fs_reclaim_acquire+0x7d/0x100 [ 2205.986016][ T2004] should_fail_ex+0x414/0x560 [ 2205.986043][ T2004] should_failslab+0xa8/0x100 [ 2205.986067][ T2004] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2205.986088][ T2004] ? audit_log_start+0x126/0x870 [ 2205.986110][ T2004] audit_log_start+0x126/0x870 [ 2205.986134][ T2004] ? __pfx_audit_log_start+0x10/0x10 [ 2205.986156][ T2004] ? migrate_enable+0x29c/0x3c0 [ 2205.986180][ T2004] ? __pfx_migrate_enable+0x10/0x10 [ 2205.986202][ T2004] audit_seccomp+0x64/0x190 [ 2205.986217][ T2004] ? clear_bhb_loop+0x60/0xb0 [ 2205.986234][ T2004] ? clear_bhb_loop+0xe/0xb0 [ 2205.986255][ T2004] __seccomp_filter+0x9aa/0x1a40 [ 2205.986285][ T2004] ? __pfx___seccomp_filter+0x10/0x10 [ 2205.986301][ T2004] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2205.986325][ T2004] ? __pfx_vfs_write+0x10/0x10 [ 2205.986350][ T2004] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2205.986377][ T2004] ? __fget_files+0x3a0/0x420 [ 2205.986423][ T2004] ? __pfx_ksys_write+0x10/0x10 [ 2205.986443][ T2004] ? __secure_computing+0xe2/0x2a0 [ 2205.986462][ T2004] syscall_trace_enter+0xaa/0x160 [ 2205.986489][ T2004] do_syscall_64+0xd3/0x3b0 [ 2205.986510][ T2004] ? lockdep_hardirqs_on+0x9c/0x150 [ 2205.986528][ T2004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2205.986542][ T2004] ? clear_bhb_loop+0x60/0xb0 [ 2205.986560][ T2004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2205.986576][ T2004] RIP: 0033:0x7f4b1138ebe9 [ 2205.986593][ T2004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2205.986608][ T2004] RSP: 002b:00007f4b1219b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2205.986627][ T2004] RAX: ffffffffffffffda RBX: 00007f4b115b5fa0 RCX: 00007f4b1138ebe9 [ 2205.986638][ T2004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f4b0f568000 [ 2205.986650][ T2004] RBP: 00007f4b1219b090 R08: 0000000000000000 R09: 0000000000000000 [ 2205.986660][ T2004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2205.986670][ T2004] R13: 00007f4b115b6038 R14: 00007f4b115b5fa0 R15: 00007f4b116dfa28 [ 2205.986698][ T2004] [ 2205.986746][ T2004] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 2205.987305][ T1995] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7500'. [ 2206.033184][ T2004] audit: out of memory in audit_log_start [ 2206.268805][ T30] audit: type=1326 audit(1756447925.980:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2002 comm="syz.3.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2206.301215][ T30] audit: type=1326 audit(1756447925.980:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2002 comm="syz.3.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2206.439826][ T30] audit: type=1326 audit(1756447925.980:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2002 comm="syz.3.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2206.714516][ T2011] tipc: Enabled bearer , priority 0 [ 2206.923860][ T2011] syzkaller0: entered promiscuous mode [ 2206.929370][ T2011] syzkaller0: entered allmulticast mode [ 2206.982808][ T30] audit: type=1326 audit(1756447925.980:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2002 comm="syz.3.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b1138d550 code=0x7ffc0000 [ 2207.145601][ T30] audit: type=1326 audit(1756447925.990:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2002 comm="syz.3.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4b1138d69f code=0x7ffc0000 [ 2207.243745][ T30] audit: type=1326 audit(1756447926.630:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2002 comm="syz.3.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4b1138d5fc code=0x7ffc0000 [ 2207.282875][ T1431] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2207.471956][ T1431] usb 3-1: Using ep0 maxpacket: 32 [ 2207.488149][ T1431] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2207.534216][ T1431] usb 3-1: config 0 has no interface number 0 [ 2207.545861][ T1431] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2207.570772][ T1431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.594857][ T1431] usb 3-1: Product: syz [ 2207.599054][ T1431] usb 3-1: Manufacturer: syz [ 2207.644487][ T1431] usb 3-1: SerialNumber: syz [ 2207.705494][ T1431] usb 3-1: config 0 descriptor?? [ 2207.719782][ T1431] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2207.734688][ T1431] usb 3-1: selecting invalid altsetting 1 [ 2207.782988][T21186] tipc: Node number set to 4194305 [ 2207.785984][ T1431] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2207.877709][ T1431] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2207.950145][ T1431] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2207.984713][ T1431] usb 3-1: media controller created [ 2207.990281][ T2011] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 2208.128702][ T1431] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2209.292751][ T2041] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.7510'. [ 2209.308500][ T2041] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=#' already exists in 'ieee80211' [ 2209.358014][ T1431] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2209.392950][ T1431] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2210.173582][ T2054] loop3: detected capacity change from 0 to 1 [ 2210.220605][ T1583] Dev loop3: unable to read RDB block 1 [ 2210.263045][T13152] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 2210.277728][ T1583] loop3: unable to read partition table [ 2210.312181][ T1583] loop3: partition table beyond EOD, truncated [ 2210.334548][ T2054] Dev loop3: unable to read RDB block 1 [ 2210.340278][ T2054] loop3: unable to read partition table [ 2210.376128][ T2054] loop3: partition table beyond EOD, truncated [ 2210.382653][ T2054] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2210.462966][T13152] usb 4-1: device descriptor read/64, error -71 [ 2210.706084][T13152] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 2210.803083][ T2064] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 2210.809639][ T2064] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2210.843038][ T2064] vhci_hcd vhci_hcd.0: Device attached [ 2210.889324][ T2064] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2210.898029][T13152] usb 4-1: device descriptor read/64, error -71 [ 2210.911655][ T2064] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2210.928639][ T2064] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2210.959822][ T2064] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2210.990007][ T2064] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2211.013602][T13152] usb usb4-port1: attempt power cycle [ 2211.023748][ T9] vhci_hcd: vhci_device speed not set [ 2211.039902][ T2064] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(19) [ 2211.046541][ T2064] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2211.093008][ T9] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 2211.125478][ T2064] vhci_hcd vhci_hcd.0: Device attached [ 2211.153919][ T2070] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2211.205731][ T2064] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2211.359332][ T2065] vhci_hcd: connection reset by peer [ 2211.362858][ T2068] vhci_hcd: connection closed [ 2211.367504][T28831] vhci_hcd: stop threads [ 2211.382862][T13152] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 2211.406319][T13152] usb 4-1: device descriptor read/8, error -71 [ 2211.434311][T28831] vhci_hcd: release socket [ 2211.458057][T28831] vhci_hcd: disconnect device [ 2211.479097][T28831] vhci_hcd: stop threads [ 2211.508997][T28831] vhci_hcd: release socket [ 2211.536811][T28831] vhci_hcd: disconnect device [ 2211.666707][ T1949] Set syz1 is full, maxelem 65536 reached [ 2211.682955][T13152] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 2211.723555][T13152] usb 4-1: device descriptor read/8, error -71 [ 2211.833266][T13152] usb usb4-port1: unable to enumerate USB device [ 2214.738054][ T2106] loop3: detected capacity change from 0 to 1 [ 2214.759116][ T1583] Dev loop3: unable to read RDB block 1 [ 2214.801770][ T1583] loop3: unable to read partition table [ 2214.820010][ T1583] loop3: partition table beyond EOD, truncated [ 2214.832530][ T2106] Dev loop3: unable to read RDB block 1 [ 2214.851084][ T2106] loop3: unable to read partition table [ 2214.857971][ T2106] loop3: partition table beyond EOD, truncated [ 2214.865901][ T2106] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2215.037301][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2215.037313][ T30] audit: type=1326 audit(1756447935.080:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2109 comm="syz.1.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2215.135392][ T2112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7526'. [ 2215.292283][ T30] audit: type=1326 audit(1756447935.130:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2109 comm="syz.1.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2215.314659][ C1] vkms_vblank_simulate: vblank timer overrun [ 2215.328108][ T30] audit: type=1326 audit(1756447935.130:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2109 comm="syz.1.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2215.431289][ T30] audit: type=1326 audit(1756447935.250:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2109 comm="syz.1.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2215.460385][ T30] audit: type=1326 audit(1756447935.250:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2109 comm="syz.1.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2215.819824][ T1430] hid (null): unknown global tag 0xe [ 2215.843880][ T1430] hid (null): report_id 0 is invalid [ 2215.849339][ T1430] hid (null): unknown global tag 0xd [ 2216.004079][ T1430] hid (null): invalid report_size 2079960240 [ 2216.010189][ T1430] hid (null): global environment stack underflow [ 2216.092124][ T1430] hid (null): unknown global tag 0xa4 [ 2216.102044][ T1430] hid (null): unknown global tag 0xe [ 2216.111368][ T1430] hid (null): global environment stack underflow [ 2216.118091][ T1430] hid (null): unknown global tag 0xd [ 2216.126287][ T1430] hid (null): unknown global tag 0xd [ 2216.131871][ T1430] hid (null): unknown global tag 0x32 [ 2216.150275][ T1430] hid (null): invalid report_count 2133471928 [ 2216.167771][ T1430] hid (null): unknown global tag 0xe [ 2216.178929][ T1430] hid (null): unknown global tag 0xe [ 2216.188727][ T1430] hid (null): global environment stack underflow [ 2216.195994][ T1430] hid (null): report_id 0 is invalid [ 2216.201534][ T1430] hid (null): global environment stack underflow [ 2216.209573][ T1430] hid (null): unknown global tag 0xe [ 2216.215275][ T9] vhci_hcd: vhci_device speed not set [ 2216.221405][ T1430] hid (null): unknown global tag 0xd [ 2216.264627][ T1430] hid (null): unknown global tag 0xc [ 2216.285886][ T1430] hid (null): unknown global tag 0xdf [ 2216.306277][ T1430] hid (null): unknown global tag 0xe [ 2216.322619][ T1430] hid (null): global environment stack underflow [ 2216.338315][ T1430] hid (null): unknown global tag 0xe [ 2216.349800][ T1430] hid (null): unknown global tag 0xab [ 2216.362318][ T1430] hid (null): unknown global tag 0xe [ 2216.386369][ T1430] hid (null): invalid report_size 1716914170 [ 2216.414688][ T1430] hid (null): unknown global tag 0xc [ 2216.531404][ T1430] hid (null): unknown global tag 0x76 [ 2216.557319][ T1430] hid (null): unknown global tag 0xe [ 2216.580306][ T1430] hid (null): unknown global tag 0xd [ 2216.602863][ T1430] hid (null): report_id 0 is invalid [ 2216.689226][ T1430] hid (null): invalid report_size 85951122 [ 2216.713036][ T1430] hid (null): unknown global tag 0xd [ 2216.724805][ T1430] hid_parser_main: 28 callbacks suppressed [ 2216.724820][ T1430] hid-generic 0000:0002:91FB24D.0072: unknown main item tag 0x2 [ 2216.751698][ T1430] hid-generic 0000:0002:91FB24D.0072: unknown main item tag 0x7 [ 2216.776577][ T1430] hid-generic 0000:0002:91FB24D.0072: unknown main item tag 0x6 [ 2216.785877][ T2126] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 2216.791798][ T2126] [U] [“)ÎU°}¸Ç”ÍÚJϬ}N°SEF*œ £‡¿ßÅNZÍÀF[F_H®¦'ª„W"ÓXÅ~¶ÎÏÚ;VA˜)^ˆ`Û1C':ZÂÞ÷ÃÃÚÞFOBÞ *?ÛŸC‹Z˜S¯Ý<8ZNÑ·š Ñ˜¾ÔEY TT<$CÐR¿Æ–»/VG¿Ðà {Y«~Y5\—;ƃZ–ÓDX ŸƒYÖA€Ì"XI®F¦{‚Å`A$í¡55?­É×S«AÃM¢ÅO‰¤«ÝÍ»*K€¶ [ 2216.813328][ C1] vkms_vblank_simulate: vblank timer overrun [ 2216.820657][ T1430] hid-generic 0000:0002:91FB24D.0072: unknown main item tag 0x2 [ 2216.829660][ T1430] hid-generic 0000:0002:91FB24D.0072: unexpected long global item [ 2216.843452][ T1430] hid-generic 0000:0002:91FB24D.0072: probe with driver hid-generic failed with error -22 [ 2216.857008][ T2126] [U] ÔO‡4 [ 2216.860276][ T2126] [U] œšU·©BÕ+ '~GIÞƒRQ^Á¿™,(-|¢ØÚŸ†Ë-<ƒ6&µÅH.Z9ÉÎ/ÚRJΩ°™³ËˆÅ+)Ö­KΦ.