last executing test programs: 11m11.064716423s ago: executing program 32 (id=623): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffdeb, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000000000000070000007fff0000000000000000000010003f00f8ff07002b000000000000002400120008000100766574681800020014000100000000007fff000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) 11m1.750699591s ago: executing program 0 (id=667): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='select \n', 0x10) write(r2, &(0x7f0000000100)='file read \\Xtc/passwd task.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) fchdir(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000100)=0x4) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 11m1.577422899s ago: executing program 0 (id=668): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x40000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c8e, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x2000007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffe, 0x2, 0x1, 0x3, 0x10, 0x4000100000001]}) 11m1.473123813s ago: executing program 0 (id=669): syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x6, 0xd5, 0x5a, 0x40, 0x93a, 0x2474, 0xeff5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x12, 0x0, 0x7, "", [{{0x9, 0x4, 0x4f, 0x9, 0x0, 0x6e, 0xce, 0x94, 0x2c}}]}}]}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) socket$inet(0x2, 0x2, 0x73) 11m0.513375041s ago: executing program 0 (id=672): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) r2 = add_key(&(0x7f0000000600)='cifs.idmap\x00', &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r2, &(0x7f0000000940)=""/244, 0xf4) close_range(r0, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)=0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r6, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x2}}, 0x10) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r6) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000a40)=@newsa={0x3d4, 0x10, 0x0, 0x70bd28, 0x25dfdbfe, {{@in=@multicast1, @in=@remote, 0x4e22, 0x0, 0x4e20, 0x1, 0xa, 0x20, 0x20, 0x87}, {@in=@local, 0x4d5, 0xff}, @in=@empty, {0x0, 0x4, 0x7, 0x0, 0x9, 0x2, 0x8, 0x3}, {0x0, 0xffffffff, 0x5, 0x84}, {0xfffffff0, 0x3, 0x6}, 0x70bd2a, 0x0, 0xa, 0x4, 0x0, 0x81}, [@replay_val={0x10, 0xa, {0x70bd27, 0x70bd29, 0x6}}, @extra_flags={0x8, 0x18, 0x8}, @etimer_thresh={0x8, 0xc, 0x6}, @sa={0xe4, 0x6, {{@in6=@private0, @in=@rand_addr=0x64010102, 0x4e24, 0x5ad, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x2, r3, r4}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d5, 0x2b}, @in=@multicast1, {0x200000000000000, 0x0, 0x5, 0x5, 0x1000, 0x1, 0x9157, 0xffffffffffffffff}, {0x340000000, 0x2, 0x3, 0x7}, {0x9, 0xf, 0x1000}, 0x70bd2d, 0x3502, 0x2, 0x3, 0xf6, 0x92}}, @iptfs_max_qsize={0x8, 0x28, 0x8001}, @policy_type={0xa}, @algo_auth_trunc={0x8f, 0x14, {{'mcryptd(sha384)\x00'}, 0x218, 0x320, "5d883b7f3c186cff67bc3af8890fe6709f58220b3e33884e40eb6d58a6e37ea771ab17417503bcbddc3a9531f227c709833a691a582e35922bc5f695e08d0d880fba5d"}}, @migrate={0x134, 0x11, [{@in6=@local, @in=@rand_addr=0x64010100, @in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xff, 0x0, 0x0, 0x0, 0x2, 0xa}, {@in=@loopback, @in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x2b, 0x5, 0x0, 0x3501, 0xa, 0x2}, {@in6=@mcast1, @in=@empty, @in=@empty, @in=@multicast1, 0xff, 0x5, 0x0, 0x3505, 0xa, 0x2}, {@in=@rand_addr=0x64010101, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, @in=@multicast2, 0xff, 0x1, 0x0, 0x3503, 0x2, 0xa}]}, @iptfs_max_qsize={0x8, 0x28, 0x7}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x8801}, 0x48100) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000001200010026bd7000fedbdf251002"], 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x4000810) syz_usb_connect(0x0, 0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500234511b40168572e4a2c1fad3308c1e0102030109024c0001010840060904f10002453f9805090582100004080800200bc2342bcf5883fa76d7aa9b51f24256974dfcb7ee99852fa1944e3bd5b123090580012000330709080bbc"], &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x40d}}, {0x0, 0x0}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x810}}]}) 10m57.452475362s ago: executing program 0 (id=684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r3, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000e00100001c1122334400080000000500050000000580080008"], 0x4a) 10m57.264413975s ago: executing program 0 (id=685): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x42bac406, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c8e, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x2000007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffe, 0x2, 0x1, 0x3, 0x10, 0x4000100000001]}) 10m57.077018704s ago: executing program 33 (id=685): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x42bac406, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c8e, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x2000007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffe, 0x2, 0x1, 0x3, 0x10, 0x4000100000001]}) 9m54.751588284s ago: executing program 5 (id=1078): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="080026009409000f0800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 9m54.637435208s ago: executing program 5 (id=1079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x54, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}}, 0x0) 9m54.613134216s ago: executing program 5 (id=1081): syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000306d55a403a097424f5ef01020301ce942c"], 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000b8"]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r1 = socket(0x11, 0x800000003, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b29, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) socket$inet(0x2, 0x2, 0x73) 9m53.557950212s ago: executing program 5 (id=1085): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234', 0x12, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='P', 0x1, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee, 0x0, 0x8, '\x00', '\x00', "00000000000000000000000000000000000000000000000000001000"}) 9m53.506768669s ago: executing program 5 (id=1086): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000500000016000300686173683a6e40002c706f72742c6e657400000039f9e0b009c7ef48b6c715f7d7f5a1e9f900614d19b3c6c78be6ddec7b21e5326b71ae27ef9ea3a861c2d07c8fa6f7d07ac3b25dbe01c8f52e1e51173e6cc22b2ee6a39c2c294c74926baa053c0d60a7a49f338f8da7dfc4a9e10e5953c1030defd621f2e476191c1d2f3bbc14a7a6a6825926a861ccdd3d9277c5a5baee171a11e2e26cd5"], 0x50}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x5, 0x24, &(0x7f00000029c0)=ANY=[@ANYBLOB="12011001d6d7a908d8048300100a010203f60902120001000c10170904830d000202"], 0x0) fsetxattr$security_capability(r3, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x1, 0xea82}]}, 0xc, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r7, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x20, r7, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6641, 0x7f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x480c5) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@llc={0x1a, 0x1, 0xa, 0x40, 0x3, 0x2, @local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="4f48d13fd067e33e75f4f432076d0db468c712a6b72ff13e72988374c64486c468773b873f91554314a15734b8a83ed7bc7a158911c6afa9188acfd8f1eebe3fd5b52aade0d353835f3e6175cf01717fa44b887152215e6af25ace2e1bfaaa235906c3437873000000000000", 0x6c}], 0x1}}], 0x1, 0x0) 9m52.013131043s ago: executing program 5 (id=1097): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './cgroup.cpu/memory.limit_in_bytes\x00'}) r1 = openat(r0, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x30302, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x10003, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 9m36.557684513s ago: executing program 34 (id=1097): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './cgroup.cpu/memory.limit_in_bytes\x00'}) r1 = openat(r0, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x30302, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x10003, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 7m51.182376959s ago: executing program 2 (id=1814): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0xc0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) 7m51.040907185s ago: executing program 2 (id=1817): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = socket(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x4, @loopback, 0x1c7a0000}}}, 0x30) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}}) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0xfd) 7m50.883575208s ago: executing program 2 (id=1819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000012005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000000012"], 0xa4}}, 0x0) 7m50.860177249s ago: executing program 2 (id=1820): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x83, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, 0x0, 0x0) r8 = dup(r6) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r9, &(0x7f0000000800)='\x00', 0x1, 0x20000044, &(0x7f0000000100)={0xa, 0x4001, 0x20fffa, @loopback, 0xfffffffd}, 0x1c) mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd_dir/threads\x00', 0x2, 0x0) read$FUSE(r10, 0x0, 0x3c) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x0, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ad, 0x1000, 0x3, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4011}, 0x0) io_setup(0x7, &(0x7f00000002c0)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000340)=':@.*]@(,\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff) 7m49.781869286s ago: executing program 2 (id=1824): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4018}, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) readlink(0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x4, 0x8, 0x89, 0x7, 0x4, 0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x15, r2, 0x6a, 0x8000000000200008) r3 = syz_open_procfs(r2, &(0x7f0000000000)='attr/keycreate\x00') socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) write$cgroup_int(r3, &(0x7f0000000100)=0x100000000, 0x12) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) open$dir(&(0x7f0000000140)='./sys/file0\x00', 0x20000, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4018}, 0x40000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) readlink(0x0, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') (async) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x4, 0x8, 0x89, 0x7, 0x4, 0xffffffffffffffff}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) ptrace$cont(0x15, r2, 0x6a, 0x8000000000200008) (async) syz_open_procfs(r2, &(0x7f0000000000)='attr/keycreate\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) (async) write$cgroup_int(r3, &(0x7f0000000100)=0x100000000, 0x12) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) (async) ioctl(r0, 0x8b22, &(0x7f0000000040)) (async) open$dir(&(0x7f0000000140)='./sys/file0\x00', 0x20000, 0x20) (async) 7m49.600882284s ago: executing program 2 (id=1825): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0xc0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) 7m34.348244357s ago: executing program 35 (id=1825): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0xc0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) 3m51.145354271s ago: executing program 6 (id=3040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400032000028000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15930395916e2b388abc3d6ce2316330b00010068656c70657200000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 3m51.139660743s ago: executing program 6 (id=3041): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) (async) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$SG_IO(r0, 0x2285, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23) open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x402800) dup(r1) (async) dup(r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) (async) r3 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMERASE64(r3, 0x40104d14, &(0x7f0000000000)={0x6, 0x10000}) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) (async) r5 = dup(r4) syz_ublk_setup_io_uring(0x4c6d, &(0x7f0000000400)={0x0, 0x351e, 0x2, 0x3, 0x225, 0x0, r5}, &(0x7f0000000480), &(0x7f0000000540), &(0x7f0000000580)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e1109"], 0xeea2) (async) write$cgroup_devices(r6, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e1109"], 0xeea2) pipe2(&(0x7f00000005c0), 0x0) 3m51.0261297s ago: executing program 6 (id=3043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000f00001c1122334400080000000500050000000580080008"], 0x4a) 3m50.879755622s ago: executing program 6 (id=3045): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 3m47.712694524s ago: executing program 6 (id=3065): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_connect$uac2(0x0, 0xc8, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000ff410e51414000010203010902b6000301809000080b01020102200009040000000101200009240144000a2d00080c24030601030e05fd09007f2d2407040400050000010001000200020007240c420809f00904010000010220000904010101010220000a240202060007000a6a062402010201090501090002fe8026082501800c080102200010240108010000000000400800000038092402010605080780090582090006100c800825010006020200"/200], &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x1, 0xc2, 0x2, 0x40, 0x81}, 0xb1, &(0x7f0000000180)=ANY=[@ANYBLOB="050fb10001ac1003a5db77a0a52eaba25012c3d69e57825fb73976a93ee3cc4a18f08d40e660954be2989a16432b716c0de3246e10a9f063adc6ffcef20a1b1933439a8b5810a71cea8590664c18e131ae91e6142ef870c88a46574c14afa0ff6fc6dc2a0cf2417c8d114accc40b63e6769f678c62a31e669bf4d654d20d5758a4fac313a21579cd0119c2d36c445dcfb3f77d1035925d1a7ae23516c428241fec91904c7e82bad9f39cc17c5853a8fbef"], 0x4, [{0x3, &(0x7f0000000240)=@string={0x3, 0x3, '1'}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x430}}]}) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000100)="9001000000000000") r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/oss_mixer\x00', 0x600, 0x0) read(r2, &(0x7f0000000000)=""/221, 0xdd) r3 = epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r4 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) r5 = epoll_create1(0x80000) r6 = epoll_create1(0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x4000000000042) writev(r7, &(0x7f0000001440)=[{&(0x7f0000000100)="c9a9c071", 0x4}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000500)={0x80000008}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x200001, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000000)={0xa000000e}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0x6000000f}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3m45.897791865s ago: executing program 3 (id=3076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000f00000000050000000900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a308000000008000a4000000003280004800800024000000012080001400000000014000300776c616e30000000000000000000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) 3m45.852356383s ago: executing program 3 (id=3077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a80000000060a0b0400000000000000000200000054000480500001800a0001006d617463680000004000028008000240006a000028000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15930395916e2b388abc3d6ce2316330b00010068656c70657200000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 3m45.768268329s ago: executing program 3 (id=3078): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, r0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0xaa, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @dsss={0x3, 0x1, 0xe}, @measure_req={0x26, 0x89, {0x5, 0x6, 0x13, "49d55221d47b9d2f2cfdb6133456567176b9b4a1afb73b29cb62548c1d8f732b7f91a4bc7b86ae6f489d1a88fd28c2caac4344f8491b247ad55bbcf314a53916af2823732eafa096a1fa03a913c69beb944a9c1d39d3a117fc35bd52f17a6ca118e132c2a90819fbf8c26a08f52f85caffb218a64d42702b66d96912342b08e575a4170b602a"}}, @mic={0x8c, 0x10, {0xa16, "b3f2c814aaad", @short="5978113aacc1b7f7"}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000700)={0x53, 0xffffffffffffffff, 0x6, 0x8, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000580)="61ffaf7add82", 0x0, 0x8, 0x10023, 0xffffffffffffffff, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0xe) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000008000300"/18, @ANYRES32=r6, @ANYBLOB="0a000600080211000001000028005080110001004abee33908f8eef16f162471f400000005000200020000000800030005ac0f00"], 0x50}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x18, 0x41, 0x301, 0x70bd2b, 0x25dfdbfd, {0x3}, [@nested={0x4, 0x96}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x840) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) close(r10) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) bind$unix(r11, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f00001b0000/0x4000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 3m45.675823593s ago: executing program 3 (id=3080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000000002000000024e2060e6"], 0x64) 3m45.463926922s ago: executing program 3 (id=3081): add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="656e633d72617720686173683d6e68706f6c7931333035000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e0d3365f9447db5"], &(0x7f0000000200), &(0x7f0000000240)="ce9f0600f786a290c7417bb5b11436edb120873b7fa967beed71cd0293fab5a088839e3c6d6e6da08d50d36a3b55acd80010979f79aa0008cd52c6320c3a5f31216e3120e7f500581a41e5caaaf5bf9c8e7943f076aadc0bc31a11495283464be59c0d4e15d7b74cbdca68ba1199820a2bc708a59f24bbf65d3319b7080dfcf3a19fcb497442fedf8b10fb7fe9cf7cc57516cb74164f88a11a940e06fa352d75ec8637d158d9cb1f2e0b9780a7") r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0xfff7, 0x6df, 0x19, 0x9, 0xffff, 0x5, 0x1, 0xfff, r2}, &(0x7f0000000140)=0x20) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000140)="ab9c4775ab22f72bebf3713ae2b09cc275d0a277a710b525b46198f429d751191a74371d3f8861cb7b87a1f2ac28886cb84e099aaafd4e1d0b3cd9944e", 0x3d}], 0x1, 0x0, 0x0, 0x20000800}], 0x1, 0x40800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r7, 0x8010aebb, &(0x7f0000000200)={0x7000, 0x8000}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m45.34539401s ago: executing program 3 (id=3082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, 0x0, 0x4a) 3m44.640151682s ago: executing program 6 (id=3084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @mcast2, 0x7}, 0x1c) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000000000010000024e2060e6"], 0x64) 3m30.127880861s ago: executing program 36 (id=3082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, 0x0, 0x4a) 3m29.24132769s ago: executing program 37 (id=3084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @mcast2, 0x7}, 0x1c) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000000000010000024e2060e6"], 0x64) 1m15.548806486s ago: executing program 8 (id=3942): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core\x00', 0x1ff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'macsec0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk_0/alua/test_group\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/core/rd_mcp_0/ramdisk_0/alua/test_group/alua_access_type\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\n\x00', 0x2) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 1m15.488318671s ago: executing program 8 (id=3943): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000100)="90") ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x80000002, 0x31237648, 0x6, 0x2, 0x31b6}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 5) 1m15.243824344s ago: executing program 8 (id=3944): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./config\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00') sendto$packet(r0, &(0x7f0000000140)="01154e00010000112233445588fbca010001160cbfbcd16470adc14fd446ccc81e5e", 0x22, 0x44011, &(0x7f0000000040)={0x11, 0x0, r1, 0x0, 0x0, 0x0}, 0x14) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000080)={0x0, 0x3, "6875620000000000000000000000000000000000000000000000000000000001f0ffffffffffff00000000100000000000000000000000000000000000000000000000f695724d000000000000000000000000000000000000005d000002000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff0010000000000000000000000000006761bcc8bdd7d2b300"}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_usbip_server_init(0x2) write$usbip_server(r4, &(0x7f00000005c0)=@ret_submit={{0x3, 0x7fff, 0x0, 0x1, 0x1}, 0x2, 0x4e, 0x4, 0x1d3, 0xa9, 0x0, "e23553b217a8e012b187f6e3c103ae475482a49d5f010adf7b731b7aa91de5868f6c204f5e143b632a96df584906c57f4cd0e872c5e3f617aed125b501263a444b54a20d34d064533fccb17652ce", [{0x8000, 0xbc, 0x4, 0x4}, {0xfffffffa, 0x2, 0xf3, 0x10}, {0x6c, 0x4, 0x5, 0xfffffffa}, {0x6, 0xff, 0x6, 0x9}, {0x8, 0xca8, 0x8, 0x44}, {0x4, 0x3, 0x2, 0x7}, {0x9, 0x9, 0x7, 0x8001}, {0x6, 0xf3, 0xb9, 0x2}, {0xedc, 0x0, 0x8000, 0x1}, {0x4, 0x49, 0x1, 0x1}, {0x8, 