last executing test programs: 5m19.904313342s ago: executing program 0 (id=1526): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x2, 0x3, 0x2}}, 0x26) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000"]) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xfffffff, 0x0}, &(0x7f0000000540)="1afb1f000000", 0x0, 0x0, 0x0, 0x0, 0x0}) open(0x0, 0x2a4c0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0xa846, 0x10, 0x3, 0x178}, &(0x7f0000002380)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x80, &(0x7f00000002c0)=@nl=@unspec}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m18.751690971s ago: executing program 0 (id=1529): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xb8}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x0, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x6, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0xfffff000) 5m17.213622415s ago: executing program 0 (id=1532): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) inotify_init() mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) inotify_init() r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) sendmmsg$inet6(r3, 0x0, 0x0, 0xff00) r4 = syz_clone(0x10e7000, 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a40)="068003758ba59413b229f8e9bbf2282273cdaed00aa372f418a5700803aab9b2e8e70297a484") getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in, @in=@loopback}}, {{@in6}}}, &(0x7f0000000c00)=0xe8) getpgrp(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) 5m11.792167102s ago: executing program 0 (id=1545): newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10404, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x800}}], [{@appraise}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}}, 0x1, 0x0, &(0x7f0000000400)="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") r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) r3 = socket$inet6(0xa, 0x2, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r7, r8, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r9, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r9, r5) close_range(r4, 0xffffffffffffffff, 0x2) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r10 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5m8.172890206s ago: executing program 0 (id=1552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa4, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x54, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x0, 0x0, 0x0, {0x81, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x7, 0x81}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x7, 0x3, 0x3f, 0x29}}}}, @NL80211_ATTR_BEACON_TAIL={0x24, 0xf, [@ht={0x2d, 0x1a, {0x10, 0x0, 0x6, 0x0, {0x4, 0x80, 0x0, 0x9, 0x0, 0x1, 0x1, 0x3}, 0x1, 0xa, 0x8}}, @supported_rates={0x1, 0x2, [{0x3}, {}]}]}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa4}}, 0x20000014) 5m7.818462087s ago: executing program 0 (id=1555): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) inotify_init() mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) inotify_init() r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) sendmmsg$inet6(r3, 0x0, 0x0, 0xff00) r4 = syz_clone(0x10e7000, 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a40)="068003758ba59413b229f8e9bbf2282273cdaed00aa372f418a5700803aab9b2e8e70297a484") getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in, @in=@loopback}}, {{@in6}}}, &(0x7f0000000c00)=0xe8) getpgrp(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) 4m52.586223545s ago: executing program 32 (id=1555): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) inotify_init() mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) inotify_init() r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) sendmmsg$inet6(r3, 0x0, 0x0, 0xff00) r4 = syz_clone(0x10e7000, 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a40)="068003758ba59413b229f8e9bbf2282273cdaed00aa372f418a5700803aab9b2e8e70297a484") getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in, @in=@loopback}}, {{@in6}}}, &(0x7f0000000c00)=0xe8) getpgrp(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) 2m42.315327176s ago: executing program 2 (id=1944): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 2m42.157619223s ago: executing program 2 (id=1946): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 2m41.598340011s ago: executing program 2 (id=1950): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) futex_waitv(&(0x7f0000002b40)=[{0x8, &(0x7f0000000140)=0xf, 0x2}, {0x400, &(0x7f0000000200)=0xfffffffffffffff8, 0x82}, {0x4, &(0x7f00000002c0)=0x8, 0x82}, {0xfffffffffffffffe, &(0x7f0000000300)=0x6, 0x2}, {0x6, &(0x7f0000000340)=0x5cb, 0x82}, {0xf3, &(0x7f0000000380)=0x4, 0x82}, {0x4, &(0x7f00000003c0)=0x9, 0x2}, {0x0, &(0x7f0000000400)=0xff}, {0xfffffffffffffffd, &(0x7f0000000440)=0x5, 0x82}, {0x0, &(0x7f0000000480)=0x2, 0x82}, {0x1, &(0x7f00000004c0)=0x131, 0x2}, {0x94, &(0x7f0000000500)=0x8, 0x2}, {0x8, &(0x7f00000005c0)=0x6, 0x2}, {0x8000000000000000, &(0x7f0000000600), 0x82}, {0x91, &(0x7f0000000640)=0x3ff, 0x2}, {0x7207, &(0x7f0000000680)=0x9, 0x2}, {0x7b36, &(0x7f00000006c0)=0x7, 0x82}, {0x1, &(0x7f0000000700)=0x66d1, 0x2}, {0x3, &(0x7f0000000740)=0x7, 0x82}, {0x9, &(0x7f0000000780)=0x200, 0x82}, {0x3ff, &(0x7f0000000800)=0xfffffffffffffffd, 0x2}, {0x9, &(0x7f0000000840)=0x1, 0x82}, {0x4, &(0x7f0000000880)=0x74, 0x82}, {0x81, &(0x7f00000008c0)=0x100000000, 0x2}, {0x1, &(0x7f0000000900)=0x100000001, 0x2}, {0xfffffffffffffffb, &(0x7f0000000940)=0x3, 0x2}, {0x1, &(0x7f0000000980)=0xa1, 0x82}, {0x1ff, &(0x7f00000009c0)=0x6, 0x82}, {0xe, &(0x7f0000000a00)=0x7, 0x82}, {0xffffffff, &(0x7f0000000a40)=0x7, 0x2}, {0x4, &(0x7f0000000a80)=0xfffffffffffffff9, 0x82}, {0x14c, &(0x7f0000000ac0)=0x4, 0x2}, {0x3, &(0x7f0000000b00)=0x9, 0x2}, {0x3, &(0x7f0000000b40)=0x4, 0x2}, {0xa319, &(0x7f0000001c00)=0x9, 0x2}, {0x4, &(0x7f0000001c40)=0x8, 0x82}, {0x7fffffffffffffff, &(0x7f0000001c80)=0x9c2, 0x82}, {0x8001, &(0x7f0000001cc0)=0x8f9, 0x2}, {0x6, &(0x7f0000001d00)=0x7fff, 0x2}, {0x0, &(0x7f0000001d40)=0x1000, 0x82}, {0x7fff, &(0x7f0000001d80)=0x5, 0x2}, {0x0, &(0x7f0000000580)=0x3, 0x82}, {0x42b, &(0x7f0000001e00)=0x5c, 0x82}, {0x2, &(0x7f0000001e80)=0xa, 0x2}, {0x81, &(0x7f0000001ec0)=0x7168, 0x2}, {0x2, &(0x7f0000001f00)=0x8000000000000001, 0x82}, {0x98b, &(0x7f0000001f40)=0x7fff, 0x82}, {0x0, &(0x7f0000001f80)=0x9, 0x2}, {0x7fff, &(0x7f0000001fc0)=0x4, 0x82}, {0x0, &(0x7f0000002000)=0xb, 0x82}, {0x7, &(0x7f0000002040)=0xbb10, 0x2}, {0x800, &(0x7f0000002080)=0x2, 0x82}, {0x7ff, &(0x7f00000020c0)=0x100000001, 0x82}, {0xb485, &(0x7f0000002100)=0x21eb, 0x2}, {0x6, &(0x7f0000002140)=0x1, 0x82}, {0x6, &(0x7f0000002180)=0x5, 0x82}, {0x7fffffff, &(0x7f00000021c0)=0x1000, 0x82}, {0x0, &(0x7f0000002200)=0xb, 0x2}, {0x7, &(0x7f0000002240)=0xfffffefffffffffe, 0x2}, {0x50f, &(0x7f0000002280)=0x1, 0x82}], 0x3c, 0x0, &(0x7f0000002b00), 0x1) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="13f1000001030300eb8ff101000000000500000a"], 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x4004004) getresgid(&(0x7f0000002800), &(0x7f0000002840), &(0x7f0000002880)) sendfile(r4, r3, 0x0, 0x578410eb) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0) 2m38.884460819s ago: executing program 2 (id=1957): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r5 = dup(r4) fallocate(r5, 0x10, 0x0, 0x72000) openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000, {r5}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) eventfd(0x3) io_cancel(0x0, 0x0, &(0x7f00000003c0)) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x1, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x5, 0xb, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@local, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x1000000}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) 2m36.945056506s ago: executing program 2 (id=1966): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000340), &(0x7f0000048000)=0x1, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000080)={@hyper}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = dup(r2) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 2m35.964446073s ago: executing program 2 (id=1968): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x13) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x1, 0x3, {0xa, 0x4e20, 0x5, @empty, 0xff}}}, 0x32) (async, rerun: 32) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000000c0)) (async, rerun: 32) recvmmsg(r2, &(0x7f00000098c0)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000480)=""/115, 0x73}], 0x3}, 0x1}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000009a40)=""/162, 0xa2}, {&(0x7f0000002600)=""/242, 0xf2}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000002700)=""/156, 0x9c}], 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/113, 0x71}, {&(0x7f0000003880)=""/200, 0xc8}, {&(0x7f0000003980)=""/96, 0x60}, {&(0x7f0000009b00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/233, 0xe9}], 0x6}, 0x667}, {{&(0x7f0000004b80)=@tipc=@id, 0x80, &(0x7f0000004c80), 0x0, &(0x7f0000004cc0)}, 0xfff}, {{&(0x7f0000004d00)=@alg, 0x80, &(0x7f0000007180)=[{&(0x7f0000004d80)=""/241, 0xf1}, {&(0x7f0000000580)=""/46, 0x2e}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/161, 0xa1}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000006000)=""/96, 0x60}, {&(0x7f0000006080)=""/28, 0x1c}, {&(0x7f0000003ac0)=""/136, 0x88}, {&(0x7f0000006180)=""/4096, 0x1000}], 0x9, &(0x7f0000007240)=""/22, 0x16}, 0x9}, {{&(0x7f0000007280)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000009700)=[{&(0x7f0000007300)=""/62, 0x3e}, {&(0x7f0000007340)=""/66, 0x42}, {&(0x7f00000073c0)=""/50, 0x32}, {&(0x7f0000007400)=""/20, 0x14}, {&(0x7f0000007440)=""/93, 0x5d}, {&(0x7f00000074c0)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/214, 0xd6}, {&(0x7f00000085c0)=""/4096, 0x1000}, {&(0x7f00000095c0)=""/231, 0xe7}, {&(0x7f00000096c0)=""/49, 0x31}], 0xa, &(0x7f00000097c0)=""/229, 0xe5}, 0x1ff}], 0x6, 0x40002002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x4040000) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x9, 0x0, 0xb, 0x8000000000000000, 0x0, 0xfa11, 0x7fffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000400)}, {0x0}], 0x2) sched_getattr(r5, 0x0, 0x0, 0x0) (async, rerun: 64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) (async, rerun: 64) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, 0x0, 0x2000c88c) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) (async) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) (async, rerun: 64) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) (async, rerun: 64) setitimer(0x2, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) (async, rerun: 64) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (rerun: 64) 2m20.843590104s ago: executing program 33 (id=1968): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x13) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x1, 0x3, {0xa, 0x4e20, 0x5, @empty, 0xff}}}, 0x32) (async, rerun: 32) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000000c0)) (async, rerun: 32) recvmmsg(r2, &(0x7f00000098c0)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000480)=""/115, 0x73}], 0x3}, 0x1}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000009a40)=""/162, 0xa2}, {&(0x7f0000002600)=""/242, 0xf2}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000002700)=""/156, 0x9c}], 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/113, 0x71}, {&(0x7f0000003880)=""/200, 0xc8}, {&(0x7f0000003980)=""/96, 0x60}, {&(0x7f0000009b00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/233, 0xe9}], 0x6}, 0x667}, {{&(0x7f0000004b80)=@tipc=@id, 0x80, &(0x7f0000004c80), 0x0, &(0x7f0000004cc0)}, 0xfff}, {{&(0x7f0000004d00)=@alg, 0x80, &(0x7f0000007180)=[{&(0x7f0000004d80)=""/241, 0xf1}, {&(0x7f0000000580)=""/46, 0x2e}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/161, 0xa1}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000006000)=""/96, 0x60}, {&(0x7f0000006080)=""/28, 0x1c}, {&(0x7f0000003ac0)=""/136, 0x88}, {&(0x7f0000006180)=""/4096, 0x1000}], 0x9, &(0x7f0000007240)=""/22, 0x16}, 0x9}, {{&(0x7f0000007280)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000009700)=[{&(0x7f0000007300)=""/62, 0x3e}, {&(0x7f0000007340)=""/66, 0x42}, {&(0x7f00000073c0)=""/50, 0x32}, {&(0x7f0000007400)=""/20, 0x14}, {&(0x7f0000007440)=""/93, 0x5d}, {&(0x7f00000074c0)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/214, 0xd6}, {&(0x7f00000085c0)=""/4096, 0x1000}, {&(0x7f00000095c0)=""/231, 0xe7}, {&(0x7f00000096c0)=""/49, 0x31}], 0xa, &(0x7f00000097c0)=""/229, 0xe5}, 0x1ff}], 0x6, 0x40002002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x4040000) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x9, 0x0, 0xb, 0x8000000000000000, 0x0, 0xfa11, 0x7fffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000400)}, {0x0}], 0x2) sched_getattr(r5, 0x0, 0x0, 0x0) (async, rerun: 64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) (async, rerun: 64) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, 0x0, 0x2000c88c) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) (async) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) (async, rerun: 64) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) (async, rerun: 64) setitimer(0x2, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) (async, rerun: 64) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (rerun: 64) 12.346118467s ago: executing program 4 (id=2403): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000008340)={{0x12, 0x1, 0x250, 0x1e, 0x60, 0x42, 0x40, 0x15c2, 0x42, 0xefb8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xd, 0x9, 0xa0, 0x4, [{{0x9, 0x4, 0xb1, 0x4, 0x1, 0x3, 0xc, 0x46, 0x9, [], [{{0x9, 0x5, 0x99, 0x3, 0x400, 0xf8, 0x2, 0x4}}]}}]}}]}}, &(0x7f0000008a80)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x2, 0x3e, &(0x7f0000000000)="dfb7ac442082e584c76a6a6829b202033c23b2338ca95301da8408259ebd39f8d1531d463ce628c4e2a8f2d10aa211ceb47f71f30b5175e17f8427ca8635") 11.305062028s ago: executing program 3 (id=2406): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x30, 0x5, 0xfe, 0xfffff018}, {0x80000006, 0x0, 0x0, 0x7fff}]}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) add_key(0x0, 0x0, &(0x7f00000000c0)="475a251b9b1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f", 0x44, 0xfffffffffffffffb) sendmsg$nl_route_sched(r3, 0x0, 0x24040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(0x0, r6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r7, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) 10.200946111s ago: executing program 4 (id=2410): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f0000000b00)}, 0x44800) recvmsg(r0, 0x0, 0x40010040) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe}) listen(r3, 0x0) listen(r3, 0x6) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f0000001400)=""/18, 0x12) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000001d00)={0x13, 0x10, 0xfa00, {&(0x7f0000005d40), r7, 0x2}}, 0x18) r8 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x2a}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e0", 0x13}], 0x3}, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a06ffffffea14edd59a4762b3e7577f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x62}], 0x1) r9 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) r10 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_QBUF(r10, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x0, 0x0, r4}) sendmsg$inet(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x4fd}], 0x1}, 0x48800) sendmsg(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000008c0)="25dadad1ea3fefc966a35de8837c6f0476ac1fe28a22563c61f0e168b3b00c1ec8437de08a977472add50682f4c11664552cb29db4fa17fa8f986a74db40b02396c94a247c72a91de30343a04156c5e97f311f99731ca3173760da21bf53f315936ce8428eddd046eaae7f202a20b1fad0281ddf8492d329923190b4705aea46c7234ec453c792878c0ca542f5a162851ac14bf876a3cbf5b8467d38acc00ffa143b8e267affead3affbdecf1befa47daf6bcffae571be532f955d564e26261eaa594329b91b7506e3606f257d5d43d1fd6469c4c38f6b8dcffad7835484ee99b4a7c492037aca8bd6205477e5bde91b3a5d153ca205d33c263db61d6c85f4935d824fe5e3d7ce2f4b8ecae234201224bf82d56cce927c0747ff29ba88a86614213cefe72b5b5be77a51262f1f54735c3d0e953c3a6766d007423cda7fa0a4ba7d850b08b56b77e547be93ddb40ef96c24c9e257b15fd81ec4ef6a212ae2e8c3e4050b580e73ac39ee05aeb9e13f284174ab91e8aabbf41136eab0baf552fde4b5332affa44c3085b30d9bd60ee6410adf18ecd1aec827dc588adc8b88d3de5907fc088b6c15d90295a4fe854a62fe2a1a9f088961fea613b1e3ed550d6a82fa03ce6750615f83b832f6b3731badc19a80d4bf107e674b53afb969d5a4e111bad1730843d868229404354ccea7c3e96df9b9338c18", 0x1f5}], 0x1, &(0x7f0000000780)=ANY=[], 0x50}, 0x0) 9.271234961s ago: executing program 3 (id=2411): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r0, 0x4068aea3, &(0x7f0000000340)={0xed, 0x0, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x84000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000180), &(0x7f00000002c0)=r6}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 9.109451897s ago: executing program 3 (id=2413): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') lseek(r0, 0x9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)='%pK \x00'}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast2, @dev}, &(0x7f0000000480)=0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x341, 0xf, 0x40000, r0, 0x8, '\x00', r4, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r5, &(0x7f0000000080), 0x0}, 0x20) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0xfffff}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0xff, 0x81, 0x0, 0x6080, 0xef3}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r7 = socket(0x10, 0x3, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000540)={0xfffffffffffffffc, 0x608000, 0x800, 0x0, 0x2}, 0x5d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xd}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c080) 8.529419118s ago: executing program 4 (id=2414): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xfffffcc2}, {0x0}], 0x2) 8.416185691s ago: executing program 3 (id=2415): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000003c0)=""/79, 0x4f}, {&(0x7f00000007c0)=""/217, 0xd9}, {&(0x7f00000006c0)=""/123, 0x7b}, {&(0x7f0000000480)=""/12, 0xc}, {&(0x7f0000001740)=""/80, 0x50}, {&(0x7f0000000b00)=""/217, 0xd9}], 0x6, &(0x7f0000000c80)=""/118, 0x76}, 0x4}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/33, 0x21}, {&(0x7f0000000d00)=""/75, 0x4b}], 0x2, &(0x7f0000000d80)=""/252, 0xfc}, 0xb}, {{&(0x7f0000000e80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000f00)=""/62, 0x3e}], 0x1, &(0x7f0000000f80)=""/228, 0xe4}, 0x2}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001080)=""/15, 0xf}, {&(0x7f00000010c0)=""/222, 0xde}], 0x2, &(0x7f0000001200)=""/208, 0xd0}, 0x5}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001380)=""/178, 0xb2}], 0x1, &(0x7f0000001480)=""/104, 0x68}, 0x7ff}], 0x5, 0x2100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1000}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x23635de98487b93e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7001fddbdf2503fa167fea54906f7661017341c8af00000900030073797a31000000000900010073797a31000000000900030073797a30000000000900010073797a"], 0x4c}}, 0x40080) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="3000000000000000840000000100000008000600040000007f01000009000000020000000900000001feffff", @ANYRES32=0x0, @ANYBLOB="4db1bd1d242be47f7e38f152e286afbcaf37a3576ae08a26df232b1ffdd7a7e6d5d5f382af576f48bdd7d8f43dcdea38edcff8ad70225d3962c5ce4273d4558ff22614a99a82e2f4ceda3f565007800de151393abc"], 0x50, 0x4000890}, 0xd0) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300001386f03befcba3b0271f06aadac427d000000010b44f7180000000000020000000000000900000000060015000a"], 0x30}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000a80)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x4004d}, 0x8259901a1e3cf41f) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)) fsetxattr$trusted_overlay_upper(r3, &(0x7f00000011c0), &(0x7f0000001680)=ANY=[@ANYBLOB="00fba9018085c4217360b5e0608ee9a8f14240d315dc6474b7907b5bc660a7bde9023210712534071db024010000000000000082e6f11bd30f1c5b209cfea9faa35e0700517c609a2e994bdd047588872d42e2a91022baa616a962aec6b5a11f8ae52ea0bc388d52a14b74cbddbc3e405c9ae521b2253954dd77398d2e9e8224ba97fcd6dded449416715be2dd85f76266e5a94d1c061a950dc0c547d88cac3af551f605000000c600"], 0xa9, 0x3) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @loopback}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000900)="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", 0x145}, {&(0x7f00000005c0)="4a17d0030bf98cb7caa975fd47a364496703141e00804759daf629c0fa69ae6848cc8bc1738602f9429899d53d22382d94b77ff7cd54342b4fc1ce57e2d21fc0e7a802d7e62b4693f1ea0563549263e345246a46604256ec18d7200ad31cbedd8ddb4620f13432e5c3293738bc5a18ea26292b0a38dedf0a846b3074bdee21ef45007dd16fc773100fdf65ecdbfa1c35ca3cf80f1c99eb99b970b437fed63c9106cf2db4e0b1247fe6aa2e055daf75016b7e53512f99c357fd983a641d7d9bdefb7bd8aeaa1dcfb8430cd0f024ad0c", 0xcf}], 0x2, 0x5) 7.256595242s ago: executing program 4 (id=2416): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000003511000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) io_setup(0x1, &(0x7f00000016c0)=0x0) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000100)={@local, @remote}) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r3, r4, 0x0, 0x20000023896) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x5f, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x98, 