›NHÕA#LW#RF7–PÙªÛÍMAX€Ï]Œ¤›LN"KŒM +,G¶SB´HJ‚¹ËXÏ̧ÉCÎÝQ„ [ 2216.959900][ T2145] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2216.966446][ T2145] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2216.980815][ T2145] vhci_hcd vhci_hcd.0: Device attached [ 2216.989828][ T2145] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2217.012254][ T2145] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2217.031740][ T2145] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2217.050752][ T2145] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2217.069794][ T2145] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2217.099574][ T2145] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(19) [ 2217.106200][ T2145] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2217.121562][ T2145] vhci_hcd vhci_hcd.0: Device attached [ 2217.155031][ T2150] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2217.164478][ T2145] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2217.172616][T13152] vhci_hcd: vhci_device speed not set [ 2217.182824][ T1430] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 2217.192166][ T2146] vhci_hcd: connection closed [ 2217.192395][ T2148] vhci_hcd: connection closed [ 2217.197518][ T1108] vhci_hcd: stop threads [ 2217.233554][ T1108] vhci_hcd: release socket [ 2217.241002][ T1108] vhci_hcd: disconnect device [ 2217.253445][ T1108] vhci_hcd: stop threads [ 2217.257858][ T1108] vhci_hcd: release socket [ 2217.266365][ T1108] vhci_hcd: disconnect device [ 2217.282919][T13152] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 2217.291497][T13152] usb 45-1: enqueue for inactive port 0 [ 2217.375906][T13152] vhci_hcd: vhci_device speed not set [ 2217.385688][ T1430] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2217.397176][ T1430] usb 2-1: not running at top speed; connect to a high speed hub [ 2217.406309][ T1430] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2217.425586][ T1430] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2217.446134][ T1430] usb 2-1: config 1 has no interface number 1 [ 2217.467027][ T1430] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2217.481301][ T1430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.501556][ T1430] usb 2-1: Product: syz [ 2217.511541][ T1430] usb 2-1: Manufacturer: syz [ 2217.522855][ T1430] usb 2-1: SerialNumber: syz [ 2217.749076][ T2126] netlink: 'syz.1.7533': attribute type 75 has an invalid length. [ 2217.768027][ T1430] usb 2-1: 2:1 : unsupported format bits 0x80 [ 2217.822395][ T1430] usb 2-1: USB disconnect, device number 26 [ 2217.926133][ T1583] udevd[1583]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2218.240809][ T2168] fuse: Bad value for 'fd' [ 2218.802869][T13152] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2219.006679][T13152] usb 2-1: too many configurations: 61, using maximum allowed: 8 [ 2219.015610][T13152] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.029543][T13152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2219.103803][T13152] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.119266][T13152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2219.150634][T13152] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.170715][T13152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2219.195879][T13152] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.238866][T13152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2219.243792][ T2179] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2219.259432][T13152] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.279868][T13152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2219.313427][ T2179] netlink: 'syz.5.7545': attribute type 16 has an invalid length. [ 2219.313876][T13152] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.348594][ T2179] netlink: 'syz.5.7545': attribute type 17 has an invalid length. [ 2219.367863][T13152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2219.389150][T13152] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.412820][T13152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2219.444651][T13152] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.462836][T13152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2219.474214][T13152] usb 2-1: New USB device found, idVendor=1d6b, idProduct=ecd1, bcdDevice=e9.02 [ 2219.484394][T13152] usb 2-1: New USB device strings: Mfr=46, Product=133, SerialNumber=240 [ 2219.503385][T13152] usb 2-1: Product: syz [ 2219.507584][T13152] usb 2-1: Manufacturer: syz [ 2219.512182][T13152] usb 2-1: SerialNumber: syz [ 2219.512939][ T30] audit: type=1326 audit(1756447939.540:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.5.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18d18ebe9 code=0x7ffc0000 [ 2219.545818][ T30] audit: type=1326 audit(1756447939.540:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.5.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18d18ebe9 code=0x7ffc0000 [ 2219.577591][ T30] audit: type=1326 audit(1756447939.540:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.5.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd18d18ebe9 code=0x7ffc0000 [ 2219.605155][ T30] audit: type=1326 audit(1756447939.540:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.5.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18d18ebe9 code=0x7ffc0000 [ 2219.613304][ T1430] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2219.627508][ C1] vkms_vblank_simulate: vblank timer overrun [ 2219.633959][ T30] audit: type=1326 audit(1756447939.540:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.5.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd18d18ebe9 code=0x7ffc0000 [ 2219.663465][ C1] vkms_vblank_simulate: vblank timer overrun [ 2219.779344][T13152] usb 2-1: USB disconnect, device number 27 [ 2219.802893][ T1430] usb 4-1: Using ep0 maxpacket: 16 [ 2219.812542][ T1430] usb 4-1: config 0 has an invalid interface number: 63 but max is 0 [ 2219.829366][ T1430] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.848940][ T1430] usb 4-1: config 0 has no interface number 0 [ 2219.857087][ T1430] usb 4-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2219.867797][ T1430] usb 4-1: config 0 interface 63 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2219.880968][ T1430] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=41.e6 [ 2219.890189][ T1430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.907355][ T1430] usb 4-1: config 0 descriptor?? [ 2220.251333][ T2181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2220.313226][ T2181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2220.425692][ T1430] usb 4-1: USB disconnect, device number 52 [ 2220.465609][ T2194] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2220.472139][ T2194] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2220.483534][ T2194] vhci_hcd vhci_hcd.0: Device attached [ 2220.519015][ T2194] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2220.550820][ T2194] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2220.680703][ T2199] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2220.701047][ T2194] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2220.712941][T13152] vhci_hcd: vhci_device speed not set [ 2220.757337][ T2194] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2220.821550][T13152] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 2220.835335][ T2199] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2220.849029][ T2199] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2220.873218][ T2194] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(19) [ 2220.879837][ T2194] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2220.907232][ T2194] vhci_hcd vhci_hcd.0: Device attached [ 2220.918133][ T2201] vhci_hcd: connection closed [ 2220.918434][T28828] vhci_hcd: stop threads [ 2220.930931][T28828] vhci_hcd: release socket [ 2221.012311][ T2195] vhci_hcd: connection reset by peer [ 2221.042488][T28828] vhci_hcd: disconnect device [ 2221.070668][T28828] vhci_hcd: stop threads [ 2221.103420][T28828] vhci_hcd: release socket [ 2221.121268][T28828] vhci_hcd: disconnect device [ 2221.294363][ T2208] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2221.492504][ T2212] netlink: 'syz.6.7554': attribute type 6 has an invalid length. [ 2221.604121][ T2214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2221.616954][ T2214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2221.832620][ T2217] syzkaller0: entered promiscuous mode [ 2221.898880][ T2217] syzkaller0: entered allmulticast mode [ 2221.973227][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.979627][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.301053][ T2228] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7560'. [ 2222.399846][ T2227] loop3: detected capacity change from 0 to 1 [ 2222.425543][ T2232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2222.434437][ T2227] Dev loop3: unable to read RDB block 1 [ 2222.442980][ T2227] loop3: unable to read partition table [ 2222.448997][ T2227] loop3: partition table beyond EOD, truncated [ 2222.509431][ T2227] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2222.511980][ T2232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2222.903616][ T2246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2222.932862][ T1430] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2222.941854][ T2232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2222.950962][ T2232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2223.002992][ T2250] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2223.009549][ T2250] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2223.019365][ T2250] vhci_hcd vhci_hcd.0: Device attached [ 2223.028001][ T2250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2223.041723][ T2250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2223.053754][ T2250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2223.060547][ T2254] netlink: 'syz.2.7561': attribute type 9 has an invalid length. [ 2223.071252][ T2250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2223.075979][ T2254] netlink: 212160 bytes leftover after parsing attributes in process `syz.2.7561'. [ 2223.084186][ T2250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2223.118457][ T2250] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(19) [ 2223.121355][ T1430] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.125087][ T2250] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2223.130739][ T2250] vhci_hcd vhci_hcd.0: Device attached [ 2223.138579][ T1430] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2223.179257][ T1430] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2223.184747][ T2250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2223.189649][ T1430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.205010][ T9] vhci_hcd: vhci_device speed not set [ 2223.215933][ T1430] usb 2-1: config 0 descriptor?? [ 2223.223623][ T2250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2223.241165][ T2255] vhci_hcd: connection closed [ 2223.241487][T28829] vhci_hcd: stop threads [ 2223.243236][ T2251] vhci_hcd: connection closed [ 2223.252431][T28829] vhci_hcd: release socket [ 2223.263030][ T9] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 2223.263886][T28829] vhci_hcd: disconnect device [ 2223.270765][ T2252] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 2223.281516][T28829] vhci_hcd: stop threads [ 2223.286672][T28829] vhci_hcd: release socket [ 2223.291202][T28829] vhci_hcd: disconnect device [ 2223.506589][T28979] usb 2-1: USB disconnect, device number 28 [ 2224.764883][ T2273] random: crng reseeded on system resumption [ 2225.636549][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 2225.636566][ T30] audit: type=1326 audit(1756447945.680:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2279 comm="syz.1.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2225.674702][ T30] audit: type=1326 audit(1756447945.680:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2279 comm="syz.1.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2225.882390][ T30] audit: type=1326 audit(1756447945.710:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2279 comm="syz.1.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2225.986612][T13152] vhci_hcd: vhci_device speed not set [ 2226.052871][ T30] audit: type=1326 audit(1756447945.710:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2279 comm="syz.1.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2226.261516][ T2285] fuse: Bad value for 'user_id' [ 2226.271261][ T30] audit: type=1326 audit(1756447945.710:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2279 comm="syz.1.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2226.294574][ T2285] fuse: Bad value for 'user_id' [ 2226.374022][ T30] audit: type=1326 audit(1756447945.710:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2279 comm="syz.1.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2226.415239][ T2285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2226.471823][ T2285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2226.509349][ T30] audit: type=1326 audit(1756447945.710:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2279 comm="syz.1.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b8478ec23 code=0x7ffc0000 [ 2226.544782][ T30] audit: type=1326 audit(1756447945.710:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2279 comm="syz.1.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b8478ec23 code=0x7ffc0000 [ 2226.567952][ T30] audit: type=1326 audit(1756447945.710:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2279 comm="syz.1.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2226.590848][ T30] audit: type=1326 audit(1756447945.710:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2279 comm="syz.1.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2227.669648][ T2313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2227.709975][ T2313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2228.383655][ T9] vhci_hcd: vhci_device speed not set [ 2230.095054][ T2289] syzkaller1: entered promiscuous mode [ 2230.100572][ T2289] syzkaller1: entered allmulticast mode [ 2230.252516][ T2305] tipc: Enabling of bearer rejected, failed to enable media [ 2230.913018][ T1433] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2230.935453][ T2333] loop6: detected capacity change from 0 to 7 [ 2230.946694][ T2333] Dev loop6: unable to read RDB block 7 [ 2230.963226][ T2333] loop6: AHDI p1 p2 [ 2230.970779][ T2333] loop6: partition table partially beyond EOD, truncated [ 2230.983734][ T2333] loop6: p1 start 926365495 is beyond EOD, truncated [ 2231.075359][ T1433] usb 4-1: Using ep0 maxpacket: 16 [ 2231.090592][ T1433] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2231.106157][ T1433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2231.119224][ T1433] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2231.165745][ T1433] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 2231.180584][ T1433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.187834][ T2170] udevd[2170]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2231.203351][ T1433] usb 4-1: Product: syz [ 2231.212119][ T1433] usb 4-1: Manufacturer: syz [ 2231.229487][ T1433] usb 4-1: SerialNumber: syz [ 2231.241473][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2231.241490][ T30] audit: type=1326 audit(1756447951.280:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2335 comm="syz.1.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2231.336416][ T30] audit: type=1326 audit(1756447951.280:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2335 comm="syz.1.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2231.415960][ T1433] usb 4-1: config 0 descriptor?? [ 2231.514566][ T1433] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 2231.525640][ T30] audit: type=1326 audit(1756447951.280:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2335 comm="syz.1.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2231.559634][ T30] audit: type=1326 audit(1756447951.280:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2335 comm="syz.1.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2231.573094][ T1433] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -8) [ 2231.617302][ T30] audit: type=1326 audit(1756447951.280:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2335 comm="syz.1.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2231.739264][ T30] audit: type=1326 audit(1756447951.300:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2335 comm="syz.1.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2231.819222][ T1433] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -8 [ 2231.854716][ T30] audit: type=1326 audit(1756447951.300:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2335 comm="syz.1.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2231.900386][ T1433] usb 4-1: USB disconnect, device number 53 [ 2231.915647][ T30] audit: type=1326 audit(1756447951.300:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2335 comm="syz.1.