0x7, 0x4}, {0x400, 0x0, 0x1, 0x6eb}, {0x8, 0x8b, 0x0, 0x8001}, {0x0, 0xfffffff7, 0x5, 0x3c}, {0x0, 0x0, 0x73, 0x4}, {0x8, 0x4, 0x9, 0x9fd}, {0x9, 0x7ff, 0x3dc, 0x9}, {0x1, 0x1, 0x7, 0x7f0}, {0x70, 0x0, 0x2, 0xc9b}, {0x288c8000, 0x1, 0x3, 0xf7}, {0x9, 0x0, 0xfffffffa}, {0x5, 0xaf0, 0x2, 0x7}, {0x8, 0x3, 0x2, 0x6}, {0x2, 0x4, 0x5, 0x6}, {0x2, 0x1, 0x6}, {0x6, 0x0, 0x5, 0x8}, {0x3, 0xfc7c, 0x7, 0x4b36}, {0x1, 0xd0c, 0x9, 0x9e8}, {0x0, 0x6, 0x3ff, 0x7}, {0x8800, 0x2, 0x2, 0x3714}, {0x8, 0x4}, {0x7, 0x7, 0x40, 0xbc91}, {0x9, 0x7fff, 0x6905, 0x6}, {0x1ea, 0xfffffff9, 0x8, 0x3bc00}, {0x2, 0xfff, 0x81, 0xfff}, {0xdc94, 0x10000, 0xaa6, 0x4}, {0x0, 0x6fd, 0x4, 0x80000000}, {0x7f, 0x554, 0xf21, 0x7}, {0x0, 0x9, 0x0, 0x8}, {0x6268c2d1, 0x3, 0x80000001, 0x200}, {0x5, 0x0, 0x1000, 0xa7c}, {0xfffff000, 0x1, 0x40, 0x8}, {0x9, 0xffff0000, 0x2, 0x3}, {0x94, 0x4, 0x9, 0x9}, {0x7, 0x0, 0x7, 0x1}, {0x91, 0x9, 0xbdc}, {0x80, 0x6, 0x2, 0x7}, {0x200, 0x89e, 0x3, 0x9}, {0xe, 0x4, 0x7, 0x61}, {0x80000001, 0x7, 0x8000, 0x7193b83}, {0x0, 0xe, 0x2, 0x6}, {0x6, 0x0, 0x7}, {0xfffffffd, 0xffff0000, 0xc27, 0x7}, {0x3eb, 0xaf, 0x50d63fc7, 0xa6}, {0x800, 0x401, 0xb2f0c98c, 0x1}, {0xfffffff0, 0x401, 0x5, 0x2}, {0x9, 0x1, 0x3, 0x7}, {0x0, 0x5ce, 0x8, 0x3}, {0x4, 0x1, 0x0, 0x62}, {0x4, 0x5, 0x77, 0x1000}, {0x8000, 0xc2, 0x4, 0x2}, {0x1, 0x2, 0xfffffffc, 0x1}, {0x9, 0x8, 0x50000000, 0x3}, {0x10097597, 0x7fff, 0x0, 0xc0000000}, {0x62eb7c3b, 0x8, 0xfff, 0x7}, {0x3fc4, 0x7fff, 0x3, 0x1}, {0xfffffffe, 0x0, 0x0, 0x10000}, {0x4, 0x10001, 0x7cb, 0xfffffffb}, {0xfffffffe, 0x1, 0x4}, {0x9f93, 0xfffffffb, 0x7, 0xc6f6}, {0x7fff, 0x1, 0x3, 0x4}, {0x7e, 0x5, 0x1, 0x1}, {0x605f, 0x10000, 0x6cc0e039, 0x7}, {0x4, 0x7ff}, {0x4, 0x3, 0x7, 0x1}, {0x8, 0xd, 0x101, 0xb}, {0xae24, 0x6, 0x6, 0x9}, {0x9, 0x0, 0x7fff, 0xe0}, {0x9, 0x7, 0x6, 0x3}, {0x7, 0x0, 0x62, 0x3}, {0x7fffffff, 0x80000, 0xed60, 0x1}, {0x8fb7, 0x2, 0xe, 0x7}, {0xf7, 0xfffffbff, 0x100, 0x5}, {0x2, 0x4, 0x1, 0xb99d}, {0xbae3, 0x1, 0x6, 0x8}, {0xdb, 0x4, 0x101, 0xa8}, {0x1, 0x8, 0x0, 0x4}, {0x0, 0x80, 0xfffffff8, 0x1}, {0x9, 0x0, 0x80000000, 0x14391b24}, {0x0, 0x10, 0x3, 0x2}, {0x80000000, 0x3, 0x1, 0x3}, {0x6, 0x1000, 0x6, 0xfffffffc}, {0xb, 0x1, 0x4cf, 0x1000}, {0x400, 0x60, 0x10000, 0x101}, {0x6, 0x3, 0x1, 0x8001}, {0xff, 0x80000000, 0xc, 0x7}, {0x6, 0x2}, {0xfffffff9, 0x5, 0x1}, {0x40, 0x80000001, 0x8, 0xffffffff}, {0x4, 0x7, 0x80, 0x56}, {0x4, 0x8, 0x7f}, {0x3, 0x81, 0x2, 0x2}, {0x2, 0x40, 0x800, 0x7}, {0x8, 0x9, 0x7c16, 0x9}, {0x9, 0x9, 0x800, 0x7}, {0x8, 0x3, 0xf7f13f9, 0x3}, {0x3, 0x0, 0x119ee91e, 0x4}, {0x1000, 0x6, 0x7bbcc43d, 0x8}, {0x40, 0x7, 0x4, 0x7ff}, {0x9, 0x8, 0x0, 0x34}, {0x8, 0x1, 0x6, 0x2}, {0x3, 0xfff, 0x6c, 0x533}, {0xae0b, 0x401, 0x5230, 0xa}, {0x7, 0xcf28, 0x1, 0x9}, {0xf15, 0x8, 0x8, 0x8}, {0x8, 0x6, 0xffffff00}, {0x45, 0x1, 0x9, 0xa6}, {0x6, 0x1000, 0xfffffffd, 0x400}, {0x3, 0x8, 0xd50, 0x7}, {0x6, 0x9, 0x5, 0x7f}, {0x10, 0x2, 0x5, 0x2}, {0x6, 0x175, 0x4, 0x9}, {0x7, 0x7, 0x9, 0xce3c}, {0x0, 0x7fff, 0xc, 0x1200000}, {0x2, 0x3, 0x10, 0x1}, {0xfffffff8, 0xc301, 0x7, 0x1}, {0xc, 0xfffffff7, 0x0, 0x81}, {0x8b, 0x0, 0x7f, 0x6}, {0x8, 0xfffffffd, 0x5, 0xd}, {0x3, 0x40, 0x5d3, 0x1000}, {0x5, 0x5, 0x6, 0xfffffa40}, {0x4, 0x0, 0x6, 0xe}, {0x4, 0x1, 0x0, 0x6}, {0x2, 0x1, 0xac, 0x9}, {0x8, 0x80000000, 0x8001, 0x3}, {0x1, 0x4f, 0x10, 0x6}, {0x4, 0x5, 0x5, 0xfffffe01}, {0x2, 0x81, 0x8000, 0x84}, {0x6, 0x4, 0x3, 0x4}, {0x5, 0x2, 0x1, 0x7}, {0xfffeffff, 0x10, 0x1, 0x7ff}, {0x80000000, 0x0, 0xb3e4, 0x9}, {0xfffffff8, 0x9, 0x7, 0x4}, {0x7, 0x0, 0xb9d, 0x20a}, {0x9, 0x5, 0x5, 0x1000}, {0xa, 0x8, 0x2fec, 0x7fff}, {0xeeee, 0x11, 0x101, 0x7e}, {0x19ef08b9, 0xfffffffb, 0x80000000, 0xff}, {0xbc9, 0xb86, 0x6, 0x9}, {0x7, 0x5, 0x80000001, 0x7fffffff}, {0x8, 0x4, 0xb59, 0x9a}, {0x80000000, 0x7, 0x4, 0x8}, {0x1c5, 0x1, 0x2, 0x4}, {0xa, 0x45, 0x3, 0x10001}, {0x0, 0x9, 0x5, 0x6}, {0x2, 0x0, 0x5, 0x17}, {0x0, 0x10, 0x80000001, 0x4}, {0x2, 0xfffffdb6, 0x27336aa2, 0x1}, {0x2, 0x81, 0x9, 0x6}, {0x71, 0x0, 0xff, 0x8001}, {0x278, 0x10001, 0x4, 0x3}, {0x3, 0x0, 0xfbbf}, {0x5, 0x88f4, 0x7, 0xec8e}, {0x4, 0xbefc, 0x8, 0x7}, {0x7, 0x9, 0x800, 0x3}, {0xfffffffc, 0x80000000, 0x0, 0x7}, {0x6, 0x7, 0x2, 0x4}, {0x4, 0x8, 0x1, 0x60e1}, {0x7b, 0x1ff, 0x1, 0xe4f}, {0x0, 0xd, 0x40, 0x4}, {0x1, 0x200, 0x7, 0x6}, {0x2, 0x40, 0x0, 0xfffffffb}, {0x8000, 0x1, 0x7, 0x5}, {0x3, 0x70000000, 0x8000, 0x3}, {0x9, 0xb, 0x7ff, 0xb}, {0x81, 0x2, 0x7fffffff, 0x9}, {0x9c8, 0x3, 0xb, 0xa00}, {0x0, 0x2, 0x800, 0x801}, {0x4, 0x80000001, 0x0, 0x2}, {0xeb3, 0x7fff, 0x1, 0x1}, {0x5, 0x4, 0x5, 0x3}, {0x5, 0x7, 0x790, 0x800}, {0x40, 0x9, 0x5d8, 0x4}, {0x9, 0x1e86, 0x3, 0x4}, {0x9, 0x7, 0x1, 0xc5}, {0x1, 0x8, 0x7, 0xffff26e8}, {0x7fff, 0x9, 0x8000, 0xffffffff}, {0x7, 0x5, 0x2, 0x7ff}, {0x2, 0x1, 0xfffffffe, 0x2}, {0x4, 0x3, 0x46, 0xd}, {0x2, 0xaf, 0x29, 0xfffffffd}, {0x5, 0xc000000, 0x2, 0x81}, {0x1, 0x200, 0x7, 0x2}, {0x0, 0x6, 0x100, 0x52}, {0xa7, 0x5, 0x7fff, 0x1}, {0x3, 0x6, 0x2, 0x5}, {0x4, 0x6, 0x1, 0x1}, {0x9b7a, 0x80000001, 0x9, 0x1}, {0x0, 0xfffff886, 0x4, 0x5}, {0x2, 0x8001, 0x1, 0x2}, {0x80000000, 0x7, 0x2, 0x936a}, {0x6, 0x4, 0x2, 0x5}, {0x7, 0xabb0, 0x1, 0x8}, {0x1, 0xf50c, 0x48, 0x400}, {0x9, 0x65183aa3, 0x2, 0x6}, {0xfffffff8, 0x3ff, 0x3, 0xe}, {0x5, 0x7, 0x8, 0x4be7}, {0xb79a, 0x3, 0x2, 0x3}, {0x8, 0x2, 0x8, 0x1}, {0x8, 0x9, 0xffffffff, 0xf132}, {0xa, 0x10001, 0x7, 0x2}, {0x9, 0xfffffbff, 0x2b, 0xab}, {0x800, 0x40, 0x2, 0x204}, {0x402371ec, 0xffffffff, 0x1ff, 0x40}, {0x4, 0x9ee0, 0x10000000, 0xb94}, {0x6, 0x1, 0x3, 0x7}, {0x7, 0x4, 0x3ff, 0x7fff}, {0x10000, 0xffff, 0x8a, 0xffffffff}, {0x5, 0x5a, 0x5, 0x6}, {0x73, 0x8, 0x5, 0x4}, {0x0, 0x0, 0x4, 0x400}, {0x3, 0x5, 0x80, 0x5}, {0x1e5f, 0x64a4, 0x9, 0x2}, {0xff, 0x8, 0x40, 0xc}, {0x8, 0x0, 0x40, 0x8000}, {0xb, 0x1, 0x81, 0x862}, {0x1ff, 0x332, 0x2, 0x5}, {0x7, 0xec9a, 0x9, 0x401}, {0x6, 0x8000, 0x0, 0xb}, {0x86a7, 0x9, 0x800, 0x3}, {0x10000, 0xfff, 0x0, 0x4}, {0x3, 0x6, 0x1}, {0xa6, 0x7, 0x5, 0x8}, {0x2, 0x2, 0x6, 0x3}, {0x4, 0x1000, 0x4af4ed5, 0x2}, {0xf73b, 0x10, 0xd925, 0x3}, {0x3a, 0xb, 0x8, 0x4}, {0x7f, 0x1f7, 0xffff, 0x6}, {0x9e, 0x1, 0x9, 0x1c}, {0x4, 0x2, 0x8000, 0x3}, {0x0, 0x5, 0x18a2, 0x68e}, {0x1, 0x8000, 0x0, 0x1e}, {0x1, 0x5, 0xffffffff, 0x4}, {0xf2d, 0x3, 0x8, 0x7}, {0x8, 0x9f20, 0x3, 0xd}, {0x2, 0x80, 0xa49c}, {0x400, 0x1, 0x4, 0xfffffffa}, {0x2, 0x8, 0x8, 0xffffffff}, {0x0, 0x81, 0x0, 0x5}, {0x101, 0x5, 0xa, 0x6}, {0x9, 0x7e07, 0x7, 0xfffffff8}, {0x7ff, 0x7, 0xa, 0x7}, {0xffff1231, 0x1, 0x7f}, {0x4, 0xe6, 0x8, 0x4}, {0xffffffff, 0x1, 0x94, 0x8e01}, {0x5, 0x74fe, 0xd, 0xffff4670}, {0x4, 0x7, 0x7fffffff, 0x1}, {0x20000000, 0x800, 0x0, 0x101}, {0x80000001, 0x101, 0x8, 0xfffffc01}, {0x5, 0x8, 0x8, 0xaf}, {0xae, 0x0, 0x6, 0xe6}, {0x6, 0x8, 0x7fff}, {0x55, 0x7d9c, 0xf, 0x4}, {0x7, 0x4, 0x0, 0x5c034c04}, {0x1400000, 0xff, 0x1, 0x41a}, {0x1, 0x1fda, 0x6, 0x4fde}, {0x5, 0xc9, 0x2, 0x8}, {0x2, 0x10000, 0x1000000, 0x3fc}, {0x7, 0x0, 0x2, 0x2}, {0xe, 0xf1, 0x8, 0x2}, {0x3, 0xfff, 0x10000, 0x6}, {0x10000, 0x69, 0x4, 0x1}, {0x2, 0x0, 0x280, 0x5}, {0x7, 0xfffffbff, 0x1, 0x4}, {0x1, 0x700000, 0x7, 0x2}, {0x5, 0x6d5, 0x4, 0x5}, {0x800, 0x6, 0x3, 0x7f}, {0x9e5, 0x8001, 0xfffffff4, 0x9}, {0x120813c3, 0x81, 0x3, 0xff0}, {0x5, 0x9, 0x400, 0x6}, {0x6a, 0xf9, 0x1, 0x3}, {0x9, 0x9, 0xf1aa, 0x800}, {0xc, 0x101, 0x2, 0xd}, {0x7, 0xffff, 0x80000000, 0x6}, {0xe0, 0x7fff, 0x8, 0x8000}, {0xffffffff, 0x1, 0x2, 0xffff7d26}, {0x80000001, 0xd544, 0x3, 0x2ea}, {0x8, 0xf5e0, 0x1, 0x7}, {0x979, 0x1, 0x3ff}, {0x9, 0x80, 0x7, 0x8}, {0x3, 0xbedc, 0xbc7, 0x800}, {0x6, 0x7, 0x255c, 0x9}, {0x2, 0x10, 0xe, 0x7924}, {0x0, 0x8, 0x1ff, 0x8}, {0x2, 0x280c8bd5, 0x84, 0x10000}, {0xffff, 0x9, 0x4, 0x81}, {0x1, 0x1, 0x1000, 0x3ff}, {0x3, 0x1, 0x80000001, 0x8}, {0x9, 0x9, 0x8}, {0x7, 0xd1f5, 0x5, 0xfffffff9}, {0x9, 0x9, 0xffff4e5c, 0x5}, {0x7017, 0xd, 0xb65a, 0x80000000}, {0x100, 0x3, 0x5ccf, 0x7}, {0xbf09, 0x7, 0xa664, 0x2}, {0x9a, 0x1, 0x6, 0x7}, {0x2, 0x0, 0x6, 0xf}, {0x400, 0x0, 0xc8a2, 0x2000000}, {0x1, 0x800, 0x5, 0x1}, {0x3ff, 0xc, 0xfff, 0x200}, {0x7, 0x4, 0x1, 0x7}, {0x9, 0x7, 0xa, 0x1ff}, {0xd, 0x4, 0x2, 0xfa97}, {0x1, 0x5, 0xac, 0x5}, {0x6, 0x9, 0x5, 0x2}, {0x2, 0x6, 0x8, 0x4}, {0x9, 0x5, 0x1, 0x3}, {0x3, 0x7, 0x0, 0x5f1}, {0x1ff, 0x324, 0x1, 0x6}, {0x8b, 0x10001, 0x10, 0xfff}, {0x1ff, 0x1, 0x2, 0x2}, {0x3, 0x8, 0x0, 0x4291}, {0x10000, 0x4, 0x4, 0x3}, {0x7, 0x10, 0x52, 0x6}, {0x2, 0x9, 0x4, 0x9}, {0x9, 0x8000, 0xffffff39, 0xee}, {0x10001, 0x10, 0x1ff, 0x5}, {0x900, 0x1ff, 0xf, 0x7fffffff}, {0x5152, 0x6, 0x6, 0x5}, {0xb6bb, 0xf5, 0x100, 0x80}, {0x3, 0x5, 0x2, 0xfffffffe}, {0x1, 0x2, 0x0, 0x8}, {0x1d, 0x4, 0x8ee, 0x2}, {0x7, 0x7, 0x1da, 0x7}, {0x400, 0x4, 0xe, 0xce}, {0xad, 0xfffffffc, 0x3, 0x4}, {0x80000000, 0xc, 0x9, 0x1}, {0x9, 0x8, 0x3}, {0x1, 0x46, 0x5, 0x6}, {0x10, 0x0, 0x5, 0x7}, {0x9, 0x6, 0x6, 0x4}, {0x3, 0x1ff, 0x8001, 0x1ff}, {0x8d23, 0x401, 0x3, 0x9}, {0x3, 0x1, 0xb, 0x9}, {0x1, 0x5, 0xffffffa6, 0x6}, {0x7, 0xfffffff8, 0x6a, 0x1ff}, {0x2db0, 0x2, 0x9a, 0x2}, {0x2, 0x3, 0x7ff, 0x3}, {0x4, 0x81, 0x9, 0x9}, {0x0, 0x4, 0x0, 0x5}, {0x1ff, 0x6, 0x8, 0x9}, {0x9, 0x3, 0x1, 0xb3}, {0x8, 0x7, 0x3, 0x4}, {0x8, 0x1, 0x7}, {0x0, 0x8, 0x7, 0xfb8}, {0x3c, 0x9, 0x6, 0x8}, {0xb, 0x8, 0x5, 0x5}, {0xf, 0x6671, 0x3}, {0x10, 0xfff, 0x800, 0x2}, {0xe, 0xffff, 0x4, 0x8}, {0x8b, 0x0, 0xfb, 0xd6}, {0x1, 0x8, 0x8, 0xffff0001}, {0xd7, 0x4a3, 0x9, 0xff}, {0x0, 0xff, 0x260d804c, 0xffffffa5}, {0x2, 0x5, 0x0, 0xb9}, {0x1c, 0x8001, 0xfffffffc, 0x7ff}, {0x400, 0x1000, 0x0, 0x3}, {0xe58, 0x5, 0x719d, 0x4}, {0x101, 0x0, 0x7, 0xfffffffc}, {0x5, 0x100, 0x2, 0xbf}, {0x7, 0x2, 0x803, 0xe}, {0x5e, 0xa, 0x7fffffff, 0x7}, {0x8, 0x6, 0x2e5, 0xfffff854}, {0x6, 0x3ff, 0x4, 0x80}, {0x5, 0x5298a404, 0x9, 0x1ff}, {0x8431, 0x8000, 0x400, 0x6}, {0xc54, 0x0, 0x0, 0x2}, {0x6, 0x6, 0x9, 0x1}, {0x6, 0x6, 0xfffffffa, 0x3}, {0x5, 0x7, 0xf, 0x4}, {0x80000000, 0x5e6d, 0x8, 0xfffffffc}, {0x100, 0x6, 0xff, 0x9}, {0x8, 0xfffeffff, 0x1ff, 0xbd7}, {0xfff, 0x80000001, 0x6, 0x4f46}, {0x2, 0x2, 0x8, 0x3}, {0xfffffbc1, 0x650, 0x10, 0x7}, {0xa, 0xb, 0xfffffffd, 0x5}, {0x3fff8000, 0x7, 0x8, 0x55e}, {0x3, 0x57e, 0xff, 0xa3}, {0x5, 0xf4f, 0x5, 0x9}, {0x6, 0x6, 0x80, 0x4}, {0xcf, 0x4f7, 0x2, 0xfffffffe}, {0x4, 0x3, 0x3ff, 0x4}, {0x0, 0xff, 0x5, 0x800}, {0x0, 0xf, 0x100, 0x9}, {0x1, 0x2, 0x0, 0x7}, {0x1, 0x4, 0x7fff, 0x400000}, {0xfff, 0x0, 0xfffffff1, 0x2}, {0x3, 0x5, 0x8, 0x5}, {0xdb4e, 0x1, 0x2, 0x8}, {0x9, 0x1, 0x7, 0x2}, {0x2, 0x7, 0x1, 0x101}, {0x6, 0x10001, 0x7, 0xa}, {0x718, 0x1ff, 0x6, 0x3}, {0x7f, 0x5, 0x60, 0xe06}, {0x2c, 0x5, 0x10000, 0x1}, {0x1, 0x1, 0x310dba75, 0xff}, {0xafbd, 0x29e, 0x2, 0x8}, {0x8, 0x0, 0x3ff, 0x1}, {0x81, 0xe19, 0x0, 0x8}, {0x0, 0x4, 0xffffffff}, {0xcc, 0x6, 0x3, 0xe}, {0x6, 0x2, 0x6}, {0x0, 0x7f, 0xfff, 0x6}, {0x1, 0x7, 0x5, 0x100}, {0x401, 0x0, 0x8, 0xfffffffe}, {0x6, 0xb, 0x2, 0xd}, {0x7, 0x80000001, 0x4, 0xff}, {0x8, 0x2, 0x8000, 0x4}, {0x80000001, 0x8, 0x8, 0x401}, {0x5, 0x8, 0x401, 0x1}, {0x1, 0x1, 0xad, 0x6}, {0xfffffff0, 0x7, 0x40, 0x8}, {0x1ff, 0x5, 0x0, 0x73}, {0x1, 0xfffffff8, 0x8, 0x6}, {0x8, 0x7ff, 0x2, 0x9}, {0x2, 0x1, 0x5, 0x1}, {0x4, 0x1, 0x400, 0x6}, {0xfff, 0xc6f2, 0x400, 0xa0b}, {0x3ff, 0x2, 0x4, 0x7}, {0x4, 0x0, 0x5, 0xfff}, {0xf, 0x5, 0x4f4, 0x7f}, {0x8b, 0x2, 0x0, 0x9}, {0x3ff, 0xfffffff8, 0x3, 0x5}, {0xdf000000, 0x5, 0x2, 0xf1f2}, {0x9, 0x1, 0x7ff, 0xfff}, {0xf, 0xf1b, 0x75a}, {0x6, 0x0, 0x0, 0x8}, {0x7, 0x8, 0x80000001, 0x40}, {0x0, 0x8, 0x7, 0x4}, {0xe4, 0x80, 0x9, 0x8}, {0x3, 0x6, 0x7}, {0x728, 0x2, 0x0, 0x6}, {0x1, 0x3b92, 0x2, 0x2}, {0x4, 0xffff, 0x0, 0xffffff4f}, {0xcb96, 0x7, 0xbb0}, {0x1ff, 0x80, 0x2}, {0xfffffffa, 0xf8ab, 0x9, 0x4}, {0x7, 0x2, 0x40, 0x80}, {0xa, 0x1, 0x9, 0xff}, {0x1, 0xe7c, 0x7, 0x10}, {0xfff, 0x7, 0x4, 0x9}, {0x4, 0x400, 0xfffffff7, 0x2}, {0x7, 0x7fffffff, 0x3, 0x80000000}, {0x1, 0x1, 0x3, 0x8}, {0x800, 0x3, 0x2, 0x8}, {0x5, 0x2, 0x3464, 0x8}, {0xa, 0x3, 0x7, 0x3}, {0x8e, 0x8, 0x0, 0x2}, {0x3, 0xffff8000, 0x80, 0x6}, {0xf95, 0x6, 0x3, 0x2}, {0x9c, 0xfffff801, 0x4}, {0x400, 0x3, 0x2, 0xfffffffc}, {0x887, 0x2, 0x1c, 0xf8f}, {0x10000, 0x3, 0x2, 0x7ff}, {0x9, 0x5, 0x1, 0x3}, {0x1, 0x1, 0x1, 0x800}, {0x100, 0x0, 0x8001, 0x7}]}, 0x1dae) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x37, 0x109, 0x870bd22, 0x25dfdbfd, {0x2}, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd7000000000000400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20040000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x6}}, 0x0, 0x0, 0x8, 0x0, "abf1df964b38b7a4a0414b0121e0b9dccd97477da74a510c0f61951406a0b01e4967c3bb07085a6c0d3bf00d2e8c9c5fa92a8839ce262db0f8c84425bd81202509c9bef8178d67451000"}, 0xd8) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = openat(0xffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x0) write(r9, &(0x7f00000000c0)='2\n\x00', 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) accept4(r8, 0x0, 0x0, 0x0) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRES8=r7, @ANYRESDEC, @ANYRESHEX=r3, @ANYRES32=r7, @ANYRES16=r5, @ANYRES8, @ANYRESHEX=r3, @ANYRES16=r8, @ANYRES8=r1], 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="40050b00000020891a"], 0x0, 0x0, 0x0}, 0x0) socket$pptp(0x18, 0x1, 0x2) 1m12.116822989s ago: executing program 8 (id=3956): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(&(0x7f0000000300)=@sr0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='ocfs2\x00', 0x14000, &(0x7f0000000440)='@&@[)$@!&@[\x80\\\x00') (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='sysv\x00', 0x40080, &(0x7f0000000100)='autofs\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xdfb76000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r1 = syz_io_uring_complete(0x0, 0x0) getdents(r1, &(0x7f0000000480)=""/128, 0x80) chdir(&(0x7f0000000140)='./file1\x00') (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x90000, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x8b, 0x18140) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r4 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0xc0089364, &(0x7f0000000180)) 1m11.839160024s ago: executing program 8 (id=3958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000050000000000024e2060e6"], 0x64) 1m11.492081249s ago: executing program 8 (id=3961): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = gettid() sigaltstack(&(0x7f0000000000)={&(0x7f0000001080)=""/4096, 0x0, 0x1000}, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40080c0) rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0xb, 0x4}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r4, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0xff80}]}, 0x24}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r5, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @result={0x7b, 0x6}}, {0x0, 0x0, 0x0, 0x0, @time={0x6608a2b9, 0xffff}, {}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfe, {0x0, 0x8}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x1, 0x1, 0x0, @tick=0x7fffffff, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m11.135120771s ago: executing program 38 (id=3961): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = gettid() sigaltstack(&(0x7f0000000000)={&(0x7f0000001080)=""/4096, 0x0, 0x1000}, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40080c0) rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0xb, 0x4}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r4, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0xff80}]}, 0x24}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r5, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @result={0x7b, 0x6}}, {0x0, 0x0, 0x0, 0x0, @time={0x6608a2b9, 0xffff}, {}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfe, {0x0, 0x8}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x1, 0x1, 0x0, @tick=0x7fffffff, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.761215418s ago: executing program 7 (id=4260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000ffff00000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a3200000000090001"], 0xc4}}, 0x0) 7.660774069s ago: executing program 7 (id=4261): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x3ffd, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'hsr0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'hsr0\x00', 0x1}) 7.259045407s ago: executing program 7 (id=4262): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, &(0x7f0000000580)={0x44, &(0x7f0000000200)={0x40, 0x16, 0x22, "819c0a50a70d9bc03e18ae6253032f786e095f906218bfa6747cab5251485630a5d9"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x81, 0x2, "0514"}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "e0e4d3"}, &(0x7f0000000440)={0x20, 0x83, 0x3, "dd8478"}, &(0x7f0000000480)={0x20, 0x84, 0x2, 'be'}, &(0x7f0000000540)={0x20, 0x85, 0x3, "f9e2d1"}}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000780)={0x14, &(0x7f0000000680)={0x40, 0xf, 0x70, {0x70, 0x22, "59b3ca5a39e8e88b9e9370c8b83bb8f3305fd8041905b4ec84b6381f172e9f7988d99d0f10e74dc0076e8a8a99c318ba715230ce0b1608cdb1a423ee05e9b5f9d2e364f8ad82e36159c7ac4fa2d8d068ecb9b991f57bc0577fc104fb1716757ca5c37e444536e185e43731698099"}}, &(0x7f0000000700)={0x0, 0x3, 0x12, @string={0x12, 0x3, "e1a78961eb3cb7acc215ca0e7c3ce480"}}}, &(0x7f0000000980)={0x34, &(0x7f00000007c0)={0x40, 0xa, 0x40, "ed50543ad76d7fa0dee146ccd15f3cadba466ae89d8e1c6bbea98529e7d19ea75c5cd5c0b73cea75bb9b27079be05e386241a387e01bbc232ed60dd91b63fc59"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000008c0)={0xc0, 0xa1, 0x4}, &(0x7f0000000900)={0x40, 0xa0, 0x4, 0x800}, &(0x7f0000000940)={0xc0, 0xa2, 0x2f, "19618c6e8c8096f9f5c315df181426f2748b23a9fcff0dcb60b8d199febb28966b4a467064d0e37f5984b12d414c80"}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000140)={0x240f, 0x1, 'client0\x00', 0x5, "9a350bf072fa0561", "95c19b47ef1bde34da9e004166b9563a7439519c64bf9508e71d6e8d10693b0c", 0x40, 0x7}) setuid(0xee01) r5 = socket$alg(0x26, 0x5, 0x0) fchown(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="c10d0400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000640)=0x6, 0x4) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="000d040000006c57ef8b7d5a611976315c52034abdc8cb70fa39e5a0ec94000cf3462ee9"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001380)={0x20, 0x8, 0x4, "494e6ad8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.050680406s ago: executing program 4 (id=4263): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000e000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa020000000000000000000000000000003c00000000000000ffffffff0000000000000000100000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff02000000002f000000000000000001"], 0xfdef) 6.605297393s ago: executing program 4 (id=4266): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x6b, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="5a2bb0843e125f9be8e986d9329ca7961c4e6d8ff5b78053776aa56e598509d4bbebc9d85c4ff7483113a69f748171d20eaf13b044b7455d919af12e2595028b8c14d4f3153411390a6d3bb6935ae1666e51"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES32, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.810801627s ago: executing program 1 (id=4268): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x1, 0x0) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000280)={0x23, 0x1, 0x8, 0x1, 0x0, 0x3e8, &(0x7f00000002c0)}) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000102, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000080)=@x86={0x41, 0x1, 0xc, 0x0, 0xfffffffb, 0x8, 0x0, 0x1, 0xf, 0x6, 0x8, 0x2, 0x0, 0x0, 0x441, 0x0, 0xf7, 0xfd, 0x2}) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) (async) getsockopt(r2, 0xfffffffd, 0x2, 0x0, &(0x7f00000000c0)) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0xe, 0x0, &(0x7f0000000380)) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x1, 0xc9, {0xc9, 0x6, "aac27f3898b76a047161d60beb5819d6124de88a8b418a63df93c9c1b5ef2f2d80c74cf5fdf156dbf28e5df05e11e319bd6fb106c3d4f9362b174f24cc592fbbf259ca34f0fa3f24fb76f3f94cb4ba56d0c6056d4f7b439174ba0f409c9c8f19fd630c9c52775b1fde50ebfbce6aad25bd9994f549287658d29b9b1ef4a459a329e5ffee279b08bb1a2ae3680791c7add0fa5e2d5ccf55639bb2d70d9151089cbffa1191bcde0f324c620d951bcce7642cb7880cb85d536904aef496e503ba2bf0269a02b6dabb"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}}, &(0x7f0000000bc0)={0x44, &(0x7f00000008c0)={0x0, 0xe, 0xd8, "11d856e31c66af7cfe3709222b96e44f1c916b5e3db0b02479b57fb48d5ef8e656e0a5b1f5422a61b88a54dc92e6329d8e0093939c040ddefec3dad2397304a09a5c41cd73b9c8813f343b6136d19a305d625a5cc3e3ce545263ee8f02c6c2ecfff92468882db9e785df70f7cdfa626b9c761044b0f1291eef8b2414180b29071da4bed0f5d721b1d7f06b2fc376fbeb261f0526287b89a75d5fd58eb583deddb94c4478e7a0fb42b20c6710a841e7a939837a675e9e10b5178247297d3785bc8326160ba2e277d27e3ad7a35bf4bebfaa3db735039de692"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x75}, &(0x7f0000000a40)={0x20, 0x81, 0x1, '-'}, &(0x7f0000000a80)={0x20, 0x82, 0x1, 'v'}, &(0x7f0000000ac0)={0x20, 0x83, 0x1, 'T'}, &(0x7f0000000b00)={0x20, 0x84, 0x1, '3'}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "d43ae6"}}) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtclass={0x578, 0x28, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x4, 0xc}, {0xc, 0x1}}, [@c_atm={{0x8}, {0x60, 