0x60, "217d66d38547aa140db8a200000000c538c7cb"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x4}) 6.816604713s ago: executing program 6 (id=2418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40014) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r5, 0x0, 0x4) 6.681033547s ago: executing program 5 (id=2419): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a", 0xac, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 5.949688925s ago: executing program 6 (id=2420): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) (async) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b966080682006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) (async) write(r0, &(0x7f00000002c0)="0bf94d209d22dee29f463b03eb3f11d803ab92cdedf37b754294aec8bff57082b503f53448e63cc8dba5ef4588cc1a6b1c12e9edffa0553617184eb9fa6338d0bbceba82bcc7f560870aa97ec6f0db383b7960ba24b5ef1fa4df2cded0086f2cdff0924678ee063ac1fadd5a9cf7d7ddc1c48bd11a8489c69225191c9134f6bfdcdf10cce2b3a12943feacaa63e74f705e1c30810577f8f1ae81a02d3020f3881397ffdd568db5e06488248c3c2466c9515eb6889c0762b6ae019c788d40346aa66a02ab7798c99357c7cdad41f9f2b853f0eadd37d45dba410266a30b05b6950aa83b77570b5826dd1f63f2acd81e23bb9d", 0xf2) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000180)=[{0x48, 0x0, 0x0, 0x2}, {0x6, 0x3, 0xfb, 0x9}]}) (async) write(r2, &(0x7f0000000080)="3aa0", 0x2) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x200101}, {0xeb4, 0x198f}, 0x1001, 0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.822252334s ago: executing program 5 (id=2421): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x30, 0x5, 0xfe, 0xfffff018}, {0x80000006, 0x0, 0x0, 0x7fff}]}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) add_key(0x0, 0x0, &(0x7f00000000c0)="475a251b9b1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f", 0x44, 0xfffffffffffffffb) sendmsg$nl_route_sched(r3, 0x0, 0x24040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(0x0, r6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r7, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) 4.996187732s ago: executing program 6 (id=2423): syz_emit_ethernet(0x3b6, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "002500050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x26, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483be298af1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x33, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a0300000000000000000001000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="1c005e80080002000100000008"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000000)="dd", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="e3", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000080)={r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x400005, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={r8, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x36}, 0x8e1e}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={r9, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}}, &(0x7f0000000240)=0x84) 4.982545886s ago: executing program 1 (id=2424): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x30, 0x5, 0xfe, 0xfffff018}, {0x80000006, 0x0, 0x0, 0x7fff}]}, 0x10) sendmsg$nl_route_sched(r3, 0x0, 0x24040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="be9454041e5b281ffd27cbaf66557b1de7bcd5ee5f149a8141fcd4a9cc4f33ef65c1383aecf8b06bedaed4b17151860db019cdf9abb6fd493b694d027448ad85898164b6221b136aa4e355f8359a9c699337b73d95cb6f01c4e3405925637c62f6c6b5b941dc882377db46b0cb0d82a9789510be7c8340c86a69ca1f14e16c737b6eadcfedce1c3b2e273455b150ae07ac69b9d332e02c82f49dc36312318ef45a3eb0c5812cb27177c3e368cca2b6b527db4c0e7f0a113e5875680d7ee3ec38bfb0670c9f536fe1d3ede7bcbe0f3bc7daf436619fc252047d26c5e0e7478a95ae3544", @ANYRES16=r6, @ANYBLOB="010329bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', 0x0, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0xa, 0x922000000003, 0x11) shutdown(r7, 0x1) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x800, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="f4040900062b2c25fe80040000000000dc8b8543aa00fcb11e2851f4b6d285eb7672caa6fc903b14a3", 0x29}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.819946554s ago: executing program 6 (id=2425): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x200000087c29, 0x80) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef6a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xb0e, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x748}}}}]}}]}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x80800) sendmsg$unix(r4, &(0x7f0000000a40)={&(0x7f0000000640)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000940)="43cf7485ddfad0329247dfc405c851e528ad0086795077d0e6a3cf1434de111080f8ec57fc25e9732d8acc25bfbcec110f07a176c78d79af9c4e96d67e22decb18ea1942f4c362c0e236ee2adb427330bed14745f11da3ab37a69acf3a035535d8b0e564ec948e3521ce5cb8", 0x6c}, {&(0x7f00000009c0)="95eaf06b38f556489549507f560165e4072ab9c14807efabfc6457ed3c9d522e161bb6e9d6e9079bb4cefe830eece31a9f9421100a719fb5b410e91fc91fad9f02106ac64e499e8128305ea1523b1c23abd72a9ec453e5365e0d18b1184fa2be1acbad49df6f83855c3f03fdd8", 0x6d}], 0x2, 0x0, 0x0, 0x40000}, 0x40044) close_range(r3, 0xffffffffffffffff, 0xff000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d0000000000003000128008000100687372002400028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="050006"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x401, 0x4, 0x3013, 0x6, 0xc, 0x4, 0x6, 0x3}}) syz_usb_connect(0x6, 0x3d6, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$media(&(0x7f0000000580), 0x96e, 0x4000) 4.383023453s ago: executing program 5 (id=2426): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x800000000000, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) (fail_nth: 9) 4.324942606s ago: executing program 4 (id=2427): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xc7, 0xa6, 0x7d, 0x40, 0x13b1, 0x42, 0xec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x36, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9a, 0x0, 0x2, 0x7e, 0xd7, 0x25, 0x92, [], [{{0x9, 0x5, 0x3, 0x8, 0x40, 0x9, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x0, 0x7}}]}}]}}]}}, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, r4, 0x401, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000824}, 0x8c14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x2, 0x4}, 0x20) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r7, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}}, &(0x7f0000000240)=0x84) 3.358595896s ago: executing program 3 (id=2428): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x4, 0xbd04, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110201"], 0x7c}}, 0x4004010) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaacaaa18810018001a1f4b6cd872d2de48cb00451f00280067000007019078e000fec0465347b2cc6d067ad7cd40bb000297e2fb9b1d3b7023c025ac1414bb0d0090780006009f00000002000000080000000a"], 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x70bd26, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_simple={0x34, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x7, 0x6, "82afd8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x10000084) r7 = socket(0x10, 0x3, 0x0) r8 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) fsmount(r8, 0x0, 0xb) sendto$inet6(r7, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r9 = getpid() sched_setattr(r9, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.32481956s ago: executing program 1 (id=2429): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xff80, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x800000000000, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 3.256089813s ago: executing program 5 (id=2430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40014) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r5, 0x0, 0x4) 3.10619884s ago: executing program 1 (id=2431): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c", 0xaa, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2.736436216s ago: executing program 5 (id=2432): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xe8, 0x30, 0x7, 0x2, 0x4, 0x5, 0x7, 0x8, 0xa, 0x5, 0x2, 0xc2, 0x2, 0x3}, 0xe) shutdown(r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x5393, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="b00000f60f000104ddffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000018a0000140003006970766c616e31000000000000000000540012800b0001006970766c616e0000440002800600010000000000060002000200000006000100020000000600020001000000060001000000000006000100020000000600020000000000060001000200000008000f000000000008001f00040000001800348014003500626f6e645f736c6176655f3100000000"], 0xb0}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000000)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) read$FUSE(r8, &(0x7f0000003040)={0x2020}, 0x2020) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3c) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r4) timer_gettime(r7, &(0x7f0000000200)) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r11 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x10841) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000280)={0x1, 0x3, 0x10021da0, 0x14, 0xff, "42f42749a2ed1901000000010000005aec7776", 0xfffffffe, 0x7}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000004200"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000005080)=@flushsa={0xc5c, 0x1c, 0x2, 0x70bd27, 0x25dfdbfe, {0x2b}, [@algo_comp={0xc48, 0x3, {{'deflate\x00'}, 0x6000, "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"}}]}, 0xc5c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 2.476949956s ago: executing program 1 (id=2433): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) unshare(0x2c020400) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) syz_usb_connect(0x5, 0x64, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7800000010004b0400000000000000167a0000", @ANYRES32=0x0, @ANYBLOB="129c000044100000580012800b0001006272696467650000480002800a0014000180c200030000000600090000000000050024000000000005001800000000000500"], 0x78}}, 0x0) 1.9448035s ago: executing program 6 (id=2434): r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000004540)=ANY=[], 0x78) sendto$inet6(r0, 0x0, 0x241, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xffffffff}, 0x1c) 1.581505468s ago: executing program 1 (id=2435): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) writev(r0, &(0x7f0000002140)=[{&(0x7f0000000040)='T01\n', 0x4}], 0x1) write$6lowpan_enable(r0, 0x0, 0xb00) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @broadcast}, &(0x7f0000000380)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xa, 0xffff}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x41}, @TCA_CAKE_MPU={0x8, 0xe, 0x25}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x12, r2, 0xcfee0000) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000040)={0x8, {0x6, 0x10001, 0x1, 0x2}, {0x7, 0xcf, 0x9, 0x101}, {0xcc, 0x80000000}}) process_madvise(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r7, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r7) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f00000003c0)=0x10001, 0x4) 1.484577446s ago: executing program 6 (id=2436): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x30, 0x5, 0xfe, 0xfffff018}, {0x80000006, 0x0, 0x0, 0x7fff}]}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) add_key(0x0, 0x0, &(0x7f00000000c0)="475a251b9b1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f", 0x44, 0xfffffffffffffffb) sendmsg$nl_route_sched(r3, 0x0, 0x24040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(0x0, r6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r7, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) 1.38861152s ago: executing program 3 (id=2437): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x21c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x800, 0x0, 0x2, 0x0, 0x8, 0x8}, 0x20) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) 1.116334703s ago: executing program 4 (id=2438): ioprio_set$pid(0x3, 0x0, 0x0) pipe(&(0x7f0000000140)) io_setup(0x3ff, &(0x7f0000000500)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r5 = syz_usb_connect(0x7, 0x5eb, &(0x7f0000000940)={{0x12, 0x1, 0x4e45e5c09183bab, 0x5d, 0xf6, 0x77, 0x10, 0x4f48, 0x6f23, 0xccf6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d9, 0x3, 0xc0, 0x7, 0x0, 0x80, [{{0x9, 0x4, 0xc9, 0xf, 0xb, 0x8, 0x5, 0x50, 0x7, [@hid_hid={0x9, 0x21, 0x3, 0xfd, 0x1, {0x22, 0x3eb}}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "b37eecfeb024"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xff00, 0x44f, 0x7}, {0x6, 0x24, 0x1a, 0xfff9, 0x22}, [@network_terminal={0x7, 0x24, 0xa, 0xda, 0x9, 0xfa, 0xff}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm_detail={0x22, 0x24, 0x13, 0x30, "0e36432123d9e455e9011ec455067dac0102fa7f03d6bb66b3f8331bdf84"}, @mdlm_detail={0x7f, 0x24, 0x13, 0xc, "67a555636f6f2ca822858a7e22b8f68b4ec93883173d39d1449881b69b66c4a86906b31b31324773ab1267f7b54b6aff62f6416f623990ffac43d51f43eae2dfdfa1843b0be9b3487b251e2b1be1da3230e6c155f7a0c0967ed38de92f5503199041ad541474ba68187f1053ef819af0e637855c7f4ade1db5fa2b"}, @dmm={0x7, 0x24, 0x14, 0x1, 0xfc2}, @country_functional={0x12, 0x24, 0x7, 0x6c, 0x9, [0xfff6, 0x0, 0x0, 0x8, 0x9, 0x6378]}]}], [{{0x9, 0x5, 0x9, 0x10, 0x8, 0xfa, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0xf, 0x3029}]}}, {{0x9, 0x5, 0xc, 0x8, 0x10, 0x9, 0x3, 0x4, [@generic={0xc8, 0x2, "d16fcbec719fa6f78552e3c542ca2cea92c28f801317e4a59274068efd97c82bc5169fddf1ba07c19e279ce1dc460d17d8abf11b45e9b5ce255ffb055da80de795a05d8ca60987e77ca2f798053a92fd27f4af2c357f537c423bb06c4fff6233a8ce553740a070c0ae5ce4ade2d25f8ab1467606d8460c1cf2d27a6867e19a835b36c32f593a168c24e14a28b33f6beb5f2b816a2a7aa2d42c66da3bf9f02d60016b4499d23d7f7e5f89ffc803ef53062d37b03351763cc448ed2676a0970967d60f7cac8b77"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x9, 0x1, 0x6, [@generic={0x58, 0x4, "167b934fca6c9983bd70212dd7fb529091ea2e32626684f35584e0bcf2c0fb410864122dcfe487e75bcd638352cf4bfbda7576eca82165b499dd44f3dbd5952968e2ecb12ce3dbf4e36e6708c498a6a0b797adc1100b"}, @uac_iso={0x7, 0x25, 0x1, 0xc2, 0x2, 0x2}]}}, {{0x9, 0x5, 0x8, 0x2, 0x0, 0xe, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfb, 0x4}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x0, 0x16, 0x3, [@generic={0x51, 0xf, "196537acb4b90cb3b8f4a32adb5cadbe649a77fb594b5835e0fa96dc7d4226f75a63ac4fc2a15c48f50535e1286e7dadeffc8e0d026c9a12e611ae968218596c75a40783061203489811f35c22e948"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x3, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x400}, @generic={0x9b, 0x6, "9ebb087de558d6766ca2ca36fc50cc63e47de659a257e08cdf4e14e20b1b52efe39c3e6de3d939da417049b1436ff830e00665aa6c720dfbc2f4376c195bce50666131551a826c19d7a0f4ff34a9da13a09c8b9991814db7f85e66535c57279e09f330b28cf7e601f97e4c55f4e11dbfc2a8279180b4b86c778a4c86c439dc16dab4e893e377e966edcf80c70b268460fdcf85d627dbb682af"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x80, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x6, 0x7, 0x81, [@generic={0x5d, 0x23, "48bb2c0d81044717801d7c7c416dd9e31e1c1d15946a33a2a75f3b2abf979f36778364e694bd356bf6077136af4c9edfcd02592812fdfa4581f45d99d8fe56dbb3509a68fa457e5d87366c1f7847d3706b7fa8dbe6f2ca5cb7aadb"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x1, 0xd, 0x9, [@generic={0xeb, 0xc, "c3e0e19c126c0247f0534b1e16bec0d3b3fe06f470c3959362d4feffb61901f6ab32d290bc171795bb0cb6c046b0d3baa8a8f6c01faada9528063a2b0196693d8696f11ea3434751c0c1d2bede8e63795c1c723ed71b923150eb0c2a5d081d075e9092f04890df6e1ea4676f96dce42b2d2a7a0afdd9435f4d20d31300cda4306a014da3d25c437c59c6088101632107d929450dfcf525455ba968a4dace464a7c5c48ce0d3781062347042bf1ba419569c58d475d8a02208e50d11c6b6a7b1a2d09b70b54df39856128d42ed2227bfff9ca3927642be7bff98e559e5f9081c56035b6b9e809706037"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x1, 0xc, 0x2, [@generic={0x47, 0x1, "e1cb1b14e2d556bbd570f2704134b7268f07ffc6a7867fa6c29d05ca7961b8cf2557bff1105c1baaf2295749d98a33d3c68efc7b930312863a27b654ff4b492ae4a2db240f"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x4, 0x9, 0x0, [@generic={0x47, 0x2, "67df495ba7eec775eca00f3b94a7cd030723fb8596164e2a4e719fe31bc2b7b149db9406656127ed4adf37146e93ee9132821d1b18ee15f491c675ab178a5742637e847993"}]}}]}}, {{0x9, 0x4, 0x77, 0x4, 0x1, 0xc4, 0x3b, 0x1a, 0x3, [], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0xf6, 0x9, 0x3, [@generic={0x18, 0x9, "2c64adbfa69e04f0f2f7c971aa01b9e687519ec99c52"}]}}]}}, {{0x9, 0x4, 0x54, 0x8, 0x0, 0xff, 0x0, 0x0, 0x15, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "063d"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x9, 0x1, 0x80}, [@obex={0x5, 0x24, 0x15, 0x8001}, @obex={0x5, 0x24, 0x15, 0x400}, @dmm={0x7, 0x24, 0x14, 0x2, 0x5f51}]}]}}]}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x7e, 0xff, 0x88, 0x20, 0x7}, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="050b190018141004076f049e5c661c180dcaba9543e2cc439343af"], 0xa, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x51, &(0x7f0000000880)=ANY=[@ANYBLOB="510326750bc77b3782480de09e62b864db129e5084f3bca18fc8393b16c31664578e265a040b698d2d11f0f9cdedad80578753d72920939a94d1eca2c252fbb93900"/81]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x5b, &(0x7f0000000600)=@string={0x5b, 0x3, "86ddf6fcc2029f9cbf6de18d28ede96a56ae3dfb15ecc05897e4627507175cdddee1b50c0ae2791dec8778c1bbfc11e9e1a5616ef24371004b7de15aad1f681afc5186ff1fe8415c0fc213842219d36aa4a0f94fe07da8d32c"}}, {0x2, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00']}, {0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r0]}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x44a}}, {0x2, &(0x7f0000001580)=@string={0x2}}, {0xc8, &(0x7f0000001680)=@string={0xc8, 0x3, "4fd180c2e2596dc5b7f6a04871216ded9810b28b86ec97275bf708861965327c201555c5647aa277cec3e4e2ab0ff36f5a5183af1003380e8a86393d21ae6a20c4257ffd2f7628b0db2756bf21f7a294a63042862d659eb9bfdcd82dac4eddaaeb478b31ca952e47cff96ebbe3dc2b6d29c4dc411e41b57d05a504e32a71b366a0d26ee763ea27948df5ec4ce8de27e06b24fb9ff4e17ac8611d93124ffb513b5d70c4b1677e385a75d002e956b8dd91dceac0392ad0c294f7cf1dafe44ac24cbba12969961f"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r0], 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = open(0x0, 0x145142, 0x0) sendfile(r8, r8, 0x0, 0x800000009) kcmp(r0, r1, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fcntl$setsig(r8, 0xa, 0x9) unshare(0x2a040500) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000008000000d4000000220000009500000100000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 440.831653ms ago: executing program 1 (id=2439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000001c0)="020900000080efff", 0x8) mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0xb, 0x28011, r0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000140)={0xc, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r4, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000980)=ANY=[@ANYBLOB="1800007f000000004000000000000000343190"]) syz_usb_connect$uac1(0x1, 0x8a, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt(r1, 0x84, 0x81, &(0x7f00000001c0)="020900000080efff", 0x8) (async) mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0xb, 0x28011, r0, 0x0) (async) landlock_create_ruleset(0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000140)={0xc, r4}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r4, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) (async) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000980)=ANY=[@ANYBLOB="1800007f000000004000000000000000343190"]) (async) syz_usb_connect$uac1(0x1, 0x8a, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x0) (async) 0s ago: executing program 5 (id=2440): r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x40, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0xe2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000840)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d000000000008002200"], 0x148}}, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2a) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvmmsg$unix(r7, &(0x7f0000005440)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000440)=""/136, 0x88}, {&(0x7f0000000680)=""/22, 0x16}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/82, 0x52}, {&(0x7f0000000a00)=""/195, 0xc3}, {&(0x7f0000000b00)=""/58, 0x3a}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/173, 0xad}], 0x6, &(0x7f0000001d40)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001e80)=""/171, 0xab}], 0x1, &(0x7f0000001f80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000002080), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002100)=""/143, 0x8f}, {&(0x7f00000021c0)=""/190, 0xbe}, {&(0x7f0000002280)=""/88, 0x58}, {&(0x7f0000002300)=""/88, 0x58}, {&(0x7f0000002380)=""/48, 0x30}], 0x5, &(0x7f0000002440)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000024c0), 0x6e, &(0x7f0000003740)=[{&(0x7f0000002540)=""/77, 0x4d}, {&(0x7f00000025c0)=""/189, 0xbd}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/127, 0x7f}, {&(0x7f0000003700)=""/38, 0x26}], 0x5, &(0x7f00000037c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000004dc0)=[{&(0x7f00000038c0)=""/31, 0x1f}, {&(0x7f0000003900)=""/221, 0xdd}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/6, 0x6}, {&(0x7f0000004a40)=""/253, 0xfd}, {&(0x7f0000004b40)=""/192, 0xc0}, {&(0x7f0000004c00)=""/119, 0x77}, {&(0x7f0000004c80)=""/152, 0x98}, {&(0x7f0000004d40)=""/22, 0x16}, {&(0x7f0000004d80)=""/32, 0x20}], 