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2231.951704][ T30] audit: type=1326 audit(1756447951.300:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2335 comm="syz.1.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2232.006719][ T30] audit: type=1326 audit(1756447951.300:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2335 comm="syz.1.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x7ffc0000 [ 2232.135842][ T2342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2232.289181][ T2350] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7592'. [ 2233.083687][ T2379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2233.092481][ T2379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2233.346990][ T2388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7601'. [ 2235.003224][T21186] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2235.174778][T21186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2235.184818][T21186] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 2235.194320][T21186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2235.205522][T21186] usb 4-1: config 0 descriptor?? [ 2235.583688][ T2422] netlink: 'syz.5.7611': attribute type 11 has an invalid length. [ 2235.849522][T21186] itetech 0003:258A:6A88.0073: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 2236.037538][ T2435] vlan2: entered promiscuous mode [ 2236.046272][T21186] usb 4-1: USB disconnect, device number 54 [ 2236.291341][ T2443] netlink: 'syz.6.7617': attribute type 10 has an invalid length. [ 2237.427030][ T2458] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7621'. [ 2238.032816][T22364] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 2238.082909][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2238.184654][T22364] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2238.194809][T22364] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2238.208361][T22364] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2238.217924][T22364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2238.222990][ T9] usb 2-1: device descriptor read/64, error -71 [ 2238.448284][T22364] usb 4-1: usb_control_msg returned -32 [ 2238.454395][T22364] usbtmc 4-1:16.0: can't read capabilities [ 2238.483166][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2238.622901][ T9] usb 2-1: device descriptor read/64, error -71 [ 2238.733309][ T9] usb usb2-port1: attempt power cycle [ 2239.093657][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2239.136865][ T9] usb 2-1: device descriptor read/8, error -71 [ 2239.419926][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2239.480119][ T9] usb 2-1: device descriptor read/8, error -71 [ 2239.613742][ T9] usb usb2-port1: unable to enumerate USB device [ 2240.957720][ T1433] usb 4-1: USB disconnect, device number 55 [ 2241.851659][ T2539] syz.1.7633 (2539): drop_caches: 2 [ 2242.335613][ T2548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7638'. [ 2242.378885][ T2548] vlan2: entered promiscuous mode [ 2242.402127][ T2548] dummy0: entered promiscuous mode [ 2242.689029][ T2556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7640'. [ 2242.774034][ T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 2242.828525][ T2558] delete_channel: no stack [ 2242.960449][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2242.983230][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2243.005252][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2243.016989][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.042877][T28979] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2243.054608][ T9] usb 2-1: config 0 descriptor?? [ 2243.295830][T28979] usb 4-1: Using ep0 maxpacket: 32 [ 2243.299585][ T2550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7639'. [ 2243.368913][T28979] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 2243.377210][T28979] usb 4-1: config 0 has no interface number 0 [ 2243.384981][T28979] usb 4-1: config 0 interface 184 has no altsetting 0 [ 2243.421490][T28979] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2243.434630][T28979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.442790][T28979] usb 4-1: Product: syz [ 2243.446971][T28979] usb 4-1: Manufacturer: syz [ 2243.451574][T28979] usb 4-1: SerialNumber: syz [ 2243.460070][T28979] usb 4-1: config 0 descriptor?? [ 2243.465331][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 2243.468612][T28979] smsc75xx v1.0.0 [ 2243.475151][T28979] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2243.536616][T28979] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 2243.550388][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2243.664548][ T9] usb 2-1: USB disconnect, device number 33 [ 2243.796074][ T2556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2243.831731][ T2556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2246.445300][ T2616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7654'. [ 2246.736186][T28979] usb 4-1: USB disconnect, device number 56 [ 2247.038569][ T2635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.083454][ T2635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.423384][T28979] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 2247.644073][T28979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2247.652587][T28979] usb 4-1: not running at top speed; connect to a high speed hub [ 2247.678749][T28979] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 2247.697887][T28979] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2247.707132][T28979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.715311][T28979] usb 4-1: Product: syz [ 2247.719480][T28979] usb 4-1: Manufacturer: syz [ 2247.724223][T28979] usb 4-1: SerialNumber: syz [ 2248.727233][ T2659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2248.745121][ T2659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2249.693563][ T2667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7665'. [ 2250.012375][ T2677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.023924][ T2677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.223543][T28979] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2250.583219][T28979] usb 4-1: USB disconnect, device number 57 [ 2250.870248][ T2170] udevd[2170]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2251.007868][ T2686] batman_adv: batadv0: Adding interface: gretap1 [ 2251.014718][ T2686] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2251.110309][ T2686] batman_adv: batadv0: Interface activated: gretap1 [ 2251.316040][ T2693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2251.335527][ T2693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2251.830341][ T2707] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7675'. [ 2251.941053][ T2711] bridge1: entered promiscuous mode [ 2253.111588][ T2728] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2254.981045][ T2739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7679'. [ 2255.682883][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2255.732823][ T1430] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2255.853180][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 2255.860672][ T9] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 2255.869437][ T9] usb 4-1: config 0 has no interface number 0 [ 2255.875994][ T9] usb 4-1: config 0 interface 68 altsetting 128 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2255.904741][ T9] usb 4-1: config 0 interface 68 altsetting 128 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2255.934524][ T9] usb 4-1: config 0 interface 68 altsetting 128 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 2255.961012][ T1430] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2255.972896][ T9] usb 4-1: config 0 interface 68 has no altsetting 0 [ 2255.979983][ T1430] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.007364][ T9] usb 4-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=a8.06 [ 2256.023929][ T1430] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2256.034048][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.043131][ T1430] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2256.056175][ T9] usb 4-1: Product: syz [ 2256.060321][ T9] usb 4-1: Manufacturer: syz [ 2256.072221][ T9] usb 4-1: SerialNumber: syz [ 2256.079828][ T1430] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2256.093103][ T1430] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2256.101889][ T9] usb 4-1: config 0 descriptor?? [ 2256.117685][ T1430] usb 2-1: Product: syz [ 2256.124540][ T1430] usb 2-1: Manufacturer: syz [ 2256.139900][ T1430] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2256.203558][ T2757] netlink: 'syz.5.7684': attribute type 13 has an invalid length. [ 2256.313221][ T2757] gretap0: refused to change device tx_queue_len [ 2256.328641][ T2757] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2256.364677][ T1430] usb 2-1: USB disconnect, device number 34 [ 2257.042079][ T2771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2257.056064][ T2771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2257.414456][ T2778] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.7689'. [ 2257.424037][ T2778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7689'. [ 2258.529085][ T2803] netdevsim netdevsim6: Direct firmware load for . [ 2258.529085][ T2803] failed with error -2 [ 2258.542205][ T2803] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 2258.542205][ T2803] [ 2258.553161][ T9] sisusb 4-1:0.68: Invalid USB2VGA device [ 2258.789112][ T9] sisusb 4-1:0.68: probe with driver sisusb failed with error -22 [ 2259.103509][ T9] usb 4-1: USB disconnect, device number 58 [ 2259.712830][T21186] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2259.866018][ T2824] vlan2: entered promiscuous mode [ 2259.873110][T21186] usb 2-1: Using ep0 maxpacket: 32 [ 2259.885673][T21186] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 2259.894969][T21186] usb 2-1: config 0 has no interface number 0 [ 2259.901060][T21186] usb 2-1: config 0 interface 184 has no altsetting 0 [ 2259.937978][T21186] usb 2-1: New USB device found, idVendor=0424, idProduct=0380, bcdDevice=69.00 [ 2259.953733][T21186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.965594][T21186] usb 2-1: Product: syz [ 2259.969765][T21186] usb 2-1: Manufacturer: syz [ 2260.036194][T21186] usb 2-1: SerialNumber: syz [ 2260.046067][T21186] usb 2-1: config 0 descriptor?? [ 2261.319660][ T2846] pim6reg: left allmulticast mode [ 2261.760660][ T2869] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7704'. [ 2261.771646][ T2869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7704'. [ 2261.838730][ T2869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2261.869938][ T2869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2261.911806][ T2869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2261.941624][ T2881] netlink: 'syz.6.7707': attribute type 29 has an invalid length. [ 2261.950758][ T2869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2261.997252][ T2882] netlink: 'syz.6.7707': attribute type 29 has an invalid length. [ 2262.039280][ T2881] netlink: 508 bytes leftover after parsing attributes in process `syz.6.7707'. [ 2262.093739][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 2262.093755][ T30] audit: type=1326 audit(1756447982.130:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2880 comm="syz.6.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194898ebe9 code=0x7ffc0000 [ 2262.143138][T21186] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2262.173273][ T30] audit: type=1326 audit(1756447982.140:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2880 comm="syz.6.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f194898ebe9 code=0x7ffc0000 [ 2262.226362][ T30] audit: type=1326 audit(1756447982.140:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2880 comm="syz.6.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194898ebe9 code=0x7ffc0000 [ 2262.251888][ T30] audit: type=1326 audit(1756447982.140:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2880 comm="syz.6.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f194898ebe9 code=0x7ffc0000 [ 2262.324053][T21186] usb 4-1: Using ep0 maxpacket: 32 [ 2262.377067][T21186] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 2262.392892][T21186] usb 4-1: config 0 has no interface number 0 [ 2262.413045][ T30] audit: type=1326 audit(1756447982.140:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2880 comm="syz.6.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194898ebe9 code=0x7ffc0000 [ 2262.456387][T21186] usb 4-1: config 0 interface 68 altsetting 128 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2262.471475][T21186] usb 4-1: config 0 interface 68 altsetting 128 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2262.493402][ T30] audit: type=1326 audit(1756447982.140:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2880 comm="syz.6.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f194898ebe9 code=0x7ffc0000 [ 2262.523329][ T1430] usb 2-1: USB disconnect, device number 35 [ 2262.534425][T21186] usb 4-1: config 0 interface 68 altsetting 128 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 2262.594798][T21186] usb 4-1: config 0 interface 68 has no altsetting 0 [ 2262.625636][T21186] usb 4-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=a8.06 [ 2262.635573][ T30] audit: type=1326 audit(1756447982.140:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2880 comm="syz.6.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194898ebe9 code=0x7ffc0000 [ 2262.676490][T21186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.760825][T21186] usb 4-1: Product: syz [ 2262.770498][T21186] usb 4-1: Manufacturer: syz [ 2262.802780][T21186] usb 4-1: SerialNumber: syz [ 2262.809707][ T30] audit: type=1326 audit(1756447982.140:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2880 comm="syz.6.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f194898ebe9 code=0x7ffc0000 [ 2262.839834][T21186] usb 4-1: config 0 descriptor?? [ 2262.857363][ T30] audit: type=1326 audit(1756447982.140:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2880 comm="syz.6.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194898ebe9 code=0x7ffc0000 [ 2262.885160][ T30] audit: type=1326 audit(1756447982.140:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2880 comm="syz.6.