0x2, [@TCA_ATM_HDR={0x35, 0x3, "8cc1820b42faa9873708b3d9749fc2b92ff69944b9b0e0591d214da98c8248ec1852ab2c84dc93d492b5fc49155a464ae1"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0x9}}, @TCA_ATM_HDR={0xd, 0x3, "54f3c10c8f656605f1"}, @TCA_ATM_HDR={0x9, 0x3, "80dd1679ac"}]}}, @c_atm={{0x8}, {0x94, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xffff}}, @TCA_ATM_HDR={0x35, 0x3, "b051e49891d2463b00db551565d6de24d78513b01eb567068415e76e3f565aef6d57e58cd3cf3b11b0bfbb5c6bd2c22789"}, @TCA_ATM_HDR={0x3d, 0x3, "b321d0604c76804b4e0c0025895221ab73ae60e4fb4da2d7946f2ab607248c2ec706af0db6866bef75dd93ab4b57d6bb69ec7a441f06d9e9bb"}, @TCA_ATM_HDR={0xd, 0x3, "5dfded62605f34e3de"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xf7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x2, 0x8000, 0x0, 0x2, 0xfffffffb}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xcc, 0x5, 0x10001, 0x78, 0x8, 0x80000001, 0x4, 0x3, 0x8000, 0x9, 0x0, 0x8, 0xffffffff, 0xae04, 0x41, 0x2, 0x2, 0x8, 0xffff0001, 0x81, 0x2, 0xe, 0x5, 0x5, 0x200, 0x8, 0xff, 0x9, 0x8, 0x5, 0x1, 0x81, 0x685f, 0xb0, 0x8, 0x101, 0x7, 0x1, 0x2154, 0x8, 0x2, 0xffff1905, 0x401, 0xebbe, 0xc, 0x7fffffff, 0x6, 0x8, 0x3, 0x2, 0x6, 0x3, 0x0, 0x10000, 0x401, 0x7ff, 0xf, 0xa000, 0x5, 0x4, 0x200, 0xd, 0x2, 0x5c, 0x63, 0x28649b59, 0x3, 0x6, 0x0, 0x9, 0x6, 0xfffffffb, 0x9, 0x7, 0xffffff1d, 0x8001, 0x7, 0x1, 0x2, 0xfffffffa, 0xa62e, 0x7, 0x9, 0xfffff58f, 0x8, 0x3, 0x9, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x23, 0x6, 0x1, 0x1, 0x100, 0xfffffbff, 0x4, 0x800, 0x7, 0xae36, 0x0, 0x3, 0x1, 0x8, 0x13fb95b7, 0xe816, 0xfffffffe, 0x7, 0x3, 0x6d82, 0x0, 0x19, 0xffffff4f, 0x7, 0x0, 0x1000, 0x0, 0x6, 0x10001, 0x80, 0x101, 0x80, 0x7, 0x0, 0x10001, 0x7, 0x5, 0xc, 0x12000, 0x486, 0x0, 0xffffffff, 0x6, 0x2, 0x80, 0x4, 0x8001, 0xffffff15, 0x6, 0x7, 0x6, 0x0, 0x5, 0x2, 0x10000, 0x2, 0x0, 0x9, 0x682, 0x8000, 0x4, 0x5, 0xd62e, 0x200, 0x4, 0x5, 0x0, 0x85, 0x3, 0x8, 0x6, 0x6, 0x101, 0x10001, 0xfffffff7, 0x53, 0x7fffffff, 0xff, 0x9, 0x9, 0x8, 0x8, 0x8c, 0x9, 0xe0, 0x4, 0x3, 0x4, 0x100, 0xd, 0x80, 0x0, 0xffffff93, 0x7, 0x9, 0xfff, 0x3, 0x5, 0x0, 0x7, 0x5, 0x2, 0x10, 0x6, 0x4, 0x4, 0x1, 0x1, 0x400, 0x7ff, 0x6, 0x8, 0x2, 0x7, 0x1, 0x4, 0x8, 0x3, 0xff, 0x3, 0x1, 0x639f, 0x9, 0x3f, 0x3, 0xd148, 0xf0, 0x834, 0x9, 0x92a, 0x1, 0x8000, 0x9, 0x4, 0x3, 0x1, 0x10, 0x7ff, 0xdd, 0x5, 0x9, 0xffff, 0xfea, 0x5, 0x9, 0x12, 0x2, 0x8, 0x7, 0x1, 0x9, 0xff, 0x6, 0x7fffffff, 0x9, 0x5, 0x9, 0x6, 0x7, 0xfffff9e5, 0x3, 0x6, 0x2]}]}}]}, 0x578}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.629106748s ago: executing program 1 (id=4269): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x1000000, 0x4000000}, 0x0) 5.583854955s ago: executing program 1 (id=4270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000fff500000000000000024e2060e6"], 0x64) 5.313132972s ago: executing program 1 (id=4271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000028000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15930395916e2b388abc3d6ce2316330b00010068656c70657200000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x400000000000000, 0x0, 0x2000094}, 0x4000800) 5.169064991s ago: executing program 1 (id=4272): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 3.537178255s ago: executing program 4 (id=4276): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x6b, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="5a2bb0843e125f9be8e986d9329ca7961c4e6d8ff5b78053776aa56e598509d4bbebc9d85c4ff7483113a69f748171d20eaf13b044b7455d919af12e2595028b8c14d4f3153411390a6d3bb6935ae1666e51"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000340)={0x40, 0x30, 0xb, {0xb, 0x1, "2b3f32466814a9b44b"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f0000000580)={0x0, 0xf, 0x14a, {0x5, 0xf, 0x14a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x1, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x8, 0x8}, @generic={0x93, 0x10, 0x3, "bceeb86612873ce0ed2371b0314f39c749846072391b6a403311b3d8b92fe3c7ab1e0c86c60224e6b2f93829d4d654821eaa41a5d31ddd91190ac15cba292b9a97f58fe7bc4ba8057f2d343a31f4fe36cae8c7d52862a8eac5225320740396b62a14aaa2a648edf40dcbc0c147053c35c56b2493cbb92bf43ee039da1828e9f66b6343db314c6ea0460017cf422fdadc"}, @generic={0xa4, 0x10, 0xa, "22359c6fa89411a422603248507a68bd1d5886abd43b3c7293c0e1915ea49be8b1e7e8cabd9f1abc3774b4696da687e09585e2dede7a18da76bb94c6947040b9bc081092b33a6fd1f438783697cdb62f6c5b9d3063497936121dad5d1c660e77df81f72f3ed512d4c752f5a358131969a873c3d6656ee121ea88c24721ed0240bdbec76b6af832b2f91c874cef1b1b08d21cbf9eaf1e73e5092766f9662e1ab8cf"}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x2, 0x0, 0x0, "03de27b0", "ccb35c42"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x0, 0x4, 0x4, 0x4, 0xfffa, 0xd}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="403aa500000035e6e127edf2a33e138e58dd5306f4d1f24b9bdfe57546dfcf7775eb400b0939f0b5d505c822e74589d249892f292a384df76c6e9024477aa65c8a82865638ca26e4ab3289e8105ab246795c456438372b81604b09081199fafe367d26cc7851c65e263816c7e9b63338dfa320fe38e81f9f23ce984660d1bd1c7821583c0c00040000b3b4f5fba41899085e280900c96ce9b38562ec4026495e18cf73609d8426d0b721196babe7e99405d053"], &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x80, 0x2, [0xf]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "c74e"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "9706"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x8f}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0xc2}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES32, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.262437572s ago: executing program 9 (id=4277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140200100000000000000000000000000012001000000000000f5ffffff000000024e2060e6"], 0x64) 3.065034729s ago: executing program 9 (id=4278): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000e000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa020000000000000000000000000000003c00000000000000ffffffff0000000000000000100000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200000000f5000000000000000001"], 0xfdef) 3.010610341s ago: executing program 7 (id=4279): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80000, 0x7b) open_by_handle_at(r2, &(0x7f0000000000)=@FILEID_NILFS_WITH_PARENT={0x20, 0xfe, {0x107, 0x81, 0x3, 0x80000001, 0xf6}}, 0x406000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r3, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f00000001c0)="60a75dc565ef116aa412580445034943beea59637e05000000caf38d7adc18f6b256f26e2601b678a8782d7384d46c34d98bf8475b333953cdf88a64b5ff", 0x3e}], 0x2}, 0x40011) 2.918765273s ago: executing program 9 (id=4280): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffdeb, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000000000000000000417fff0000000000000000000010003f00f8ff07002b000000000000002400120008000100766574681800020014000100000000007fff000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) 2.877338809s ago: executing program 7 (id=4281): syz_usb_ep_write(0xffffffffffffffff, 0x6f, 0xbb, &(0x7f0000000100)="f6ba9f9319f63833a08a4ba9ac99a023d688f49fe77d725bef5b210269f58564c30bc1fea70fa954f88e90e86f730733d4f73d3e9812f5a67518ed8da9e57bf61832d3e1c0d9a6bacf51869aaf67a791a02326b6d232ad7980abb0c3d0d3a8815f5b038dcf98d6a03120bb5953d8fbebdd21fd6b06a802dec3348d03bb7b2ae5666dc9d0c437ce5e179acc6c4c9e2b7febf7de97e180a0b7f1c5c1ea03586f0ef5587c438e81069645a852d800"/187) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x80000002, 0x31237648, 0x6, 0x2, 0x31b6}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x20000) mlockall(0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000f00)={{0x80000000, 0x0, 0x3a6c5abe2e6686bc, [0x8, 0x16]}, {0x80000000, 0x0, 0x2, [0x0, 0x8]}, 0x2, [0x100, 0x3]}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100050c100000000000224e0000", 0x58}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.750976531s ago: executing program 9 (id=4282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a010101"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.642259069s ago: executing program 9 (id=4283): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x501201, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x121182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000400), 0x400c00, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) sendmsg$802154_raw(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14, &(0x7f0000000340)={&(0x7f00000002c0)="5aee6c58d99e48004089084f5539537ad376ab831a34a30977244f8489441709e53065f86cf034c3543bda6f3debd00c71c883d3c28638c0ef31c4787cd2bffbe4de19f6721481eee6d90ed5069eb8b8891f06a8b8fa95669112f4feda22795270a1d204ecb95d901ff2540e", 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x4000840) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000000c0)="ac", 0x1}], 0x1}}, {{&(0x7f0000000900)={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x98}, 0x1c, &(0x7f0000002700)=[{&(0x7f0000000980)="cb", 0x1}], 0x1}}], 0x2, 0x20040944) listen(r6, 0xfff) accept(r6, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x23, 0x80, 0xd, 0x4}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000003c0)={r5, 0x401, 0x5}, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6gre0\x00'}) 2.452336972s ago: executing program 9 (id=4284): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x6b, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="5a2bb0843e125f9be8e986d9329ca7961c4e6d8ff5b78053776aa56e598509d4bbebc9d85c4ff7483113a69f748171d20eaf13b044b7455d919af12e2595028b8c14d4f3153411390a6d3bb6935ae1666e51"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES32, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.096694433s ago: executing program 1 (id=4285): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="c10d0400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x1, 0xce, {0xce, 0x11, "10749886a73ccde1a24ece79f18eaa2b705278c56234f1bc10f9f7bb8a0d794657ec26b86d26324ee6a2c665d3321ecd02f994ded82599b38af90d84382f9a5b9268a8a252bae92a25c6513f69f01d6fcc9516a5ba4d98a1d5890aafbd0e7cab9fc56368ad55c620c7ba7050cbc036db685e1a9e0dd907e7a0f2c41b8118251a60b1bc988f86a426c5bd0a649210b5786c25b637228c5ca67f14a8740db7ee433d97222c9f8bf674ae088d3fd66a09572d0fa20ef5d512b15acbaa532b88bdfb993538fbadeb1aa9f6d7904d"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}}, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x40, 0x16, 0xb7, "afde4002ed2465f8b4047fddae1512bfdc03901e6046a54ea0e5df15dd559d607012305f0222c4200dcd3a803521aaab6e3856290b954388d1a76988bbad8288ec080f3961da360c9157469383e7ba32bb9f1204a0bb63e38f37ad8d50cfe39b23debfce51cd67d1bce390f3ae519bae29ec02b3c628e632776addcf547b823223e87667552b0cfe6ede9c1f93949d2fb5ea955f3f7ad0eec833b09ff0772a4791834bbfd6f39f7000eb190f0d4f62a1cbd83624caa47b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6b}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6f}, &(0x7f0000000480)={0x20, 0x81, 0x3, "d7db55"}, &(0x7f0000000540)={0x20, 0x82, 0x2, "e5f5"}, &(0x7f0000000580)={0x20, 0x83, 0x2, "959f"}, &(0x7f00000005c0)={0x20, 0x84, 0x2, "f2f4"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "99c114"}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0xd, 0x4, "6c57ef8b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001380)={0x20, 0x8, 0x4, "494e6ad8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.396469566s ago: executing program 7 (id=4286): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) fchdir(r2) sendmmsg$unix(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}], 0x1, 0x2400c082) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x210400, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)={0x20, 0xa02da726a9b588e2, 0x1, "4e55d49f8c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 420.844753ms ago: executing program 4 (id=4287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000f5ff00000000000000024e2060e6"], 0x64) 69.809129ms ago: executing program 4 (id=4288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000028000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15930395916e2b388abc3d6ce2316330b00010068656c70657200000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x600000000000000, 0x0, 0x2000094}, 0x4000800) 0s ago: executing program 4 (id=4289): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05000000dfeb590000be220086e52b14000800050005"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/ieee80211/phy1/netdev:wlan1/active_links\x00', 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) recvmmsg(r4, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}, 0x1d}], 0x1, 0x10102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil) write(r2, &(0x7f0000000500)='3\x00', 0x2) kernel console output (not intermixed with test programs): rialNumber=3 [ 764.607658][ T10] usb 10-1: Product: syz [ 764.607680][ T10] usb 10-1: Manufacturer: syz [ 764.607694][ T10] usb 10-1: SerialNumber: syz [ 765.028362][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 765.028475][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 765.090332][T17329] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3823'. [ 765.391758][T17334] netlink: 'syz.8.3825': attribute type 63 has an invalid length. [ 765.400107][T17334] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3825'. [ 766.222097][T17343] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 766.261168][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 766.278381][T17320] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3820'. [ 766.377118][T17347] AppArmor: change_hat: Invalid input '' [ 766.377824][T17347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 766.436947][T17350] binder: 17349:17350 ioctl c0306201 200000000640 returned -22 [ 766.496386][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 766.496875][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 766.496928][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 766.497679][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 766.546584][ T10] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 766.570653][ T10] usb 10-1: USB disconnect, device number 43 [ 766.859852][T17362] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3835'. [ 767.194172][ T7926] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 767.342903][ T7926] usb 9-1: Using ep0 maxpacket: 16 [ 767.344451][ T7926] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 767.355156][ T7926] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.355186][ T7926] usb 9-1: Product: syz [ 767.355200][ T7926] usb 9-1: Manufacturer: syz [ 767.355214][ T7926] usb 9-1: SerialNumber: syz [ 767.364646][ T7926] usb 9-1: config 0 descriptor?? [ 767.371988][T17373] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 767.412448][ T7926] visor 9-1:0.0: Sony Clie 3.5 converter detected [ 767.537320][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 767.537372][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 767.537424][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 767.537493][ T4984] loop0: [ 767.688681][T17383] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 767.698861][T16500] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 767.783769][ T7926] usb 9-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 767.852637][T16500] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 767.868726][T16500] usb 8-1: config 1 has an invalid interface number: 15 but max is 0 [ 767.868777][T16500] usb 8-1: config 1 has an invalid descriptor of length 27, skipping remainder of the config [ 767.868803][T16500] usb 8-1: config 1 has no interface number 0 [ 767.868837][T16500] usb 8-1: too many endpoints for config 1 interface 15 altsetting 216: 253, using maximum allowed: 30 [ 767.868879][T16500] usb 8-1: config 1 interface 15 altsetting 216 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 767.868911][T16500] usb 8-1: config 1 interface 15 has no altsetting 0 [ 767.868951][T16500] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.977395][T17364] fuse: Bad value for 'fd' [ 767.984936][ T10] usb 9-1: USB disconnect, device number 34 [ 767.998952][ T10] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 768.003054][ T10] visor 9-1:0.0: device disconnected [ 768.124635][T16500] usb 8-1: string descriptor 0 read error: -71 [ 768.149332][T16500] as10x_usb: device has been detected [ 768.157769][T16500] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 768.187236][T16500] usb 8-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 768.241782][ T7926] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 768.274853][T16500] as10x_usb: error during firmware upload part1 [ 768.275563][T16500] Registered device Abilis Systems DVB-Titan [ 768.280572][T16500] usb 8-1: USB disconnect, device number 79 [ 768.315380][T16500] Unregistered device Abilis Systems DVB-Titan [ 768.316822][T16500] as10x_usb: device has been disconnected [ 768.392322][ T7926] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 768.405913][ T7926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.405965][ T7926] usb 10-1: Product: syz [ 768.405985][ T7926] usb 10-1: Manufacturer: syz [ 768.406004][ T7926] usb 10-1: SerialNumber: syz [ 768.553422][T17394] netlink: 'syz.8.3849': attribute type 10 has an invalid length. [ 768.817658][ T7926] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 768.817732][ T7926] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 768.888803][T17402] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 769.521800][T16500] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 769.663259][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3858'. [ 769.671619][T16500] usb 9-1: Using ep0 maxpacket: 8 [ 769.676071][T16500] usb 9-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 769.705801][T16500] usb 9-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 769.705876][T16500] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.705914][T16500] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 769.705938][T16500] usb 9-1: config 0 interface 0 has no altsetting 0 [ 769.705972][T16500] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.722496][T16500] usb 9-1: config 0 descriptor?? [ 770.028626][ T7926] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 770.050069][T17390] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3847'. [ 770.130232][T17426] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 770.317527][ T7926] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 770.333922][ T7926] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 770.334028][ T7926] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 770.334781][ T7926] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 770.350787][T16500] hid-alps 0003:044E:120C.0016: read register address error (0,c370) [ 770.350913][T16500] hid-alps 0003:044E:120C.0016: failed T4_PRM_ID_CONFIG_3 (-22) [ 770.372339][T16500] hid-alps 0003:044E:120C.0016: hidraw0: USB HID v0.00 Joystick [HID 044e:120c] on usb-dummy_hcd.8-1/input0 [ 770.404918][ T7926] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 770.428580][ T7926] usb 10-1: USB disconnect, device number 44 [ 770.553950][T17413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.556759][T17413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.557885][T16500] usb 9-1: USB disconnect, device number 35 [ 771.131950][ T5721] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 771.157057][T17444] binder: Bad value for 'max' [ 771.281823][ T5721] usb 10-1: Using ep0 maxpacket: 16 [ 771.282669][ T5721] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 771.283776][ T5721] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 771.283802][ T5721] usb 10-1: config 0 has no interface number 0 [ 771.283843][ T5721] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 771.283868][ T5721] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 771.285972][ T5721] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.285998][ T5721] usb 10-1: Product: syz [ 771.286013][ T5721] usb 10-1: Manufacturer: syz [ 771.286027][ T5721] usb 10-1: SerialNumber: syz [ 771.302616][ T5721] usb 10-1: config 0 descriptor?? [ 771.304100][T17441] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 771.304177][T17441] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 771.461832][T16500] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 771.506606][T17441] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 771.506701][T17441] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 771.600441][T17453] FAULT_INJECTION: forcing a failure. [ 771.600441][T17453] name fail_futex, interval 1, probability 0, space 0, times 0 [ 771.600550][T17453] CPU: 1 UID: 0 PID: 17453 Comm: syz.4.3870 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.600579][T17453] Tainted: [L]=SOFTLOCKUP [ 771.600586][T17453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 771.600598][T17453] Call Trace: [ 771.600606][T17453] [ 771.600615][T17453] dump_stack_lvl+0xe8/0x150 [ 771.600648][T17453] should_fail_ex+0x410/0x560 [ 771.600684][T17453] get_futex_key+0xf12/0x1580 [ 771.600714][T17453] ? do_raw_spin_unlock+0xf5/0x200 [ 