0xa, &(0x7f0000004e80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000004f40)=@abs, 0x6e, &(0x7f0000005180)=[{&(0x7f0000004fc0)=""/212, 0xd4}, {&(0x7f00000050c0)=""/124, 0x7c}, {&(0x7f0000005140)=""/38, 0x26}], 0x3, &(0x7f00000051c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x7, 0x1, &(0x7f0000005400)) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r8}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r10, 0x30, 0x0, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7}}}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r11, 0xc00464c9, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x5, 0x297, 0x3ff, 0x400, 0x1, 0xeb, '\x00', 0x0, r0, 0x3, 0x0, 0x3, 0x2}, 0x50) kernel console output (not intermixed with test programs): sb_gadget_register_driver returned -16 [ 709.138691][T12866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.165870][T12866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.235727][ T7017] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input66 [ 709.250954][T12875] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1909'. [ 709.294164][ T5184] bcm5974 3-1:1.0: could not read from device [ 709.480874][ T5184] bcm5974 3-1:1.0: could not read from device [ 709.498934][ T7017] usb 3-1: USB disconnect, device number 79 [ 710.924158][T12869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.978503][T11278] usb 6-1: USB disconnect, device number 9 [ 711.473804][T12899] fuse: Unknown parameter 'alr' [ 711.883335][T12902] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.353142][T12902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.460922][T12902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.050956][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 713.093464][T12909] lo: Caught tx_queue_len zero misconfig [ 713.141757][T12909] netem: invalid attributes len -7 [ 713.146950][T12909] netem: change failed [ 713.242392][T11720] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.292752][T11720] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.360051][T11720] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.402192][T11720] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.755587][T12922] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1921'. [ 714.847118][T12946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 718.665507][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1942'. [ 719.390907][T12914] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 719.552187][T12914] usb 6-1: Using ep0 maxpacket: 32 [ 719.561242][T12914] usb 6-1: unable to get BOS descriptor or descriptor too short [ 719.571243][T12914] usb 6-1: config 244 has an invalid interface number: 68 but max is 0 [ 719.580496][T12914] usb 6-1: config 244 has no interface number 0 [ 719.586847][T12914] usb 6-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 719.608536][T12914] usb 6-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 719.641584][T12914] usb 6-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 719.684952][T12914] usb 6-1: config 244 interface 68 has no altsetting 0 [ 719.696936][T12914] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 719.706842][T12914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.715331][T12914] usb 6-1: Product: syz [ 719.720364][T12914] usb 6-1: Manufacturer: syz [ 719.725002][T12914] usb 6-1: SerialNumber: syz [ 719.735116][T13016] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 720.353920][T12914] comedi comedi5: Endpoint has wrong direction [ 720.409978][T12914] dt9812 6-1:244.68: driver 'dt9812' failed to auto-configure device. [ 720.464987][T12914] usb 6-1: USB disconnect, device number 10 [ 722.833321][T11277] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 723.047092][T13080] fuse: Bad value for 'fd' [ 723.176300][T11277] usb 4-1: Using ep0 maxpacket: 16 [ 723.205776][T11277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.219756][T11277] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 723.230414][T11277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.251215][T11277] usb 4-1: config 0 descriptor?? [ 723.419998][T13071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 723.452879][T13071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 723.483900][T13071] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 723.514661][T13071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 723.535087][T13071] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 723.668304][T11277] betop 0003:11C0:5506.0015: hidraw0: USB HID vff.fb Device [HID 11c0:5506] on usb-dummy_hcd.3-1/input0 [ 723.719694][T11277] betop 0003:11C0:5506.0015: no inputs found [ 723.809931][T12914] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 723.986386][T12914] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 724.003606][T12914] usb 2-1: config 0 has no interface number 0 [ 724.021850][T12914] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 724.031103][T12914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.039346][T12914] usb 2-1: Product: syz [ 724.044573][T12914] usb 2-1: Manufacturer: syz [ 724.051121][T12914] usb 2-1: SerialNumber: syz [ 724.076345][T12914] usb 2-1: config 0 descriptor?? [ 724.209897][T11277] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 724.316603][T12914] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 724.353013][T12914] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 724.379766][T11277] usb 6-1: Using ep0 maxpacket: 16 [ 724.395708][T12914] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 724.411380][T11277] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 724.435194][T12914] usb 2-1: media controller created [ 724.441227][T11277] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.478472][T11277] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 724.514040][T12914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 724.527496][T11277] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 724.557404][T11277] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 724.580061][T11277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.607572][T11277] usb 6-1: Product: syz [ 724.618136][T11277] usb 6-1: Manufacturer: syz [ 724.637550][T11277] usb 6-1: SerialNumber: syz [ 724.884354][ T5921] usb 2-1: USB disconnect, device number 56 [ 725.190297][T11277] usb 6-1: USB disconnect, device number 11 [ 725.312543][T11781] udevd[11781]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 725.439837][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 725.528826][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 725.535061][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 725.542496][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 725.599853][T11551] Bluetooth: hci5: command 0x0c1a tx timeout [ 725.889773][ T5921] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 726.029944][T11277] usb 4-1: USB disconnect, device number 70 [ 726.073507][ T5921] usb 2-1: config 2 has an invalid interface number: 200 but max is 0 [ 726.120261][ T5921] usb 2-1: config 2 has no interface number 0 [ 726.265392][T13109] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1971'. [ 726.274960][ T5921] usb 2-1: config 2 interface 200 altsetting 178 endpoint 0x2 has invalid maxpacket 57464, setting to 64 [ 726.275001][ T5921] usb 2-1: config 2 interface 200 has no altsetting 0 [ 726.342927][ T5921] usb 2-1: New USB device found, idVendor=0499, idProduct=100c, bcdDevice= 4.d2 [ 726.454876][T13108] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1971'. [ 726.479804][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.519386][ T5921] usb 2-1: Product: syz [ 726.549693][ T5921] usb 2-1: Manufacturer: syz [ 726.569437][ T5921] usb 2-1: SerialNumber: syz [ 726.837670][ T5921] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 726.958416][ T5921] snd-usb-audio 2-1:2.200: probe with driver snd-usb-audio failed with error -2 [ 727.026515][ T5921] usb 2-1: USB disconnect, device number 57 [ 727.102579][T11781] udevd[11781]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.466516][T13115] syz.3.1972 (13115): drop_caches: 2 [ 730.840109][T13149] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1980'. [ 731.979797][T12914] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 732.669758][T12914] usb 4-1: Using ep0 maxpacket: 16 [ 732.818693][T12914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.899767][T12914] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 732.923983][T12914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.942223][T12914] usb 4-1: config 0 descriptor?? [ 733.664582][T12914] betop 0003:11C0:5506.0016: hidraw0: USB HID vff.fb Device [HID 11c0:5506] on usb-dummy_hcd.3-1/input0 [ 733.702128][T12914] betop 0003:11C0:5506.0016: no inputs found [ 733.895727][T13166] fuse: Bad value for 'user_id' [ 733.917643][T13166] fuse: Bad value for 'user_id' [ 734.729750][T12914] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 734.903501][T13176] binder: 13173:13176 ioctl c0306201 0 returned -14 [ 734.961129][T12914] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 735.084616][T12914] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 735.095121][T12914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 735.105240][T12914] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 735.118416][T12914] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 735.134285][T12914] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 735.148107][T12914] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 735.156571][T12914] usb 2-1: Product: syz [ 735.161080][T12914] usb 2-1: Manufacturer: syz [ 735.172031][T12914] cdc_wdm 2-1:1.0: skipping garbage [ 735.183937][T12914] cdc_wdm 2-1:1.0: skipping garbage [ 735.192034][T12914] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 735.197991][T12914] cdc_wdm 2-1:1.0: Unknown control protocol [ 735.388360][T13172] kAFS: unable to lookup cell 'mS²jË¡8' [ 735.396254][T13172] kAFS: unable to lookup cell '\,' [ 735.416299][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 735.422973][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 735.429865][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 735.436519][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 735.443173][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 735.449816][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 735.456153][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 735.462790][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 735.468889][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 735.477683][T12914] usb 2-1: USB disconnect, device number 58 [ 735.697622][T11277] usb 4-1: USB disconnect, device number 71 [ 736.730240][T11277] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 736.902871][T11277] usb 4-1: config 0 has an invalid interface number: 81 but max is 2 [ 736.919520][T11277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.945235][T11277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 736.971000][T11277] usb 4-1: config 0 has no interface number 0 [ 736.985811][T11277] usb 4-1: config 0 interface 81 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.009457][T11277] usb 4-1: config 0 interface 81 has no altsetting 0 [ 737.016420][T11277] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.7a [ 737.026326][T11277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.040641][T11277] usb 4-1: config 0 descriptor?? [ 737.288507][T11277] usb 4-1: string descriptor 0 read error: -71 [ 737.316721][T11277] cdc_ether 4-1:0.81: skipping garbage [ 737.329677][T11277] cdc_ether 4-1:0.81: skipping garbage [ 737.345594][T11277] usb 4-1: bad CDC descriptors [ 737.357026][T11277] usb 4-1: unsupported MDLM descriptors [ 737.385243][T11277] usb 4-1: USB disconnect, device number 72 [ 739.630009][ T5921] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 739.779700][ T5921] usb 6-1: device descriptor read/64, error -71 [ 740.059788][ T5921] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 740.230096][ T5921] usb 6-1: device descriptor read/64, error -71 [ 740.372689][ T5921] usb usb6-port1: attempt power cycle [ 740.752316][T13224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2004'. [ 740.800183][ T5921] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 740.820338][T13099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 740.911798][ T5921] usb 6-1: device descriptor read/8, error -71 [ 740.941838][T13099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 740.951890][T13099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 741.073082][T13099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 741.147969][T13099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 741.243442][ T5921] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 741.337662][ T5921] usb 6-1: device descriptor read/8, error -71 [ 741.500119][ T5921] usb usb6-port1: unable to enumerate USB device [ 742.209708][ T5921] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 742.278054][T13228] chnl_net:caif_netlink_parms(): no params data found [ 742.389719][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 742.432234][ T5921] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 742.519647][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.594878][ T5921] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 742.634675][T13228] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.670223][T13228] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.680710][T13228] bridge_slave_0: entered allmulticast mode [ 742.691543][T13228] bridge_slave_0: entered promiscuous mode [ 742.707311][T13228] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.746609][T13228] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.770674][T13228] bridge_slave_1: entered allmulticast mode [ 742.797162][T13228] bridge_slave_1: entered promiscuous mode [ 742.954176][T13228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.988776][T13228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.116999][T13228] team0: Port device team_slave_0 added [ 743.141723][T13228] team0: Port device team_slave_1 added [ 743.290122][T13099] Bluetooth: hci0: command tx timeout [ 743.317975][T13228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.359865][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.491247][T13228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.565017][T13228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.579771][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.641356][T13228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.678286][T13261] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2012'. [ 743.790049][ T5921] gspca_nw80x: reg_r err -110 [ 743.825637][ T5921] nw80x 4-1:3.0: probe with driver nw80x failed with error -110 [ 743.941092][T13228] hsr_slave_0: entered promiscuous mode [ 743.951815][T13228] hsr_slave_1: entered promiscuous mode [ 743.958602][T13228] debugfs: 'hsr0' already exists in 'hsr' [ 743.965676][T13228] Cannot create hsr debugfs directory [ 744.820590][T13228] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 744.873783][T13228] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 744.928905][T13228] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 744.988763][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2016'. [ 745.009323][T13228] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 745.210536][ T5900] usb 4-1: USB disconnect, device number 73 [ 745.366053][T13099] Bluetooth: hci0: command tx timeout [ 745.647641][T13228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.726725][T13228] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.781929][ T3802] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.789087][ T3802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.861079][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.868218][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.020019][T13297] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2020'. [ 746.410899][T13228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.725507][T13228] veth0_vlan: entered promiscuous mode [ 746.753744][T13228] veth1_vlan: entered promiscuous mode [ 746.771006][ T5900] IPVS: starting estimator thread 0... [ 746.849241][T13228] veth0_macvtap: entered promiscuous mode [ 746.865231][T13228] veth1_macvtap: entered promiscuous mode [ 746.880608][T13307] IPVS: using max 27 ests per chain, 64800 per kthread [ 746.897676][T13228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.933446][T13228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.952361][ T1091] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.983751][ T1091] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.052186][ T1091] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.115639][ T1091] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.338504][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.392277][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.447696][T13099] Bluetooth: hci0: command tx timeout [ 747.593572][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.630013][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.385363][T13324] sit1: entered allmulticast mode [ 749.362294][T13341] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 749.523155][T13099] Bluetooth: hci0: command tx timeout [ 749.680598][T12914] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 749.844141][T12914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 749.887501][T12914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.982316][T12914] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 750.044667][T12914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.121345][T12914] usb 2-1: config 0 descriptor?? [ 750.168187][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2033'. [ 750.368159][T13348] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2032'. [ 750.442473][T13348] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2032'. [ 750.463299][T12914] samsung 0003:0419:0001.0017: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 750.499744][T13348] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2032'. [ 750.572981][T13352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.585843][T12914] usb 2-1: USB disconnect, device number 59 [ 750.621760][T13352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.766797][T13353] fido_id[13353]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 750.785936][T10956] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 750.959742][T10956] usb 5-1: Using ep0 maxpacket: 8 [ 751.151354][T10956] usb 5-1: device descriptor read/all, error -71 [ 751.226102][T13358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2035'. [ 752.486141][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.493087][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.755477][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2044'. [ 754.869751][T12914] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 755.063764][T12914] usb 6-1: unable to get BOS descriptor or descriptor too short [ 755.095265][T12914] usb 6-1: not running at top speed; connect to a high speed hub [ 755.134302][T12914] usb 6-1: config 3 has an invalid interface number: 140 but max is 1 [ 755.163132][T12914] usb 6-1: config 3 has an invalid interface number: 228 but max is 1 [ 755.181865][T12914] usb 6-1: config 3 has an invalid descriptor of length 10, skipping remainder of the config [ 755.211630][T12914] usb 6-1: config 3 has no interface number 0 [ 755.230246][T12914] usb 6-1: config 3 has no interface number 1 [ 755.268105][T12914] usb 6-1: config 3 interface 140 has no altsetting 0 [ 755.296141][T12914] usb 6-1: config 3 interface 228 has no altsetting 0 [ 755.353654][T12914] usb 6-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=41.a4 [ 755.386016][T12914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.431175][T12914] usb 6-1: Product: syz [ 755.454253][T12914] usb 6-1: Manufacturer: syz [ 755.486041][T12914] usb 6-1: SerialNumber: syz [ 755.499753][ T5954] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 755.683253][ T5954] usb 4-1: config 54 has an invalid interface number: 154 but max is 0 [ 755.709878][ T5954] usb 4-1: config 54 has no interface number 0 [ 755.766395][ T5954] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 755.800018][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.828217][ T5954] usb 4-1: Product: syz [ 755.851870][ T5954] usb 4-1: Manufacturer: syz [ 755.887711][ T5954] usb 4-1: SerialNumber: syz [ 755.970976][T12914] usb 6-1: USB disconnect, device number 16 [ 756.224971][T13407] udevd[13407]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.140/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 756.253545][T13388] udevd[13388]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.228/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 758.049404][T13424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 758.056719][T13424] IPv6: NLM_F_CREATE should be set when creating new route [ 758.231436][ T5954] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 758.253441][ T6053] usb 4-1: Failed to submit usb control message: -71 [ 758.272412][ T6053] usb 4-1: unable to send the bmi data to the device: -71 [ 758.290194][ T5954] usb 4-1: USB disconnect, device number 74 [ 758.312483][ T6053] usb 4-1: unable to get target info from device [ 758.607336][ T6053] usb 4-1: could not get target info (-71) [ 758.700409][ T6053] usb 4-1: could not probe fw (-71) [ 758.712635][T13434] kvm: user requested TSC rate below