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f194898ebe9 code=0x7ffc0000 [ 2263.015379][ T2894] cgroup: fork rejected by pids controller in /syz1 [ 2264.955817][ T1250] Bluetooth: hci1: command 0x0406 tx timeout [ 2265.114930][T21186] sisusb 4-1:0.68: Invalid USB2VGA device [ 2265.182744][T21186] sisusb 4-1:0.68: probe with driver sisusb failed with error -22 [ 2265.287931][T21186] usb 4-1: USB disconnect, device number 59 [ 2265.385744][ T3344] tipc: Enabling of bearer rejected, failed to enable media [ 2265.820549][ T3361] vlan2: entered promiscuous mode [ 2265.853005][T21186] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 2266.044553][T21186] usb 4-1: device descriptor read/64, error -71 [ 2266.292821][T21186] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 2266.412461][ T3378] syz.1.7719 (3378): drop_caches: 2 [ 2266.674552][T21186] usb 4-1: device descriptor read/64, error -71 [ 2266.794007][T21186] usb usb4-port1: attempt power cycle [ 2267.328762][T21186] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 2267.384419][T21186] usb 4-1: device descriptor read/8, error -71 [ 2267.622920][T21186] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 2267.644818][T22364] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2267.666072][T21186] usb 4-1: device descriptor read/8, error -71 [ 2267.773167][T21186] usb usb4-port1: unable to enumerate USB device [ 2267.827100][T22364] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2267.836838][T22364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.845329][T22364] usb 2-1: Product: syz [ 2267.849586][T22364] usb 2-1: Manufacturer: syz [ 2267.854477][T22364] usb 2-1: SerialNumber: syz [ 2267.863566][T22364] usb 2-1: config 0 descriptor?? [ 2268.320163][ T3389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7723'. [ 2268.443204][ T1430] usb 2-1: USB disconnect, device number 36 [ 2269.245057][ T3397] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7727'. [ 2269.265427][ T3397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7727'. [ 2269.410916][ T3399] vlan2: entered promiscuous mode [ 2269.769519][ T3407] FAULT_INJECTION: forcing a failure. [ 2269.769519][ T3407] name failslab, interval 1, probability 0, space 0, times 0 [ 2269.812404][ T3408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2269.821106][ T3407] CPU: 0 UID: 0 PID: 3407 Comm: syz.2.7731 Not tainted syzkaller #0 PREEMPT(full) [ 2269.821131][ T3407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2269.821142][ T3407] Call Trace: [ 2269.821152][ T3407] [ 2269.821161][ T3407] dump_stack_lvl+0x189/0x250 [ 2269.821187][ T3407] ? __pfx____ratelimit+0x10/0x10 [ 2269.821210][ T3407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2269.821230][ T3407] ? __pfx__printk+0x10/0x10 [ 2269.821254][ T3407] ? __pfx___might_resched+0x10/0x10 [ 2269.821271][ T3407] ? fs_reclaim_acquire+0x7d/0x100 [ 2269.821300][ T3407] should_fail_ex+0x414/0x560 [ 2269.821326][ T3407] should_failslab+0xa8/0x100 [ 2269.821351][ T3407] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2269.821373][ T3407] ? css_rstat_updated+0x23a/0x4f0 [ 2269.821390][ T3407] ? __alloc_skb+0x112/0x2d0 [ 2269.821411][ T3407] __alloc_skb+0x112/0x2d0 [ 2269.821432][ T3407] alloc_skb_with_frags+0xca/0x890 [ 2269.821464][ T3407] sock_alloc_send_pskb+0x857/0x990 [ 2269.821510][ T3407] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2269.821542][ T3407] ? do_wp_page+0x161d/0x5800 [ 2269.821567][ T3407] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2269.821596][ T3407] unix_dgram_sendmsg+0x461/0x1850 [ 2269.821622][ T3407] ? do_wp_page+0x161d/0x5800 [ 2269.821651][ T3407] ? __pfx_do_wp_page+0x10/0x10 [ 2269.821668][ T3407] ? do_raw_spin_lock+0x121/0x290 [ 2269.821691][ T3407] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2269.821711][ T3407] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2269.821730][ T3407] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2269.821758][ T3407] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 2269.821780][ T3407] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 2269.821868][ T3407] __sock_sendmsg+0x21c/0x270 [ 2269.821892][ T3407] ____sys_sendmsg+0x52d/0x830 [ 2269.821913][ T3407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2269.821938][ T3407] ? import_iovec+0x74/0xa0 [ 2269.821957][ T3407] ___sys_sendmsg+0x21f/0x2a0 [ 2269.821975][ T3407] ? __pfx____sys_sendmsg+0x10/0x10 [ 2269.822026][ T3407] ? __might_fault+0xb0/0x130 [ 2269.822055][ T3407] __sys_sendmmsg+0x227/0x430 [ 2269.822080][ T3407] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2269.822093][ T3407] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2269.822142][ T3407] ? ksys_write+0x22a/0x250 [ 2269.822166][ T3407] ? __pfx_ksys_write+0x10/0x10 [ 2269.822185][ T3407] ? rcu_is_watching+0x15/0xb0 [ 2269.822210][ T3407] __x64_sys_sendmmsg+0xa0/0xc0 [ 2269.822231][ T3407] do_syscall_64+0xfa/0x3b0 [ 2269.822256][ T3407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2269.822272][ T3407] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2269.822290][ T3407] ? clear_bhb_loop+0x60/0xb0 [ 2269.822311][ T3407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2269.822329][ T3407] RIP: 0033:0x7fd071f8ebe9 [ 2269.822346][ T3407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2269.822362][ T3407] RSP: 002b:00007fd072ea3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2269.822382][ T3407] RAX: ffffffffffffffda RBX: 00007fd0721b5fa0 RCX: 00007fd071f8ebe9 [ 2269.822396][ T3407] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 2269.822408][ T3407] RBP: 00007fd072ea3090 R08: 0000000000000000 R09: 0000000000000000 [ 2269.822420][ T3407] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 2269.822431][ T3407] R13: 00007fd0721b6038 R14: 00007fd0721b5fa0 R15: 00007fd0722dfa28 [ 2269.822461][ T3407] [ 2270.163289][ T3408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2270.616832][ T3421] loop3: detected capacity change from 0 to 1 [ 2270.626393][ T3421] Dev loop3: unable to read RDB block 1 [ 2270.632005][ T3421] loop3: unable to read partition table [ 2270.649973][ T3421] loop3: partition table beyond EOD, truncated [ 2270.674150][ T3421] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2271.202549][ T3433] hub 9-0:1.0: USB hub found [ 2271.208464][ T3433] hub 9-0:1.0: 1 port detected [ 2271.522812][ T1430] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2271.783265][ T1430] usb 4-1: Using ep0 maxpacket: 32 [ 2271.810096][ T1430] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 2271.818932][ T1430] usb 4-1: config 0 has no interface number 0 [ 2271.840852][ T1430] usb 4-1: config 0 interface 12 has no altsetting 0 [ 2271.889516][ T1430] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 2271.916462][ T1430] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 2271.952211][ T1430] usb 4-1: Product: syz [ 2271.962361][ T1430] usb 4-1: Manufacturer: syz [ 2271.982601][ T1430] usb 4-1: SerialNumber: syz [ 2272.013484][ T1430] usb 4-1: config 0 descriptor?? [ 2272.215668][ T3440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2272.269796][ T3440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2272.374469][ T3446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2272.394028][ T3444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7739'. [ 2272.414078][ T3446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2272.460391][ T3446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7737'. [ 2273.266715][ T1430] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2273.291575][ T1430] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 2273.311381][ T1430] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2273.321309][ T3457] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2273.330374][ T1430] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 2273.346134][ T1430] usb 4-1: USB disconnect, device number 64 [ 2274.693770][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2274.863045][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 2274.923135][ T9] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2274.954982][ T9] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2274.964216][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2274.972267][ T9] usb 2-1: Product: syz [ 2274.976610][ T9] usb 2-1: Manufacturer: syz [ 2274.986725][ T9] usb 2-1: SerialNumber: syz [ 2275.008842][ T9] usb 2-1: config 0 descriptor?? [ 2275.020747][ T9] usb 2-1: bad CDC descriptors [ 2275.029606][ T9] usb 2-1: unsupported MDLM descriptors [ 2275.740125][ T3496] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7752'. [ 2275.797637][ T3496] vlan2: entered promiscuous mode [ 2276.782864][ T5188] Bluetooth: hci2: command 0x0405 tx timeout [ 2276.789073][ T3481] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 2277.288038][T13152] usb 2-1: USB disconnect, device number 37 [ 2277.557650][ T3481] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2277.650906][ T3481] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2277.663903][ T3481] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2277.671738][ T3481] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2277.698987][ T3481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2277.708011][ T3481] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2277.714695][ T3506] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2277.735171][ T3506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7754'. [ 2277.736287][ T3481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2277.751136][ T3481] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2278.137713][T22364] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 2278.399095][T22364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2278.420548][T22364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2278.448164][T22364] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2278.498035][T22364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.531684][T22364] usb 4-1: config 0 descriptor?? [ 2278.863056][ T5188] Bluetooth: hci4: command 0x0406 tx timeout [ 2278.888553][ T3499] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7753'. [ 2278.941499][T22364] usbhid 4-1:0.0: can't add hid device: -71 [ 2279.047508][T22364] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2279.089805][T22364] usb 4-1: USB disconnect, device number 65 [ 2279.500689][ T3533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2279.530504][ T3533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2279.744382][ T5188] Bluetooth: hci1: command 0x0406 tx timeout [ 2279.744424][ T1250] Bluetooth: hci0: command 0x0405 tx timeout [ 2279.750449][ T5188] Bluetooth: hci5: command 0x0405 tx timeout [ 2280.942780][ T5188] Bluetooth: hci4: command 0x0406 tx timeout [ 2281.832507][ T5188] Bluetooth: hci5: command 0x0405 tx timeout [ 2281.832549][T28193] Bluetooth: hci0: command 0x0405 tx timeout [ 2281.839221][ T5188] Bluetooth: hci1: command 0x0406 tx timeout [ 2282.104782][ T3549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2282.181145][ T3549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2282.256420][ T3551] netlink: 4344 bytes leftover after parsing attributes in process `syz.1.7766'. [ 2282.505590][ T3556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7767'. [ 2282.552888][T13152] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2282.802783][T13152] usb 2-1: Using ep0 maxpacket: 32 [ 2282.965766][ T3556] vlan2: entered promiscuous mode [ 2282.970425][T13152] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 2283.001211][T13152] usb 2-1: config 0 has no interface number 0 [ 2283.028424][T13152] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2283.210987][T13152] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2283.271174][T13152] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2283.292817][T13152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.312404][T13152] usb 2-1: Product: syz [ 2283.329919][ T3562] netlink: 'syz.2.7770': attribute type 10 has an invalid length. [ 2283.329925][T13152] usb 2-1: Manufacturer: syz [ 2283.329944][T13152] usb 2-1: SerialNumber: syz [ 2283.360673][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.367646][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.444472][T13152] usb 2-1: config 0 descriptor?? [ 2283.456369][ T3562] team0: Cannot enslave team device to itself [ 2283.675489][T13152] radio-si470x 2-1:0.35: this is not a si470x device. [ 2283.793779][T13152] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 2283.841234][ T3580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7773'. [ 2283.883640][T13152] usb 2-1: USB disconnect, device number 38 [ 2284.142971][ T9] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 2284.305054][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2284.320707][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2284.369989][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2284.390118][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.683962][ T9] usb 4-1: config 0 descriptor?? [ 2284.912520][ T3579] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7775'. [ 2284.969228][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 2284.975587][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2285.002858][ T9] usb 4-1: USB disconnect, device number 66 [ 2286.060334][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2286.218577][ T3603] FAULT_INJECTION: forcing a failure. [ 2286.218577][ T3603] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.233004][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2286.247793][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2286.258330][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2286.268436][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2286.297934][ T3604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2286.313463][ T3603] CPU: 1 UID: 0 PID: 3603 Comm: syz.2.7781 Not tainted syzkaller #0 PREEMPT(full) [ 2286.313487][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2286.313496][ T3603] Call Trace: [ 2286.313503][ T3603] [ 2286.313512][ T3603] dump_stack_lvl+0x189/0x250 [ 2286.313537][ T3603] ? __pfx____ratelimit+0x10/0x10 [ 2286.313559][ T3603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2286.313579][ T3603] ? __pfx__printk+0x10/0x10 [ 2286.313603][ T3603] ? __pfx___might_resched+0x10/0x10 [ 2286.313620][ T3603] ? fs_reclaim_acquire+0x7d/0x100 [ 2286.313648][ T3603] should_fail_ex+0x414/0x560 [ 2286.313674][ T3603] should_failslab+0xa8/0x100 [ 2286.313700][ T3603] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2286.313721][ T3603] ? __alloc_skb+0x112/0x2d0 [ 2286.313741][ T3603] __alloc_skb+0x112/0x2d0 [ 2286.313761][ T3603] alloc_skb_with_frags+0xca/0x890 [ 2286.313794][ T3603] sock_alloc_send_pskb+0x857/0x990 [ 2286.313833][ T3603] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2286.313852][ T3603] ? lockdep_hardirqs_on+0x9c/0x150 [ 2286.313883][ T3603] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2286.313907][ T3603] unix_dgram_sendmsg+0x461/0x1850 [ 2286.313934][ T3603] ? do_wp_page+0x161d/0x5800 [ 2286.313962][ T3603] ? __pfx_do_wp_page+0x10/0x10 [ 2286.313986][ T3603] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2286.314006][ T3603] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2286.314026][ T3603] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2286.314055][ T3603] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 2286.314076][ T3603] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 