771.600831][T17453] ? __pfx_get_futex_key+0x10/0x10 [ 771.600876][T17453] ? __lock_acquire+0x6df/0x2e50 [ 771.600996][T17453] ? __lock_acquire+0x6df/0x2e50 [ 771.601036][T17453] futex_wait_setup+0x4a/0x590 [ 771.601069][T17453] ? __futex_wait+0xdf/0x400 [ 771.601100][T17453] __futex_wait+0x15f/0x400 [ 771.601131][T17453] ? __pfx___futex_wait+0x10/0x10 [ 771.601162][T17453] ? __pfx_futex_wake_mark+0x10/0x10 [ 771.601194][T17453] ? __hrtimer_setup+0x1b7/0x260 [ 771.601218][T17453] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 771.601247][T17453] ? ktime_add_safe+0x38/0x70 [ 771.601273][T17453] futex_wait_restart+0x1c2/0x480 [ 771.601303][T17453] ? __pfx_futex_wait_restart+0x10/0x10 [ 771.601336][T17453] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 771.601375][T17453] do_syscall_64+0x166/0x520 [ 771.601397][T17453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.601418][T17453] ? clear_bhb_loop+0x70/0xc0 [ 771.601512][T17453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.601539][T17453] RIP: 0033:0x7f984db9e0d9 [ 771.601560][T17453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.601577][T17453] RSP: 002b:00007f984e989028 EFLAGS: 00000246 ORIG_RAX: 00000000000000db [ 771.601599][T17453] RAX: ffffffffffffffda RBX: 00007f984de25fa0 RCX: 00007f984db9e0d9 [ 771.601614][T17453] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000cc0 [ 771.601627][T17453] RBP: 00007f984e989090 R08: 0000000000000000 R09: 0000000000000002 [ 771.601640][T17453] R10: 0000200000000d00 R11: 0000000000000246 R12: 0000000000000002 [ 771.601653][T17453] R13: 00007f984de26038 R14: 00007f984de25fa0 R15: 00007ffccc7fbb78 [ 771.601683][T17453] [ 771.613461][T16500] usb 9-1: Using ep0 maxpacket: 32 [ 771.623306][T16500] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 771.646157][T16500] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.646187][T16500] usb 9-1: Product: syz [ 771.646202][T16500] usb 9-1: Manufacturer: syz [ 771.646225][T16500] usb 9-1: SerialNumber: syz [ 771.660513][T16500] usb 9-1: config 0 descriptor?? [ 771.712467][ T5721] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 771.916973][ T5721] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 771.917015][ T5721] asix 10-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 771.917342][ T5721] asix 10-1:0.34: probe with driver asix failed with error -71 [ 771.953740][ T5721] usb 10-1: USB disconnect, device number 45 [ 772.074196][T16500] airspy 9-1:0.0: Board ID: 00 [ 772.074237][T16500] airspy 9-1:0.0: Firmware version: [ 772.095800][T17441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.591574][ T10] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 772.763969][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 772.778865][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.787673][ T10] usb 8-1: Product: syz [ 772.787698][ T10] usb 8-1: Manufacturer: syz [ 772.787714][ T10] usb 8-1: SerialNumber: syz [ 772.941485][T15071] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 773.093610][T15071] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 773.109266][T15071] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.109332][T15071] usb 10-1: Product: syz [ 773.109673][T15071] usb 10-1: Manufacturer: syz [ 773.109691][T15071] usb 10-1: SerialNumber: syz [ 773.117661][T15071] usb 10-1: config 0 descriptor?? [ 773.220023][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 773.220113][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 773.343873][T15071] usb 10-1: USB disconnect, device number 46 [ 773.702021][T16500] airspy 9-1:0.0: usb_control_msg() failed -110 request 0f [ 773.720450][T16500] airspy 9-1:0.0: Registered as swradio24 [ 773.727570][T16500] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 774.193258][T15070] usb 9-1: USB disconnect, device number 36 [ 774.347431][T17479] netlink: 'syz.8.3879': attribute type 10 has an invalid length. [ 774.448570][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 774.465915][T17463] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3873'. [ 774.487988][T17484] netlink: 'syz.9.3882': attribute type 1 has an invalid length. [ 774.491119][T17482] FAULT_INJECTION: forcing a failure. [ 774.491119][T17482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.491184][T17482] CPU: 0 UID: 0 PID: 17482 Comm: syz.8.3881 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.491220][T17482] Tainted: [L]=SOFTLOCKUP [ 774.491228][T17482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 774.491239][T17482] Call Trace: [ 774.491249][T17482] [ 774.491257][T17482] dump_stack_lvl+0xe8/0x150 [ 774.491292][T17482] should_fail_ex+0x410/0x560 [ 774.491326][T17482] __kvm_read_guest_page+0x18d/0x240 [ 774.491381][T17482] kvm_fetch_guest_virt+0x10c/0x160 [ 774.491431][T17482] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 774.491459][T17482] __do_insn_fetch_bytes+0x53a/0x6c0 [ 774.491491][T17482] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 774.491513][T17482] ? __lock_acquire+0x6df/0x2e50 [ 774.491546][T17482] ? x86_decode_insn+0x16fa/0x5af0 [ 774.491573][T17482] x86_decode_insn+0x374/0x5af0 [ 774.491627][T17482] ? __pfx_x86_decode_insn+0x10/0x10 [ 774.491650][T17482] ? __lock_acquire+0x6df/0x2e50 [ 774.491690][T17482] ? __asan_memset+0x22/0x50 [ 774.491716][T17482] ? init_decode_cache+0xf3/0x160 [ 774.491740][T17482] ? init_emulate_ctxt+0x4c4/0x640 [ 774.491762][T17482] ? look_up_lock_class+0x57/0x110 [ 774.491831][T17482] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 774.491864][T17482] x86_emulate_instruction+0x323/0x1e70 [ 774.491894][T17482] ? asm_fred_entry_from_kvm+0x58/0x60 [ 774.491926][T17482] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 774.491951][T17482] ? vmx_handle_exit_irqoff+0x100/0xa00 [ 774.492001][T17482] ? __pfx_vmx_handle_exit_irqoff+0x10/0x10 [ 774.492027][T17482] ? trace_rcu_utilization+0x4a/0x1f0 [ 774.492056][T17482] handle_ud+0x19e/0x590 [ 774.492080][T17482] ? __pfx_handle_ud+0x10/0x10 [ 774.492099][T17482] ? vmx_vcpu_run+0xfbf/0x2d20 [ 774.492124][T17482] ? rcu_is_watching+0x16/0xb0 [ 774.492153][T17482] ? handle_exception_nmi+0x2aa/0x1260 [ 774.492173][T17482] ? lock_acquire+0x115/0x350 [ 774.492200][T17482] ? __pfx_handle_exception_nmi+0x10/0x10 [ 774.492357][T17482] vmx_handle_exit+0xfa4/0x16e0 [ 774.492394][T17482] vcpu_run+0x4e97/0x79b0 [ 774.492452][T17482] ? vcpu_run+0x28fd/0x79b0 [ 774.492513][T17482] ? __pfx_vcpu_run+0x10/0x10 [ 774.492536][T17482] ? complete_emulated_mmio+0x1f2/0x910 [ 774.492561][T17482] ? __asan_memcpy+0x40/0x70 [ 774.492588][T17482] ? complete_emulated_mmio+0x535/0x910 [ 774.492623][T17482] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 774.492654][T17482] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 774.492683][T17482] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 774.492716][T17482] kvm_vcpu_ioctl+0xa61/0xfd0 [ 774.492750][T17482] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 774.492777][T17482] ? hook_file_ioctl+0x1f2/0x600 [ 774.492864][T17482] ? __fget_files+0x2a/0x420 [ 774.492889][T17482] ? __fget_files+0x2a/0x420 [ 774.492910][T17482] ? __fget_files+0x3a2/0x420 [ 774.492930][T17482] ? __fget_files+0x2a/0x420 [ 774.492956][T17482] ? bpf_lsm_file_ioctl+0x9/0x20 [ 774.492993][T17482] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 774.493021][T17482] __se_sys_ioctl+0xfc/0x170 [ 774.493051][T17482] do_syscall_64+0x166/0x520 [ 774.493070][T17482] ? trace_irq_disable+0x3b/0x140 [ 774.493097][T17482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.493117][T17482] ? clear_bhb_loop+0x70/0xc0 [ 774.493142][T17482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.493162][T17482] RIP: 0033:0x7f31a719e0d9 [ 774.493182][T17482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.493198][T17482] RSP: 002b:00007f31a80a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.493228][T17482] RAX: ffffffffffffffda RBX: 00007f31a7425fa0 RCX: 00007f31a719e0d9 [ 774.493242][T17482] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 774.493255][T17482] RBP: 00007f31a80a0090 R08: 0000000000000000 R09: 0000000000000000 [ 774.493267][T17482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.493279][T17482] R13: 00007f31a7426038 R14: 00007f31a7425fa0 R15: 00007ffc1b2556a8 [ 774.493311][T17482] [ 774.692378][T17487] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3883'. [ 774.699277][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 774.701777][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 774.701841][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 774.702538][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 774.719910][ T10] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 774.776126][ T10] usb 8-1: USB disconnect, device number 80 [ 774.954579][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 774.954609][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 774.954621][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 774.954681][ T4984] loop0: [ 775.219199][T17468] Bluetooth: hci3: command 0x0406 tx timeout [ 775.219315][T17468] Bluetooth: hci2: command 0x0406 tx timeout [ 775.473671][ T30] audit: type=1400 audit(1787368196.485:26): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/" pid=17498 comm="syz.7.3888" [ 776.029198][T17522] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl812) [ 776.050599][T17522] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl812) [ 776.381565][ T10] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 776.542021][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 776.546249][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.546278][ T10] usb 8-1: Product: syz [ 776.546292][ T10] usb 8-1: Manufacturer: syz [ 776.546306][ T10] usb 8-1: SerialNumber: syz [ 776.952086][T17543] netlink: 'syz.8.3899': attribute type 10 has an invalid length. [ 777.047100][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 777.047204][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 777.144593][T17548] netlink: 'syz.9.3901': attribute type 63 has an invalid length. [ 777.153755][T17548] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3901'. [ 777.326852][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 777.326908][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 777.326944][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 777.327015][ T4984] loop0: [ 777.409852][T17555] FAULT_INJECTION: forcing a failure. [ 777.409852][T17555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.409899][T17555] CPU: 0 UID: 0 PID: 17555 Comm: syz.8.3904 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.409933][T17555] Tainted: [L]=SOFTLOCKUP [ 777.409941][T17555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 777.409954][T17555] Call Trace: [ 777.409963][T17555] [ 777.409971][T17555] dump_stack_lvl+0xe8/0x150 [ 777.410012][T17555] should_fail_ex+0x410/0x560 [ 777.410046][T17555] __kvm_read_guest_page+0x18d/0x240 [ 777.410081][T17555] kvm_fetch_guest_virt+0x10c/0x160 [ 777.410112][T17555] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 777.410142][T17555] __do_insn_fetch_bytes+0x53a/0x6c0 [ 777.410173][T17555] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 777.410194][T17555] ? __lock_acquire+0x6df/0x2e50 [ 777.410339][T17555] ? x86_decode_insn+0x16fa/0x5af0 [ 777.410367][T17555] x86_decode_insn+0x374/0x5af0 [ 777.410420][T17555] ? __pfx_x86_decode_insn+0x10/0x10 [ 777.410444][T17555] ? __lock_acquire+0x6df/0x2e50 [ 777.410483][T17555] ? __asan_memset+0x22/0x50 [ 777.410510][T17555] ? init_decode_cache+0xf3/0x160 [ 777.410534][T17555] ? init_emulate_ctxt+0x4c4/0x640 [ 777.410555][T17555] ? look_up_lock_class+0x57/0x110 [ 777.410577][T17555] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 777.410610][T17555] x86_emulate_instruction+0x323/0x1e70 [ 777.410652][T17555] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 777.410677][T17555] ? vmx_handle_exit_irqoff+0x100/0xa00 [ 777.410707][T17555] ? __pfx_vmx_handle_exit_irqoff+0x10/0x10 [ 777.410733][T17555] ? trace_rcu_utilization+0x4a/0x1f0 [ 777.410762][T17555] handle_ud+0x19e/0x590 [ 777.410786][T17555] ? __pfx_handle_ud+0x10/0x10 [ 777.410806][T17555] ? vmx_vcpu_run+0xfbf/0x2d20 [ 777.410831][T17555] ? rcu_is_watching+0x16/0xb0 [ 777.410860][T17555] ? handle_exception_nmi+0x2aa/0x1260 [ 777.410881][T17555] ? lock_acquire+0x115/0x350 [ 777.410907][T17555] ? __pfx_handle_exception_nmi+0x10/0x10 [ 777.410927][T17555] vmx_handle_exit+0xfa4/0x16e0 [ 777.410963][T17555] vcpu_run+0x4e97/0x79b0 [ 777.411020][T17555] ? vcpu_run+0x28fd/0x79b0 [ 777.411082][T17555] ? __pfx_vcpu_run+0x10/0x10 [ 777.411105][T17555] ? complete_emulated_mmio+0x1f2/0x910 [ 777.411131][T17555] ? __asan_memcpy+0x40/0x70 [ 777.411157][T17555] ? complete_emulated_mmio+0x535/0x910 [ 777.411192][T17555] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 777.411233][T17555] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 777.411263][T17555] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 777.411302][T17555] kvm_vcpu_ioctl+0xa61/0xfd0 [ 777.411336][T17555] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 777.411362][T17555] ? hook_file_ioctl+0x1f2/0x600 [ 777.411409][T17555] ? __fget_files+0x2a/0x420 [ 777.411434][T17555] ? __fget_files+0x2a/0x420 [ 777.411463][T17555] ? __fget_files+0x3a2/0x420 [ 777.411484][T17555] ? __fget_files+0x2a/0x420 [ 777.411509][T17555] ? bpf_lsm_file_ioctl+0x9/0x20 [ 777.411533][T17555] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 777.411561][T17555] __se_sys_ioctl+0xfc/0x170 [ 777.411592][T17555] do_syscall_64+0x166/0x520 [ 777.411618][T17555] ? trace_irq_disable+0x3b/0x140 [ 777.411644][T17555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.411663][T17555] ? clear_bhb_loop+0x70/0xc0 [ 777.411687][T17555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.411707][T17555] RIP: 0033:0x7f31a719e0d9 [ 777.411727][T17555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.411744][T17555] RSP: 002b:00007f31a80a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.411767][T17555] RAX: ffffffffffffffda RBX: 00007f31a7425fa0 RCX: 00007f31a719e0d9 [ 777.411781][T17555] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 777.411794][T17555] RBP: 00007f31a80a0090 R08: 0000000000000000 R09: 0000000000000000 [ 777.411806][T17555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.411818][T17555] R13: 00007f31a7426038 R14: 00007f31a7425fa0 R15: 00007ffc1b2556a8 [ 777.411849][T17555] [ 777.873034][T15071] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 778.021633][T15071] usb 10-1: Using ep0 maxpacket: 32 [ 778.023670][T15071] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 778.024885][T15071] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.024909][T15071] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 778.027229][T15071] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.027252][T15071] usb 10-1: Product: syz [ 778.027266][T15071] usb 10-1: Manufacturer: syz [ 778.027280][T15071] usb 10-1: SerialNumber: syz [ 778.030982][T15071] usb 10-1: config 0 descriptor?? [ 778.274959][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 778.276754][T17527] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3896'. [ 778.507870][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 778.508563][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 778.508622][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 778.509545][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 778.527076][ T10] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 778.547903][ T10] usb 8-1: USB disconnect, device number 81 [ 778.896510][T17573] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3910'. [ 779.080836][T17580] netlink: 4384 bytes leftover after parsing attributes in process `syz.7.3913'. [ 779.165534][T17584] netlink: 'syz.7.3915': attribute type 2 has an invalid length. [ 779.176978][T17584] netlink: 'syz.7.3915': attribute type 1 has an invalid length. [ 779.189797][T17584] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3915'. [ 779.200256][T17584] netlink: 'syz.7.3915': attribute type 2 has an invalid length. [ 779.209045][T17584] netlink: 'syz.7.3915': attribute type 1 has an invalid length. [ 779.219726][T17584] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3915'. [ 779.219787][T17584] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 779.220740][T17586] random: crng reseeded on system resumption [ 779.271333][T17584] netlink: 'syz.7.3915': attribute type 2 has an invalid length. [ 779.284207][T17584] netlink: 'syz.7.3915': attribute type 1 has an invalid length. [ 779.294992][T17584] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3915'. [ 779.295036][T17584] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3915'. [ 779.295054][T17584] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 779.555174][T17597] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 779.784997][T17605] validate_nla: 2 callbacks suppressed [ 779.785052][T17605] netlink: 'syz.8.3921': attribute type 63 has an invalid length. [ 779.785078][T17605] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3921'. [ 780.020274][T17612] FAULT_INJECTION: forcing a failure. [ 780.020274][T17612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.020318][T17612] CPU: 1 UID: 0 PID: 17612 Comm: syz.8.3924 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.020349][T17612] Tainted: [L]=SOFTLOCKUP [ 780.020357][T17612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 780.020369][T17612] Call Trace: [ 780.020377][T17612] [ 780.020386][T17612] dump_stack_lvl+0xe8/0x150 [ 780.020417][T17612] should_fail_ex+0x410/0x560 [ 780.020451][T17612] __kvm_read_guest_page+0x18d/0x240 [ 780.020484][T17612] kvm_fetch_guest_virt+0x10c/0x160 [ 780.020516][T17612] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 780.020544][T17612] __do_insn_fetch_bytes+0x53a/0x6c0 [ 780.020575][T17612] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 780.020612][T17612] x86_decode_insn+0x374/0x5af0 [ 780.020650][T17612] ? __lock_acquire+0x6df/0x2e50 [ 780.020691][T17612] ? __pfx_x86_decode_insn+0x10/0x10 [ 780.020714][T17612] ? init_decode_cache+0xbf/0x160 [ 780.020749][T17612] ? init_emulate_ctxt+0x4c4/0x640 [ 780.020791][T17612] ? __asan_memset+0x22/0x50 [ 780.020816][T17612] ? init_decode_cache+0xf3/0x160 [ 780.020841][T17612] ? init_emulate_ctxt+0x4c4/0x640 [ 780.020866][T17612] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 780.020906][T17612] x86_emulate_instruction+0x323/0x1e70 [ 780.020941][T17612] ? handle_mmio_page_fault+0x13e/0xd80 [ 780.020967][T17612] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 780.020991][T17612] ? __pfx_handle_mmio_page_fault+0x10/0x10 [ 780.021019][T17612] ? kvm_io_bus_write+0x25a/0x580 [ 780.021041][T17612] ? clear_bhb_loop+0x70/0xc0 [ 780.021060][T17612] ? clear_bhb_loop+0x70/0xc0 [ 780.021083][T17612] ? __pfx_kvm_io_bus_write+0x10/0x10 [ 780.021112][T17612] kvm_mmu_page_fault+0x7e7/0xa40 [ 780.021147][T17612] vmx_handle_exit+0xc60/0x16e0 [ 780.021184][T17612] vcpu_run+0x4e97/0x79b0 [ 780.021242][T17612] ? vcpu_run+0x28fd/0x79b0 [ 780.021303][T17612] ? __pfx_vcpu_run+0x10/0x10 [ 780.021326][T17612] ? complete_emulated_mmio+0x1f2/0x910 [ 780.021356][T17612] ? __asan_memcpy+0x40/0x70 [ 780.021382][T17612] ? complete_emulated_mmio+0x535/0x910 [ 780.021417][T17612] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 780.021448][T17612] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 780.021478][T17612] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 780.021510][T17612] kvm_vcpu_ioctl+0xa61/0xfd0 [ 780.021544][T17612] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 780.021570][T17612] ? hook_file_ioctl+0x1f2/0x600 [ 780.021616][T17612] ? __fget_files+0x2a/0x420 [ 780.021641][T17612] ? __fget_files+0x2a/0x420 [ 780.021661][T17612] ? __fget_files+0x3a2/0x420 [ 780.021682][T17612] ? __fget_files+0x2a/0x420 [ 780.021708][T17612] ? bpf_lsm_file_ioctl+0x9/0x20 [ 780.021762][T17612] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 780.021790][T17612] __se_sys_ioctl+0xfc/0x170 [ 780.021820][T17612] do_syscall_64+0x166/0x520 [ 780.021840][T17612] ? trace_irq_disable+0x3b/0x140 [ 780.021866][T17612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.021886][T17612] ? clear_bhb_loop+0x70/0xc0 [ 780.021910][T17612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.021930][T17612] RIP: 0033:0x7f31a719e0d9 [ 780.021950][T17612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.021966][T17612] RSP: 002b:00007f31a80a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.021989][T17612] RAX: ffffffffffffffda RBX: 00007f31a7425fa0 RCX: 00007f31a719e0d9 [ 780.022004][T17612] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 780.022017][T17612] RBP: 00007f31a80a0090 R08: 0000000000000000 R09: 0000000000000000 [ 780.022029][T17612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.022041][T17612] R13: 00007f31a7426038 R14: 00007f31a7425fa0 R15: 00007ffc1b2556a8 [ 780.022073][T17612] [ 780.087450][ T5721] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 780.253004][ T5721] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 780.256134][ T5721] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.256161][ T5721] usb 8-1: Product: syz [ 780.256176][ T5721] usb 8-1: Manufacturer: syz [ 780.256190][ T5721] usb 8-1: SerialNumber: syz [ 780.593519][ T10] usb 10-1: USB disconnect, device number 47 [ 780.679362][ T5721] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 780.679453][ T5721] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 780.991537][T15070] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 781.162319][T15070] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 781.166703][T15070] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.166735][T15070] usb 9-1: Product: syz [ 781.166749][T15070] usb 9-1: Manufacturer: syz [ 781.166764][T15070] usb 9-1: SerialNumber: syz [ 781.528056][T17634] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 781.584856][T15070] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 781.584947][T15070] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 781.893274][ T5721] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 781.896663][T17607] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3922'. [ 781.902651][ T5721] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 781.903869][ T5721] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 781.903921][ T5721] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 781.904585][ T5721] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 781.913935][ T5721] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 781.929991][ T5721] usb 8-1: USB disconnect, device number 82 [ 782.012148][T16500] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 782.161597][T16500] usb 10-1: Using ep0 maxpacket: 8 [ 782.162228][T16500] usb 10-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 782.163380][T16500] usb 10-1: config 135 has an invalid interface number: 230 but max is 0 [ 782.163409][T16500] usb 10-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 782.163479][T16500] usb 10-1: config 135 has no interface number 0 [ 782.163522][T16500] usb 10-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.165752][T16500] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.165780][T16500] usb 10-1: Product: syz [ 782.165795][T16500] usb 10-1: Manufacturer: syz [ 782.165809][T16500] usb 10-1: SerialNumber: syz [ 782.180993][T16500] uvcvideo 10-1:135.230: Found Unit with invalid ID 0 [ 782.181142][T16500] uvcvideo 10-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 782.181208][T16500] uvcvideo 10-1:135.230: No valid video chain found. [ 782.397842][T15071] usb 10-1: USB disconnect, device number 48 [ 782.642208][T17643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3935'. [ 782.721834][T16500] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 782.795419][T15070] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 782.891660][T16500] usb 8-1: Using ep0 maxpacket: 32 [ 782.897544][T16500] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 782.912892][T16500] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.912941][T16500] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 782.936514][T16500] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.936563][T16500] usb 8-1: Product: syz [ 782.936595][T16500] usb 8-1: Manufacturer: syz [ 782.936615][T16500] usb 8-1: SerialNumber: syz [ 782.965576][T16500] usb 8-1: config 0 descriptor?? [ 783.058466][T17651] netlink: 'syz.9.3938': attribute type 63 has an invalid length. [ 783.058510][T17651] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3938'. [ 783.220163][T15070] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 783.220628][T15070] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 783.220689][T15070] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 783.236520][T15070] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 783.260343][T15070] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 783.287367][T15070] usb 9-1: USB disconnect, device number 37 [ 783.451756][T16500] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 783.591515][T16500] usb 10-1: device descriptor read/64, error -71 [ 783.832523][T16500] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 783.868752][T17664] FAULT_INJECTION: forcing a failure. [ 783.868752][T17664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.868797][T17664] CPU: 1 UID: 0 PID: 17664 Comm: syz.8.3943 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.868826][T17664] Tainted: [L]=SOFTLOCKUP [ 783.868835][T17664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 783.868848][T17664] Call Trace: [ 783.868867][T17664] [ 783.868875][T17664] dump_stack_lvl+0xe8/0x150 [ 783.868907][T17664] should_fail_ex+0x410/0x560 [ 783.868941][T17664] _copy_to_user+0x31/0xb0 [ 783.868964][T17664] simple_read_from_buffer+0xe1/0x170 [ 783.868993][T17664] proc_fail_nth_read+0x1bb/0x230 [ 783.869018][T17664] ? common_file_perm+0x20e/0x2b0 [ 783.869049][T17664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 783.869078][T17664] ? rw_verify_area+0x24a/0x4c0 [ 783.869104][T17664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 783.869129][T17664] vfs_read+0x213/0xa80 [ 783.869158][T17664] ? __pfx___mutex_lock+0x10/0x10 [ 783.869180][T17664] ? __pfx_vfs_read+0x10/0x10 [ 783.869206][T17664] ? __fget_files+0x2a/0x420 [ 783.869233][T17664] ? __fget_files+0x3a2/0x420 [ 783.869254][T17664] ? __fget_files+0x2a/0x420 [ 783.869283][T17664] ksys_read+0x150/0x270 [ 783.869310][T17664] ? __pfx_ksys_read+0x10/0x10 [ 783.869333][T17664] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 783.869379][T17664] do_syscall_64+0x166/0x520 [ 783.869410][T17664] ? trace_irq_disable+0x3b/0x140 [ 783.869436][T17664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.869481][T17664] ? clear_bhb_loop+0x70/0xc0 [ 783.869504][T17664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.869524][T17664] RIP: 0033:0x7f31a715e90e [ 783.869543][T17664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 783.869560][T17664] RSP: 002b:00007f31a809ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 783.869582][T17664] RAX: ffffffffffffffda RBX: 00007f31a80a06c0 RCX: 00007f31a715e90e [ 783.869596][T17664] RDX: 000000000000000f RSI: 00007f31a80a00a0 RDI: 0000000000000006 [ 783.869609][T17664] RBP: 00007f31a80a0090 R08: 0000000000000000 R09: 0000000000000000 [ 783.869621][T17664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.869633][T17664] R13: 00007f31a7426038 R14: 00007f31a7425fa0 R15: 00007ffc1b2556a8 [ 783.869664][T17664] [ 783.961856][T16500] usb 10-1: device descriptor read/64, error -71 [ 784.075028][T16500] usb usb10-port1: attempt power cycle [ 784.108885][T17668] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 784.108912][T17668] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 784.109004][T17668] vhci_hcd vhci_hcd.0: Device attached [ 784.116577][T17669] vhci_hcd: cannot find a urb of seqnum 32767 max seqnum 0 [ 784.116905][T17668] netlink: 'syz.8.3944': attribute type 7 has an invalid length. [ 784.126933][T10657] vhci_hcd vhci_hcd.8: stop threads [ 784.126955][T10657] vhci_hcd vhci_hcd.8: release socket [ 784.126976][T10657] vhci_hcd vhci_hcd.8: disconnect device [ 784.412082][T16500] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 784.433293][T16500] usb 10-1: device descriptor read/8, error -71 [ 784.441656][ T5721] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 784.572272][ T5721] usb 9-1: device descriptor read/64, error -71 [ 784.671643][T16500] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 784.691999][T16500] usb 10-1: device descriptor read/8, error -71 [ 784.802134][T16500] usb usb10-port1: unable to enumerate USB device [ 784.811849][ T5721] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 784.941580][ T5721] usb 9-1: device descriptor read/64, error -71 [ 785.053132][ T5721] usb usb9-port1: attempt power cycle [ 785.391874][ T5721] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 785.412383][ T5721] usb 9-1: device descriptor read/8, error -71 [ 785.495829][T16500] usb 8-1: USB disconnect, device number 83 [ 785.651596][ T5721] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 785.673876][ T5721] usb 9-1: device descriptor read/8, error -71 [ 785.719856][T17679] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3946'. [ 785.783923][ T5721] usb usb9-port1: unable to enumerate USB device [ 786.151619][ T5721] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 786.304591][ T5721] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 786.305747][ T5721] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 786.305778][ T5721] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8456, setting to 1024 [ 786.305819][ T5721] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.308741][ T5721] usb 8-1: config 0 descriptor?? [ 786.444538][T17691] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3951'. [ 786.460659][T17692] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl812) [ 786.535419][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 786.535460][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 786.535489][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 786.535559][ T4984] loop0: [ 786.941801][T16500] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 786.958661][ T5721] usbhid 8-1:0.0: can't add hid device: -71 [ 786.966440][ T5721] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 786.969501][ T5721] usb 8-1: USB disconnect, device number 84 [ 787.101626][T16500] usb 10-1: Using ep0 maxpacket: 32 [ 787.104049][T16500] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 787.105137][T16500] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 787.105163][T16500] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.105181][T16500] usb 10-1: config 0 has no interface number 0 [ 787.105218][T16500] usb 10-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 787.105240][T16500] usb 10-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.107410][T16500] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.107433][T16500] usb 10-1: Product: syz [ 787.107447][T16500] usb 10-1: Manufacturer: syz [ 787.107460][T16500] usb 10-1: SerialNumber: syz [ 787.114184][T16500] usb 10-1: config 0 descriptor?? [ 787.137296][T16500] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 787.137548][T16500] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 787.274145][T17706] ocfs2: Unknown parameter '@&@[)$@!&@[€\' [ 787.857513][T10662] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.098420][T10662] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.315188][T10662] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.380563][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 788.393798][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 788.393981][ T5618] Bluetooth: hci4: SCO packet for unknown connection handle 401 [ 788.396247][ T53] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 788.410062][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 788.431967][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 788.432750][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 788.624656][T10662] netdevsim netdevsim8 netdevsim0 (unregistering): left allmulticast mode [ 788.624725][T10662] netdevsim netdevsim8 netdevsim0 (unregistering): left promiscuous mode [ 788.627972][T10662] bridge0: port 3(netdevsim0) entered disabled state [ 788.676328][T10662] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.214965][T10662] bridge_slave_1: left allmulticast mode [ 789.215025][T10662] bridge_slave_1: left promiscuous mode [ 789.215249][T10662] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.240304][T10662] bridge_slave_0: left allmulticast mode [ 789.240385][T10662] bridge_slave_0: left promiscuous mode [ 789.240643][T10662] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.684459][T10662] team0: Port device geneve1 removed [ 789.728061][T10662] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 789.777623][T10662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.809965][T10662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.830269][T10662] bond0 (unregistering): Released all slaves [ 789.834265][ T5721] usb 10-1: USB disconnect, device number 53 [ 789.924746][ T5279] 8021q: adding VLAN 0 to HW filter on device eth25 [ 789.939676][T17721] xfrm0 speed is unknown, defaulting to 1000 [ 790.261174][T17761] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 790.571774][ T4932] Bluetooth: hci1: command tx timeout [ 790.961182][T10662] hsr_slave_0: left promiscuous mode [ 790.971226][T10662] hsr_slave_1: left promiscuous mode [ 790.972959][T15071] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 790.979027][T10662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.979057][T10662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.986732][T10662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.986756][T10662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.015306][T10662] veth1_macvtap: left promiscuous mode [ 791.019811][T10662] veth0_macvtap: left promiscuous mode [ 791.019936][T10662] veth1_vlan: left promiscuous mode [ 791.020066][T10662] veth0_vlan: left promiscuous mode [ 791.121666][T15071] usb 10-1: Using ep0 maxpacket: 32 [ 791.134230][T15071] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 791.146649][T15071] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 791.157865][T15071] usb 10-1: config 0 has no interface number 0 [ 791.170731][T15071] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.181277][T15071] usb 10-1: Product: syz [ 791.181302][T15071] usb 10-1: Manufacturer: syz [ 791.181317][T15071] usb 10-1: SerialNumber: syz [ 791.210296][T15071] usb 10-1: config 0 descriptor?? [ 791.594849][T10662] team0 (unregistering): Port device team_slave_1 removed [ 791.634739][T10662] team0 (unregistering): Port device team_slave_0 removed [ 791.646386][T15071] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 791.660089][T15071] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 791.837156][ T5279] 8021q: adding VLAN 0 to HW filter on device eth26 [ 792.456399][T17814] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3978'. [ 792.571983][T17721] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.572170][T17721] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.576131][T17721] bridge_slave_0: entered allmulticast mode [ 792.581132][T17721] bridge_slave_0: entered promiscuous mode [ 792.608146][T17721] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.608295][T17721] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.608473][T17721] bridge_slave_1: entered allmulticast mode [ 792.625144][T17721] bridge_slave_1: entered promiscuous mode [ 792.671569][ T4932] Bluetooth: hci1: command tx timeout [ 792.853034][T17721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.859808][T17721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.964871][T17721] team0: Port device team_slave_0 added [ 792.983603][T17721] team0: Port device team_slave_1 added [ 793.070330][T17721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.070394][T17721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.070422][T17721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.077685][T17721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.077704][T17721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.077730][T17721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.254929][T17721] hsr_slave_0: entered promiscuous mode [ 793.259366][T17721] hsr_slave_1: entered promiscuous mode [ 793.264385][T17721] debugfs: 'hsr0' already exists in 'hsr' [ 793.264412][T17721] Cannot create hsr debugfs directory [ 793.567782][ T5279] 8021q: adding VLAN 0 to HW filter on device eth27 [ 793.841642][T11467] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 793.993526][T11467] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 793.994722][T11467] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 793.994773][T11467] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 793.994817][T11467] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.024249][T11467] usb 8-1: probing VID:PID(0424:012C) [ 794.029936][T11467] usb 8-1: vub300 testing BULK IN EndPoint(0) 81 [ 794.029963][T11467] usb 8-1: vub300 testing BULK OUT EndPoint(1) 02 [ 794.029981][T11467] usb 8-1: vub300 testing BULK IN EndPoint(2) 83 [ 794.029998][T11467] usb 8-1: vub300 testing BULK OUT EndPoint(3) 04 [ 794.030016][T11467] usb 8-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 794.261867][T17834] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3982'. [ 794.281649][T17834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.300924][T17834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.409385][T15071] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 794.409701][T15071] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 794.440531][T15071] usb 10-1: USB disconnect, device number 54 [ 794.520703][T11467] usb 8-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 794.570930][ T5279] 8021q: adding VLAN 0 to HW filter on device eth28 [ 794.653332][T17721] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 794.666137][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 794.676662][T17721] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 794.691059][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 794.699757][T17721] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 794.710707][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 794.719612][T17721] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 794.731513][ T4932] Bluetooth: hci1: command tx timeout [ 794.748157][T11467] vub300 8-1:1.0: probe with driver vub300 failed with error -71 [ 794.753988][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 794.784012][T11467] usb 8-1: USB disconnect, device number 85 [ 794.920566][T17721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.947045][T17721] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.953908][T10662] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.954048][T10662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.966101][T10662] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.966209][T10662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.691572][T11467] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 795.852343][T11467] usb 8-1: Using ep0 maxpacket: 8 [ 795.859302][T11467] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 795.872025][T11467] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 795.872079][T11467] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x65, changing to 0x5 [ 795.872125][T11467] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 25966, setting to 1024 [ 795.872156][T11467] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 795.872184][T11467] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.944080][T11467] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.944131][T11467] usb 8-1: Product: syz [ 795.944165][T11467] usb 8-1: Manufacturer: syz [ 795.944185][T11467] usb 8-1: SerialNumber: syz [ 795.972386][T17877] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 795.972523][T17877] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 795.992841][T11467] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 796.004926][T11467] usbtest 8-1:1.0: Linux user mode ISO test driver [ 796.012905][T11467] usbtest 8-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 796.033138][T15071] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 796.054146][T17721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.128882][T17721] veth0_vlan: entered promiscuous mode [ 796.152063][T17721] veth1_vlan: entered promiscuous mode [ 796.183273][T15071] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 796.198990][T15071] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.199052][T15071] usb 10-1: Product: syz [ 796.199087][T15071] usb 10-1: Manufacturer: syz [ 796.199103][T15071] usb 10-1: SerialNumber: syz [ 796.243707][ T7926] usb 8-1: USB disconnect, device number 86 [ 796.252396][T17721] veth0_macvtap: entered promiscuous mode [ 796.264276][T17721] veth1_macvtap: entered promiscuous mode [ 796.295173][T17721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.338284][T17721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.520383][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.521544][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.522761][T10662] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.530449][T10662] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.694570][T15071] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 796.694655][T15071] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 796.768232][T17534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.768282][T17534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.811506][ T4932] Bluetooth: hci1: command tx timeout [ 796.905052][T16610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.905112][T16610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.430174][T17928] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3992'. [ 