hardware speed [ 759.010315][T13438] FAULT_INJECTION: forcing a failure. [ 759.010315][T13438] name failslab, interval 1, probability 0, space 0, times 0 [ 759.094135][T13438] CPU: 1 UID: 0 PID: 13438 Comm: syz.4.2054 Tainted: G L syzkaller #0 PREEMPT(full) [ 759.094163][T13438] Tainted: [L]=SOFTLOCKUP [ 759.094169][T13438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 759.094179][T13438] Call Trace: [ 759.094186][T13438] [ 759.094194][T13438] dump_stack_lvl+0xe8/0x150 [ 759.094219][T13438] should_fail_ex+0x414/0x560 [ 759.094248][T13438] should_failslab+0xa8/0x100 [ 759.094295][T13438] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 759.094332][T13438] ? __alloc_skb+0x1dc/0x3a0 [ 759.094367][T13438] ? __local_bh_enable_ip+0xd0/0x130 [ 759.094384][T13438] ? __alloc_skb+0x198/0x3a0 [ 759.094401][T13438] __alloc_skb+0x1dc/0x3a0 [ 759.094420][T13438] netlink_ack+0x146/0xa50 [ 759.094438][T13438] ? __pfx_genl_rcv_msg+0x10/0x10 [ 759.094452][T13438] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 759.094470][T13438] ? __pfx_nl80211_post_doit+0x10/0x10 [ 759.094489][T13438] ? __asan_memcpy+0x40/0x70 [ 759.094519][T13438] netlink_rcv_skb+0x28c/0x470 [ 759.094540][T13438] ? __pfx_genl_rcv_msg+0x10/0x10 [ 759.094555][T13438] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 759.094573][T13438] ? genl_rcv+0x19/0x40 [ 759.094601][T13438] ? down_read+0x274/0x2e0 [ 759.094619][T13438] ? genl_rcv+0xd/0x40 [ 759.094634][T13438] genl_rcv+0x28/0x40 [ 759.094647][T13438] netlink_unicast+0x82f/0x9e0 [ 759.094672][T13438] ? __pfx_netlink_unicast+0x10/0x10 [ 759.094690][T13438] ? __alloc_skb+0x198/0x3a0 [ 759.094706][T13438] ? netlink_sendmsg+0x642/0xb30 [ 759.094726][T13438] ? skb_put+0x11b/0x210 [ 759.094746][T13438] netlink_sendmsg+0x805/0xb30 [ 759.094774][T13438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.094797][T13438] ? aa_sock_msg_perm+0xf1/0x1b0 [ 759.094819][T13438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 759.094833][T13438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.094855][T13438] __sock_sendmsg+0x21c/0x270 [ 759.094882][T13438] ____sys_sendmsg+0x505/0x820 [ 759.094905][T13438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 759.094931][T13438] ? import_iovec+0x74/0xa0 [ 759.094953][T13438] ___sys_sendmsg+0x21f/0x2a0 [ 759.094974][T13438] ? __pfx____sys_sendmsg+0x10/0x10 [ 759.095019][T13438] ? __fget_files+0x2a/0x420 [ 759.095038][T13438] ? __fget_files+0x3a0/0x420 [ 759.095064][T13438] __x64_sys_sendmsg+0x19b/0x260 [ 759.095086][T13438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 759.095112][T13438] ? __pfx_ksys_write+0x10/0x10 [ 759.095136][T13438] do_syscall_64+0xec/0xf80 [ 759.095152][T13438] ? rcu_is_watching+0x15/0xb0 [ 759.095170][T13438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.095185][T13438] ? clear_bhb_loop+0x60/0xb0 [ 759.095203][T13438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.095219][T13438] RIP: 0033:0x7efdfa98f749 [ 759.095233][T13438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.095247][T13438] RSP: 002b:00007efdfb7e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.095265][T13438] RAX: ffffffffffffffda RBX: 00007efdfabe5fa0 RCX: 00007efdfa98f749 [ 759.095277][T13438] RDX: 0000000000008014 RSI: 00002000000001c0 RDI: 0000000000000005 [ 759.095287][T13438] RBP: 00007efdfb7e6090 R08: 0000000000000000 R09: 0000000000000000 [ 759.095297][T13438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.095306][T13438] R13: 00007efdfabe6038 R14: 00007efdfabe5fa0 R15: 00007efdfad0fa28 [ 759.095330][T13438] [ 759.101835][T12914] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 759.787336][T13447] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2056'. [ 760.280005][T12914] usb 6-1: Using ep0 maxpacket: 8 [ 760.310291][T12914] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 760.332579][T12914] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 760.350876][T12914] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 760.363299][T12914] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 760.408639][T12914] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 760.419748][T12914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.017755][T13434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.294269][T13434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.529028][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2062'. [ 763.339748][T10956] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 763.577251][T10956] usb 2-1: config 54 has an invalid interface number: 154 but max is 0 [ 763.630410][T10956] usb 2-1: config 54 has no interface number 0 [ 763.685207][T10956] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 763.733402][T10956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.801610][T10956] usb 2-1: Product: syz [ 763.826215][T10956] usb 2-1: Manufacturer: syz [ 763.865520][T10956] usb 2-1: SerialNumber: syz [ 764.096484][T12914] usb 6-1: usb_control_msg returned -71 [ 764.129687][T12914] usbtmc 6-1:16.0: can't read capabilities [ 764.221099][T10956] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 764.233194][ T5981] usb 2-1: Failed to submit usb control message: -71 [ 764.259115][ T5981] usb 2-1: unable to send the bmi data to the device: -71 [ 764.265118][T12914] usb 6-1: USB disconnect, device number 17 [ 764.304632][T10956] usb 2-1: USB disconnect, device number 60 [ 764.322720][ T5981] usb 2-1: unable to get target info from device [ 764.350101][ T5981] usb 2-1: could not get target info (-71) [ 764.356010][ T5981] usb 2-1: could not probe fw (-71) [ 765.169345][T13505] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2068'. [ 765.205144][T12914] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 765.404072][T12914] usb 4-1: config 0 has an invalid interface number: 221 but max is 0 [ 765.429219][T12914] usb 4-1: config 0 has no interface number 0 [ 765.445290][T12914] usb 4-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57 [ 765.462018][T12914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.484847][T12914] usb 4-1: Product: syz [ 765.496357][T12914] usb 4-1: Manufacturer: syz [ 765.509077][T12914] usb 4-1: SerialNumber: syz [ 765.540699][T12914] usb 4-1: config 0 descriptor?? [ 765.840999][T12914] HFC-S_USB 4-1:0.221: probe with driver HFC-S_USB failed with error -5 [ 765.888579][T12914] usb 4-1: USB disconnect, device number 75 [ 765.954767][T13519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2073'. [ 766.291000][T13524] netlink: 'syz.3.2074': attribute type 4 has an invalid length. [ 766.457172][T13529] fuse: Unknown parameter 'rootmode000040000' [ 766.669740][T12914] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 766.844783][T13533] netlink: 'syz.1.2077': attribute type 1 has an invalid length. [ 766.897049][T13533] bond2: entered promiscuous mode [ 766.903736][T13533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 766.910542][T12914] usb 4-1: Using ep0 maxpacket: 16 [ 766.920588][T13535] binder: BINDER_SET_CONTEXT_MGR already set [ 766.929454][T12914] usb 4-1: config 187 has no interfaces? [ 766.937328][T13535] binder: 13532:13535 ioctl 4018620d 200000000040 returned -16 [ 766.946003][T12914] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 766.964094][T12914] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 766.974607][T12914] usb 4-1: Manufacturer: syz [ 767.044550][T13533] bond2: (slave veth7): making interface the new active one [ 767.052439][T13533] veth7: entered promiscuous mode [ 767.063829][T13533] bond2: (slave veth7): Enslaving as an active interface with an up link [ 767.579501][T13540] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2079'. [ 767.618215][T13540] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2079'. [ 767.929746][T12914] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 768.097232][ T5921] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 768.121879][T12914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.173694][T12914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 768.211502][T12914] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 768.246621][T12914] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 768.282268][ T5921] usb 7-1: config 54 has an invalid interface number: 154 but max is 0 [ 768.283041][T12914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.306002][ T5921] usb 7-1: config 54 has no interface number 0 [ 768.331018][ T5921] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 768.344338][T13543] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 768.352744][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.370398][T12914] hub 2-1:1.0: bad descriptor, ignoring hub [ 768.382309][ T5921] usb 7-1: Product: syz [ 768.388978][T12914] hub 2-1:1.0: probe with driver hub failed with error -5 [ 768.397566][ T5921] usb 7-1: Manufacturer: syz [ 768.412568][T12914] cdc_wdm 2-1:1.0: skipping garbage [ 768.421021][T12914] cdc_wdm 2-1:1.0: skipping garbage [ 768.424872][ T5921] usb 7-1: SerialNumber: syz [ 768.438833][T12914] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 768.447828][T12914] cdc_wdm 2-1:1.0: Unknown control protocol [ 768.537889][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2084'. [ 768.704671][ T5921] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 768.720796][ T1157] usb 7-1: Failed to submit usb control message: -71 [ 768.748555][ T1157] usb 7-1: unable to send the bmi data to the device: -71 [ 768.770584][ T5921] usb 7-1: USB disconnect, device number 2 [ 768.779209][ T1157] usb 7-1: unable to get target info from device [ 768.801988][ T1157] usb 7-1: could not get target info (-71) [ 768.810998][ T1157] usb 7-1: could not probe fw (-71) [ 768.830301][T12914] usb 2-1: USB disconnect, device number 61 [ 769.193723][ T5921] usb 4-1: USB disconnect, device number 76 [ 769.880059][T12914] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 770.053784][T12914] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 770.119286][T12914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 770.222203][T12914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 770.250044][T12914] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.275342][T12914] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 770.305843][T12914] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 770.316466][T12914] usb 2-1: Product: syz [ 770.322613][T12914] usb 2-1: Manufacturer: syz [ 770.366384][T12914] cdc_wdm 2-1:1.0: skipping garbage [ 770.407149][T12914] cdc_wdm 2-1:1.0: skipping garbage [ 770.438575][T12914] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 770.478318][T12914] cdc_wdm 2-1:1.0: Unknown control protocol [ 770.626783][T10956] usb 2-1: USB disconnect, device number 62 [ 771.076218][T13592] binder: 13589:13592 ioctl c0306201 0 returned -14 [ 771.297408][T13599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2095'. [ 771.399826][T12914] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 771.559730][T12914] usb 2-1: Using ep0 maxpacket: 16 [ 771.586605][T12914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.650346][T12914] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 771.678237][T12914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.688898][T12914] usb 2-1: Product: syz [ 771.694114][T12914] usb 2-1: Manufacturer: syz [ 771.698872][T12914] usb 2-1: SerialNumber: syz [ 771.710461][T12914] usb 2-1: config 0 descriptor?? [ 771.724775][T12914] mcba_usb 2-1:0.0: Can't find endpoints [ 771.942484][T12914] usb 2-1: USB disconnect, device number 63 [ 772.910479][T10956] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 773.093981][T10956] usb 7-1: config 54 has an invalid interface number: 154 but max is 0 [ 773.102792][ T5900] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 773.129775][T10956] usb 7-1: config 54 has no interface number 0 [ 773.201080][T10956] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 773.239761][T10956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.279656][T10956] usb 7-1: Product: syz [ 773.284831][T10956] usb 7-1: Manufacturer: syz [ 773.291282][ T5900] usb 5-1: device descriptor read/64, error -71 [ 773.303996][T10956] usb 7-1: SerialNumber: syz [ 773.606206][ T5900] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 773.708277][T10956] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 773.723293][ T38] usb 7-1: Failed to submit usb control message: -71 [ 773.741327][ T38] usb 7-1: unable to send the bmi data to the device: -71 [ 773.748530][ T38] usb 7-1: unable to get target info from device [ 773.779670][ T38] usb 7-1: could not get target info (-71) [ 773.785665][ T38] usb 7-1: could not probe fw (-71) [ 773.793140][T10956] usb 7-1: USB disconnect, device number 3 [ 773.799694][ T5900] usb 5-1: device descriptor read/64, error -71 [ 773.926867][ T5900] usb usb5-port1: attempt power cycle [ 774.278523][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2106'. [ 774.309043][ T5900] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 774.330689][ T5900] usb 5-1: device descriptor read/8, error -71 [ 774.619704][ T5900] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 774.649521][T13641] syzkaller0: entered promiscuous mode [ 774.670098][T13641] syzkaller0: entered allmulticast mode [ 774.707385][ T5900] usb 5-1: device descriptor read/8, error -71 [ 774.820916][ T5900] usb usb5-port1: unable to enumerate USB device [ 775.104959][T13643] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 775.111625][T13643] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 775.195754][T13643] vhci_hcd vhci_hcd.0: Device attached [ 775.396815][T13644] vhci_hcd: connection closed [ 775.397017][ T6053] vhci_hcd vhci_hcd.3: stop threads [ 775.397061][ T6053] vhci_hcd vhci_hcd.3: release socket [ 775.397207][ T6053] vhci_hcd vhci_hcd.3: disconnect device [ 775.582274][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2114'. [ 775.644355][T13656] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 775.663174][T13656] team0: Device ipvlan2 is already an upper device of the team interface [ 776.439908][ T5954] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 776.629816][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 776.654830][ T5954] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 776.723549][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.842760][ T5954] usb 5-1: config 0 descriptor?? [ 776.976650][ T5954] as10x_usb: device has been detected [ 777.021197][ T5954] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 777.127685][ T5954] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 777.265290][ T5954] as10x_usb: error during firmware upload part1 [ 777.415561][ T5954] Registered device nBox DVB-T Dongle [ 777.880014][T12914] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 777.927138][T13678] FAULT_INJECTION: forcing a failure. [ 777.927138][T13678] name failslab, interval 1, probability 0, space 0, times 0 [ 777.996547][T13678] CPU: 0 UID: 0 PID: 13678 Comm: syz.5.2121 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.996581][T13678] Tainted: [L]=SOFTLOCKUP [ 777.996590][T13678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 777.996605][T13678] Call Trace: [ 777.996613][T13678] [ 777.996623][T13678] dump_stack_lvl+0xe8/0x150 [ 777.996657][T13678] should_fail_ex+0x414/0x560 [ 777.996698][T13678] should_failslab+0xa8/0x100 [ 777.996727][T13678] __kmalloc_cache_noprof+0x84/0x700 [ 777.996747][T13678] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 777.996780][T13678] ? sctp_add_bind_addr+0x8c/0x370 [ 777.996817][T13678] sctp_add_bind_addr+0x8c/0x370 [ 777.996853][T13678] sctp_copy_local_addr_list+0x30b/0x4e0 [ 777.996889][T13678] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 777.996921][T13678] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 777.996954][T13678] ? sctp_v6_is_any+0x64/0x80 [ 777.996989][T13678] ? sctp_copy_one_addr+0x93/0x360 [ 777.997021][T13678] sctp_bind_addr_copy+0xb3/0x3c0 [ 777.997062][T13678] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 777.997095][T13678] sctp_connect_new_asoc+0x2e0/0x690 [ 777.997122][T13678] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 777.997154][T13678] ? sctp_inet6_send_verify+0x23a/0x300 [ 777.997184][T13678] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 777.997210][T13678] __sctp_connect+0x5b5/0xda0 [ 777.997247][T13678] ? __pfx___sctp_connect+0x10/0x10 [ 777.997269][T13678] ? security_sctp_bind_connect+0x7e/0x2e0 [ 777.997295][T13678] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 777.997329][T13678] sctp_getsockopt_connectx3+0x1fa/0x320 [ 777.997359][T13678] ? lock_sock_nested+0x6a/0x100 [ 777.997395][T13678] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 777.997437][T13678] ? __local_bh_enable_ip+0xd0/0x130 [ 777.997466][T13678] sctp_getsockopt+0x984/0xb90 [ 777.997487][T13678] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 777.997511][T13678] do_sock_getsockopt+0x2b4/0x3d0 [ 777.997542][T13678] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 777.997574][T13678] ? __fget_files+0x3a0/0x420 [ 777.997601][T13678] ? __fget_files+0x2a/0x420 [ 777.997636][T13678] __x64_sys_getsockopt+0x1a5/0x250 [ 777.997673][T13678] do_syscall_64+0xec/0xf80 [ 777.997698][T13678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.997719][T13678] ? trace_irq_disable+0x37/0x100 [ 777.997748][T13678] ? clear_bhb_loop+0x60/0xb0 [ 777.997773][T13678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.997796][T13678] RIP: 0033:0x7f753478f749 [ 777.997816][T13678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.997836][T13678] RSP: 002b:00007f7535616038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 777.997858][T13678] RAX: ffffffffffffffda RBX: 00007f75349e5fa0 RCX: 00007f753478f749 [ 777.997875][T13678] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 777.997889][T13678] RBP: 00007f7535616090 R08: 0000200000000140 R09: 0000000000000000 [ 777.997903][T13678] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000002 [ 777.997917][T13678] R13: 00007f75349e6038 R14: 00007f75349e5fa0 R15: 00007f7534b0fa28 [ 777.997953][T13678] [ 778.579810][T12914] usb 2-1: device descriptor read/64, error -71 [ 778.823680][T12914] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 778.961861][T12914] usb 2-1: device descriptor read/64, error -71 [ 779.092708][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2117'. [ 779.160093][T12914] usb usb2-port1: attempt power cycle [ 779.261984][T10956] usb 5-1: USB disconnect, device number 63 [ 779.324966][T10956] Unregistered device nBox DVB-T Dongle [ 779.361610][T10956] as10x_usb: device has been disconnected [ 779.510166][T13684] kvm: emulating exchange as write [ 779.524191][T12914] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 779.581063][T12914] usb 2-1: device descriptor read/8, error -71 [ 779.852889][T12914] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 779.890886][T12914] usb 2-1: device descriptor read/8, error -71 [ 780.001822][T12914] usb usb2-port1: unable to enumerate USB device [ 780.419817][T10956] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 780.569856][T10956] usb 6-1: Using ep0 maxpacket: 32 [ 780.612237][T10956] usb 6-1: config 0 interface 0 has no altsetting 0 [ 780.648835][T10956] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 780.676745][T13703] binder: 13695:13703 ioctl d000941e 0 returned -22 [ 780.707755][T10956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.760119][T10956] usb 6-1: Product: syz [ 780.764456][T10956] usb 6-1: Manufacturer: syz [ 780.841043][T10956] usb 6-1: SerialNumber: syz [ 780.862760][T10956] usb 6-1: config 0 descriptor?? [ 781.514716][T10956] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 782.330996][T13718] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 782.656583][T13717] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2130'. [ 782.711689][T13717] 0·: renamed from hsr0 (while UP) [ 782.804837][T13717] 0·: entered allmulticast mode [ 782.820732][T13717] hsr_slave_0: entered allmulticast mode [ 782.827266][T13717] hsr_slave_1: entered allmulticast mode [ 782.848289][T13717] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 783.300001][T12913] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 783.899738][T12913] usb 2-1: Using ep0 maxpacket: 16 [ 784.056644][T12913] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 784.110056][T12913] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 784.163745][T12913] usb 2-1: config 0 has no interface number 0 [ 784.471956][T12913] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 784.524357][T12913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.634563][T12913] usb 2-1: config 0 descriptor?? [ 784.662952][T12913] usb 2-1: can't set config #0, error -71 [ 784.710306][T12913] usb 2-1: USB disconnect, device number 68 [ 785.101542][T12914] usb 6-1: USB disconnect, device number 18 [ 785.750359][T13755] netlink: 'syz.5.2136': attribute type 11 has an invalid length. [ 785.786781][T13755] netlink: 448 bytes leftover after parsing attributes in process `syz.5.2136'. [ 785.900140][T12914] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 786.170069][T12914] usb 2-1: Using ep0 maxpacket: 32 [ 786.187535][T12914] usb 2-1: unable to get BOS descriptor or descriptor too short [ 786.224626][T12914] usb 2-1: config 7 has an invalid interface number: 128 but max is 0 [ 786.330271][T12914] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 786.357785][T12914] usb 2-1: config 7 has an invalid descriptor of length 48, skipping remainder of the config [ 