2286.314099][ T3603] __sock_sendmsg+0x21c/0x270 [ 2286.314123][ T3603] ____sys_sendmsg+0x52d/0x830 [ 2286.314148][ T3603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2286.314175][ T3603] ? import_iovec+0x74/0xa0 [ 2286.314198][ T3603] ___sys_sendmsg+0x21f/0x2a0 [ 2286.314218][ T3603] ? __pfx____sys_sendmsg+0x10/0x10 [ 2286.314278][ T3603] ? __might_fault+0xb0/0x130 [ 2286.314303][ T3603] __sys_sendmmsg+0x227/0x430 [ 2286.314333][ T3603] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2286.314358][ T3603] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2286.314407][ T3603] ? ksys_write+0x22a/0x250 [ 2286.314430][ T3603] ? __pfx_ksys_write+0x10/0x10 [ 2286.314448][ T3603] ? rcu_is_watching+0x15/0xb0 [ 2286.314472][ T3603] __x64_sys_sendmmsg+0xa0/0xc0 [ 2286.314494][ T3603] do_syscall_64+0xfa/0x3b0 [ 2286.314515][ T3603] ? lockdep_hardirqs_on+0x9c/0x150 [ 2286.314536][ T3603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2286.314553][ T3603] ? clear_bhb_loop+0x60/0xb0 [ 2286.314572][ T3603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2286.314589][ T3603] RIP: 0033:0x7fd071f8ebe9 [ 2286.314607][ T3603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2286.314621][ T3603] RSP: 002b:00007fd072ea3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2286.314640][ T3603] RAX: ffffffffffffffda RBX: 00007fd0721b5fa0 RCX: 00007fd071f8ebe9 [ 2286.314654][ T3603] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 2286.314666][ T3603] RBP: 00007fd072ea3090 R08: 0000000000000000 R09: 0000000000000000 [ 2286.314678][ T3603] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 2286.314689][ T3603] R13: 00007fd0721b6038 R14: 00007fd0721b5fa0 R15: 00007fd0722dfa28 [ 2286.314718][ T3603] [ 2286.643749][ T3604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2286.655940][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2286.665488][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.673737][ T9] usb 2-1: Product: syz [ 2286.682757][ T9] usb 2-1: Manufacturer: syz [ 2286.687385][ T9] usb 2-1: SerialNumber: syz [ 2286.735724][ T9] usb 2-1: config 0 descriptor?? [ 2286.944144][ T9] mcba_usb 2-1:0.0: Can't find endpoints [ 2287.039726][ T3609] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7783'. [ 2288.636351][ T9] usb 2-1: USB disconnect, device number 39 [ 2290.027630][ T3648] loop6: detected capacity change from 0 to 7 [ 2290.049329][ T3648] Dev loop6: unable to read RDB block 7 [ 2290.055039][ T3648] loop6: AHDI p1 p2 [ 2290.062377][ T3648] loop6: partition table partially beyond EOD, truncated [ 2290.073351][ T3648] loop6: p1 start 926365495 is beyond EOD, truncated [ 2290.237714][ T3650] FAULT_INJECTION: forcing a failure. [ 2290.237714][ T3650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2290.245692][ T2170] udevd[2170]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2290.273067][T22364] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2290.317448][ T3650] CPU: 0 UID: 0 PID: 3650 Comm: syz.6.7796 Not tainted syzkaller #0 PREEMPT(full) [ 2290.317474][ T3650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2290.317485][ T3650] Call Trace: [ 2290.317493][ T3650] [ 2290.317502][ T3650] dump_stack_lvl+0x189/0x250 [ 2290.317527][ T3650] ? __pfx____ratelimit+0x10/0x10 [ 2290.317550][ T3650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2290.317570][ T3650] ? __pfx__printk+0x10/0x10 [ 2290.317592][ T3650] ? __might_fault+0xb0/0x130 [ 2290.317625][ T3650] should_fail_ex+0x414/0x560 [ 2290.317653][ T3650] _copy_from_user+0x2d/0xb0 [ 2290.317674][ T3650] ___sys_sendmsg+0x158/0x2a0 [ 2290.317697][ T3650] ? __pfx____sys_sendmsg+0x10/0x10 [ 2290.317760][ T3650] ? __might_fault+0xb0/0x130 [ 2290.317785][ T3650] __sys_sendmmsg+0x227/0x430 [ 2290.317809][ T3650] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2290.317826][ T3650] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2290.317875][ T3650] ? ksys_write+0x22a/0x250 [ 2290.317899][ T3650] ? __pfx_ksys_write+0x10/0x10 [ 2290.317917][ T3650] ? rcu_is_watching+0x15/0xb0 [ 2290.317942][ T3650] __x64_sys_sendmmsg+0xa0/0xc0 [ 2290.317968][ T3650] do_syscall_64+0xfa/0x3b0 [ 2290.317989][ T3650] ? lockdep_hardirqs_on+0x9c/0x150 [ 2290.318010][ T3650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.318027][ T3650] ? clear_bhb_loop+0x60/0xb0 [ 2290.318048][ T3650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.318064][ T3650] RIP: 0033:0x7f194898ebe9 [ 2290.318080][ T3650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2290.318094][ T3650] RSP: 002b:00007f19498a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2290.318112][ T3650] RAX: ffffffffffffffda RBX: 00007f1948bb5fa0 RCX: 00007f194898ebe9 [ 2290.318125][ T3650] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 2290.318138][ T3650] RBP: 00007f19498a9090 R08: 0000000000000000 R09: 0000000000000000 [ 2290.318154][ T3650] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 2290.318164][ T3650] R13: 00007f1948bb6038 R14: 00007f1948bb5fa0 R15: 00007f1948cdfa28 [ 2290.318194][ T3650] [ 2290.344370][ T2170] udevd[2170]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2290.638308][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2290.638325][ T30] audit: type=1326 audit(1756448010.650:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3654 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2290.685440][T22364] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2290.759468][T22364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.781292][T22364] usb 2-1: Product: syz [ 2290.787893][T22364] usb 2-1: Manufacturer: syz [ 2290.806619][T22364] usb 2-1: SerialNumber: syz [ 2290.823802][ T30] audit: type=1326 audit(1756448010.650:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3654 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2290.907213][T22364] usb 2-1: config 0 descriptor?? [ 2290.923304][ T30] audit: type=1326 audit(1756448010.710:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3654 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b1138d550 code=0x7ffc0000 [ 2290.947046][ T30] audit: type=1326 audit(1756448010.710:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3654 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b1138e7eb code=0x7ffc0000 [ 2290.969326][ C0] vkms_vblank_simulate: vblank timer overrun [ 2290.973030][T22365] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 2290.983307][ T30] audit: type=1326 audit(1756448010.720:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3654 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b1138e7eb code=0x7ffc0000 [ 2290.983352][ T30] audit: type=1326 audit(1756448010.720:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3654 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b1138e7eb code=0x7ffc0000 [ 2290.983393][ T30] audit: type=1326 audit(1756448010.720:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3654 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b1138e7eb code=0x7ffc0000 [ 2290.983431][ T30] audit: type=1326 audit(1756448010.830:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3654 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b1138e7eb code=0x7ffc0000 [ 2290.983471][ T30] audit: type=1326 audit(1756448010.950:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3654 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b1138e7eb code=0x7ffc0000 [ 2291.174283][ T30] audit: type=1326 audit(1756448011.220:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3654 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b1138e7eb code=0x7ffc0000 [ 2291.261821][ T3660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7795'. [ 2291.279144][ T1433] usb 2-1: USB disconnect, device number 40 [ 2291.326653][T22365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2291.488082][T22365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2291.511012][T22365] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2291.535467][T22365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.566145][T22365] usb 4-1: config 0 descriptor?? [ 2292.525382][ T3666] vlan2: entered promiscuous mode [ 2293.292646][ T3677] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7803'. [ 2293.309805][ T3677] vlan2: entered promiscuous mode [ 2293.641826][T22365] usbhid 4-1:0.0: can't add hid device: -71 [ 2293.647986][T22365] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2293.693386][T22365] usb 4-1: USB disconnect, device number 67 [ 2293.782110][ T3689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7806'. [ 2294.411775][ T3700] : entered promiscuous mode [ 2295.343270][T22365] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2295.505825][T22365] usb 4-1: config 0 has no interfaces? [ 2295.514489][T22365] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2295.523817][T22365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.531800][T22365] usb 4-1: Product: syz [ 2295.539276][T22365] usb 4-1: Manufacturer: syz [ 2295.545702][T22365] usb 4-1: SerialNumber: syz [ 2295.587133][T22365] usb 4-1: config 0 descriptor?? [ 2296.278587][ T3727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2296.346835][ T3727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2297.583208][ T3738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2297.882611][T22365] usb 4-1: USB disconnect, device number 68 [ 2298.119859][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 2298.119877][ T30] audit: type=1326 audit(1756448018.160:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3740 comm="syz.3.7818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2298.148624][ C0] vkms_vblank_simulate: vblank timer overrun [ 2298.442877][ T30] audit: type=1326 audit(1756448018.160:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3740 comm="syz.3.7818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2298.465228][ C0] vkms_vblank_simulate: vblank timer overrun [ 2298.619644][T21186] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2298.652824][ T30] audit: type=1326 audit(1756448018.160:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3740 comm="syz.3.7818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2298.679281][ T30] audit: type=1326 audit(1756448018.160:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3740 comm="syz.3.7818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2298.736866][ T30] audit: type=1326 audit(1756448018.160:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3740 comm="syz.3.7818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2298.782176][ T30] audit: type=1326 audit(1756448018.160:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3740 comm="syz.3.7818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2298.806972][T21186] usb 4-1: Using ep0 maxpacket: 8 [ 2298.826287][T21186] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2298.855105][T21186] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 2298.864654][ T30] audit: type=1326 audit(1756448018.160:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3740 comm="syz.3.7818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1138ebe9 code=0x7ffc0000 [ 2298.888230][T21186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.896760][T21186] usb 4-1: Product: syz [ 2298.901220][T21186] usb 4-1: Manufacturer: syz [ 2298.936755][T21186] usb 4-1: SerialNumber: syz [ 2298.987723][T21186] usb 4-1: config 0 descriptor?? [ 2299.002511][T21186] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 2299.009090][T21186] usb 4-1: selecting invalid altsetting 1 [ 2299.014959][T28979] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2299.178888][T28979] usb 2-1: config 0 has no interfaces? [ 2299.283773][T21186] gspca_stk014: reg_r err -71 [ 2299.298441][T21186] stk014 4-1:0.0: probe with driver stk014 failed with error -71 [ 2299.310530][T28979] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2299.321922][T28979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.356766][T21186] usb 4-1: USB disconnect, device number 69 [ 2299.392487][T28979] usb 2-1: Product: syz [ 2299.401833][T28979] usb 2-1: Manufacturer: syz [ 2299.416565][T28979] usb 2-1: SerialNumber: syz [ 2299.459609][T28979] usb 2-1: config 0 descriptor?? [ 2299.547907][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7824'. [ 2299.911963][ T3766] loop3: detected capacity change from 0 to 1 [ 2300.039359][ T3766] Dev loop3: unable to read RDB block 1 [ 2300.047985][ T3766] loop3: unable to read partition table [ 2300.158335][ T3766] loop3: partition table beyond EOD, truncated [ 2300.279905][ T3766] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2300.892805][T21186] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2301.317649][T21186] usb 4-1: Using ep0 maxpacket: 32 [ 2301.342107][T21186] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 2301.362906][T21186] usb 4-1: config 0 has no interface number 0 [ 2301.377089][T21186] usb 4-1: config 0 interface 68 altsetting 128 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2301.442263][T21186] usb 4-1: config 0 interface 68 altsetting 128 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2301.527468][T21186] usb 4-1: config 0 interface 68 altsetting 128 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 2301.604431][T21186] usb 4-1: config 0 interface 68 has no altsetting 0 [ 2301.806144][T21186] usb 4-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=a8.06 [ 2301.846647][T21186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.892521][T21186] usb 4-1: Product: syz [ 2301.911111][T21186] usb 4-1: Manufacturer: syz [ 2301.947161][T21186] usb 4-1: SerialNumber: syz [ 2301.971646][T21186] usb 4-1: config 0 descriptor?? [ 2302.505789][ T3786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2302.544667][ T3786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2302.721730][ T3787] netlink: 'syz.2.7831': attribute type 1 has an invalid length. [ 2302.736641][T22364] usb 2-1: USB disconnect, device number 41 [ 2303.225478][ T3799] FAULT_INJECTION: forcing a failure. [ 2303.225478][ T3799] name failslab, interval 1, probability 0, space 0, times 0 [ 2303.282141][ T3799] CPU: 0 UID: 0 PID: 3799 Comm: syz.6.7835 Not tainted syzkaller #0 PREEMPT(full) [ 2303.282166][ T3799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2303.282177][ T3799] Call Trace: [ 2303.282185][ T3799] [ 2303.282194][ T3799] dump_stack_lvl+0x189/0x250 [ 2303.282219][ T3799] ? __pfx____ratelimit+0x10/0x10 [ 2303.282243][ T3799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2303.282262][ T3799] ? __pfx__printk+0x10/0x10 [ 2303.282289][ T3799] ? __pfx___might_resched+0x10/0x10 [ 2303.282305][ T3799] ? fs_reclaim_acquire+0x7d/0x100 [ 2303.282333][ T3799] should_fail_ex+0x414/0x560 [ 2303.282359][ T3799] should_failslab+0xa8/0x100 [ 2303.282384][ T3799] __kmalloc_noprof+0xcb/0x4f0 [ 2303.282404][ T3799] ? kfree+0x4d/0x440 [ 2303.282420][ T3799] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2303.282443][ T3799] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2303.282463][ T3799] ? tomoyo_domain+0xd9/0x130 [ 2303.282493][ T3799] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2303.282516][ T3799] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2303.282541][ T3799] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2303.282580][ T3799] ? __lock_acquire+0xab9/0xd20 [ 2303.282624][ T3799] ? __fget_files+0x2a/0x420 [ 2303.282653][ T3799] ? __fget_files+0x2a/0x420 [ 2303.282672][ T3799] ? __fget_files+0x3a0/0x420 [ 2303.282690][ T3799] ? __fget_files+0x2a/0x420 [ 2303.282715][ T3799] security_file_ioctl+0xcb/0x2d0 [ 2303.282737][ T3799] __se_sys_ioctl+0x47/0x170 [ 2303.282758][ T3799] do_syscall_64+0xfa/0x3b0 [ 2303.282779][ T3799] ? lockdep_hardirqs_on+0x9c/0x150 [ 2303.282798][ T3799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2303.282814][ T3799] ? clear_bhb_loop+0x60/0xb0 [ 2303.282835][ T3799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2303.282851][ T3799] RIP: 0033:0x7f194898ebe9 [ 2303.282867][ T3799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2303.282882][ T3799] RSP: 002b:00007f19498a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2303.282900][ T3799] RAX: ffffffffffffffda RBX: 00007f1948bb5fa0 RCX: 00007f194898ebe9 [ 2303.282913][ T3799] RDX: 0000200000000180 RSI: 0000000000008955 RDI: 0000000000000003 [ 2303.282923][ T3799] RBP: 00007f19498a9090 R08: 0000000000000000 R09: 0000000000000000 [ 2303.282933][ T3799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2303.282943][ T3799] R13: 00007f1948bb6038 R14: 00007f1948bb5fa0 R15: 00007f1948cdfa28 [ 2303.282972][ T3799] [ 2303.343176][T22364] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2303.552126][ T3799] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2303.844478][T21186] sisusb 4-1:0.68: Invalid USB2VGA device [ 2303.850659][T21186] sisusb 4-1:0.68: probe with driver sisusb failed with error -22 [ 2303.861787][T21186] usb 4-1: USB disconnect, device number 70 [ 2303.992840][T22364] usb 2-1: Using ep0 maxpacket: 16 [ 2304.002372][T22364] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 2304.011710][T22364] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2304.043011][T22364] usb 2-1: config 8 has no interface number 0 [ 2304.049646][T22364] usb 2-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2304.063627][T22364] usb 2-1: config 8 interface 39 has no altsetting 0 [ 2304.074072][T22364] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2304.083602][T22364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2304.091718][T22364] usb 2-1: Product: syz [ 2304.096778][T22364] usb 2-1: Manufacturer: syz [ 2304.102616][T22364] usb 2-1: SerialNumber: syz [ 2304.327116][ T3791] rdma_op ffff88805f4329f0 conn xmit_rdma 0000000000000000 [ 2304.336491][ T3791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2304.355323][ T3791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2304.536751][ T3791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2304.554653][ T3791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2304.579238][T22364] ipheth 2-1:8.39: Unable to find endpoints [ 2304.602420][T22364] usb 2-1: USB disconnect, device number 42 [ 2305.291449][ T3812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7840'. [ 2305.339564][ T3812] vlan2: entered promiscuous mode [ 2305.702942][T13152] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 2305.749558][ T3819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7843'. [ 2305.795336][ T3819] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2305.864637][T13152] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2305.874321][T13152] usb 2-1: config 0 has no interface number 0 [ 2305.880448][T13152] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2305.898524][T13152] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2305.909570][T13152] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2305.918700][T13152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2305.933378][T13152] usb 2-1: config 0 descriptor?? [ 2305.943425][ T3815] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2305.958679][T13152] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2306.235041][T13152] usb 2-1: USB disconnect, device number 43 [ 2306.241016][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2308.937227][ T3863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7851'. [ 2309.306410][ T3871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2309.345822][ T3871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2309.480728][ T3866] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7851'. [ 2309.489887][T13152] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2309.660573][T13152] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2309.680685][T13152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.698886][T13152] usb 4-1: Product: syz [ 2309.713011][T13152] usb 4-1: Manufacturer: syz [ 2309.728022][T13152] usb 4-1: SerialNumber: syz [ 2309.746069][T13152] usb 4-1: config 0 descriptor?? [ 2310.211683][T22364] usb 4-1: USB disconnect, device number 71 [ 2310.451680][ T3887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7858'. [ 2310.508116][ T3889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2310.556745][ T3889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2311.419573][ T30] audit: type=1800 audit(1756448031.450:2531): pid=3895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7860" name="file1" dev="tmpfs" ino=1096 res=0 errno=0 [ 2312.002794][ T1433] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 2312.254396][ T1433] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2312.462356][ T1433] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2312.602890][ T1433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2312.637512][ T1433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 44318, setting to 64 [ 2312.686168][ T1433] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2312.724867][ T3920] fuse: Unknown parameter 'fd00000000000000000000014' [ 2312.794536][ T1433] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2312.804098][ T1433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2312.856086][ T1433] usb 2-1: Product: syz [ 2312.886819][ T1433] usb 2-1: Manufacturer: syz [ 2312.906795][ T1433] usb 2-1: SerialNumber: syz [ 2313.029605][ T1433] usb 2-1: config 0 descriptor?? [ 2313.046397][ T3906] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2313.139959][ T1433] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input141 [ 2313.187395][ C0] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 2313.263264][ T3926] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7866'. [ 2313.480173][ C1] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 2313.572125][ T3906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2313.597303][ T3906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2313.874883][ T3903] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7861'. [ 2314.268346][ T3926] bond0 (unregistering): Released all slaves [ 2314.409502][T22365] usb 2-1: USB disconnect, device number 44 [ 2314.425458][ T3937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2314.475525][ T3937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2314.516954][ T3937] rdma_op ffff88807cd1b1f0 conn xmit_rdma 0000000000000000 [ 2314.547541][ T3937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2314.563907][ T3937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2314.576185][ T3937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2314.591582][ T3937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2314.732857][T22364] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2314.885494][T22364] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2314.897567][T22364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2314.909707][T22364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2314.947367][T22364] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2314.990215][T22364] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2315.019268][T22364] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2315.036263][T22364] usb 4-1: Manufacturer: syz [ 2315.049077][T22364] usb 4-1: config 0 descriptor?? [ 2315.271554][ T3941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7870'. [ 2315.342899][ T9] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 2315.520216][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2315.534555][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2315.539496][T22364] appleir 0003:05AC:8243.0074: unknown main item tag 0x0 [ 2315.551232][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2315.561557][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2315.572890][ T9] usb 2-1: config 0 descriptor?? [ 2315.594245][T22364] appleir 0003:05AC:8243.0074: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2315.799470][ T3946] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7872'. [ 2315.825675][T22364] usb 4-1: USB disconnect, device number 72 [ 2315.836469][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 2315.842501][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2315.881074][ T9] usb 2-1: USB disconnect, device number 45 [ 2317.176937][ T3960] syz.2.7876 (3960): drop_caches: 2 [ 2317.329563][ T3969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7877'. [ 2318.491633][ T3984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7880'. [ 2320.202826][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2320.353076][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 2320.366551][ T9] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 2320.374999][ T1433] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 2320.395297][ T9] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2320.409952][ T9] usb 4-1: config 8 has no interface number 0 [ 2320.416655][ T9] usb 4-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2320.432628][ T9] usb 4-1: config 8 interface 39 has no altsetting 0 [ 2320.441427][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2320.451189][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.459285][ T9] usb 4-1: Product: syz [ 2320.464782][ T9] usb 4-1: Manufacturer: syz [ 2320.469393][ T9] usb 4-1: SerialNumber: syz [ 2320.545295][ T1433] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2320.561035][ T1433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2320.572385][ T1433] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2320.581595][ T1433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.599226][ T1433] usb 2-1: config 0 descriptor?? [ 2320.656789][ T3995] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2320.670173][ T1433] hub 2-1:0.0: USB hub found [ 2320.679562][ T3989] rdma_op ffff88801cf119f0 conn xmit_rdma 0000000000000000 [ 2320.729667][ T3989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2320.749660][ T3989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2320.770087][ T3989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2320.810792][ T3989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2320.837331][ T9] ipheth 4-1:8.39: Unable to find endpoints [ 2320.862152][ T9] usb 4-1: USB disconnect, device number 73 [ 2320.892954][ T1433] hub 2-1:0.0: 2 ports detected [ 2321.851028][ T3995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2321.889356][ T3995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2322.304157][ T9] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2322.304672][T21186] usb 2-1: USB disconnect, device number 46 [ 2323.322877][T22364] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2323.542870][T22364] usb 2-1: device descriptor read/64, error -71 [ 2323.690187][ T4032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2323.707733][ T4032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2323.782901][T22364] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2323.875575][ T4034] loop3: detected capacity change from 0 to 1 [ 2323.887138][ T2170] Dev loop3: unable to read RDB block 1 [ 2323.895422][ T2170] loop3: unable to read partition table [ 2323.901361][ T2170] loop3: partition table beyond EOD, truncated [ 2323.919182][ T4034] Dev loop3: unable to read RDB block 1 [ 2323.922853][T22364] usb 2-1: device descriptor read/64, error -71 [ 2323.931226][ T4034] loop3: unable to read partition table [ 2323.947110][ T4034] loop3: partition table beyond EOD, truncated [ 2323.958198][ T4034] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2324.033966][T22364] usb usb2-port1: attempt power cycle [ 2324.383092][T22364] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2324.403459][T22364] usb 2-1: device descriptor read/8, error -71 [ 2324.525774][ T4044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7898'. [ 2324.683026][T22364] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2324.703604][T22364] usb 2-1: device descriptor read/8, error -71 [ 2324.813411][T22364] usb usb2-port1: unable to enumerate USB device [ 2325.383178][T22364] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2325.543005][T22364] usb 4-1: Using ep0 maxpacket: 16 [ 2325.550733][T22364] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 2325.572998][T22364] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2325.637405][T22364] usb 4-1: config 8 has no interface number 0 [ 2325.659729][T22364] usb 4-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2325.695045][T22364] usb 4-1: config 8 interface 39 has no altsetting 0 [ 2325.726571][T22364] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2325.746198][T22364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2325.781722][T22364] usb 4-1: Product: syz [ 2325.788109][T22364] usb 4-1: Manufacturer: syz [ 2325.798004][T22364] usb 4-1: SerialNumber: syz [ 2326.045451][ T4050] rdma_op ffff888021b9c9f0 conn xmit_rdma 0000000000000000 [ 2326.054250][ T4050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2326.064403][ T4050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2326.140384][ T4050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2326.179300][ T4050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2326.329056][T22364] ipheth 4-1:8.39: Unable to find endpoints [ 2326.428897][T22364] usb 4-1: USB disconnect, device number 74 [ 2327.007694][ T4073] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7907'. [ 2327.116783][ T4078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2327.128872][ T4078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2327.330880][ T30] audit: type=1326 audit(1756448047.370:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4079 comm="syz.1.7910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b8478ebe9 code=0x0 [ 2327.643169][ T4090] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7910'. [ 2327.715485][ T4073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2327.764811][ T4073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2327.778990][ T4073] bond0 (unregistering): Released all slaves [ 