797.961099][T15071] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 798.041724][T15070] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 798.192299][T15070] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 798.195824][T15070] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.195856][T15070] usb 8-1: Product: syz [ 798.195870][T15070] usb 8-1: Manufacturer: syz [ 798.195884][T15070] usb 8-1: SerialNumber: syz [ 798.311600][ T5619] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 798.376177][T15071] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 798.378628][T15071] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 798.378717][T15071] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 798.379854][T15071] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 798.406494][T15071] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 798.445895][T15071] usb 10-1: USB disconnect, device number 55 [ 798.461728][ T5619] usb 2-1: Using ep0 maxpacket: 8 [ 798.463164][ T5619] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 798.475023][ T5619] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 798.475052][ T5619] usb 2-1: config 0 has no interface number 0 [ 798.475120][ T5619] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 798.475141][ T5619] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 798.475167][ T5619] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 798.475191][ T5619] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 798.475241][ T5619] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 798.487581][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.487614][ T5619] usb 2-1: Product: syz [ 798.487657][ T5619] usb 2-1: Manufacturer: syz [ 798.487672][ T5619] usb 2-1: SerialNumber: syz [ 798.512143][ T5619] usb 2-1: config 0 descriptor?? [ 798.652990][T15070] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 798.653115][T15070] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 798.743445][ T5619] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 799.088537][T17948] netlink: 'syz.1.3996': attribute type 2 has an invalid length. [ 799.107213][T16500] usb 2-1: USB disconnect, device number 31 [ 799.440134][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 799.440219][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 799.440234][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 799.440293][ T4984] loop0: [ 799.864912][T15070] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 799.901492][T15070] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 799.902669][T15070] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 799.902724][T15070] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 799.903450][T15070] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 799.943662][T15070] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 799.964928][T15071] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 799.987565][T15070] usb 8-1: USB disconnect, device number 87 [ 800.135137][T15071] usb 10-1: New USB device found, idVendor=1e8e, idProduct=6001, bcdDevice=78.19 [ 800.136666][T15071] usb 10-1: config 64 has an invalid interface number: 55 but max is 2 [ 800.136695][T15071] usb 10-1: config 64 has an invalid interface number: 240 but max is 2 [ 800.136713][T15071] usb 10-1: config 64 has an invalid interface number: 100 but max is 2 [ 800.136733][T15071] usb 10-1: config 64 has no interface number 0 [ 800.136748][T15071] usb 10-1: config 64 has no interface number 1 [ 800.136763][T15071] usb 10-1: config 64 has no interface number 2 [ 800.136835][T15071] usb 10-1: config 64 interface 55 altsetting 128 endpoint 0xC has invalid maxpacket 576, setting to 64 [ 800.136871][T15071] usb 10-1: config 64 interface 240 altsetting 183 has an invalid descriptor for endpoint zero, skipping [ 800.136904][T15071] usb 10-1: config 64 interface 100 altsetting 90 endpoint 0xA has an invalid bInterval 127, changing to 7 [ 800.136932][T15071] usb 10-1: config 64 interface 100 altsetting 90 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 800.136956][T15071] usb 10-1: config 64 interface 100 altsetting 90 has an invalid descriptor for endpoint zero, skipping [ 800.136976][T15071] usb 10-1: config 64 interface 55 has no altsetting 0 [ 800.136994][T15071] usb 10-1: config 64 interface 240 has no altsetting 0 [ 800.137017][T15071] usb 10-1: config 64 interface 100 has no altsetting 0 [ 800.139552][T15071] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.139580][T15071] usb 10-1: Product: syz [ 800.139594][T15071] usb 10-1: Manufacturer: syz [ 800.139608][T15071] usb 10-1: SerialNumber: syz [ 800.154787][T15071] usb 10-1: rejected 1 configuration due to insufficient available bus power [ 800.154816][T15071] usb 10-1: no configuration chosen from 1 choice [ 800.803552][T18016] netlink: 312 bytes leftover after parsing attributes in process `syz.7.4009'. [ 800.826654][T18016] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4009'. [ 801.341528][T16500] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 801.500821][T18041] netlink: 'syz.1.4011': attribute type 63 has an invalid length. [ 801.500858][T18041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4011'. [ 801.509732][T16500] usb 8-1: Using ep0 maxpacket: 32 [ 801.527110][T16500] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 801.540545][T16500] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 801.550086][T16500] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.550115][T16500] usb 8-1: config 0 has no interface number 0 [ 801.550161][T16500] usb 8-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 801.589144][T16500] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.600369][T16500] usb 8-1: Product: syz [ 801.605900][T16500] usb 8-1: Manufacturer: syz [ 801.613825][T16500] usb 8-1: SerialNumber: syz [ 801.629792][T16500] usb 8-1: config 0 descriptor?? [ 801.643391][T16500] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 801.657410][T16500] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 801.981486][T16500] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 802.141815][T16500] usb 2-1: Using ep0 maxpacket: 32 [ 802.142465][T16500] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 802.143473][T16500] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 802.143497][T16500] usb 2-1: config 0 has no interface number 0 [ 802.145527][T16500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.145550][T16500] usb 2-1: Product: syz [ 802.145564][T16500] usb 2-1: Manufacturer: syz [ 802.145578][T16500] usb 2-1: SerialNumber: syz [ 802.168767][T16500] usb 2-1: config 0 descriptor?? [ 802.584591][T16500] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 802.584652][T16500] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 802.680695][ T5619] usb 10-1: USB disconnect, device number 56 [ 803.546430][ T967] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 803.696908][ T967] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 803.700308][ T967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.700335][ T967] usb 10-1: Product: syz [ 803.700376][ T967] usb 10-1: Manufacturer: syz [ 803.700391][ T967] usb 10-1: SerialNumber: syz [ 804.135246][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 804.135375][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 804.137663][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 804.137720][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 804.140744][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 804.209509][ T967] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 804.229873][ T5619] usb 8-1: USB disconnect, device number 88 [ 804.584538][ T4944] usb 10-1: USB disconnect, device number 57 [ 804.841470][ T5619] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 804.878461][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 804.888613][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 804.896423][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 804.904394][ T4984] loop0: [ 805.043751][ T5619] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 805.045734][T16500] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 805.046214][T16500] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 805.094579][ T5619] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.094613][ T5619] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 805.118975][ T5619] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 805.119025][ T5619] usb 8-1: SerialNumber: syz [ 805.143583][T16500] usb 2-1: USB disconnect, device number 32 [ 805.367171][ T5619] usb 8-1: 0:2 : does not exist [ 805.407096][ T5619] usb 8-1: USB disconnect, device number 89 [ 805.455586][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 805.509823][T18151] netlink: 'syz.4.4026': attribute type 63 has an invalid length. [ 805.511886][T18151] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4026'. [ 805.615565][ T967] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 805.762571][ T967] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 805.766113][ T967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.766142][ T967] usb 10-1: Product: syz [ 805.766157][ T967] usb 10-1: Manufacturer: syz [ 805.766171][ T967] usb 10-1: SerialNumber: syz [ 805.851685][ T4944] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 806.001531][ T4944] usb 2-1: Using ep0 maxpacket: 32 [ 806.002763][ T4944] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 806.004280][ T4944] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 806.004363][ T4944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.004382][ T4944] usb 2-1: config 0 has no interface number 0 [ 806.004421][ T4944] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.006542][ T4944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.006622][ T4944] usb 2-1: Product: syz [ 806.006638][ T4944] usb 2-1: Manufacturer: syz [ 806.006651][ T4944] usb 2-1: SerialNumber: syz [ 806.017909][ T4944] usb 2-1: config 0 descriptor?? [ 806.031070][ T4944] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 806.036084][ T4944] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 806.181863][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 806.181972][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 807.122739][ T5712] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 807.282130][ T5712] usb 8-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 807.283366][ T5712] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.283433][ T5712] usb 8-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 807.286440][ T5712] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.286477][ T5712] usb 8-1: Product: syz [ 807.286491][ T5712] usb 8-1: Manufacturer: syz [ 807.286506][ T5712] usb 8-1: SerialNumber: syz [ 807.311098][ T5712] usb-storage 8-1:1.0: USB Mass Storage device detected [ 807.319612][ T5712] usb-storage 8-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 807.353301][ T5712] scsi host1: usb-storage 8-1:1.0 [ 807.393085][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 807.620360][T18172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.621009][T18172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.816871][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 807.829954][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 807.844493][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 807.845081][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 807.867506][ T967] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 807.875134][ T967] usb 10-1: USB disconnect, device number 58 [ 808.639683][ T967] usb 2-1: USB disconnect, device number 33 [ 808.770993][T18183] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 808.771024][T18183] CIFS mount error: No usable UNC path provided in device string! [ 808.771024][T18183] [ 808.771963][T18183] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 808.838010][T18185] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4034'. [ 808.976043][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.976117][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.181458][ T5619] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 809.331777][ T5619] usb 2-1: Using ep0 maxpacket: 32 [ 809.334123][ T5619] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 809.335223][ T5619] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 809.335246][ T5619] usb 2-1: config 0 has no interface number 0 [ 809.337461][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.337484][ T5619] usb 2-1: Product: syz [ 809.337498][ T5619] usb 2-1: Manufacturer: syz [ 809.337542][ T5619] usb 2-1: SerialNumber: syz [ 809.364866][ T5619] usb 2-1: config 0 descriptor?? [ 809.778636][ T5619] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 809.778729][ T5619] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 810.099766][T15069] usb 8-1: USB disconnect, device number 90 [ 810.642367][T18229] netlink: 'syz.4.4045': attribute type 63 has an invalid length. [ 810.653668][T18229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4045'. [ 811.035533][T18240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4049'. [ 811.171674][ T967] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 811.195676][T18238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 811.337521][ T967] usb 10-1: Using ep0 maxpacket: 32 [ 811.340349][ T967] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 811.341563][ T967] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 811.341589][ T967] usb 10-1: config 0 has no interface number 0 [ 811.344044][ T967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.344069][ T967] usb 10-1: Product: syz [ 811.344084][ T967] usb 10-1: Manufacturer: syz [ 811.344097][ T967] usb 10-1: SerialNumber: syz [ 811.358771][ T967] usb 10-1: config 0 descriptor?? [ 811.808267][ T967] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 811.808340][ T967] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 812.277059][ T5619] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 812.277384][ T5619] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 812.309878][ T5619] usb 2-1: USB disconnect, device number 34 [ 812.923955][T18257] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 812.978819][T18267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.979483][T18267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.231831][ T25] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 813.421311][ T25] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 813.422616][ T25] usb 2-1: config 250 has too many interfaces: 232, using maximum allowed: 32 [ 813.423012][ T25] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 232 [ 813.423068][ T25] usb 2-1: config 250 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12105, setting to 1024 [ 813.423098][ T25] usb 2-1: config 250 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 813.423167][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.567794][T18268] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 813.612050][ T25] idmouse 2-1:250.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 813.802927][ T25] usb 2-1: USB disconnect, device number 35 [ 813.876703][ T25] idmouse 2-1:250.0: disconnected [ 814.343020][ T967] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 814.343356][ T967] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 814.370854][ T967] usb 10-1: USB disconnect, device number 59 [ 817.365970][T18298] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4063'. [ 817.378085][T18298] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 817.382763][T18297] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4062'. [ 817.437959][T18298] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4063'. [ 817.438041][T18298] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 818.762974][T15069] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 818.931951][T15069] usb 8-1: Using ep0 maxpacket: 32 [ 818.932675][T15069] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 818.933688][T15069] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 818.933713][T15069] usb 8-1: config 0 has no interface number 0 [ 818.935802][T15069] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.935825][T15069] usb 8-1: Product: syz [ 818.935839][T15069] usb 8-1: Manufacturer: syz [ 818.935859][T15069] usb 8-1: SerialNumber: syz [ 818.938867][T15069] usb 8-1: config 0 descriptor?? [ 819.357421][T15069] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 819.357465][T15069] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 820.030836][T18373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4084'. [ 820.072422][ T5619] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 820.233392][ T5619] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 820.247150][ T5619] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 820.255847][ T5619] usb 10-1: config 1 has no interface number 0 [ 820.255901][ T5619] usb 10-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 820.255963][ T5619] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 820.255990][ T5619] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.302386][ T5619] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.311783][ T5619] usb 10-1: Product: syz [ 820.311840][ T5619] usb 10-1: Manufacturer: syz [ 820.311858][ T5619] usb 10-1: SerialNumber: syz [ 820.334185][T18368] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 820.496237][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 820.496299][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 820.496648][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 820.496715][ T4984] loop0: [ 820.548258][T18368] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 820.637158][T18390] overlayfs: missing 'lowerdir' [ 820.782260][ T5619] sierra_net 10-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.9-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 820.811118][ T5619] sierra_net 10-1:1.7 wwan0: Submit SYNC failed -71 [ 820.821070][ T5619] sierra_net 10-1:1.7 wwan0: Send SYNC failed, status -71 [ 820.822201][ T5619] sierra_net 10-1:1.7 wwan0: Submit SYNC failed -71 [ 820.822233][ T5619] sierra_net 10-1:1.7 wwan0: Send SYNC failed, status -71 [ 820.866583][ T5619] usb 10-1: USB disconnect, device number 60 [ 820.880647][ T5619] sierra_net 10-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.9-1, Sierra Wireless USB-to-WWAN Modem [ 820.964564][ T5619] sierra_net 10-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 821.608675][T15069] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 821.608997][T15069] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -32 [ 821.927331][T18431] kvm [18428]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 822.093754][T18434] xfrm0 speed is unknown, defaulting to 1000 [ 822.486101][T18448] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4103'. [ 822.745729][ T967] usb 8-1: USB disconnect, device number 91 [ 823.495745][T18491] netlink: 'syz.7.4115': attribute type 63 has an invalid length. [ 823.495804][T18491] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4115'. [ 823.511572][T16500] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 823.591453][ T4944] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 823.664920][T16500] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 823.667928][T16500] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.667956][T16500] usb 10-1: Product: syz [ 823.667971][T16500] usb 10-1: Manufacturer: syz [ 823.667985][T16500] usb 10-1: SerialNumber: syz [ 823.744352][ T4944] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 823.748610][ T4944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.748637][ T4944] usb 2-1: Product: syz [ 823.748651][ T4944] usb 2-1: Manufacturer: syz [ 823.748692][ T4944] usb 2-1: SerialNumber: syz [ 823.801228][T18496] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 824.084686][T16500] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 824.084761][T16500] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 824.168487][ T4944] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 824.168991][ T4944] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 824.211653][T15069] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 824.361592][T15069] usb 8-1: Using ep0 maxpacket: 32 [ 824.363833][T15069] usb 8-1: unable to get BOS descriptor or descriptor too short [ 824.363889][T15069] usb 8-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 824.365039][T15069] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 824.367185][T15069] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.367210][T15069] usb 8-1: Product: syz [ 824.367225][T15069] usb 8-1: Manufacturer: syz [ 824.367239][T15069] usb 8-1: SerialNumber: syz [ 824.581621][T15069] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 824.584184][T15069] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 