786.411961][T12914] usb 2-1: config 7 has no interface number 0 [ 786.437018][T12914] usb 2-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 786.498280][T12914] usb 2-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 786.532981][T12914] usb 2-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 786.570631][T12914] usb 2-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 786.597075][T12914] usb 2-1: config 7 interface 128 has no altsetting 0 [ 786.613431][T12914] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 786.624150][T12914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.634749][T12914] usb 2-1: Product: syz [ 786.638986][T12914] usb 2-1: Manufacturer: syz [ 786.649727][T12914] usb 2-1: SerialNumber: syz [ 786.682139][T13751] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 787.188698][T12914] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 787.259811][T12914] usb 2-1: MIDIStreaming interface descriptor not found [ 787.318333][T12914] usb 2-1: USB disconnect, device number 69 [ 787.474582][T13388] udevd[13388]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 788.668648][T13799] FAULT_INJECTION: forcing a failure. [ 788.668648][T13799] name failslab, interval 1, probability 0, space 0, times 0 [ 788.709036][T13799] CPU: 1 UID: 0 PID: 13799 Comm: syz.3.2145 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.709072][T13799] Tainted: [L]=SOFTLOCKUP [ 788.709081][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 788.709096][T13799] Call Trace: [ 788.709106][T13799] [ 788.709116][T13799] dump_stack_lvl+0xe8/0x150 [ 788.709149][T13799] should_fail_ex+0x414/0x560 [ 788.709190][T13799] should_failslab+0xa8/0x100 [ 788.709221][T13799] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 788.709257][T13799] ? __alloc_skb+0x1dc/0x3a0 [ 788.709288][T13799] __alloc_skb+0x1dc/0x3a0 [ 788.709317][T13799] tcp_stream_alloc_skb+0x3d/0x350 [ 788.709352][T13799] tcp_connect+0x14ce/0x4f50 [ 788.709414][T13799] ? __pfx_tcp_connect+0x10/0x10 [ 788.709441][T13799] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 788.709476][T13799] ? lockdep_hardirqs_on+0x7b/0x110 [ 788.709500][T13799] ? ktime_get_with_offset+0x93/0x2a0 [ 788.709530][T13799] ? seqcount_lockdep_reader_access+0xea/0x100 [ 788.709575][T13799] ? __asan_memset+0x22/0x50 [ 788.709613][T13799] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 788.709660][T13799] ? inet6_hash_connect+0xd8/0x170 [ 788.709693][T13799] tcp_v6_connect+0x1222/0x18a0 [ 788.709732][T13799] ? __pfx_tcp_v6_connect+0x10/0x10 [ 788.709756][T13799] ? tcp_sendmsg+0x2f/0x50 [ 788.709784][T13799] ? __x64_sys_sendto+0xde/0x100 [ 788.709808][T13799] ? do_syscall_64+0xec/0xf80 [ 788.709859][T13799] __inet_stream_connect+0x2ae/0xe70 [ 788.709904][T13799] ? __pfx___inet_stream_connect+0x10/0x10 [ 788.709946][T13799] ? __kasan_kmalloc+0x93/0xb0 [ 788.709971][T13799] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 788.709994][T13799] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 788.710030][T13799] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 788.710068][T13799] tcp_sendmsg_locked+0x4c9d/0x5520 [ 788.710116][T13799] ? __lock_acquire+0x6b6/0x2cf0 [ 788.710146][T13799] ? __lock_acquire+0x6b6/0x2cf0 [ 788.710190][T13799] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 788.710232][T13799] ? __local_bh_enable_ip+0xd0/0x130 [ 788.710261][T13799] tcp_sendmsg+0x2f/0x50 [ 788.710290][T13799] __sock_sendmsg+0xe5/0x270 [ 788.710327][T13799] __sys_sendto+0x3bd/0x520 [ 788.710356][T13799] ? __pfx___sys_sendto+0x10/0x10 [ 788.710378][T13799] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 788.710418][T13799] ? __fget_files+0x3a0/0x420 [ 788.710458][T13799] ? ksys_write+0x22a/0x250 [ 788.710482][T13799] ? __pfx_ksys_write+0x10/0x10 [ 788.710508][T13799] __x64_sys_sendto+0xde/0x100 [ 788.710537][T13799] do_syscall_64+0xec/0xf80 [ 788.710562][T13799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.710583][T13799] ? trace_irq_disable+0x37/0x100 [ 788.710613][T13799] ? clear_bhb_loop+0x60/0xb0 [ 788.710640][T13799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.710662][T13799] RIP: 0033:0x7fc28618f749 [ 788.710682][T13799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.710702][T13799] RSP: 002b:00007fc28702b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 788.710727][T13799] RAX: ffffffffffffffda RBX: 00007fc2863e5fa0 RCX: 00007fc28618f749 [ 788.710744][T13799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 788.710758][T13799] RBP: 00007fc28702b090 R08: 00002000000001c0 R09: 000000000000001c [ 788.710772][T13799] R10: 0000000020008045 R11: 0000000000000246 R12: 0000000000000001 [ 788.710786][T13799] R13: 00007fc2863e6038 R14: 00007fc2863e5fa0 R15: 00007fc28650fa28 [ 788.710822][T13799] [ 790.145058][T13806] random: crng reseeded on system resumption [ 791.550040][ T5921] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 791.731396][ T5921] usb 4-1: config 54 has an invalid interface number: 154 but max is 0 [ 791.756922][ T5921] usb 4-1: config 54 has no interface number 0 [ 791.793631][ T5921] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 791.824648][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.859805][ T5921] usb 4-1: Product: syz [ 791.883933][ T5921] usb 4-1: Manufacturer: syz [ 791.909787][ T5921] usb 4-1: SerialNumber: syz [ 794.286580][ T5921] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 794.354880][ T3665] usb 4-1: Failed to submit usb control message: -71 [ 794.370092][ T5921] usb 4-1: USB disconnect, device number 77 [ 794.408009][ T3665] usb 4-1: unable to send the bmi data to the device: -71 [ 794.449488][ T3665] usb 4-1: unable to get target info from device [ 794.477096][ T3665] usb 4-1: could not get target info (-71) [ 794.501188][ T3665] usb 4-1: could not probe fw (-71) [ 794.577685][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2158'. [ 794.617025][T13854] netlink: 'syz.6.2158': attribute type 5 has an invalid length. [ 794.645399][T13854] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2158'. [ 794.708903][T13854] geneve2: entered promiscuous mode [ 794.726851][T13854] geneve2: entered allmulticast mode [ 796.016532][T13874] binder: 13869:13874 ioctl c0306201 0 returned -14 [ 796.237947][T13877] FAULT_INJECTION: forcing a failure. [ 796.237947][T13877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.287947][T13877] CPU: 1 UID: 0 PID: 13877 Comm: syz.6.2166 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.287989][T13877] Tainted: [L]=SOFTLOCKUP [ 796.287998][T13877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 796.288012][T13877] Call Trace: [ 796.288021][T13877] [ 796.288031][T13877] dump_stack_lvl+0xe8/0x150 [ 796.288065][T13877] should_fail_ex+0x414/0x560 [ 796.288108][T13877] _copy_from_iter+0x1cd/0x1630 [ 796.288146][T13877] ? __pfx__copy_from_iter+0x10/0x10 [ 796.288172][T13877] ? __build_skb_around+0x22d/0x3c0 [ 796.288200][T13877] ? __alloc_skb+0x198/0x3a0 [ 796.288226][T13877] ? netlink_sendmsg+0x642/0xb30 [ 796.288253][T13877] ? skb_put+0x11b/0x210 [ 796.288283][T13877] netlink_sendmsg+0x6b2/0xb30 [ 796.288329][T13877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.288363][T13877] ? aa_sock_msg_perm+0xf1/0x1b0 [ 796.288395][T13877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 796.288416][T13877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.288447][T13877] __sock_sendmsg+0x21c/0x270 [ 796.288484][T13877] ____sys_sendmsg+0x505/0x820 [ 796.288518][T13877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.288555][T13877] ? import_iovec+0x74/0xa0 [ 796.288587][T13877] ___sys_sendmsg+0x21f/0x2a0 [ 796.288619][T13877] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.288683][T13877] ? __fget_files+0x2a/0x420 [ 796.288711][T13877] ? __fget_files+0x3a0/0x420 [ 796.288750][T13877] __x64_sys_sendmsg+0x19b/0x260 [ 796.288781][T13877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 796.288819][T13877] ? __pfx_ksys_write+0x10/0x10 [ 796.288852][T13877] do_syscall_64+0xec/0xf80 [ 796.288878][T13877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.288900][T13877] ? clear_bhb_loop+0x60/0xb0 [ 796.288927][T13877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.288949][T13877] RIP: 0033:0x7f111df8f749 [ 796.288969][T13877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.288990][T13877] RSP: 002b:00007f111eed1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.289014][T13877] RAX: ffffffffffffffda RBX: 00007f111e1e5fa0 RCX: 00007f111df8f749 [ 796.289031][T13877] RDX: 0000000002000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 796.289047][T13877] RBP: 00007f111eed1090 R08: 0000000000000000 R09: 0000000000000000 [ 796.289062][T13877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.289076][T13877] R13: 00007f111e1e6038 R14: 00007f111e1e5fa0 R15: 00007f111e30fa28 [ 796.289111][T13877] [ 796.972439][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 796.972470][ T30] audit: type=1326 audit(1768393453.430:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.5.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753478f749 code=0x7ffc0000 [ 797.023015][T13874] binder: 13869:13874 ioctl d000941e 0 returned -22 [ 797.105777][ T30] audit: type=1326 audit(1768393453.440:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.5.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f753478f749 code=0x7ffc0000 [ 797.139868][ T5900] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 797.163497][ T30] audit: type=1326 audit(1768393453.440:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.5.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753478f749 code=0x7ffc0000 [ 797.303082][ T5900] usb 7-1: config 54 has an invalid interface number: 154 but max is 0 [ 797.312420][ T5900] usb 7-1: config 54 has no interface number 0 [ 797.351986][ T5900] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 797.558265][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.567145][ T5900] usb 7-1: Product: syz [ 797.590095][ T5900] usb 7-1: Manufacturer: syz [ 797.607090][ T5900] usb 7-1: SerialNumber: syz [ 799.583518][T12914] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 799.970076][T12914] usb 4-1: Using ep0 maxpacket: 16 [ 800.009390][T12914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.025489][T12914] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 800.040247][T12914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.056901][T12914] usb 4-1: config 0 descriptor?? [ 800.062378][T11277] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 800.259777][T11277] usb 6-1: Using ep0 maxpacket: 32 [ 800.281643][T11277] usb 6-1: config 0 has an invalid interface number: 234 but max is 0 [ 800.294189][T11277] usb 6-1: config 0 has no interface number 0 [ 800.306681][T11277] usb 6-1: too many endpoints for config 0 interface 234 altsetting 226: 54, using maximum allowed: 30 [ 800.333400][T11277] usb 6-1: config 0 interface 234 altsetting 226 has 0 endpoint descriptors, different from the interface descriptor's value: 54 [ 800.367434][T11277] usb 6-1: config 0 interface 234 has no altsetting 0 [ 800.387751][ T5900] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 800.399930][ T6053] usb 7-1: Failed to submit usb control message: -71 [ 800.420025][ T5900] usb 7-1: USB disconnect, device number 4 [ 800.421542][ T6053] usb 7-1: unable to send the bmi data to the device: -71 [ 800.440272][T11277] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 800.462423][T11277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.482939][T11277] usb 6-1: Product: syz [ 800.487233][T11277] usb 6-1: Manufacturer: syz [ 800.543368][T11277] usb 6-1: SerialNumber: syz [ 800.568393][T12914] betop 0003:11C0:5506.0018: hidraw0: USB HID vff.fb Device [HID 11c0:5506] on usb-dummy_hcd.3-1/input0 [ 800.585573][ T6053] usb 7-1: unable to get target info from device [ 800.605440][ T6053] usb 7-1: could not get target info (-71) [ 800.612233][ T6053] usb 7-1: could not probe fw (-71) [ 800.617606][T12914] betop 0003:11C0:5506.0018: no inputs found [ 800.663246][T11277] usb 6-1: config 0 descriptor?? [ 801.549707][ T5920] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 801.756110][ T5920] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 801.819731][ T5920] usb 2-1: config 0 has no interface number 0 [ 801.869456][ T5920] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 801.924509][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.977550][ T5920] usb 2-1: Product: syz [ 801.999170][ T5920] usb 2-1: Manufacturer: syz [ 802.053688][ T5920] usb 2-1: SerialNumber: syz [ 802.111709][ T5920] usb 2-1: config 0 descriptor?? [ 802.171513][ T5920] snd-usb-us122l 2-1:0.1: usb_set_interface error [ 802.257992][ T5920] snd-usb-us122l 2-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 802.764292][ T30] audit: type=1326 audit(1768393459.260:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13924 comm="syz.1.2179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c1f98f749 code=0x0 [ 802.984174][T13932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.022709][T13932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.049427][T13932] fuse: Bad value for 'fd' [ 804.189231][T11278] usb 4-1: USB disconnect, device number 78 [ 805.351048][T13946] binder: 13942:13946 ioctl c0306201 0 returned -14 [ 806.005374][T11277] hub 6-1:0.234: bad descriptor, ignoring hub [ 806.016861][T11277] hub 6-1:0.234: probe with driver hub failed with error -5 [ 806.051255][T11277] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 806.069837][T11277] gspca_ov534_9: reg_w failed -32 [ 806.500661][T11277] gspca_ov534_9: Unknown sensor 0000 [ 806.500759][T11277] ov534_9 6-1:0.234: probe with driver ov534_9 failed with error -22 [ 806.903202][T13952] binder: 13942:13952 ioctl d000941e 0 returned -22 [ 808.330492][T12914] usb 6-1: USB disconnect, device number 19 [ 808.730022][T12914] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 808.875324][T13973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2193'. [ 808.926007][T12914] usb 5-1: config 54 has an invalid interface number: 154 but max is 0 [ 808.941769][T13976] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2191'. [ 808.951820][T12914] usb 5-1: config 54 has no interface number 0 [ 808.980123][T12914] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 809.074728][T13976] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2191'. [ 809.111775][T12914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.154108][T12914] usb 5-1: Product: syz [ 809.169931][T11275] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 809.184314][T12914] usb 5-1: Manufacturer: syz [ 809.218790][T12914] usb 5-1: SerialNumber: syz [ 809.296696][ T5920] usb 2-1: USB disconnect, device number 70 [ 809.339958][T11275] usb 7-1: Using ep0 maxpacket: 16 [ 809.368157][T11275] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.396785][T11275] usb 7-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 809.418490][T11275] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.448631][T13981] FAULT_INJECTION: forcing a failure. [ 809.448631][T13981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.466962][T11275] usb 7-1: config 0 descriptor?? [ 809.506892][T13981] CPU: 0 UID: 0 PID: 13981 Comm: syz.1.2195 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.506931][T13981] Tainted: [L]=SOFTLOCKUP [ 809.506939][T13981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 809.506953][T13981] Call Trace: [ 809.506962][T13981] [ 809.506971][T13981] dump_stack_lvl+0xe8/0x150 [ 809.507003][T13981] should_fail_ex+0x414/0x560 [ 809.507042][T13981] _copy_to_user+0x31/0xb0 [ 809.507070][T13981] simple_read_from_buffer+0xe1/0x170 [ 809.507102][T13981] proc_fail_nth_read+0x1b3/0x220 [ 809.507128][T13981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 809.507153][T13981] ? rw_verify_area+0x2a6/0x4d0 [ 809.507185][T13981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 809.507220][T13981] vfs_read+0x200/0xa30 [ 809.507258][T13981] ? fdget_pos+0x247/0x320 [ 809.507289][T13981] ? __pfx___mutex_lock+0x10/0x10 [ 809.507315][T13981] ? __pfx_vfs_read+0x10/0x10 [ 809.507338][T13981] ? __fget_files+0x2a/0x420 [ 809.507368][T13981] ? __fget_files+0x3a0/0x420 [ 809.507395][T13981] ? __fget_files+0x2a/0x420 [ 809.507431][T13981] ksys_read+0x145/0x250 [ 809.507450][T13981] ? __pfx_filldir64+0x10/0x10 [ 809.507473][T13981] ? __pfx_ksys_read+0x10/0x10 [ 809.507506][T13981] do_syscall_64+0xec/0xf80 [ 809.507530][T13981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.507551][T13981] ? trace_irq_disable+0x37/0x100 [ 809.507578][T13981] ? clear_bhb_loop+0x60/0xb0 [ 809.507604][T13981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.507625][T13981] RIP: 0033:0x7f9c1f98e15c [ 809.507645][T13981] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 809.507665][T13981] RSP: 002b:00007f9c208f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 809.507689][T13981] RAX: ffffffffffffffda RBX: 00007f9c1fbe5fa0 RCX: 00007f9c1f98e15c [ 809.507705][T13981] RDX: 000000000000000f RSI: 00007f9c208f10a0 RDI: 0000000000000004 [ 809.507719][T13981] RBP: 00007f9c208f1090 R08: 0000000000000000 R09: 0000000000000000 [ 809.507734][T13981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.507747][T13981] R13: 00007f9c1fbe6038 R14: 00007f9c1fbe5fa0 R15: 00007f9c1fd0fa28 [ 809.507782][T13981] [ 809.944012][T11275] betop 0003:11C0:5506.0019: hidraw0: USB HID vff.fb Device [HID 11c0:5506] on usb-dummy_hcd.6-1/input0 [ 809.963200][T11275] betop 0003:11C0:5506.0019: no inputs found [ 810.614001][T13991] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2197'. [ 811.130184][T11275] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 811.264139][T13995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2199'. [ 811.276936][T13995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2199'. [ 811.289779][T11275] usb 4-1: Using ep0 maxpacket: 32 [ 811.298682][T13995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2199'. [ 811.316132][T11275] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 811.327060][T11275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.358044][T11275] usb 4-1: config 0 descriptor?? [ 811.415747][T11275] as10x_usb: device has been detected [ 811.457240][T11275] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 811.512812][T11275] usb 4-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 811.574788][T11275] as10x_usb: error during firmware upload part1 [ 811.609084][T12914] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 811.624815][ T1091] usb 5-1: Failed to submit usb control message: -71 [ 811.632789][T11275] Registered device nBox DVB-T Dongle [ 811.635375][ T1091] usb 5-1: unable to send the bmi data to the device: -71 [ 811.652953][T12914] usb 5-1: USB disconnect, device number 64 [ 811.666281][ T1091] usb 5-1: unable to get target info from device [ 811.677455][ T1091] usb 5-1: could not get target info (-71) [ 811.686792][ T1091] usb 5-1: could not probe fw (-71) [ 811.764763][T14004] binder: 13998:14004 ioctl c0306201 0 returned -14 [ 812.032263][T14017] fuse: Unknown parameter 'f$' [ 812.246185][T12914] usb 7-1: USB disconnect, device number 5 [ 812.300242][T14022] FAULT_FLAG_ALLOW_RETRY missing 801 [ 812.319924][T14022] CPU: 0 UID: 0 PID: 14022 Comm: syz.5.2204 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.319989][T14022] Tainted: [L]=SOFTLOCKUP [ 812.319998][T14022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 812.320012][T14022] Call Trace: [ 812.320021][T14022] [ 812.320032][T14022] dump_stack_lvl+0xe8/0x150 [ 812.320066][T14022] handle_userfault+0x14c3/0x17b0 [ 812.320101][T14022] ? __folio_put+0x21b/0x2c0 [ 812.320134][T14022] ? __pfx_handle_userfault+0x10/0x10 [ 812.320193][T14022] handle_mm_fault+0x1b26/0x32b0 [ 812.320227][T14022] ? __pte_offset_map_lock+0x13e/0x210 [ 812.320272][T14022] ? handle_mm_fault+0xdb/0x32b0 [ 812.320313][T14022] ? __pfx_handle_mm_fault+0x10/0x10 [ 812.320346][T14022] ? follow_page_pte+0x7ef/0x13e0 [ 812.320386][T14022] ? __pfx_follow_page_pte+0x10/0x10 [ 812.320427][T14022] __get_user_pages+0x1650/0x29f0 [ 812.320489][T14022] populate_vma_page_range+0x29f/0x3a0 [ 812.320522][T14022] ? __pfx_populate_vma_page_range+0x10/0x10 [ 812.320549][T14022] ? vma_wants_writenotify+0xb3/0x2a0 [ 812.320583][T14022] ? vma_set_page_prot+0xc3/0x100 [ 812.320617][T14022] mprotect_fixup+0x845/0xa30 [ 812.320651][T14022] ? __pfx_mprotect_fixup+0x10/0x10 [ 812.320688][T14022] do_mprotect_pkey+0x8c5/0xcd0 [ 812.320714][T14022] ? trace_sched_exit_tp+0x36/0xf0 [ 812.320757][T14022] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 812.320798][T14022] ? kvm_sched_clock_read+0x11/0x20 [ 812.320830][T14022] ? rcu_is_watching+0x15/0xb0 [ 812.320865][T14022] __x64_sys_mprotect+0x80/0x90 [ 812.320892][T14022] do_syscall_64+0xec/0xf80 [ 812.320915][T14022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.320938][T14022] ? clear_bhb_loop+0x60/0xb0 [ 812.320974][T14022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.320996][T14022] RIP: 0033:0x7f753478f749 [ 812.321016][T14022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.321036][T14022] RSP: 002b:00007f7535616038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 812.321060][T14022] RAX: ffffffffffffffda RBX: 00007f75349e5fa0 RCX: 00007f753478f749 [ 812.321077][T14022] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 812.321093][T14022] RBP: 00007f7534813f91 R08: 0000000000000000 R09: 0000000000000000 [ 812.321107][T14022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.321120][T14022] R13: 00007f75349e6038 