2327.972863][T13152] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2328.147148][T13152] usb 2-1: Using ep0 maxpacket: 16 [ 2328.198931][T13152] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 2328.209289][T13152] usb 2-1: config 1 has no interface number 0 [ 2328.217528][T13152] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2328.241507][T13152] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2328.252489][T13152] usb 2-1: config 1 interface 105 has no altsetting 0 [ 2328.284539][T13152] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2328.359719][T13152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.411673][T13152] usb 2-1: Product: syz [ 2328.424854][T13152] usb 2-1: Manufacturer: syz [ 2328.439596][T13152] usb 2-1: SerialNumber: syz [ 2328.463245][ T4090] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2328.477398][ T4090] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2328.732982][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2328.910950][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2328.940513][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.949574][ T9] usb 4-1: Product: syz [ 2328.957354][ T9] usb 4-1: Manufacturer: syz [ 2328.964887][ T9] usb 4-1: SerialNumber: syz [ 2328.978189][ T9] usb 4-1: config 0 descriptor?? [ 2329.012162][ T4090] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2329.023275][ T4090] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2329.361320][ T9] usb 4-1: USB disconnect, device number 75 [ 2330.529794][ T4109] netlink: 304 bytes leftover after parsing attributes in process `syz.5.7917'. [ 2330.638760][ T4109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7917'. [ 2331.052354][T13152] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2331.106647][T13152] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2331.192245][T13152] aqc111 2-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 22:87:f5:d7:b2:18 [ 2331.236776][T13152] usb 2-1: USB disconnect, device number 51 [ 2331.302394][T13152] aqc111 2-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 2331.392741][ T4117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7920'. [ 2331.493318][T13152] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2331.506802][T13152] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2331.529939][T13152] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 2331.547914][ T4117] vlan2: entered promiscuous mode [ 2332.394148][ T4115] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7919'. [ 2332.424093][ T4115] netlink: 452 bytes leftover after parsing attributes in process `syz.5.7919'. [ 2332.519211][ T4124] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7919'. [ 2332.624394][ T1250] Bluetooth: hci1: command 0x0406 tx timeout [ 2333.642340][ T4153] loop6: detected capacity change from 0 to 7 [ 2333.704584][ T4153] Dev loop6: unable to read RDB block 7 [ 2333.710183][ T4153] loop6: AHDI p1 p2 [ 2333.757286][ T4153] loop6: partition table partially beyond EOD, truncated [ 2333.796072][ T4153] loop6: p1 start 926365495 is beyond EOD, truncated [ 2334.055946][ T2170] udevd[2170]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 2334.171440][ T4161] loop3: detected capacity change from 0 to 1 [ 2334.244501][ T4161] Dev loop3: unable to read RDB block 1 [ 2334.273218][ T4161] loop3: unable to read partition table [ 2334.280800][ T4162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2334.297075][ T4161] loop3: partition table beyond EOD, truncated [ 2334.319571][ T4161] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2334.340099][ T4162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2334.399958][ T4162] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7928'. [ 2334.842493][ T4182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7931'. [ 2335.083420][T21186] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2335.313186][T21186] usb 4-1: Using ep0 maxpacket: 16 [ 2335.323348][T21186] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 2335.333489][T21186] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2335.352192][T21186] usb 4-1: config 8 has no interface number 0 [ 2335.371141][T21186] usb 4-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2335.409198][ T4190] input: syz0 as /devices/virtual/input/input142 [ 2335.461487][T21186] usb 4-1: config 8 interface 39 has no altsetting 0 [ 2335.476722][T21186] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2335.497797][T21186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.519768][T21186] usb 4-1: Product: syz [ 2335.528198][T21186] usb 4-1: Manufacturer: syz [ 2335.536982][T21186] usb 4-1: SerialNumber: syz [ 2335.850964][ T4175] rdma_op ffff8880692fa1f0 conn xmit_rdma 0000000000000000 [ 2335.860031][ T4175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2335.870099][ T4175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2335.887890][ T4175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2335.907139][ T4175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2335.941213][T21186] ipheth 4-1:8.39: Unable to find endpoints [ 2335.958623][T21186] usb 4-1: USB disconnect, device number 76 [ 2336.434070][ T4200] vlan2: entered promiscuous mode [ 2336.494802][T22364] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2336.677305][T22364] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2336.686687][T22364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2336.696777][T22364] usb 2-1: Product: syz [ 2336.725411][T22364] usb 2-1: Manufacturer: syz [ 2336.730035][T22364] usb 2-1: SerialNumber: syz [ 2336.763676][T22364] usb 2-1: config 0 descriptor?? [ 2337.190934][T22364] usb 2-1: USB disconnect, device number 52 [ 2337.663215][ T1250] Bluetooth: hci2: command 0x0405 tx timeout [ 2337.672280][ T1433] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 2337.896465][ T1433] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 2338.281890][ T4219] loop3: detected capacity change from 0 to 1 [ 2338.298123][ T4219] Dev loop3: unable to read RDB block 1 [ 2338.323809][ T4219] loop3: unable to read partition table [ 2338.413124][ T4219] loop3: partition table beyond EOD, truncated [ 2338.441300][ T4219] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2340.142982][ T1433] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 2340.149304][ T1433] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 2340.170510][ T1250] Bluetooth: hci4: command 0x0406 tx timeout [ 2340.292803][ T4251] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7946'. [ 2340.467834][T21186] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2340.698494][T21186] usb 2-1: Using ep0 maxpacket: 16 [ 2340.720489][T21186] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 2340.745342][T21186] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2340.770836][T21186] usb 2-1: config 8 has no interface number 0 [ 2340.788011][T21186] usb 2-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2340.817129][T21186] usb 2-1: config 8 interface 39 has no altsetting 0 [ 2340.828606][T21186] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2340.840524][T21186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.863686][T21186] usb 2-1: Product: syz [ 2340.909340][T21186] usb 2-1: Manufacturer: syz [ 2340.914699][T21186] usb 2-1: SerialNumber: syz [ 2341.364113][ T4249] rdma_op ffff888020f7b1f0 conn xmit_rdma 0000000000000000 [ 2341.378350][ T4249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2341.401022][ T4249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2341.414538][ T4249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2341.483413][ T4249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2341.598139][T21186] ipheth 2-1:8.39: Unable to find endpoints [ 2341.615873][T21186] usb 2-1: USB disconnect, device number 53 [ 2342.244559][ T1250] Bluetooth: hci5: command 0x0405 tx timeout [ 2342.270865][ T1433] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2342.283414][ T1433] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 2344.302761][ T1250] Bluetooth: hci0: command 0x0405 tx timeout [ 2344.302842][ T1433] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2344.319509][ T1433] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 2344.797385][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.803824][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.943049][T22364] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2345.102781][T22364] usb 2-1: Using ep0 maxpacket: 16 [ 2345.114495][T22364] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 2345.128630][T22364] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2345.139125][T22364] usb 2-1: config 8 has no interface number 0 [ 2345.147830][T22364] usb 2-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2345.169029][T22364] usb 2-1: config 8 interface 39 has no altsetting 0 [ 2345.178087][T22364] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2345.192726][T22364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.202111][T22364] usb 2-1: Product: syz [ 2345.209794][T22364] usb 2-1: Manufacturer: syz [ 2345.215778][T22364] usb 2-1: SerialNumber: syz [ 2345.435890][ T4303] rdma_op ffff888079d2c1f0 conn xmit_rdma 0000000000000000 [ 2345.450440][ T4303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2345.469498][ T4303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2345.491281][ T4303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2345.511143][ T4303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2345.536859][T22364] ipheth 2-1:8.39: Unable to find endpoints [ 2345.559028][T22364] usb 2-1: USB disconnect, device number 54 [ 2346.150233][ T4310] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7964'. [ 2346.484500][ T1250] Bluetooth: hci1: command 0x0406 tx timeout [ 2346.512171][ T1433] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2346.608025][ T1433] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 2346.986371][ T4326] IPv6: addrconf: prefix option has invalid lifetime [ 2347.082812][ T1433] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2347.110066][ T4328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2347.122064][ T4328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2347.139765][ T4326] fuse: Bad value for 'user_id' [ 2347.147608][ T4326] fuse: Bad value for 'user_id' [ 2347.382789][ T1433] usb 2-1: Using ep0 maxpacket: 16 [ 2347.422951][ T1433] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2347.469806][ T1433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2347.480788][ T1433] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2347.490833][ T1433] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2347.590085][ T1433] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2347.802185][ T1433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2347.855310][ T1433] usb 2-1: Product: syz [ 2347.859754][ T1433] usb 2-1: Manufacturer: syz [ 2347.870418][ T1433] usb 2-1: SerialNumber: syz [ 2347.883481][ T1433] usb 2-1: config 0 descriptor?? [ 2347.911121][ T1433] mcba_usb 2-1:0.0: Can't find endpoints [ 2348.711637][ T4344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2348.732280][ T4344] netlink: 'syz.3.7972': attribute type 2 has an invalid length. [ 2350.004556][ T4355] misc userio: Can't change port type on an already running userio instance [ 2350.035050][T13152] usb 2-1: USB disconnect, device number 55 [ 2350.183725][ T4361] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 2350.272863][T22364] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2350.437241][T22364] usb 4-1: device descriptor read/64, error -71 [ 2350.697699][T22364] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2350.760306][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7980'. [ 2350.843830][T22364] usb 4-1: device descriptor read/64, error -71 [ 2350.953497][T22364] usb usb4-port1: attempt power cycle [ 2351.302939][ T1433] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2351.322752][T22364] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2351.344751][T22364] usb 4-1: device descriptor read/8, error -71 [ 2351.480360][ T1433] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2351.493059][ T1433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.507947][ T1433] usb 2-1: Product: syz [ 2351.517429][ T1433] usb 2-1: Manufacturer: syz [ 2351.525383][ T1433] usb 2-1: SerialNumber: syz [ 2351.547044][ T1433] usb 2-1: config 0 descriptor?? [ 2351.593733][T22364] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2351.744157][T22364] usb 4-1: device descriptor read/8, error -71 [ 2351.762470][ T4377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2351.772373][ T4377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2351.863042][T22364] usb usb4-port1: unable to enumerate USB device [ 2351.924814][T22365] usb 2-1: USB disconnect, device number 56 [ 2352.411029][ T4383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2352.453350][ T4383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2352.951865][ T4389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7988'. [ 2352.971579][ T4389] vlan2: entered promiscuous mode [ 2352.976819][ T4389] dummy0: entered promiscuous mode [ 2353.284088][ T4399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2353.294724][ T4399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2353.551743][ T4409] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48424) [ 2353.561920][ T4409] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 2355.152880][ T1433] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2355.423126][T21186] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2355.468815][ T1433] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2355.491256][ T1433] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2355.552951][ T1433] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2355.572839][T21186] usb 4-1: Using ep0 maxpacket: 16 [ 2355.580430][T21186] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 2355.589298][T21186] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2355.602254][T21186] usb 4-1: config 8 has no interface number 0 [ 2355.620024][T21186] usb 4-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2355.696848][ T1433] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2355.719870][T21186] usb 4-1: config 8 interface 39 has no altsetting 0 [ 2355.738100][ T1433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.742105][T21186] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2355.760062][T21186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.770910][T21186] usb 4-1: Product: syz [ 2355.782173][T21186] usb 4-1: Manufacturer: syz [ 2355.802104][T21186] usb 4-1: SerialNumber: syz [ 2355.936293][ T1433] usb 2-1: Product: syz [ 2355.946623][ T1433] usb 2-1: Manufacturer: syz [ 2355.951249][ T1433] usb 2-1: SerialNumber: syz [ 2356.038828][ T4429] rdma_op ffff888053f781f0 conn xmit_rdma 0000000000000000 [ 2356.058395][ T4429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2356.083946][ T4429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2356.144715][ T4429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2356.158268][ T4429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2356.173553][T21186] ipheth 4-1:8.39: Unable to find endpoints [ 2356.204815][T21186] usb 4-1: USB disconnect, device number 81 [ 2356.238774][ T4426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2356.673237][ T4436] program syz.2.8000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2357.232966][ T4453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2357.273252][ T4453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2357.383238][ T4453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2357.394710][ T4453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2358.085522][ T4457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2358.126857][ T4457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2358.321725][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8007'. [ 2358.474467][ T1433] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 2358.484685][ T1433] usb 2-1: No valid video chain found. [ 2358.509392][ T1433] usb 2-1: USB disconnect, device number 57 [ 2359.333027][ T1430] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 2359.496836][ T1430] usb 4-1: config 0 has no interfaces? [ 2359.509133][ T1430] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2359.537278][ T1430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2359.573557][ T1430] usb 4-1: config 0 descriptor?? [ 2360.783031][ T31] INFO: task kworker/0:8:1431 blocked for more than 143 seconds. [ 2360.963334][ T31] Not tainted syzkaller #0 [ 2360.997264][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2361.032492][ T31] task:kworker/0:8 state:D stack:22040 pid:1431 tgid:1431 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 2361.045912][ T31] Workqueue: usb_hub_wq hub_event [ 2361.050974][ T31] Call Trace: [ 2361.054597][ T31] [ 2361.057626][ T31] __schedule+0x1798/0x4cc0 [ 2361.062143][ T31] ? __pfx___schedule+0x10/0x10 [ 2361.067733][ T31] ? schedule+0x91/0x360 [ 2361.071985][ T31] schedule+0x165/0x360 [ 2361.076526][ T31] schedule_timeout+0x9a/0x270 [ 2361.081692][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2361.089448][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2361.103658][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2361.109070][ T31] ? wait_for_completion+0x267/0x5d0 [ 2361.130721][ T31] wait_for_completion+0x2bf/0x5d0 [ 2361.184060][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 2361.198280][ T31] i2c_del_adapter+0x581/0x6e0 [ 2361.208403][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2361.221010][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 2361.230752][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 2361.240552][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 2361.247637][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 2361.255521][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 2361.262311][ T31] usb_probe_interface+0x665/0xc30 [ 2361.268469][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 2361.274414][ T31] really_probe+0x26d/0x9e0 [ 2361.280269][ T31] __driver_probe_device+0x18c/0x2f0 [ 2361.285793][ T31] driver_probe_device+0x4f/0x430 [ 2361.291027][ T31] __device_attach_driver+0x2ce/0x530 [ 2361.297129][ T31] bus_for_each_drv+0x24e/0x2e0 [ 2361.302194][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 2361.308656][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2361.316952][ T31] __device_attach+0x2b8/0x400 [ 2361.321902][ T31] ? __pfx___device_attach+0x10/0x10 [ 2361.329792][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 2361.337535][ T31] bus_probe_device+0x185/0x260 [ 2361.342686][ T31] device_add+0x7b6/0xb50 [ 2361.347208][ T31] usb_set_configuration+0x1a87/0x20e0 [ 2361.355703][ T31] usb_generic_driver_probe+0x8d/0x150 [ 2361.361356][ T31] usb_probe_device+0x1c1/0x390 [ 2361.366470][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 2361.372093][ T31] really_probe+0x26d/0x9e0 [ 2361.379706][ T31] __driver_probe_device+0x18c/0x2f0 [ 2361.385274][ T31] driver_probe_device+0x4f/0x430 [ 2361.390567][ T31] __device_attach_driver+0x2ce/0x530 [ 2361.399084][ T31] bus_for_each_drv+0x24e/0x2e0 [ 2361.404808][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 2361.410980][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2361.421614][ T31] __device_attach+0x2b8/0x400 [ 2361.427571][ T31] ? __pfx___device_attach+0x10/0x10 [ 2361.435228][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 2361.440563][ T31] bus_probe_device+0x185/0x260 [ 2361.445705][ T31] device_add+0x7b6/0xb50 [ 2361.450154][ T31] usb_new_device+0xa39/0x16f0 [ 2361.455145][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 2361.460426][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2361.465868][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2361.471354][ T31] hub_event+0x2958/0x4a20 [ 2361.476103][ T31] ? __pfx_hub_event+0x10/0x10 [ 2361.480955][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2361.486894][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2361.492199][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2361.498194][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2361.504260][ T31] process_scheduled_works+0xae1/0x17b0 [ 2361.509995][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2361.516300][ T31] worker_thread+0x8a0/0xda0 [ 2361.520994][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2361.527669][ T31] ? __kthread_parkme+0x7b/0x200 [ 2361.532911][ T31] kthread+0x70e/0x8a0 [ 2361.537151][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2361.542346][ T31] ? __pfx_kthread+0x10/0x10 [ 2361.547550][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2361.557887][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2361.564424][ T31] ? __pfx_kthread+0x10/0x10 [ 2361.570126][ T31] ret_from_fork+0x3f9/0x770 [ 2361.580059][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2361.587011][ T31] ? __switch_to_asm+0x39/0x70 [ 2361.595802][ T31] ? __switch_to_asm+0x33/0x70 [ 2361.602285][ T31] ? __pfx_kthread+0x10/0x10 [ 2361.608543][ T31] ret_from_fork_asm+0x1a/0x30 [ 2361.616165][ T31] [ 2361.622169][ T31] [ 2361.622169][ T31] Showing all locks held in the system: [ 2361.638954][ T31] 1 lock held by rcu_preempt/16: [ 2361.645135][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2361.659341][ T31] 1 lock held by khungtaskd/31: [ 2361.666075][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2361.676428][ T31] 2 locks held by kworker/u8:8/1108: [ 2361.681854][ T31] #0: ffff888147e80148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2361.693868][ T31] #1: ffffc900038cfbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2361.707733][ T31] 2 locks held by getty/5625: [ 2361.712757][ T31] #0: ffff888033dc80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2361.722825][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2361.733726][ T31] 1 lock held by syz-executor/28197: [ 2361.739499][ T31] #0: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 2361.751381][ T31] 4 locks held by kworker/u8:4/28829: [ 2361.756907][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2361.768348][ T31] #1: ffffc90004ab7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2361.783137][ T31] #2: ffffffff8f52bb70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 2361.793468][ T31] #3: ffffffff8e13f840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2361.804401][ T31] 5 locks held by kworker/0:8/1431: [ 2361.810689][ T31] #0: ffff88802229c148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2361.822327][ T31] #1: ffffc9000b7a7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2361.834883][ T31] #2: ffff888027f75198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2361.844266][ T31] #3: ffff88807be7f198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 2361.853910][ T31] #4: ffff88807d049160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 2361.863463][ T31] 4 locks held by udevd/1822: [ 2361.868340][ T31] #0: ffff88805ac6d2f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 2361.877863][ T31] #1: ffff88805965c888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 2361.888194][ T31] #2: ffff88806a0085a8 (kn->active#22){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 2361.901129][ T31] #3: ffff88807be7f198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 2361.911837][ T31] 1 lock held by syz.2.8006/4456: [ 2361.917409][ T31] #0: ffffffff8e13f840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2361.927799][ T31] 4 locks held by syz.5.8011/4482: [ 2361.933369][ T31] [ 2361.935834][ T31] ============================================= [ 2361.935834][ T31] [ 2361.949591][ T31] NMI backtrace for cpu 0 [ 2361.949610][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2361.949630][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2361.949640][ T31] Call Trace: [ 2361.949648][ T31] [ 2361.949656][ T31] dump_stack_lvl+0x189/0x250 [ 2361.949676][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2361.949688][ T31] ? __pfx__printk+0x10/0x10 [ 2361.949708][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2361.949722][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2361.949734][ T31] ? __pfx__printk+0x10/0x10 [ 2361.949750][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2361.949767][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2361.949780][ T31] watchdog+0xf93/0xfe0 [ 2361.949797][ T31] ? watchdog+0x1de/0xfe0 [ 2361.949813][ T31] kthread+0x70e/0x8a0 [ 2361.949826][ T31] ? __pfx_watchdog+0x10/0x10 [ 2361.949839][ T31] ? __pfx_kthread+0x10/0x10 [ 2361.949852][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2361.949865][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2361.949878][ T31] ? __pfx_kthread+0x10/0x10 [ 2361.949890][ T31] ret_from_fork+0x3f9/0x770 [ 2361.949902][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2361.949915][ T31] ? __switch_to_asm+0x39/0x70 [ 2361.949927][ T31] ? __switch_to_asm+0x33/0x70 [ 2361.949938][ T31] ? __pfx_kthread+0x10/0x10 [ 2361.949951][ T31] ret_from_fork_asm+0x1a/0x30 [ 2361.949971][ T31] [ 2361.949975][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2362.100928][ C1] NMI backtrace for cpu 1 [ 2362.100944][ C1] CPU: 1 UID: 0 PID: 29037 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 2362.100962][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2362.100972][ C1] RIP: 0010:trace_hardirqs_off+0x0/0x40 [ 2362.100996][ C1] Code: 85 0a ff ff ff e8 40 70 6c ff e9 00 ff ff ff 90 0f 0b 90 e9 77 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 53 48 8b 5c 24 08 48 89 df e8 ae 52 b2 09 65 8b 05 97 [ 2362.101009][ C1] RSP: 0018:ffffc90004defbd8 EFLAGS: 00000006 [ 2362.101024][ C1] RAX: f3f3f300f1f1f1f1 RBX: ffffffff99d111f8 RCX: 000000000000fdb0 [ 2362.101036][ C1] RDX: 0000000000000001 RSI: ffffffff8b8cf2c0 RDI: ffffffff99d111f8 [ 2362.101047][ C1] RBP: ffffc90004defc68 R08: ffffc90004defd87 R09: 0000000000000000 [ 2362.101058][ C1] R10: ffffc90004defd40 R11: fffff520009bdfb1 R12: dffffc0000000000 [ 2362.101070][ C1] R13: ffffc90004defd40 R14: 0000000000000a02 R15: 1ffff920009bdf7c [ 2362.101081][ C1] FS: 0000555571df6500(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 2362.101095][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2362.101106][ C1] CR2: 00002000003a6030 CR3: 000000006c68e000 CR4: 00000000003526f0 [ 2362.101120][ C1] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006 [ 2362.101130][ C1] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2362.101140][ C1] Call Trace: [ 2362.101147][ C1] [ 2362.101153][ C1] _raw_spin_lock_irqsave+0x82/0xf0 [ 2362.101175][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 2362.101197][ C1] __debug_object_init+0x85/0x3c0 [ 2362.101215][ C1] ? __might_fault+0xb0/0x130 [ 2362.101238][ C1] hrtimer_nanosleep+0xab/0x360 [ 2362.101255][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 2362.101273][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 2362.101297][ C1] __se_sys_clock_nanosleep+0x2f1/0x380 [ 2362.101318][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 2362.101336][ C1] ? rcu_is_watching+0x15/0xb0 [ 2362.101354][ C1] ? do_syscall_64+0xbe/0x3b0 [ 2362.101375][ C1] do_syscall_64+0xfa/0x3b0 [ 2362.101394][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2362.101415][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2362.101430][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2362.101446][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2362.101461][ C1] RIP: 0033:0x7f4b113c14a5 [ 2362.101473][ C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2362.101486][ C1] RSP: 002b:00007f4b116dfd40 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2362.101501][ C1] RAX: ffffffffffffffda RBX: 0000000000000584 RCX: 00007f4b113c14a5 [ 2362.101512][ C1] RDX: 00007f4b116dfd80 RSI: 0000000000000000 RDI: 0000000000000000 [ 2362.101522][ C1] RBP: 00007f4b116dfdec R08: 0000000000000000 R09: 0000000000000000 [ 2362.101533][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000181 [ 2362.101542][ C1] R13: 0000000000000063 R14: 000000000024067f R15: 00007f4b116dfe40 [ 2362.101561][ C1] [ 2362.102354][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2362.408796][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2362.417895][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2362.427942][ T31] Call Trace: [ 2362.431211][ T31] [ 2362.434134][ T31] dump_stack_lvl+0x99/0x250 [ 2362.438724][ T31] ? __asan_memcpy+0x40/0x70 [ 2362.443308][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2362.448519][ T31] ? __pfx__printk+0x10/0x10 [ 2362.453110][ T31] vpanic+0x281/0x750 [ 2362.457084][ T31] ? __pfx_vpanic+0x10/0x10 [ 2362.461575][ T31] ? irqentry_exit+0x74/0x90 [ 2362.466156][ T31] ? preempt_schedule+0xae/0xc0 [ 2362.471002][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2362.476456][ T31] panic+0xb9/0xc0 [ 2362.480171][ T31] ? __pfx_panic+0x10/0x10 [ 2362.484579][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2362.489946][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2362.496089][ T31] watchdog+0xfd2/0xfe0 [ 2362.500242][ T31] ? watchdog+0x1de/0xfe0 [ 2362.504578][ T31] kthread+0x70e/0x8a0 [ 2362.508639][ T31] ? __pfx_watchdog+0x10/0x10 [ 2362.513334][ T31] ? __pfx_kthread+0x10/0x10 [ 2362.517915][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2362.523110][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2362.528305][ T31] ? __pfx_kthread+0x10/0x10 [ 2362.532887][ T31] ret_from_fork+0x3f9/0x770 [ 2362.537469][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2362.542574][ T31] ? __switch_to_asm+0x39/0x70 [ 2362.547329][ T31] ? __switch_to_asm+0x33/0x70 [ 2362.552085][ T31] ? __pfx_kthread+0x10/0x10 [ 2362.556667][ T31] ret_from_fork_asm+0x1a/0x30 [ 2362.561436][ T31] [ 2362.564702][ T31] Kernel Offset: disabled [ 2362.569015][ T31] Rebooting in 86400 seconds..