824.636045][T15069] usb 8-1: USB disconnect, device number 92 [ 824.669101][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 825.555170][T18511] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4122'. [ 825.555204][T18511] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4122'. [ 825.555746][T18511] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 825.555805][T18511] iwpm_hello_cb: Unable to parse nlmsg [ 825.700446][T16500] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 825.701000][T16500] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 825.702104][T16500] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 825.702158][T16500] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 825.705061][T16500] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 825.716190][T16500] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 825.768535][T16500] usb 10-1: USB disconnect, device number 61 [ 825.809355][ T4944] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 825.809874][ T4944] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 825.810316][ T4944] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 825.810364][ T4944] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 825.811119][ T4944] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 825.846842][ T4944] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 825.866647][ T4944] usb 2-1: USB disconnect, device number 36 [ 826.585186][ T967] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 826.747527][ T967] usb 10-1: Using ep0 maxpacket: 32 [ 826.754773][ T967] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 826.764856][ T967] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 826.764891][ T967] usb 10-1: config 0 has no interface number 0 [ 826.764941][ T967] usb 10-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 826.764963][ T967] usb 10-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 826.774763][ T967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.774793][ T967] usb 10-1: Product: syz [ 826.774809][ T967] usb 10-1: Manufacturer: syz [ 826.774825][ T967] usb 10-1: SerialNumber: syz [ 826.784215][ T967] usb 10-1: config 0 descriptor?? [ 826.800251][ T967] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 826.800484][ T967] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 826.841700][T16500] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 826.992671][T16500] usb 8-1: Using ep0 maxpacket: 32 [ 826.993648][T16500] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 826.994982][T16500] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 826.995006][T16500] usb 8-1: config 0 has no interface number 0 [ 826.997074][T16500] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.997096][T16500] usb 8-1: Product: syz [ 826.997110][T16500] usb 8-1: Manufacturer: syz [ 826.997124][T16500] usb 8-1: SerialNumber: syz [ 827.009231][T16500] usb 8-1: config 0 descriptor?? [ 827.351632][ T5712] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 827.419562][T16500] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 827.419605][T16500] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 827.522094][ T5712] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 827.525289][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.525317][ T5712] usb 2-1: Product: syz [ 827.525331][ T5712] usb 2-1: Manufacturer: syz [ 827.525345][ T5712] usb 2-1: SerialNumber: syz [ 827.941685][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 827.941771][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 829.362175][ T5619] usb 10-1: USB disconnect, device number 62 [ 829.466919][T18561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.468583][T18561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.481629][T18562] dummy_hcd dummy_hcd.0: remove, state 1 [ 829.481811][T18562] usb usb1: USB disconnect, device number 1 [ 829.507646][T18562] dummy_hcd dummy_hcd.0: stopped [ 829.507712][T18562] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 829.535302][T18562] Bluetooth: MGMT ver 1.23 [ 829.555381][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 829.559060][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 829.560853][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 829.560925][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 829.563120][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 829.606406][ T5712] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 829.650805][ T5712] usb 2-1: USB disconnect, device number 37 [ 829.836216][T16500] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 829.848977][T16500] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 829.857471][T16500] usb 8-1: USB disconnect, device number 93 [ 830.271246][T18571] FAULT_INJECTION: forcing a failure. [ 830.271246][T18571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.271289][T18571] CPU: 1 UID: 0 PID: 18571 Comm: syz.9.4141 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.271324][T18571] Tainted: [L]=SOFTLOCKUP [ 830.271333][T18571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 830.271346][T18571] Call Trace: [ 830.271355][T18571] [ 830.271365][T18571] dump_stack_lvl+0xe8/0x150 [ 830.271400][T18571] should_fail_ex+0x410/0x560 [ 830.271437][T18571] __kvm_read_guest_page+0x18d/0x240 [ 830.271471][T18571] kvm_fetch_guest_virt+0x10c/0x160 [ 830.271501][T18571] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 830.271531][T18571] __do_insn_fetch_bytes+0x53a/0x6c0 [ 830.271562][T18571] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 830.271583][T18571] ? __lock_acquire+0x6df/0x2e50 [ 830.271619][T18571] ? __lock_acquire+0x6df/0x2e50 [ 830.271648][T18571] x86_decode_insn+0x374/0x5af0 [ 830.271681][T18571] ? lock_acquire+0x115/0x350 [ 830.271715][T18571] ? lock_acquire+0x115/0x350 [ 830.271750][T18571] ? __pfx_x86_decode_insn+0x10/0x10 [ 830.271774][T18571] ? __lock_acquire+0x6df/0x2e50 [ 830.271813][T18571] ? __asan_memset+0x22/0x50 [ 830.271840][T18571] ? init_decode_cache+0xf3/0x160 [ 830.271864][T18571] ? init_emulate_ctxt+0x4c4/0x640 [ 830.271894][T18571] ? look_up_lock_class+0x57/0x110 [ 830.271917][T18571] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 830.271950][T18571] ? __lock_acquire+0x6df/0x2e50 [ 830.271982][T18571] x86_emulate_instruction+0x323/0x1e70 [ 830.272030][T18571] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 830.272055][T18571] ? vmx_handle_exit_irqoff+0x100/0xa00 [ 830.272085][T18571] ? __pfx_vmx_handle_exit_irqoff+0x10/0x10 [ 830.272111][T18571] ? trace_rcu_utilization+0x4a/0x1f0 [ 830.272140][T18571] handle_ud+0x19e/0x590 [ 830.272164][T18571] ? __pfx_handle_ud+0x10/0x10 [ 830.272183][T18571] ? vmx_vcpu_run+0xfbf/0x2d20 [ 830.272208][T18571] ? rcu_is_watching+0x16/0xb0 [ 830.272237][T18571] ? handle_exception_nmi+0x2aa/0x1260 [ 830.272257][T18571] ? lock_acquire+0x115/0x350 [ 830.272284][T18571] ? __pfx_handle_exception_nmi+0x10/0x10 [ 830.272304][T18571] vmx_handle_exit+0xfa4/0x16e0 [ 830.272341][T18571] vcpu_run+0x4e97/0x79b0 [ 830.272398][T18571] ? vcpu_run+0x28fd/0x79b0 [ 830.272458][T18571] ? __pfx_vcpu_run+0x10/0x10 [ 830.272482][T18571] ? complete_emulated_mmio+0x1f2/0x910 [ 830.272508][T18571] ? __asan_memcpy+0x40/0x70 [ 830.272533][T18571] ? complete_emulated_mmio+0x535/0x910 [ 830.272569][T18571] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 830.272600][T18571] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 830.272630][T18571] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 830.272661][T18571] kvm_vcpu_ioctl+0xa61/0xfd0 [ 830.272696][T18571] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 830.272722][T18571] ? hook_file_ioctl+0x1f2/0x600 [ 830.272769][T18571] ? __fget_files+0x2a/0x420 [ 830.272793][T18571] ? __fget_files+0x2a/0x420 [ 830.272815][T18571] ? __fget_files+0x3a2/0x420 [ 830.272836][T18571] ? __fget_files+0x2a/0x420 [ 830.272861][T18571] ? bpf_lsm_file_ioctl+0x9/0x20 [ 830.272884][T18571] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 830.272913][T18571] __se_sys_ioctl+0xfc/0x170 [ 830.272950][T18571] do_syscall_64+0x166/0x520 [ 830.272970][T18571] ? trace_irq_disable+0x3b/0x140 [ 830.272995][T18571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.273016][T18571] ? clear_bhb_loop+0x70/0xc0 [ 830.273040][T18571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.273059][T18571] RIP: 0033:0x7f2f8699e0d9 [ 830.273079][T18571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.273096][T18571] RSP: 002b:00007f2f878d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 830.273118][T18571] RAX: ffffffffffffffda RBX: 00007f2f86c25fa0 RCX: 00007f2f8699e0d9 [ 830.273133][T18571] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 830.273146][T18571] RBP: 00007f2f878d3090 R08: 0000000000000000 R09: 0000000000000000 [ 830.273158][T18571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.273170][T18571] R13: 00007f2f86c26038 R14: 00007f2f86c25fa0 R15: 00007ffce10da498 [ 830.273201][T18571] [ 830.798141][T18580] netlink: 'syz.7.4145': attribute type 63 has an invalid length. [ 830.798211][T18580] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4145'. [ 830.978655][T18588] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4148'. [ 831.172801][ T5619] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 831.301557][ T967] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 831.325320][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 831.325355][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 831.325392][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 831.325451][ T4984] loop0: [ 831.337040][ T5619] usb 2-1: Using ep0 maxpacket: 32 [ 831.365603][ T5619] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 831.378423][ T5619] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 831.378470][ T5619] usb 2-1: config 0 has no interface number 0 [ 831.378518][ T5619] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 831.378547][ T5619] usb 2-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 831.427145][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.427199][ T5619] usb 2-1: Product: syz [ 831.427237][ T5619] usb 2-1: Manufacturer: syz [ 831.427261][ T5619] usb 2-1: SerialNumber: syz [ 831.454873][ T5619] usb 2-1: config 0 descriptor?? [ 831.462938][ T967] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 831.469921][ T967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.469950][ T967] usb 10-1: Product: syz [ 831.469965][ T967] usb 10-1: Manufacturer: syz [ 831.469978][ T967] usb 10-1: SerialNumber: syz [ 831.501944][ T5619] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 831.514258][ T5619] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 831.922415][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 831.922513][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 832.185239][T18620] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4161'. [ 832.573301][T15069] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 832.753030][T15069] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 832.759961][T15069] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.759990][T15069] usb 8-1: Product: syz [ 832.760005][T15069] usb 8-1: Manufacturer: syz [ 832.760019][T15069] usb 8-1: SerialNumber: syz [ 833.176593][T15069] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 833.176701][T15069] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 833.533879][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 833.534366][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 833.534789][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 833.534847][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 833.535506][ T967] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 833.550866][ T967] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 833.560059][ T967] usb 10-1: USB disconnect, device number 64 [ 833.937183][ T967] usb 2-1: USB disconnect, device number 38 [ 833.999231][T18643] netlink: 'syz.1.4169': attribute type 63 has an invalid length. [ 833.999269][T18643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4169'. [ 834.135952][T18645] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4170'. [ 834.227547][T15069] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 834.244058][T15069] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 834.255944][T15069] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 834.279524][T15069] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 834.298321][T15069] usb 8-1: USB disconnect, device number 94 [ 834.650869][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 834.650933][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 834.650962][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 834.651037][ T4984] loop0: [ 834.875081][T18666] autofs4:pid:18666:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 834.975297][ T5619] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 835.132099][ T5619] usb 2-1: Using ep0 maxpacket: 32 [ 835.138723][ T5619] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 835.140269][ T5619] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 835.140298][ T5619] usb 2-1: config 0 has no interface number 0 [ 835.140340][ T5619] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 835.140440][ T5619] usb 2-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 835.142690][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.142716][ T5619] usb 2-1: Product: syz [ 835.142731][ T5619] usb 2-1: Manufacturer: syz [ 835.142746][ T5619] usb 2-1: SerialNumber: syz [ 835.149732][ T5619] usb 2-1: config 0 descriptor?? [ 835.157574][ T5619] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 835.157863][ T5619] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 835.301565][ T5764] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 835.431766][ T5764] usb 10-1: device descriptor read/64, error -71 [ 835.671719][ T5764] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 835.802162][ T5764] usb 10-1: device descriptor read/64, error -71 [ 835.917474][ T5764] usb usb10-port1: attempt power cycle [ 836.261604][ T5764] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 836.282151][ T5764] usb 10-1: device descriptor read/8, error -71 [ 836.401636][T15069] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 836.529339][ T5764] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 836.542093][ T5764] usb 10-1: device descriptor read/8, error -71 [ 836.551840][T15069] usb 8-1: Using ep0 maxpacket: 8 [ 836.559147][T15069] usb 8-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 836.570373][T15069] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.582342][T15069] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 836.596283][T15069] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.607431][T15069] usb 8-1: Product: syz [ 836.607450][T15069] usb 8-1: Manufacturer: syz [ 836.607460][T15069] usb 8-1: SerialNumber: syz [ 836.654058][ T5764] usb usb10-port1: unable to enumerate USB device [ 836.664260][ T4932] Bluetooth: hci4: command 0x0406 tx timeout [ 837.760324][ T5712] usb 2-1: USB disconnect, device number 39 [ 838.241829][T16500] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 838.392224][T16500] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 838.393425][T16500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.396897][T16500] usb 2-1: config 0 descriptor?? [ 838.406231][T16500] cp210x 2-1:0.0: cp210x converter detected [ 838.421506][ T5721] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 838.571528][ T5721] usb 10-1: Using ep0 maxpacket: 32 [ 838.572287][ T5721] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 838.573408][ T5721] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 838.573432][ T5721] usb 10-1: config 0 has no interface number 0 [ 838.575674][ T5721] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.575696][ T5721] usb 10-1: Product: syz [ 838.575709][ T5721] usb 10-1: Manufacturer: syz [ 838.575723][ T5721] usb 10-1: SerialNumber: syz [ 838.582039][ T5721] usb 10-1: config 0 descriptor?? [ 838.606627][T18701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.607231][T18701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.814778][T16500] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 838.818465][T16500] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 838.818523][T16500] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 838.833715][T16500] usb 2-1: cp210x converter now attached to ttyUSB0 [ 838.837151][T16500] usb 2-1: USB disconnect, device number 40 [ 838.847164][T16500] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 838.848104][T16500] cp210x 2-1:0.0: device disconnected [ 838.992260][ T5721] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 838.992316][ T5721] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 839.212382][T15069] usb 8-1: disable ehci-hcd to run US-144 [ 839.232899][T15069] usb 8-1: USB disconnect, device number 95 [ 839.662542][T18715] FAULT_INJECTION: forcing a failure. [ 839.662542][T18715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.682545][T18715] CPU: 0 UID: 0 PID: 18715 Comm: syz.4.4196 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.682585][T18715] Tainted: [L]=SOFTLOCKUP [ 839.682594][T18715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.682607][T18715] Call Trace: [ 839.682617][T18715] [ 839.682627][T18715] dump_stack_lvl+0xe8/0x150 [ 839.682670][T18715] should_fail_ex+0x410/0x560 [ 839.682709][T18715] _copy_to_user+0x31/0xb0 [ 839.682735][T18715] simple_read_from_buffer+0xe1/0x170 [ 839.682767][T18715] proc_fail_nth_read+0x1bb/0x230 [ 839.682795][T18715] ? common_file_perm+0x20e/0x2b0 [ 839.682831][T18715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 839.682863][T18715] ? rw_verify_area+0x24a/0x4c0 [ 839.683050][T18715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 839.683077][T18715] vfs_read+0x213/0xa80 [ 839.683102][T18715] ? __pfx___mutex_lock+0x10/0x10 [ 839.683125][T18715] ? __pfx_vfs_read+0x10/0x10 [ 839.683147][T18715] ? __fget_files+0x2a/0x420 [ 839.683171][T18715] ? __fget_files+0x3a2/0x420 [ 839.683189][T18715] ? __fget_files+0x2a/0x420 [ 839.683220][T18715] ksys_read+0x150/0x270 [ 839.683244][T18715] ? __pfx_ksys_read+0x10/0x10 [ 839.683264][T18715] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 839.683300][T18715] do_syscall_64+0x166/0x520 [ 839.683317][T18715] ? trace_irq_disable+0x3b/0x140 [ 839.683343][T18715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.683365][T18715] ? clear_bhb_loop+0x70/0xc0 [ 839.683387][T18715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.683404][T18715] RIP: 0033:0x7f984db5e90e [ 839.683422][T18715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 839.683437][T18715] RSP: 002b:00007f984e988fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 839.683457][T18715] RAX: ffffffffffffffda RBX: 00007f984e9896c0 RCX: 00007f984db5e90e [ 839.683470][T18715] RDX: 000000000000000f RSI: 00007f984e9890a0 RDI: 0000000000000007 [ 839.683482][T18715] RBP: 00007f984e989090 R08: 0000000000000000 R09: 0000000000000000 [ 839.683496][T18715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.683507][T18715] R13: 00007f984de26038 R14: 00007f984de25fa0 R15: 00007ffccc7fbb78 [ 839.683534][T18715] [ 840.161897][ T967] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 840.221034][T18729] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4202'. [ 840.315308][ T967] usb 2-1: Using ep0 maxpacket: 32 [ 840.318685][ T967] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 840.320253][ T967] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 840.320279][ T967] usb 2-1: config 0 has no interface number 0 [ 840.323759][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.323812][ T967] usb 2-1: Product: syz [ 840.323827][ T967] usb 2-1: Manufacturer: syz [ 840.323841][ T967] usb 2-1: SerialNumber: syz [ 840.337401][ T967] usb 2-1: config 0 descriptor?? [ 840.551903][ T5619] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 840.701642][ T5619] usb 8-1: Using ep0 maxpacket: 16 [ 840.702391][ T5619] usb 8-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 840.703467][ T5619] usb 8-1: config 0 interface 0 has no altsetting 0 [ 840.703503][ T5619] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.708334][ T5619] usb 8-1: config 0 descriptor?? [ 840.746252][ T967] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 840.746294][ T967] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 840.935300][ T5619] usbhid 8-1:0.0: can't add hid device: -71 [ 840.943536][ T5619] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 840.966524][ T5619] usb 8-1: USB disconnect, device number 96 [ 840.977866][ T967] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 840.978236][ T967] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 841.436816][ T5721] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 841.437128][ T5721] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 841.443174][ T5721] usb 10-1: USB disconnect, device number 69 [ 841.676060][T18746] netlink: 'syz.7.4208': attribute