R14: 00007f75349e5fa0 R15: 00007f7534b0fa28 [ 812.321156][T14022] [ 813.347687][T14030] syzkaller0: entered promiscuous mode [ 813.388839][T14030] syzkaller0: entered allmulticast mode [ 813.482116][T13993] Set syz0 is full, maxelem 0 reached [ 813.509095][T14030] tipc: Started in network mode [ 813.522537][T14030] tipc: Node identity f27f000105e2, cluster identity 4711 [ 813.563635][T14030] tipc: Enabled bearer , priority 0 [ 813.682108][T14030] tipc: Resetting bearer [ 813.820119][T14030] tipc: Disabling bearer [ 813.944677][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.953416][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.205690][T14037] xt_SECMARK: invalid mode: 2 [ 814.333039][T14039] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2210'. [ 814.801245][T11275] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 814.992099][T11275] usb 6-1: config 54 has an invalid interface number: 154 but max is 0 [ 815.015439][T11275] usb 6-1: config 54 has no interface number 0 [ 815.059379][T11275] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 815.093914][T11275] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.121228][T11275] usb 6-1: Product: syz [ 815.145753][T11275] usb 6-1: Manufacturer: syz [ 815.169719][T11275] usb 6-1: SerialNumber: syz [ 815.430511][ T5900] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 815.661305][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 815.675739][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.706036][ T5900] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 815.731024][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.760810][ T5900] usb 5-1: config 0 descriptor?? [ 816.235027][ T5900] betop 0003:11C0:5506.001A: hidraw0: USB HID vff.fb Device [HID 11c0:5506] on usb-dummy_hcd.4-1/input0 [ 816.290843][ T5900] betop 0003:11C0:5506.001A: no inputs found [ 816.871477][ T5900] usb 4-1: USB disconnect, device number 79 [ 817.117500][T14066] tipc: Enabled bearer , priority 0 [ 817.183244][ T5900] Unregistered device nBox DVB-T Dongle [ 817.195333][ T5900] as10x_usb: device has been disconnected [ 817.318749][T14066] tipc: Disabling bearer [ 817.510773][T14072] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 817.517375][T14072] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 817.558550][T14072] vhci_hcd vhci_hcd.0: Device attached [ 817.653546][T14072] xt_TPROXY: Can be used only with -p tcp or -p udp [ 817.776978][T11275] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 817.811595][T11275] usb 6-1: USB disconnect, device number 20 [ 817.830038][ T5900] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 817.848221][T12210] usb 6-1: Failed to submit usb control message: -71 [ 817.879791][T12210] usb 6-1: unable to send the bmi data to the device: -71 [ 817.914159][T12210] usb 6-1: unable to get target info from device [ 817.931503][T14074] vhci_hcd: connection reset by peer [ 817.958547][T11720] vhci_hcd vhci_hcd.3: stop threads [ 817.974158][T12210] usb 6-1: could not get target info (-71) [ 817.983680][T11720] vhci_hcd vhci_hcd.3: release socket [ 817.995101][T12210] usb 6-1: could not probe fw (-71) [ 818.008777][T11720] vhci_hcd vhci_hcd.3: disconnect device [ 818.190683][T12914] usb 5-1: USB disconnect, device number 65 [ 818.455776][T14086] input: syz1 as /devices/virtual/input/input69 [ 818.899753][ T5920] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 819.041302][T14098] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2228'. [ 819.107455][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.179063][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.239759][ T5920] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 819.299610][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.362335][ T5920] usb 4-1: config 0 descriptor?? [ 819.820152][T14089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.860292][T14089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.902425][T14108] syzkaller0: entered promiscuous mode [ 819.908711][ T5920] hid_parser_main: 1252 callbacks suppressed [ 819.908737][ T5920] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 819.937117][T14108] syzkaller0: entered allmulticast mode [ 820.024853][ T5920] hid-steam 0003:28DE:1142.001B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 820.090906][T14112] tipc: Enabled bearer , priority 0 [ 820.111698][T14114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2233'. [ 820.142692][ T5920] hid-steam 0003:28DE:1142.001B: Steam wireless receiver connected [ 820.170206][ T5920] hid-steam 0003:28DE:1142.001B: No HID_FEATURE_REPORT submitted - nothing to read [ 820.184233][T14108] tipc: Resetting bearer [ 820.212632][ T5920] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 820.235503][T11277] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 820.261298][ T5920] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 820.273137][T14108] tipc: Disabling bearer [ 820.380527][T12914] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 820.413342][T11277] usb 6-1: config 54 has an invalid interface number: 154 but max is 0 [ 820.444766][T11277] usb 6-1: config 54 has no interface number 0 [ 820.476276][T11277] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 820.522581][T11277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.553411][T11277] usb 6-1: Product: syz [ 820.571015][T12914] usb 2-1: Using ep0 maxpacket: 32 [ 820.577536][T11277] usb 6-1: Manufacturer: syz [ 820.592537][T12914] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 820.607141][T11277] usb 6-1: SerialNumber: syz [ 820.624243][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2235'. [ 820.628957][T12914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.660846][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2235'. [ 820.737399][T12914] usb 2-1: config 0 descriptor?? [ 820.763819][T11275] usb 4-1: USB disconnect, device number 80 [ 820.803501][T12914] as10x_usb: device has been detected [ 820.834800][T11275] hid-steam 0003:28DE:1142.001B: Steam wireless receiver disconnected [ 820.852875][T12914] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 820.982890][T12914] usb 2-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 821.085813][T12914] as10x_usb: error during firmware upload part1 [ 821.146791][T12914] Registered device nBox DVB-T Dongle [ 821.156335][T14129] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2236'. [ 822.071333][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2239'. [ 822.130850][T14095] Set syz0 is full, maxelem 0 reached [ 822.167195][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2227'. [ 822.963906][ T5900] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 823.219172][T11277] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 823.246136][ T1091] usb 6-1: Failed to submit usb control message: -71 [ 823.266407][ T1091] usb 6-1: unable to send the bmi data to the device: -71 [ 823.285861][T11277] usb 6-1: USB disconnect, device number 21 [ 823.309513][ T1091] usb 6-1: unable to get target info from device [ 823.341050][ T1091] usb 6-1: could not get target info (-71) [ 823.385270][ T1091] usb 6-1: could not probe fw (-71) [ 823.712566][T14168] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2244'. [ 823.811311][T14167] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002 [ 824.365955][T14182] openvswitch: netlink: IP tunnel dst address not specified [ 824.608786][T14181] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2247'. [ 824.886396][T12914] usb 2-1: USB disconnect, device number 71 [ 825.018596][T12914] Unregistered device nBox DVB-T Dongle [ 825.028706][T12914] as10x_usb: device has been disconnected [ 825.340659][T14191] xt_SECMARK: invalid mode: 2 [ 825.669713][ T5954] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 825.854356][ T5954] usb 7-1: config 54 has an invalid interface number: 154 but max is 0 [ 825.895024][ T5954] usb 7-1: config 54 has no interface number 0 [ 825.934683][ T5954] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 825.965626][ T5954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.993530][ T5954] usb 7-1: Product: syz [ 826.008919][ T5954] usb 7-1: Manufacturer: syz [ 826.030991][ T5954] usb 7-1: SerialNumber: syz [ 826.543995][T14212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.614251][T11720] usb 7-1: Failed to submit usb control message: -71 [ 828.625354][ T5954] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 828.650229][T11720] usb 7-1: unable to send the bmi data to the device: -71 [ 828.711567][ T5954] usb 7-1: USB disconnect, device number 6 [ 828.711591][T11720] usb 7-1: unable to get target info from device [ 828.786870][T11720] usb 7-1: could not get target info (-71) [ 828.821789][T11720] usb 7-1: could not probe fw (-71) [ 829.056527][T14240] xt_SECMARK: invalid mode: 2 [ 829.131265][T14241] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2260'. [ 829.894421][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2266'. [ 829.910122][T14252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.712131][ T5900] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 830.923507][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.016147][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.078480][ T5900] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 831.107629][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.139728][T11277] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 831.173092][ T5900] usb 2-1: config 0 descriptor?? [ 831.198331][T14269] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 831.334812][T11277] usb 4-1: config 54 has an invalid interface number: 154 but max is 0 [ 831.359758][T11277] usb 4-1: config 54 has no interface number 0 [ 831.392147][T11277] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 831.407140][T11277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.416414][T14275] input: syz0 as /devices/virtual/input/input70 [ 831.446610][T11277] usb 4-1: Product: syz [ 831.466337][T11277] usb 4-1: Manufacturer: syz [ 831.476660][T11277] usb 4-1: SerialNumber: syz [ 831.724495][T14279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.822512][T14279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.856381][T11720] usb 4-1: Failed to submit usb control message: -71 [ 831.864337][T11277] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 831.907734][T14285] xt_SECMARK: invalid mode: 2 [ 831.951635][T11720] usb 4-1: unable to send the bmi data to the device: -71 [ 831.972857][T11277] usb 4-1: USB disconnect, device number 81 [ 831.999256][T11720] usb 4-1: unable to get target info from device [ 832.037090][T11720] usb 4-1: could not get target info (-71) [ 832.103342][T11720] usb 4-1: could not probe fw (-71) [ 832.159674][ T5920] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 832.202574][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2277'. [ 832.265702][T14287] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x32314752, 3, 0, 0, 0) [ 832.303688][T14289] bond_slave_0: entered promiscuous mode [ 832.311150][T14289] bond_slave_1: entered promiscuous mode [ 832.359695][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 832.384004][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.402211][T14289] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 832.437895][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.472393][T14289] bond_slave_0: left promiscuous mode [ 832.477943][T14289] bond_slave_1: left promiscuous mode [ 832.492751][ T5920] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 832.540374][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.567209][T11277] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 832.577940][ T5900] aquacomputer_d5next 0003:0C70:F00D.001D: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0 [ 832.608102][ T5920] usb 5-1: config 0 descriptor?? [ 832.650815][ T5920] hub 5-1:0.0: USB hub found [ 832.755408][T11277] usb 6-1: too many endpoints for config 0 interface 0 altsetting 8: 253, using maximum allowed: 30 [ 832.818129][T11277] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.870089][T11277] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.889675][T11277] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 832.928370][T11277] usb 6-1: config 0 interface 0 has no altsetting 0 [ 832.982877][T11277] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 833.031527][T11277] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.070949][ T30] audit: type=1326 audit(1768393489.560:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa98f749 code=0x7ffc0000 [ 833.100781][T11277] usb 6-1: config 0 descriptor?? [ 833.114032][ T5920] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 833.127347][T14299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.162347][T14286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.178460][T14299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.209180][T14286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.230732][ T30] audit: type=1326 audit(1768393489.560:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efdfa98f749 code=0x7ffc0000 [ 833.433534][ T30] audit: type=1326 audit(1768393489.600:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa98f749 code=0x7ffc0000 [ 833.509839][T14305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.527951][ T30] audit: type=1326 audit(1768393489.600:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7efdfa98f749 code=0x7ffc0000 [ 833.572759][T14291] netlink: 'syz.5.2278': attribute type 1 has an invalid length. [ 833.587225][T14291] netlink: 'syz.5.2278': attribute type 1 has an invalid length. [ 833.672684][ T30] audit: type=1326 audit(1768393489.600:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efdfa92b829 code=0x7ffc0000 [ 833.745631][T11277] logitech 0003:046D:C50C.001E: collection stack underflow [ 833.777623][T11277] logitech 0003:046D:C50C.001E: item 0 4 0 12 parsing failed [ 833.809341][T11277] logitech 0003:046D:C50C.001E: parse failed [ 833.816779][ T30] audit: type=1326 audit(1768393489.600:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa98f749 code=0x7ffc0000 [ 833.843130][T11277] logitech 0003:046D:C50C.001E: probe with driver logitech failed with error -22 [ 833.876256][ T30] audit: type=1326 audit(1768393489.610:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa98f749 code=0x7ffc0000 [ 833.919762][T12914] usb 2-1: reset high-speed USB device number 72 using dummy_hcd [ 833.951013][T14291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.961270][ T5920] usbhid 5-1:0.0: can't add hid device: -71 [ 833.987190][T14291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.009465][ T5920] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 834.061021][ T30] audit: type=1326 audit(1768393489.610:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdfa98f34b code=0x7ffc0000 [ 834.203100][ T30] audit: type=1326 audit(1768393489.610:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdfa98f34b code=0x7ffc0000 [ 834.273784][ T5920] usb 5-1: USB disconnect, device number 66 [ 834.321773][ T30] audit: type=1326 audit(1768393489.610:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa98f749 code=0x7ffc0000 [ 834.562502][ T5954] usb 6-1: USB disconnect, device number 22 [ 835.738754][ T5920] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 835.859806][T14332] xt_SECMARK: invalid mode: 2 [ 835.927343][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 836.041234][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 836.096140][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 836.156775][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 836.218865][ T5920] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 836.266297][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.318631][ T5920] usb 6-1: config 0 descriptor?? [ 836.461939][T14345] random: crng reseeded on system resumption [ 836.472821][ T5900] usb 2-1: USB disconnect, device number 72 [ 836.723832][T14347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.783470][ T5920] plantronics 0003:047F:FFFF.001F: ignoring exceeding usage max [ 837.005477][ T5920] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 838.003175][T14363] binder: 14360:14363 ioctl 40046629 200000000800 returned -22 [ 838.781037][ T5900] usb 6-1: USB disconnect, device number 23 [ 838.787843][T14370] netlink: 'syz.5.2298': attribute type 2 has an invalid length. [ 838.806462][T14370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2298'. [ 839.409684][T14380] xt_SECMARK: invalid mode: 2 [ 839.773480][T14386] netlink: 'syz.3.2303': attribute type 1 has an invalid length. [ 839.920003][T14387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.015069][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2306'. [ 840.024746][T14391] netem: invalid attributes len -7 [ 840.030512][T14391] netem: change failed [ 840.221389][ T5900] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 840.281446][T14399] x_tables: unsorted entry at hook 3 [ 840.301378][T14399] binder: 14398:14399 ioctl c0306201 200000000100 returned -11 [ 840.405024][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.429147][ T5900] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 840.460616][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.474119][ T5900] usb 5-1: Product: syz [ 840.488059][ T5900] usb 5-1: Manufacturer: syz [ 840.493439][ T5900] usb 5-1: SerialNumber: syz [ 840.517936][ T5900] usb 5-1: config 0 descriptor?? [ 840.528458][ T5900] usb 5-1: ucan: probing device on interface #0 [ 840.536672][ T5900] usb 5-1: ucan: invalid EP count (0) [ 840.542496][ T5900] usb 5-1: ucan: probe failed; try to update the device firmware [ 840.592502][T11275] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 840.658528][T14408] xt_SECMARK: invalid mode: 2 [ 840.749932][ T5900] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 840.774422][T11275] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 840.805724][T11275] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 840.840791][T11275] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 840.875080][T11275] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 840.901282][T11278] usb 5-1: USB disconnect, device number 67 [ 840.926245][T11275] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.940349][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 840.958539][T14411] tipc: Started in network mode [ 840.968342][T14411] tipc: Node identity 160b02c77c03, cluster identity 4711 [ 840.980104][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 840.995579][T14411] tipc: Enabled bearer , priority 0 [ 841.007457][T14401] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 841.017478][T14413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2313'. [ 841.023964][ T5900] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 841.047020][T11275] hub 7-1:1.0: bad descriptor, ignoring hub [ 841.053275][T11275] hub 7-1:1.0: probe with driver hub failed with error -5 [ 841.061909][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.077265][T14411] tipc: Resetting bearer [ 841.084033][T11275] cdc_wdm 7-1:1.0: skipping garbage [ 841.089306][T11275] cdc_wdm 7-1:1.0: skipping garbage [ 841.105153][ T5900] usb 4-1: config 0 descriptor?? [ 841.127783][T11275] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 841.159967][T11275] cdc_wdm 7-1:1.0: Unknown control protocol [ 841.175551][T14411] tipc: Disabling bearer [ 841.334767][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 841.341450][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 841.348224][ T5954] usb 7-1: USB disconnect, device number 7 [ 841.348239][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 841.360711][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 841.366822][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 841.551589][ T5900] elecom 0003:056E:00FD.0020: unknown main item tag 0x0 [ 841.566163][ T5900] elecom 0003:056E:00FD.0020: unknown main item tag 0x0 [ 841.581073][ T5900] elecom 0003:056E:00FD.0020: unknown main item tag 0x0 [ 841.591903][ T5900] elecom 0003:056E:00FD.0020: unknown main item tag 0x0 [ 841.599005][ T5900] elecom 0003:056E:00FD.0020: unknown main item tag 0x0 [ 841.622000][ T5900] elecom 0003:056E:00FD.0020: unknown main item tag 0x0 [ 841.629028][ T5900] elecom 0003:056E:00FD.0020: unknown main item tag 0x0 [ 841.660225][ T5900] elecom 0003:056E:00FD.0020: unknown main item tag 0x0 [ 841.679718][ T5900] elecom 0003:056E:00FD.0020: unknown main item tag 0x0 [ 841.703853][ T5900] elecom 0003:056E:00FD.0020: unknown main item tag 0x0 [ 841.732658][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2311'. [ 841.750393][ T5900] elecom 0003:056E:00FD.0020: hidraw0: USB HID v0.00 Device [HID 056e:00fd] on usb-dummy_hcd.3-1/input0 [ 842.253418][T14432] x_tables: unsorted entry at hook 3 [ 842.292434][T14432] binder: 14431:14432 ioctl c0306201 200000000100 returned -11 [ 842.312515][T14433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.353521][T14436] xt_SECMARK: invalid mode: 2 [ 842.831354][ T5954] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 843.001619][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.054448][ T5954] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 843.080891][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.109948][ T5954] usb 5-1: Product: syz [ 843.124602][ T5954] usb 5-1: Manufacturer: syz [ 843.129272][ T5954] usb 5-1: SerialNumber: syz [ 843.170710][ T5954] usb 5-1: config 0 descriptor?? [ 843.210136][ T5954] usb 5-1: ucan: probing device on interface #0 [ 843.236788][ T5954] usb 5-1: ucan: invalid EP count (0) [ 843.257294][ T5954] usb 5-1: ucan: probe failed; try to update the device firmware [ 843.522910][ T5920] usb 5-1: USB disconnect, device number 68 [ 843.559916][ T5954] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 843.620405][T14455] binder: 14451:14455 ioctl c0306201 0 returned -14 [ 843.789138][ T5954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.814701][ T5954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.849756][ T5954] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 843.869854][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.900927][ T5954] usb 7-1: config 0 descriptor?? [ 844.257125][T14461] binder: 14460:14461 ioctl 4018620d 0 returned -22 [ 844.337306][ T5954] hid-led 0003:1D34:000A.0021: item fetching failed at offset 2/3 [ 844.380626][ T5954] hid-led 0003:1D34:000A.0021: probe with driver hid-led failed with error -22 [ 844.564328][T14447] program syz.6.2328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 844.588025][T14447] netlink: 'syz.6.2328': attribute type 10 has an invalid length. [ 844.649511][T14447] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 844.684763][ T5954] usb 7-1: USB disconnect, device number 8 [ 845.248383][ T5920] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 845.555401][ T5900] usb 4-1: USB disconnect, device number 82 [ 845.622444][T14468] x_tables: unsorted entry at hook 3 [ 845.632341][T14468] binder: 14467:14468 ioctl c0306201 200000000100 returned -11 [ 845.769907][T14469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.788138][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 845.857683][T14474] xt_SECMARK: invalid mode: 2 [ 845.877565][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 845.926530][ T5920] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 846.500240][ T5920] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 846.531845][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.565917][ T5920] usb 2-1: Product: syz [ 846.587788][ T5920] usb 2-1: Manufacturer: syz [ 846.608375][ T5920] usb 2-1: SerialNumber: syz [ 846.652245][ T5920] usb 2-1: config 0 descriptor?? [ 846.793621][T14478] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.800846][T14478] bridge0: port 2(bridge_slave_1) entered listening state [ 846.808187][T14478] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.815338][T14478] bridge0: port 1(bridge_slave_0) entered listening state [ 847.048370][T14478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 847.164561][T14478] vim2m vim2m.0: vidioc_s_fmt queue busy [ 847.484168][T14466] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 847.735120][T14466] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 849.239676][T11275] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 849.415098][T11275] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.489325][T11275] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 849.558701][T11275] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.596538][T11275] usb 7-1: Product: syz [ 849.672237][T11275] usb 7-1: Manufacturer: syz [ 849.690957][T11275] usb 7-1: SerialNumber: syz [ 849.844446][T11275] usb 7-1: config 0 descriptor?? [ 849.872379][T14515] xt_SECMARK: invalid mode: 2 [ 849.880524][T11275] usb 7-1: ucan: probing device on interface #0 [ 849.886867][T11275] usb 7-1: ucan: invalid EP count (0) [ 849.941732][T11275] usb 7-1: ucan: probe failed; try to update the device firmware [ 849.967930][ T5900] usb 2-1: USB disconnect, device number 73 [ 850.093002][T14516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.183090][ T5920] usb 7-1: USB disconnect, device number 9 [ 850.325078][T14524] binder: 14518:14524 ioctl c0306201 0 returned -14 [ 852.329896][T11275] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 852.361133][ T5900] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 852.523874][T11275] usb 2-1: Using ep0 maxpacket: 8 [ 852.532258][T11275] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 852.543321][ T5900] usb 5-1: config 54 has an invalid interface number: 154 but max is 0 [ 852.552248][T11275] usb 2-1: config 2 has no interface number 0 [ 852.558450][ T5900] usb 5-1: config 54 has no interface number 0 [ 852.575837][T11275] usb 2-1: config 2 interface 31 has no altsetting 0 [ 852.607078][T11275] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 852.618255][ T5900] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 852.628727][T11275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.637349][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.650053][T11275] usb 2-1: Product: syz [ 852.654272][T11275] usb 2-1: Manufacturer: syz [ 852.660749][ T5900] usb 5-1: Product: syz [ 852.672283][ T5900] usb 5-1: Manufacturer: syz [ 852.676986][T11275] usb 2-1: SerialNumber: syz [ 852.684619][ T5900] usb 5-1: SerialNumber: syz [ 852.957789][ T5900] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 852.973222][ T1091] usb 5-1: Failed to submit usb control message: -71 [ 853.006021][ T1091] usb 5-1: unable to send the bmi data to the device: -71 [ 853.038966][ T5900] usb 5-1: USB disconnect, device number 69 [ 853.057849][ T1091] usb 5-1: unable to get target info from device [ 853.106701][ T1091] usb 5-1: could not get target info (-71) [ 853.150444][ T1091] usb 5-1: could not probe fw (-71) [ 853.825087][T14566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.159801][ T5900] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 854.335133][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.586300][ T5900] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 854.665371][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.725660][ T5900] usb 5-1: Product: syz [ 854.739925][ T5900] usb 5-1: Manufacturer: syz [ 854.749632][ T5900] usb 5-1: SerialNumber: syz [ 854.796276][ T5900] usb 5-1: config 0 descriptor?? [ 854.849755][T11278] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 854.857928][ T5900] usb 5-1: ucan: probing device on interface #0 [ 854.895516][ T5900] usb 5-1: ucan: invalid EP count (0) [ 854.924915][ T5900] usb 5-1: ucan: probe failed; try to update the device firmware [ 855.053970][T11278] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 855.096519][T11278] usb 6-1: config 0 interface 0 has no altsetting 0 [ 855.164240][T11278] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 855.275233][T11278] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 855.297011][T12914] usb 5-1: USB disconnect, device number 70 [ 855.332929][T11278] usb 6-1: Product: syz [ 855.352114][T11278] usb 6-1: Manufacturer: syz [ 855.366287][T11278] usb 6-1: SerialNumber: syz [ 855.399139][T11278] usb 6-1: config 0 descriptor?? [ 855.414456][T11278] usb 6-1: selecting invalid altsetting 0 [ 855.590929][T14584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2367'. [ 855.743795][T11275] ch9200 2-1:2.31: probe with driver ch9200 failed with error -71 [ 855.753734][T14584] loop4: detected capacity change from 0 to 7 [ 855.792014][ T5920] usb 6-1: USB disconnect, device number 24 [ 855.803210][T14584] Dev loop4: unable to read RDB block 7 [ 855.818390][T11275] usb 2-1: USB disconnect, device number 74 [ 855.844896][T14584] loop4: unable to read partition table [ 855.873339][T14584] loop4: partition table beyond EOD, truncated [ 855.906277][T14584] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 856.812799][T12914] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 857.062527][T12914] usb 4-1: config 54 has an invalid interface number: 154 but max is 0 [ 857.090949][T12914] usb 4-1: config 54 has no interface number 0 [ 857.117676][T12914] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 857.141278][T12914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.157180][T12914] usb 4-1: Product: syz [ 857.166859][T12914] usb 4-1: Manufacturer: syz [ 857.178395][T12914] usb 4-1: SerialNumber: syz [ 858.001312][T14613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.696293][ T6053] usb 4-1: Failed to submit usb control message: -71 [ 859.704544][T12914] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 859.715380][ T6053] usb 4-1: unable to send the bmi data to the device: -71 [ 859.732280][T12914] usb 4-1: USB disconnect, device number 83 [ 859.741918][ T6053] usb 4-1: unable to get target info from device [ 859.751054][ T6053] usb 4-1: could not get target info (-71) [ 859.756941][ T6053] usb 4-1: could not probe fw (-71) [ 860.199095][T14641] binder: 14638:14641 ioctl c018620c 200000000000 returned -22 [ 860.260939][T11278] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 860.464712][T11278] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.527689][T11278] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 860.539705][ T5900] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 860.560990][T11278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.579283][T11278] usb 5-1: Product: syz [ 860.595943][T11278] usb 5-1: Manufacturer: syz [ 860.605645][T11278] usb 5-1: SerialNumber: syz [ 860.656077][T11278] usb 5-1: config 0 descriptor?? [ 860.693141][T11278] usb 5-1: ucan: probing device on interface #0 [ 860.710047][ T5900] usb 2-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 860.727006][T11278] usb 5-1: ucan: invalid EP count (0) [ 860.736271][T11278] usb 5-1: ucan: probe failed; try to update the device firmware [ 860.750488][ T5900] usb 2-1: config 1 interface 0 has no altsetting 0 [ 860.820781][ T5900] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 860.860045][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.905009][ T5900] usb 2-1: Product: syz [ 860.917544][ T5900] usb 2-1: Manufacturer: syz [ 860.934235][ T5900] usb 2-1: SerialNumber: syz [ 861.078389][T11278] usb 5-1: USB disconnect, device number 71 [ 861.475108][ T5900] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 15 proto 1 vid 0x04B8 pid 0x0202 [ 861.499045][ T5900] usb 2-1: USB disconnect, device number 75 [ 861.527426][ T5900] usblp0: removed [ 861.560057][T12914] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 861.700427][T12914] usb 7-1: device descriptor read/64, error -71 [ 862.000706][T12914] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 862.170120][T12914] usb 7-1: device descriptor read/64, error -71 [ 862.369742][T10956] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 862.379031][T12914] usb usb7-port1: attempt power cycle [ 862.552310][T10956] usb 4-1: config 54 has an invalid interface number: 154 but max is 0 [ 862.579954][T10956] usb 4-1: config 54 has no interface number 0 [ 862.603188][T10956] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 862.639818][T10956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.668641][T10956] usb 4-1: Product: syz [ 862.678940][T10956] usb 4-1: Manufacturer: syz [ 862.697935][T10956] usb 4-1: SerialNumber: syz [ 862.978514][T12914] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 863.020752][T12914] usb 7-1: device descriptor read/8, error -71 [ 863.287538][T14667] kAFS: unable to lookup cell 'ÿ' [ 863.293371][T12914] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 863.380337][T12914] usb 7-1: device descriptor read/8, error -71 [ 863.388931][T14670] kAFS: unable to lookup cell '(,c¾Ì' [ 863.516095][T12914] usb usb7-port1: unable to enumerate USB device [ 864.415752][T14676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.819670][T12914] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 864.900621][ T5900] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 864.960091][T12914] usb 5-1: device descriptor read/64, error -71 [ 865.062500][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 865.090039][ T5900] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 865.164130][ T5900] usb 6-1: config 0 interface 0 has no altsetting 0 [ 865.179727][ T5900] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 865.199480][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.202225][T10956] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 865.222377][ T6100] usb 4-1: Failed to submit usb control message: -71 [ 865.229305][ T6100] usb 4-1: unable to send the bmi data to the device: -71 [ 865.238349][T12914] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 865.279942][ T5900] usb 6-1: config 0 descriptor?? [ 865.291165][T10956] usb 4-1: USB disconnect, device number 84 [ 865.309631][ T6100] usb 4-1: unable to get target info from device [ 865.492538][ T6100] usb 4-1: could not get target info (-71) [ 865.498463][ T6100] usb 4-1: could not probe fw (-71) [ 865.576899][T12914] usb 5-1: device descriptor read/64, error -71 [ 865.614146][T14002] udevd[14002]: setting owner of /dev/bus/usb/004/084 to uid=0, gid=0 failed: No such file or directory [ 865.635684][T11277] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 865.690618][T12914] usb usb5-port1: attempt power cycle [ 865.747138][T14697] netlink: 'syz.3.2398': attribute type 6 has an invalid length. [ 865.772150][T14697] netlink: 'syz.3.2398': attribute type 7 has an invalid length. [ 865.791155][T14697] netlink: 'syz.3.2398': attribute type 8 has an invalid length. [ 865.833938][T11277] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.856176][T11277] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 865.875852][T11277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.893967][T11277] usb 2-1: Product: syz [ 865.905224][T11277] usb 2-1: Manufacturer: syz [ 865.914832][T14700] fuse: Bad value for 'fd' [ 865.960797][T11277] usb 2-1: SerialNumber: syz [ 866.049922][T12914] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 866.153705][T11277] usb 2-1: config 0 descriptor?? [ 866.183077][T12914] usb 5-1: device descriptor read/8, error -71 [ 866.231728][T11277] usb 2-1: ucan: probing device on interface #0 [ 866.285049][T11277] usb 2-1: ucan: invalid EP count (0) [ 866.324692][T11277] usb 2-1: ucan: probe failed; try to update the device firmware [ 866.540045][T12914] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 866.782738][T12914] usb 5-1: device descriptor read/8, error -71 [ 866.901088][T11277] usb 2-1: USB disconnect, device number 76 [ 866.980781][T12914] usb usb5-port1: unable to enumerate USB device [ 867.203809][T13099] Bluetooth: hci0: command 0x0406 tx timeout [ 867.736106][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 867.818930][T14713] vivid-007: disconnect [ 867.881654][T14713] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2400'. [ 868.813838][T14707] vivid-007: reconnect [ 868.880958][T12914] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 869.062380][T12914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 869.101089][ T5900] usbhid 6-1:0.0: can't add hid device: -71 [ 869.107160][ T5900] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 869.139002][T12914] usb 5-1: config 13 has an invalid interface number: 177 but max is 0 [ 869.191043][ T5900] usb 6-1: USB disconnect, device number 25 [ 869.197282][T12914] usb 5-1: config 13 has no interface number 0 [ 869.230293][T12914] usb 5-1: config 13 interface 177 altsetting 4 has an endpoint descriptor with address 0x99, changing to 0x89 [ 869.296037][T12914] usb 5-1: config 13 interface 177 altsetting 4 endpoint 0x89 has an invalid bInterval 248, changing to 11 [ 869.338331][T12914] usb 5-1: config 13 interface 177 has no altsetting 0 [ 869.363628][T12914] usb 5-1: New USB device found, idVendor=15c2, idProduct=0042, bcdDevice=ef.b8 [ 869.379650][T12914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.404840][T12914] usb 5-1: Product: syz [ 869.420704][T12914] usb 5-1: Manufacturer: syz [ 869.425453][T12914] usb 5-1: SerialNumber: syz [ 869.964530][T12914] imon 5-1:13.177: unable to register, err -19 [ 870.170459][T12914] usb 5-1: USB disconnect, device number 76 [ 870.326331][T11275] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 870.592737][T11275] usb 2-1: config 54 has an invalid interface number: 154 but max is 0 [ 870.620058][T11275] usb 2-1: config 54 has no interface number 0 [ 870.648918][T11275] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 870.674653][T11275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.726479][T11275] usb 2-1: Product: syz [ 870.736637][T11275] usb 2-1: Manufacturer: syz [ 870.758602][T11275] usb 2-1: SerialNumber: syz [ 870.845713][T12914] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 871.063766][T12914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.087729][T14745] netlink: 'syz.6.2409': attribute type 6 has an invalid length. [ 871.103906][T14745] netlink: 'syz.6.2409': attribute type 7 has an invalid length. [ 871.150359][T12914] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 871.169638][T12914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.199886][T12914] usb 5-1: Product: syz [ 871.218625][T12914] usb 5-1: Manufacturer: syz [ 871.228787][T12914] usb 5-1: SerialNumber: syz [ 871.235169][T14745] netlink: 'syz.6.2409': attribute type 8 has an invalid length. [ 871.274947][T12914] usb 5-1: config 0 descriptor?? [ 871.303573][T12914] usb 5-1: ucan: probing device on interface #0 [ 871.321751][T12914] usb 5-1: ucan: invalid EP count (0) [ 871.342052][T12914] usb 5-1: ucan: probe failed; try to update the device firmware [ 871.579193][T12914] usb 5-1: USB disconnect, device number 77 [ 871.973549][T14755] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2413'. [ 873.921305][T11275] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 873.953114][ T5952] usb 2-1: Failed to submit usb control message: -71 [ 874.011100][ T5952] usb 2-1: unable to send the bmi data to the device: -71 [ 874.026446][T11275] usb 2-1: USB disconnect, device number 77 [ 874.069334][ T5952] usb 2-1: unable to get target info from device [ 874.099974][ T5952] usb 2-1: could not get target info (-71) [ 874.153808][ T5952] usb 2-1: could not probe fw (-71) [ 874.892184][T14787] netlink: 'syz.6.2420': attribute type 9 has an invalid length. [ 874.899250][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2420'. [ 874.929849][T14787] netlink: 'syz.6.2420': attribute type 11 has an invalid length. [ 874.949047][T14787] netlink: 'syz.6.2420': attribute type 12 has an invalid length. [ 874.977190][T14787] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.2420'. [ 875.069080][T14789] bond1: Invalid ad_actor_system MAC address. [ 875.085862][T14789] bond1: option ad_actor_system: invalid value (6543) [ 875.266011][T14789] bond1 (unregistering): Released all slaves [ 875.376220][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.402918][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.598657][T14798] kvm: user requested TSC rate below hardware speed [ 875.745880][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2423'. [ 876.200149][ T5920] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 876.479930][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 876.528601][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.565910][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.578793][T14812] FAULT_INJECTION: forcing a failure. [ 876.578793][T14812] name failslab, interval 1, probability 0, space 0, times 0 [ 876.602070][ T5920] usb 7-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 876.630907][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.648263][T14812] CPU: 0 UID: 0 PID: 14812 Comm: syz.5.2426 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.648299][T14812] Tainted: [L]=SOFTLOCKUP [ 876.648308][T14812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 876.648323][T14812] Call Trace: [ 876.648332][T14812] [ 876.648342][T14812] dump_stack_lvl+0xe8/0x150 [ 876.648376][T14812] should_fail_ex+0x414/0x560 [ 876.648416][T14812] should_failslab+0xa8/0x100 [ 876.648446][T14812] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 876.648482][T14812] ? __alloc_skb+0x1dc/0x3a0 [ 876.648504][T14812] ? __local_bh_enable_ip+0xd0/0x130 [ 876.648528][T14812] ? __alloc_skb+0x198/0x3a0 [ 876.648553][T14812] __alloc_skb+0x1dc/0x3a0 [ 876.648581][T14812] xfrm_alloc_compat+0x1a6/0x16f0 [ 876.648617][T14812] ? xfrm_get_translator+0x1b/0x240 [ 876.648641][T14812] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 876.648669][T14812] xfrm_nlmsg_multicast+0xda/0x1f0 [ 876.648707][T14812] xfrm_send_policy_notify+0xb35/0x1bb0 [ 876.648757][T14812] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 876.648792][T14812] ? km_policy_notify+0x28/0x200 [ 876.648814][T14812] ? km_policy_notify+0x28/0x200 [ 876.648843][T14812] ? km_policy_notify+0x28/0x200 [ 876.648864][T14812] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 876.648899][T14812] km_policy_notify+0x121/0x200 [ 876.648919][T14812] ? km_policy_notify+0x28/0x200 [ 876.648943][T14812] xfrm_add_policy+0x4c7/0x800 [ 876.648973][T14812] ? __pfx_xfrm_add_policy+0x10/0x10 [ 876.648993][T14812] ? apparmor_capable+0x137/0x1a0 [ 876.649020][T14812] ? __nla_parse+0x40/0x60 [ 876.649049][T14812] xfrm_user_rcv_msg+0x7a3/0xab0 [ 876.649079][T14812] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 876.649139][T14812] ? __pfx___mutex_trylock_common+0x10/0x10 [ 876.649173][T14812] ? rcu_is_watching+0x15/0xb0 [ 876.649200][T14812] ? trace_contention_end+0x39/0x100 [ 876.649228][T14812] ? __mutex_lock+0x335/0x1350 [ 876.649261][T14812] netlink_rcv_skb+0x208/0x470 [ 876.649292][T14812] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 876.649316][T14812] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 876.649361][T14812] ? netlink_deliver_tap+0x2e/0x1b0 [ 876.649389][T14812] ? netlink_deliver_tap+0x2e/0x1b0 [ 