type 63 has an invalid length. [ 841.676098][T18746] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4208'. [ 842.017272][T18752] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4210'. [ 842.168755][T18757] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 842.653472][T18771] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4218'. [ 842.817972][T18779] tmpfs: Too few inodes for current use [ 842.962658][ T5764] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 842.964477][ T5712] usb 2-1: USB disconnect, device number 41 [ 843.132192][ T5764] usb 8-1: Using ep0 maxpacket: 32 [ 843.139014][ T5764] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 843.152251][ T5764] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 843.152308][ T5764] usb 8-1: config 0 has no interface number 0 [ 843.175916][ T5764] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.184690][ T5764] usb 8-1: Product: syz [ 843.189178][ T5764] usb 8-1: Manufacturer: syz [ 843.194469][ T5764] usb 8-1: SerialNumber: syz [ 843.203159][ T5764] usb 8-1: config 0 descriptor?? [ 843.535128][T16500] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 843.626355][ T5764] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 843.626400][ T5764] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 843.707228][T16500] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.710135][T16500] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.716207][T16500] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.716261][T16500] usb 10-1: Product: syz [ 843.716276][T16500] usb 10-1: Manufacturer: syz [ 843.716290][T16500] usb 10-1: SerialNumber: syz [ 843.919294][T18801] netlink: 'syz.1.4230': attribute type 63 has an invalid length. [ 843.919330][T18801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4230'. [ 843.958418][T18792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.983352][T18792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.999972][T18792] overlay: Unknown parameter 'subj_role' [ 844.401641][ T5712] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 844.410914][T16500] cdc_ncm 10-1:1.0: failed GET_NTB_PARAMETERS [ 844.411130][T16500] cdc_ncm 10-1:1.0: bind() failure [ 844.435300][T16500] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 844.435412][T16500] cdc_ncm 10-1:1.1: bind() failure [ 844.449061][T16500] usb 10-1: USB disconnect, device number 70 [ 844.552708][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 844.558783][ T5712] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 844.559987][ T5712] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 844.560017][ T5712] usb 2-1: config 0 has no interface number 0 [ 844.562250][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.562277][ T5712] usb 2-1: Product: syz [ 844.562291][ T5712] usb 2-1: Manufacturer: syz [ 844.562305][ T5712] usb 2-1: SerialNumber: syz [ 844.570289][ T5712] usb 2-1: config 0 descriptor?? [ 844.980107][ T5712] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 844.980173][ T5712] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 845.205437][ T5712] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 845.205736][ T5712] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 845.234310][T18812] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 846.033045][T18820] openvswitch: netlink: Missing key (keys=40, expected=100) [ 846.049163][ T5764] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 846.049448][ T5764] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 846.056888][ T5764] usb 8-1: USB disconnect, device number 97 [ 846.281636][ T967] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 846.411545][ T967] usb 10-1: device descriptor read/64, error -71 [ 846.652036][ T967] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 846.668471][T18827] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4238'. [ 846.781522][ T967] usb 10-1: device descriptor read/64, error -71 [ 846.863191][T18831] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4240'. [ 846.892151][ T967] usb usb10-port1: attempt power cycle [ 846.962050][ T5712] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 846.992966][T18836] comedi comedi1: pcl724: I/O base address not correctly aligned [ 847.114318][ T5712] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 847.117713][ T5712] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 847.117744][ T5712] usb 8-1: Product: syz [ 847.117758][ T5712] usb 8-1: Manufacturer: syz [ 847.184475][ T5712] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 847.184542][ T5712] cdc_wdm 8-1:1.0: Unknown control protocol [ 847.241891][ T967] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 847.273263][ T967] usb 10-1: device descriptor read/8, error -71 [ 847.294071][ T5712] usb 2-1: USB disconnect, device number 42 [ 847.420015][T18849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.420501][T18849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.521602][ T967] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 847.542419][ T967] usb 10-1: device descriptor read/8, error -71 [ 847.652202][ T967] usb usb10-port1: unable to enumerate USB device [ 847.741493][ T5712] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 847.912229][ T5712] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 847.915798][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.915830][ T5712] usb 2-1: Product: syz [ 847.915844][ T5712] usb 2-1: Manufacturer: syz [ 847.915867][ T5712] usb 2-1: SerialNumber: syz [ 848.344185][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 848.344286][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 849.118246][T18863] netlink: 'syz.9.4251': attribute type 63 has an invalid length. [ 849.118306][T18863] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4251'. [ 849.369388][ T5764] usb 8-1: USB disconnect, device number 98 [ 849.581547][ T5619] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 849.751530][ T5619] usb 10-1: Using ep0 maxpacket: 32 [ 849.753294][ T5619] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 849.754390][ T5619] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 849.754413][ T5619] usb 10-1: config 0 has no interface number 0 [ 849.756579][ T5619] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.756601][ T5619] usb 10-1: Product: syz [ 849.756615][ T5619] usb 10-1: Manufacturer: syz [ 849.756656][ T5619] usb 10-1: SerialNumber: syz [ 849.770020][ T5619] usb 10-1: config 0 descriptor?? [ 849.785007][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 849.787058][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 849.791451][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 849.791509][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 849.792357][ T5712] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 849.803362][ T5712] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 849.816543][ T5712] usb 2-1: USB disconnect, device number 43 [ 850.183806][ T5619] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 850.183864][ T5619] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 850.386520][ T5619] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 850.386816][ T5619] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -32 [ 850.701449][ T5619] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 850.853298][ T5619] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 850.876018][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.876073][ T5619] usb 2-1: Product: syz [ 850.876089][ T5619] usb 2-1: Manufacturer: syz [ 850.876104][ T5619] usb 2-1: SerialNumber: syz [ 851.308841][ T5619] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 851.308947][ T5619] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 852.321519][ T5764] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 852.333622][ T5619] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 852.333692][ T5619] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 852.334432][ T5619] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 852.348946][ T5619] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 852.409182][T16500] usb 10-1: USB disconnect, device number 75 [ 852.481959][ T5764] usb 8-1: Using ep0 maxpacket: 32 [ 852.488789][ T5764] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 852.500873][ T5764] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 852.500949][ T5764] usb 8-1: config 0 has no interface number 0 [ 852.518438][ T5764] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.527721][ T5764] usb 8-1: Product: syz [ 852.527747][ T5764] usb 8-1: Manufacturer: syz [ 852.527762][ T5764] usb 8-1: SerialNumber: syz [ 852.549806][ T5764] usb 8-1: config 0 descriptor?? [ 852.570444][T18915] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4264'. [ 852.984012][ T5764] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 852.984070][ T5764] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 853.480953][ T5619] usb 2-1: USB disconnect, device number 44 [ 853.848292][T18946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 854.391751][ T967] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 854.396931][T18953] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4273'. [ 854.561498][ T967] usb 2-1: Using ep0 maxpacket: 32 [ 854.567934][ T967] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 854.570124][ T967] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 854.570155][ T967] usb 2-1: config 0 has no interface number 0 [ 854.572731][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.572761][ T967] usb 2-1: Product: syz [ 854.572805][ T967] usb 2-1: Manufacturer: syz [ 854.572820][ T967] usb 2-1: SerialNumber: syz [ 854.581479][ T967] usb 2-1: config 0 descriptor?? [ 854.751535][ T4944] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 854.901502][ T4944] usb 10-1: Using ep0 maxpacket: 16 [ 854.903617][ T4944] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 854.904715][ T4944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.904743][ T4944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.904797][ T4944] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 854.904838][ T4944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.910182][ T4944] usb 10-1: config 0 descriptor?? [ 854.988527][ T967] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 854.988568][ T967] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 855.207335][ T967] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 855.207734][ T967] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 855.230159][ T5764] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 855.230507][ T5764] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -32 [ 855.328803][ T4944] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0017/input/input35 [ 855.404666][ T4944] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 855.521094][ T967] usb 10-1: USB disconnect, device number 76 [ 856.280077][ T5619] usb 8-1: USB disconnect, device number 99 [ 856.443407][T18974] netlink: 'syz.9.4280': attribute type 63 has an invalid length. [ 856.453422][T18974] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4280'. [ 856.613200][T18978] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4282'. [ 857.081651][ T5764] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 857.189988][ T189] usb 2-1: USB disconnect, device number 45 [ 857.242955][ T5764] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 857.259988][ T5764] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.260038][ T5764] usb 10-1: Product: syz [ 857.260071][ T5764] usb 10-1: Manufacturer: syz [ 857.260092][ T5764] usb 10-1: SerialNumber: syz [ 857.581459][ T189] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 857.697063][ T5764] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 857.697168][ T5764] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 857.751454][ T189] usb 2-1: Using ep0 maxpacket: 32 [ 857.757910][ T189] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 857.768681][ T189] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 857.768726][ T189] usb 2-1: config 0 has no interface number 0 [ 857.785093][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.785143][ T189] usb 2-1: Product: syz [ 857.785176][ T189] usb 2-1: Manufacturer: syz [ 857.785199][ T189] usb 2-1: SerialNumber: syz [ 857.795823][ T189] usb 2-1: config 0 descriptor?? [ 858.191453][ T5619] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 858.204196][ T189] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 858.204247][ T189] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 858.351488][ T5619] usb 8-1: Using ep0 maxpacket: 32 [ 858.353463][ T5619] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 858.354708][ T5619] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 858.354738][ T5619] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 858.354789][ T5619] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 858.354812][ T5619] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 858.354836][ T5619] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 858.357171][ T5619] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.357192][ T5619] usb 8-1: Product: syz [ 858.357206][ T5619] usb 8-1: Manufacturer: syz [ 858.357220][ T5619] usb 8-1: SerialNumber: syz [ 858.364584][ T5619] usb 8-1: config 0 descriptor?? [ 858.771857][ T5619] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 858.772080][ T5619] input input36: Device does not respond to id packet M [ 858.772904][ T5619] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 858.773089][ T5619] input input36: Device does not respond to id packet P [ 858.774155][ T5619] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 858.774203][ T5619] input input36: Device does not respond to id packet B [ 858.786545][ T5619] input input36: Device does not respond to id packet N [ 858.946893][T18991] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 858.989015][ T5619] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 858.996030][ T5619] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 859.004803][ T5619] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 859.013416][ T5619] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 859.029241][ T5619] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input36 [ 859.066528][ T5619] usb 8-1: USB disconnect, device number 100 [ 859.138217][ T5764] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 859.138790][ T5764] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 859.139237][ T5764] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 859.139288][ T5764] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 859.139990][ T5764] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 859.158544][ T5764] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 859.185698][ T5764] usb 10-1: USB disconnect, device number 77 [ 859.352892][T18996] jffs2: notice: (18996) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 859.376293][ T51] ------------[ cut here ]------------ [ 859.376343][ T51] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 859.376383][ T51] WARNING: net/mac80211/driver-ops.h:1723 at ieee80211_set_active_links+0x4a0/0x8a0, CPU#1: kworker/u8:4/51 [ 859.404924][ T51] Modules linked in: [ 859.409562][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.421011][ T51] Tainted: [L]=SOFTLOCKUP [ 859.425583][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.436299][ T51] Workqueue: events_unbound cfg80211_wiphy_work [ 859.443435][ T51] RIP: 0010:ieee80211_set_active_links+0x4ec/0x8a0 [ 859.452099][ T51] Code: 01 00 00 48 85 c0 49 8d 87 c8 ec ff ff 4c 0f 44 e8 41 0f b6 04 1e 84 c0 0f 85 2d 01 00 00 41 8b 14 24 48 8b 7c 24 10 4c 89 ee <67> 48 0f b9 3a e9 20 fd ff ff e8 f5 a2 68 f6 90 0f 0b 90 e9 87 fd [ 859.472884][ T51] RSP: 0018:ffffc90000bc7928 EFLAGS: 00010246 [ 859.479371][ T51] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88801bba9f40 [ 859.488240][ T51] RDX: 0000000000000000 RSI: ffff888029dd0120 RDI: ffffffff90ada290 [ 859.497101][ T51] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000002 [ 859.505686][ T51] R10: 0000000000000010 R11: 0000000000000000 R12: ffff888029dd1928 [ 859.513915][ T51] R13: ffff888029dd0120 R14: 1ffff110053ba325 R15: ffff888029dd2c70 [ 859.522755][ T51] FS: 0000000000000000(0000) GS:ffff88812498a000(0000) knlGS:0000000000000000 [ 859.532806][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 859.539791][ T51] CR2: 000000110c4202d9 CR3: 000000002aad0000 CR4: 00000000003526f0 [ 859.548078][ T51] Call Trace: [ 859.551670][ T51] [ 859.554666][ T51] ieee80211_if_parse_active_links+0xe5/0x150 [ 859.561239][ T51] ? __pfx_ieee80211_if_parse_active_links+0x10/0x10 [ 859.568329][ T51] ? do_raw_spin_lock+0x12b/0x2f0 [ 859.573587][ T51] wiphy_locked_debugfs_write_work+0xdd/0x120 [ 859.580063][ T51] ? __pfx_ieee80211_if_write_sdata_handler+0x10/0x10 [ 859.587097][ T51] cfg80211_wiphy_work+0x29e/0x420 [ 859.592392][ T51] ? process_scheduled_works+0x97a/0x1630 [ 859.598893][ T51] process_scheduled_works+0xc3d/0x1630 [ 859.605218][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 859.611851][ T51] ? assign_work+0x3cf/0x5d0 [ 859.616505][ T51] worker_thread+0xa47/0xfb0 [ 859.621176][ T51] kthread+0x38b/0x480 [ 859.625683][ T51] ? __pfx_worker_thread+0x10/0x10 [ 859.631006][ T51] ? __pfx_kthread+0x10/0x10 [ 859.635767][ T51] ret_from_fork+0x514/0xb70 [ 859.640791][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 859.646209][ T51] ? __switch_to+0xc89/0x1420 [ 859.651389][ T51] ? __pfx_kthread+0x10/0x10 [ 859.656521][ T51] ret_from_fork_asm+0x1a/0x30 [ 859.661543][ T51] [ 859.664690][ T51] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 859.672086][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.683074][ T51] Tainted: [L]=SOFTLOCKUP [ 859.687587][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.698003][ T51] Workqueue: events_unbound cfg80211_wiphy_work [ 859.704470][ T51] Call Trace: [ 859.707779][ T51] [ 859.710723][ T51] vpanic+0x56d/0xa60 [ 859.714772][ T51] ? __pfx__printk+0x10/0x10 [ 859.719611][ T51] ? __pfx_vpanic+0x10/0x10 [ 859.724333][ T51] ? is_bpf_text_address+0x292/0x2b0 [ 859.729948][ T51] ? is_bpf_text_address+0x26/0x2b0 [ 859.735440][ T51] panic+0xc5/0xd0 [ 859.739333][ T51] ? __pfx_panic+0x10/0x10 [ 859.743970][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 859.749371][ T51] __warn+0x315/0x4c0 [ 859.753453][ T51] ? ieee80211_set_active_links+0x4a0/0x8a0 [ 859.759635][ T51] ? ieee80211_set_active_links+0x4a0/0x8a0 [ 859.766331][ T51] __report_bug+0x276/0x570 [ 859.770927][ T51] ? ieee80211_set_active_links+0x4a0/0x8a0 [ 859.776926][ T51] ? __pfx___report_bug+0x10/0x10 [ 859.782149][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 859.787212][ T51] report_bug_entry+0x19b/0x290 [ 859.792255][ T51] ? ieee80211_set_active_links+0x4ec/0x8a0 [ 859.798348][ T51] ? ieee80211_set_active_links+0x4f1/0x8a0 [ 859.804444][ T51] handle_bug+0xce/0x200 [ 859.808716][ T51] exc_invalid_op+0x1a/0x50 [ 859.813323][ T51] asm_exc_invalid_op+0x1a/0x20 [ 859.818195][ T51] RIP: 0010:ieee80211_set_active_links+0x4ec/0x8a0 [ 859.824895][ T51] Code: 01 00 00 48 85 c0 49 8d 87 c8 ec ff ff 4c 0f 44 e8 41 0f b6 04 1e 84 c0 0f 85 2d 01 00 00 41 8b 14 24 48 8b 7c 24 10 4c 89 ee <67> 48 0f b9 3a e9 20 fd ff ff e8 f5 a2 68 f6 90 0f 0b 90 e9 87 fd [ 859.845555][ T51] RSP: 0018:ffffc90000bc7928 EFLAGS: 00010246 [ 859.851738][ T51] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88801bba9f40 [ 859.859905][ T51] RDX: 0000000000000000 RSI: ffff888029dd0120 RDI: ffffffff90ada290 [ 859.868241][ T51] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000002 [ 859.876743][ T51] R10: 0000000000000010 R11: 0000000000000000 R12: ffff888029dd1928 [ 859.885254][ T51] R13: ffff888029dd0120 R14: 1ffff110053ba325 R15: ffff888029dd2c70 [ 859.893872][ T51] ? ieee80211_set_active_links+0x492/0x8a0 [ 859.899874][ T51] ieee80211_if_parse_active_links+0xe5/0x150 [ 859.905956][ T51] ? __pfx_ieee80211_if_parse_active_links+0x10/0x10 [ 859.913000][ T51] ? do_raw_spin_lock+0x12b/0x2f0 [ 859.918879][ T51] wiphy_locked_debugfs_write_work+0xdd/0x120 [ 859.925050][ T51] ? __pfx_ieee80211_if_write_sdata_handler+0x10/0x10 [ 859.932530][ T51] cfg80211_wiphy_work+0x29e/0x420 [ 859.937692][ T51] ? process_scheduled_works+0x97a/0x1630 [ 859.943954][ T51] process_scheduled_works+0xc3d/0x1630 [ 859.949986][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 859.956510][ T51] ? assign_work+0x3cf/0x5d0 [ 859.962031][ T51] worker_thread+0xa47/0xfb0 [ 859.966873][ T51] kthread+0x38b/0x480 [ 859.971341][ T51] ? __pfx_worker_thread+0x10/0x10 [ 859.977014][ T51] ? __pfx_kthread+0x10/0x10 [ 859.983577][ T51] ret_from_fork+0x514/0xb70 [ 859.989789][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 859.995324][ T51] ? __switch_to+0xc89/0x1420 [ 860.000866][ T51] ? __pfx_kthread+0x10/0x10 [ 860.005941][ T51] ret_from_fork_asm+0x1a/0x30 [ 860.010928][ T51] [ 860.014363][ T51] Kernel Offset: disabled [ 860.018735][ T51] Rebooting in 86400 seconds..