876.649420][T14812] xfrm_netlink_rcv+0x79/0x90 [ 876.649442][T14812] netlink_unicast+0x82f/0x9e0 [ 876.649478][T14812] ? __pfx_netlink_unicast+0x10/0x10 [ 876.649503][T14812] ? __alloc_skb+0x198/0x3a0 [ 876.649527][T14812] ? netlink_sendmsg+0x642/0xb30 [ 876.649554][T14812] ? skb_put+0x11b/0x210 [ 876.649583][T14812] netlink_sendmsg+0x805/0xb30 [ 876.649623][T14812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.649656][T14812] ? aa_sock_msg_perm+0xf1/0x1b0 [ 876.649687][T14812] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 876.649707][T14812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.649738][T14812] __sock_sendmsg+0x21c/0x270 [ 876.649779][T14812] ____sys_sendmsg+0x505/0x820 [ 876.649814][T14812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 876.649850][T14812] ? import_iovec+0x74/0xa0 [ 876.649880][T14812] ___sys_sendmsg+0x21f/0x2a0 [ 876.649910][T14812] ? __pfx____sys_sendmsg+0x10/0x10 [ 876.649974][T14812] ? __fget_files+0x2a/0x420 [ 876.650001][T14812] ? __fget_files+0x3a0/0x420 [ 876.650041][T14812] __x64_sys_sendmsg+0x19b/0x260 [ 876.650071][T14812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 876.650110][T14812] ? __pfx_ksys_write+0x10/0x10 [ 876.650144][T14812] do_syscall_64+0xec/0xf80 [ 876.650168][T14812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.650188][T14812] ? trace_irq_disable+0x37/0x100 [ 876.650217][T14812] ? clear_bhb_loop+0x60/0xb0 [ 876.650243][T14812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.650265][T14812] RIP: 0033:0x7f753478f749 [ 876.650284][T14812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.650304][T14812] RSP: 002b:00007f7535616038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.650328][T14812] RAX: ffffffffffffffda RBX: 00007f75349e5fa0 RCX: 00007f753478f749 [ 876.650345][T14812] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 876.650359][T14812] RBP: 00007f7535616090 R08: 0000000000000000 R09: 0000000000000000 [ 876.650373][T14812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.650386][T14812] R13: 00007f75349e6038 R14: 00007f75349e5fa0 R15: 00007f7534b0fa28 [ 876.650422][T14812] [ 877.280651][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 877.289159][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 877.389696][T11275] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 877.429130][ T5920] usb 7-1: config 0 descriptor?? [ 877.537987][T14818] syzkaller0: entered promiscuous mode [ 877.564326][T11275] usb 5-1: config 54 has an invalid interface number: 154 but max is 0 [ 877.568824][T14818] syzkaller0: entered allmulticast mode [ 877.658025][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2425'. [ 877.681569][T11275] usb 5-1: config 54 has no interface number 0 [ 877.700259][T11275] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 877.728282][T11275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.757860][T14825] netlink: 'syz.3.2428': attribute type 6 has an invalid length. [ 877.767426][T14825] netlink: 'syz.3.2428': attribute type 7 has an invalid length. [ 877.787486][T14825] netlink: 'syz.3.2428': attribute type 8 has an invalid length. [ 877.802828][T11275] usb 5-1: Product: syz [ 877.802853][T11275] usb 5-1: Manufacturer: syz [ 877.802872][T11275] usb 5-1: SerialNumber: syz [ 878.146140][ T5920] usbhid 7-1:0.0: can't add hid device: -71 [ 878.146261][ T5920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 878.163033][ T5920] usb 7-1: USB disconnect, device number 14 [ 878.430146][T14830] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2433'. [ 878.590165][ T5920] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 878.752739][ T5920] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 878.774537][ T5920] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 878.807295][ T5920] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 878.840212][ T5920] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 878.875825][ T5920] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 878.926942][ T5920] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 878.952690][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 878.979967][ T5920] usb 6-1: Product: syz [ 878.997191][ T5920] usb 6-1: Manufacturer: syz [ 879.048926][ T5920] cdc_wdm 6-1:1.0: skipping garbage [ 879.072241][ T5920] cdc_wdm 6-1:1.0: skipping garbage [ 879.128901][ T5920] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 879.160883][ T5920] cdc_wdm 6-1:1.0: Unknown control protocol [ 879.326990][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'. [ 879.360546][T14837] netlink: 'syz.1.2435': attribute type 14 has an invalid length. [ 879.423542][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 879.424874][T11277] usb 6-1: USB disconnect, device number 26 [ 879.430224][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 879.430247][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 879.454423][T14828] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 879.492267][T14837] vxlan0: entered promiscuous mode [ 879.569218][ T3665] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.652332][ T3665] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.785509][ T3665] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.140509][T11275] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 880.148868][ T5946] usb 5-1: Failed to submit usb control message: -71 [ 880.160067][ T3665] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.225122][ T5946] usb 5-1: unable to send the bmi data to the device: -71 [ 880.257652][ T5946] usb 5-1: unable to get target info from device [ 880.288015][ T5946] usb 5-1: could not get target info (-71) [ 880.297816][ T5946] usb 5-1: could not probe fw (-71) [ 880.556586][T11275] usb 5-1: USB disconnect, device number 78 [ 880.841905][T14854] random: crng reseeded on system resumption [ 881.409712][T11275] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 881.867900][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 882.099866][T11275] usb 2-1: device descriptor read/64, error -32 [ 883.061209][ T31] INFO: task syz.2.1968:13096 blocked for more than 143 seconds. [ 883.106424][T14841] syz.3.2437 (14841): drop_caches: 2 [ 883.119899][ T31] Tainted: G L syzkaller #0 [ 883.211112][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 883.241674][ T31] task:syz.2.1968 state:D stack:28184 pid:13096 tgid:13093 ppid:5847 task_flags:0x400040 flags:0x00080002 [ 883.289799][ T31] Call Trace: [ 883.301716][ T31] [ 883.319814][ T31] __schedule+0x149b/0x4fd0 [ 883.339812][ T31] ? __pfx___schedule+0x10/0x10 [ 883.353717][ T31] ? schedule+0x91/0x360 [ 883.379810][ T31] schedule+0x165/0x360 [ 883.401829][ T31] schedule_preempt_disabled+0x13/0x30 [ 883.433229][ T31] __mutex_lock+0x7e6/0x1350 [ 883.459759][ T31] ? __mutex_lock+0x5bb/0x1350 [ 883.469623][ T31] ? usbdev_open+0x16e/0x760 [ 883.492405][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 883.510123][ T31] ? bus_find_device+0x273/0x2b0 [ 883.515144][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 883.519888][T11275] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 883.569652][ T31] ? __pfx_kobject_get_unless_zero+0x10/0x10 [ 883.588017][ T31] ? usbdev_open+0xa7/0x760 [ 883.599656][ T31] usbdev_open+0x16e/0x760 [ 883.622899][ T31] ? do_raw_spin_lock+0x121/0x290 [ 883.651144][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 883.656149][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 883.690053][ T31] chrdev_open+0x4cc/0x5e0 [ 883.712033][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 883.733187][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 883.761428][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 883.784168][ T31] do_dentry_open+0x7ce/0x1420 [ 883.789023][ T31] vfs_open+0x3b/0x340 [ 883.829599][ T31] ? path_openat+0x33f3/0x3dd0 [ 883.873391][ T31] path_openat+0x340e/0x3dd0 [ 883.979722][T11275] usb 2-1: device descriptor read/64, error -71 [ 883.989919][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 884.051262][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 884.091041][T11275] usb usb2-port1: attempt power cycle [ 884.099672][ T31] ? getname_flags+0xb8/0x540 [ 884.104467][ T31] ? __pfx_path_openat+0x10/0x10 [ 884.109677][ T5920] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 884.183562][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 884.196581][ T31] do_filp_open+0x1fa/0x410 [ 884.214884][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 884.225922][ T31] ? _raw_spin_unlock+0x28/0x50 [ 884.240665][ T31] ? alloc_fd+0x64c/0x6c0 [ 884.252189][ T31] do_sys_openat2+0x121/0x200 [ 884.262518][ T31] ? __se_sys_futex+0x36f/0x400 [ 884.272305][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 884.286606][ T31] ? rcu_is_watching+0x15/0xb0 [ 884.301029][ T31] __x64_sys_openat+0x138/0x170 [ 884.313975][ T31] do_syscall_64+0xec/0xf80 [ 884.329150][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.342237][ T31] ? trace_irq_disable+0x37/0x100 [ 884.356677][ T31] ? clear_bhb_loop+0x60/0xb0 [ 884.371047][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.383977][ T31] RIP: 0033:0x7ff1f4f8df90 [ 884.394270][ T31] RSP: 002b:00007ff1f5e5bb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 884.416764][ T31] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007ff1f4f8df90 [ 884.437388][ T31] RDX: 0000000000101301 RSI: 00007ff1f5e5bc10 RDI: 00000000ffffff9c [ 884.456440][ T31] RBP: 00007ff1f5e5bc10 R08: 0000000000000000 R09: 0000000000000000 [ 884.475531][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 884.494266][ T31] R13: 00007ff1f51e6218 R14: 00007ff1f51e6180 R15: 00007ff1f530fa28 [ 884.514850][ T31] [ 884.522763][ T31] [ 884.522763][ T31] Showing all locks held in the system: [ 884.546690][ T31] 1 lock held by khungtaskd/31: [ 884.556540][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 884.570891][ T31] 6 locks held by kworker/1:2/796: [ 884.576165][ T31] 2 locks held by getty/5587: [ 884.582476][ T31] #0: ffff888033afd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 884.593103][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 884.603848][ T31] 5 locks held by kworker/1:5/5920: [ 884.609180][ T31] #0: ffff8881426d3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 884.624464][ T31] #1: ffffc90004fc7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 884.637929][ T31] #2: ffff8881443d7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 884.648344][ T31] #3: ffff8881443e2518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 884.675869][ T31] #4: ffff888143fdf668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 884.699856][ T31] 6 locks held by kworker/0:5/11275: [ 884.705258][ T31] #0: ffff8881426d3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 884.780895][ T31] #1: ffffc9000439fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 884.827059][ T31] #2: ffff8881443f0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 884.970933][ T31] #3: ffff8880b873a098 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x7eb/0xf90 [ 884.999628][ T31] #4: ffff888025298a68 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x67/0x12b0 [ 885.122410][ T31] #5: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 885.159961][ T31] 1 lock held by syz.2.1968/13096: [ 885.165151][ T31] #0: ffff88814433f198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 885.189982][ T31] 2 locks held by syz.6.2436/14843: [ 885.195343][ T31] 2 locks held by syz.5.2440/14860: [ 885.211783][ T31] [ 885.214180][ T31] ============================================= [ 885.214180][ T31] [ 885.241901][ T31] NMI backtrace for cpu 0 [ 885.241925][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 885.241955][ T31] Tainted: [L]=SOFTLOCKUP [ 885.241964][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 885.241978][ T31] Call Trace: [ 885.241987][ T31] [ 885.241997][ T31] dump_stack_lvl+0xe8/0x150 [ 885.242030][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 885.242063][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 885.242102][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 885.242137][ T31] sys_info+0x135/0x170 [ 885.242164][ T31] watchdog+0xf95/0xfe0 [ 885.242199][ T31] ? watchdog+0x20a/0xfe0 [ 885.242236][ T31] kthread+0x711/0x8a0 [ 885.242268][ T31] ? __pfx_watchdog+0x10/0x10 [ 885.242297][ T31] ? __pfx_kthread+0x10/0x10 [ 885.242335][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 885.242355][ T31] ? __pfx_kthread+0x10/0x10 [ 885.242386][ T31] ret_from_fork+0x510/0xa50 [ 885.242409][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 885.242429][ T31] ? __switch_to+0xc9e/0x1480 [ 885.242461][ T31] ? __pfx_kthread+0x10/0x10 [ 885.242490][ T31] ret_from_fork_asm+0x1a/0x30 [ 885.242536][ T31] [ 885.242545][ T31] Sending NMI from CPU 0 to CPUs 1: [ 885.372292][ C1] NMI backtrace for cpu 1 [ 885.372314][ C1] CPU: 1 UID: 0 PID: 796 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 885.372339][ C1] Tainted: [L]=SOFTLOCKUP [ 885.372349][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 885.372362][ C1] Workqueue: usb_hub_wq hub_event [ 885.372390][ C1] RIP: 0010:check_preemption_disabled+0x29/0xe0 [ 885.372416][ C1] Code: 90 55 41 57 41 56 53 65 8b 05 57 34 26 07 65 8b 0d 4c 34 26 07 f7 c1 ff ff ff 7f 74 0c 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 9c <59> f7 c1 00 02 00 00 74 ea 65 4c 8b 3c 25 08 10 80 92 41 f6 47 2f [ 885.372431][ C1] RSP: 0018:ffffc900033a6540 EFLAGS: 00000046 [ 885.372446][ C1] RAX: 0000000000000001 RBX: 0000000000000202 RCX: 0000000080000000 [ 885.372458][ C1] RDX: 0000000000000005 RSI: ffffffff8d976a88 RDI: ffffffff8bc086e0 [ 885.372471][ C1] RBP: ffff888024a72a78 R08: ffffc900033a7620 R09: 0000000000000000 [ 885.372484][ C1] R10: ffffc900033a66f8 R11: fffff52000674ce1 R12: 0000000000000005 [ 885.372496][ C1] R13: 0000000000000005 R14: ffffffff8df41aa0 R15: ffff888024a71e80 [ 885.372509][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 885.372524][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 885.372536][ C1] CR2: 00002000000f1000 CR3: 00000000757ae000 CR4: 00000000003526f0 [ 885.372553][ C1] Call Trace: [ 885.372560][ C1] [ 885.372570][ C1] lock_release+0x25a/0x3b0 [ 885.372589][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 885.372611][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 885.372632][ C1] unwind_next_frame+0x1ab1/0x23d0 [ 885.372655][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 885.372675][ C1] ? bus_probe_device+0x12a/0x220 [ 885.372703][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 885.372731][ C1] arch_stack_walk+0x11c/0x150 [ 885.372754][ C1] ? device_add+0x7b6/0xb80 [ 885.372772][ C1] stack_trace_save+0x9c/0xe0 [ 885.372798][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 885.372827][ C1] ? bus_for_each_drv+0x251/0x2e0 [ 885.372852][ C1] ? __device_attach+0x2b8/0x430 [ 885.372870][ C1] ? bus_probe_device+0x12a/0x220 [ 885.372894][ C1] ? device_add+0x7b6/0xb80 [ 885.372910][ C1] kasan_save_track+0x3e/0x80 [ 885.372928][ C1] ? kasan_save_track+0x3e/0x80 [ 885.372944][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 885.372962][ C1] ? __kmalloc_noprof+0x41d/0x800 [ 885.372978][ C1] ? usb_alloc_urb+0x46/0x150 [ 885.372994][ C1] ? ath6kl_usb_post_recv_transfers+0x24f/0x6f0 [ 885.373016][ C1] ? ath6kl_usb_power_on+0x6a/0x280 [ 885.373033][ C1] ? ath6kl_core_init+0x1d9/0x10f0 [ 885.373055][ C1] ? ath6kl_usb_probe+0x14df/0x15d0 [ 885.373072][ C1] ? usb_probe_interface+0x668/0xc90 [ 885.373096][ C1] ? really_probe+0x26d/0xad0 [ 885.373115][ C1] ? __driver_probe_device+0x18c/0x320 [ 885.373134][ C1] ? driver_probe_device+0x4f/0x240 [ 885.373154][ C1] ? __device_attach_driver+0x279/0x430 [ 885.373174][ C1] ? bus_for_each_drv+0x251/0x2e0 [ 885.373198][ C1] ? __device_attach+0x2b8/0x430 [ 885.373216][ C1] ? device_initial_probe+0xa1/0xd0 [ 885.373234][ C1] ? bus_probe_device+0x12a/0x220 [ 885.373258][ C1] ? device_add+0x7b6/0xb80 [ 885.373273][ C1] ? usb_set_configuration+0x1a87/0x2110 [ 885.373296][ C1] ? usb_generic_driver_probe+0x8d/0x150 [ 885.373318][ C1] ? usb_probe_device+0x1c4/0x3c0 [ 885.373342][ C1] ? really_probe+0x26d/0xad0 [ 885.373361][ C1] ? __driver_probe_device+0x18c/0x320 [ 885.373380][ C1] ? driver_probe_device+0x4f/0x240 [ 885.373400][ C1] ? __device_attach_driver+0x279/0x430 [ 885.373420][ C1] ? bus_for_each_drv+0x251/0x2e0 [ 885.373445][ C1] ? __device_attach+0x2b8/0x430 [ 885.373462][ C1] ? device_initial_probe+0xa1/0xd0 [ 885.373480][ C1] ? bus_probe_device+0x12a/0x220 [ 885.373519][ C1] __kasan_kmalloc+0x93/0xb0 [ 885.373538][ C1] __kmalloc_noprof+0x41d/0x800 [ 885.373555][ C1] ? usb_alloc_urb+0x46/0x150 [ 885.373574][ C1] usb_alloc_urb+0x46/0x150 [ 885.373591][ C1] ath6kl_usb_post_recv_transfers+0x24f/0x6f0 [ 885.373619][ C1] ath6kl_usb_power_on+0x6a/0x280 [ 885.373638][ C1] ath6kl_core_init+0x1d9/0x10f0 [ 885.373656][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 885.373677][ C1] ? __pfx_ath6kl_core_init+0x10/0x10 [ 885.373694][ C1] ? __asan_memcpy+0x40/0x70 [ 885.373721][ C1] ? ath6kl_core_create+0x7fb/0x9a0 [ 885.373739][ C1] ath6kl_usb_probe+0x14df/0x15d0 [ 885.373764][ C1] usb_probe_interface+0x668/0xc90 [ 885.373794][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 885.373818][ C1] really_probe+0x26d/0xad0 [ 885.373841][ C1] __driver_probe_device+0x18c/0x320 [ 885.373863][ C1] driver_probe_device+0x4f/0x240 [ 885.373885][ C1] __device_attach_driver+0x279/0x430 [ 885.373908][ C1] bus_for_each_drv+0x251/0x2e0 [ 885.373934][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 885.373975][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 885.374001][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 885.374020][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 885.374040][ C1] __device_attach+0x2b8/0x430 [ 885.374066][ C1] ? __pfx___device_attach+0x10/0x10 [ 885.374087][ C1] ? _raw_spin_unlock+0x28/0x50 [ 885.374105][ C1] device_initial_probe+0xa1/0xd0 [ 885.374125][ C1] bus_probe_device+0x12a/0x220 [ 885.374150][ C1] ? device_add+0x726/0xb80 [ 885.374168][ C1] device_add+0x7b6/0xb80 [ 885.374187][ C1] usb_set_configuration+0x1a87/0x2110 [ 885.374222][ C1] usb_generic_driver_probe+0x8d/0x150 [ 885.374245][ C1] usb_probe_device+0x1c4/0x3c0 [ 885.374271][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 885.374293][ C1] really_probe+0x26d/0xad0 [ 885.374318][ C1] __driver_probe_device+0x18c/0x320 [ 885.374340][ C1] driver_probe_device+0x4f/0x240 [ 885.374362][ C1] __device_attach_driver+0x279/0x430 [ 885.374385][ C1] bus_for_each_drv+0x251/0x2e0 [ 885.374411][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 885.374432][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 885.374458][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 885.374477][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 885.374495][ C1] __device_attach+0x2b8/0x430 [ 885.374516][ C1] ? __pfx___device_attach+0x10/0x10 [ 885.374537][ C1] ? _raw_spin_unlock+0x28/0x50 [ 885.374554][ C1] device_initial_probe+0xa1/0xd0 [ 885.374575][ C1] bus_probe_device+0x12a/0x220 [ 885.374600][ C1] ? device_add+0x726/0xb80 [ 885.374617][ C1] device_add+0x7b6/0xb80 [ 885.374636][ C1] usb_new_device+0xa39/0x1720 [ 885.374659][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 885.374679][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 885.374697][ C1] hub_event+0x29b1/0x4ef0 [ 885.374719][ C1] ? __perf_event_task_sched_in+0xec/0x17e0 [ 885.374761][ C1] ? __pfx_hub_event+0x10/0x10 [ 885.374783][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 885.374804][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 885.374821][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 885.374839][ C1] process_scheduled_works+0xad1/0x1770 [ 885.374868][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 885.374885][ C1] ? do_raw_spin_lock+0x121/0x290 [ 885.374916][ C1] worker_thread+0x8a0/0xda0 [ 885.374946][ C1] kthread+0x711/0x8a0 [ 885.374969][ C1] ? __pfx_worker_thread+0x10/0x10 [ 885.374987][ C1] ? __pfx_kthread+0x10/0x10 [ 885.375010][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 885.375026][ C1] ? __pfx_kthread+0x10/0x10 [ 885.375054][ C1] ret_from_fork+0x510/0xa50 [ 885.375072][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 885.375087][ C1] ? __switch_to+0xc9e/0x1480 [ 885.375113][ C1] ? __pfx_kthread+0x10/0x10 [ 885.375135][ C1] ret_from_fork_asm+0x1a/0x30 [ 885.375166][ C1] [ 886.733297][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 886.740231][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 886.751046][ T31] Tainted: [L]=SOFTLOCKUP [ 886.755390][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 886.765472][ T31] Call Trace: [ 886.768777][ T31] [ 886.771731][ T31] vpanic+0x1e0/0x670 [ 886.775751][ T31] panic+0xb9/0xc0 [ 886.779500][ T31] ? __pfx_panic+0x10/0x10 [ 886.783959][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 886.789355][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 886.795542][ T31] watchdog+0xfdf/0xfe0 [ 886.799730][ T31] ? watchdog+0x20a/0xfe0 [ 886.804100][ T31] kthread+0x711/0x8a0 [ 886.808212][ T31] ? __pfx_watchdog+0x10/0x10 [ 886.812924][ T31] ? __pfx_kthread+0x10/0x10 [ 886.817545][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.822777][ T31] ? __pfx_kthread+0x10/0x10 [ 886.827424][ T31] ret_from_fork+0x510/0xa50 [ 886.832039][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 886.837175][ T31] ? __switch_to+0xc9e/0x1480 [ 886.841893][ T31] ? __pfx_kthread+0x10/0x10 [ 886.846514][ T31] ret_from_fork_asm+0x1a/0x30 [ 886.851332][ T31] [ 886.854971][ T31] Kernel Offset: disabled [ 886.859306][ T31] Rebooting in 86400 seconds..