last executing test programs: 4m36.314738652s ago: executing program 0 (id=73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a80)={0x1, 0x0, @pic={0x96, 0x9, 0xe5, 0x80, 0x9, 0xa, 0x4, 0x7, 0x81, 0x39, 0x0, 0x8, 0xfd, 0x4, 0x0, 0x2}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x6, 0xfc, 0x1, 0x9, 0x1, 0x4, 0x9, 0x9, 0x1, 0x3, 0x9, 0x1, 0x9b, 0x9, 0x5, 0x7}}) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000cc0)=[@wr_drn={0x68, 0x20, {0x5, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x481, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x18ac, 0x9}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host_nat=0x6c08, 0x7, 0x8d, 0x7fffffffffffffff}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x4d6}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x7}, @in_dx={0x69, 0x20, {0xed6d, 0x1}}, @wr_crn={0x67, 0x20, {0x0, 0xc000000000000}}, @wr_crn={0x67, 0x20, {0x4, 0x7}}, @nested_create_vm={0x12d, 0x18}, @wrmsr={0x65, 0x20, {0x0, 0x7ff}}, @code={0xa, 0x55, {"2e430f78eb260f0966ba6100ec640f01c9b8010000000f01c136990f672562c3a5a9b805000000b99fdbf8040f01d9b9d0020000b82e4e0000ba000000000f300fc77742"}}, @wrmsr={0x65, 0x20, {0x98a, 0x1}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x5}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x9, 0xffffffff}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x9, 0xb26, 0x80000001, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xfa, 0x3, 0x0, 0x2}}, @nested_vmlaunch={0x12f, 0x18}, @cpuid={0x64, 0x18, {0x1, 0x4}}, @nested_load_syzos={0x136, 0xb0, {0x0, 0x6, [@nested_amd_set_intercept={0x181, 0x30, {0x2, 0x0, 0x6}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x558, 0x6ced, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x3}]}}], 0x3e5}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000010c0)={"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"}) write$binfmt_elf32(r3, &(0x7f00000014c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x2, 0x4, 0x80, 0x3ff, 0x2, 0x3e, 0xffff, 0xa, 0x38, 0x55, 0x1000, 0xb8b5, 0x20, 0x3, 0x5, 0x0, 0x7}, [{0x7, 0x2, 0x40, 0x1, 0x9, 0x2, 0x8, 0x1}, {0x2, 0x5, 0x7, 0x69a8, 0x2, 0x1ff, 0x5, 0xb18e}, {0x7, 0x923d, 0x7ff, 0xff, 0xb, 0x7fffffff, 0x2, 0x8001}], "f2f9a6c9df1dfb8ca0fdb58b85334dd4862059bb257d50f43cd301c19822bf3b5ba18660077130bd1c0057373918dca4cffb06708117310ea16bfe772068d367ca75a4a5f131cb4f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7e0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 4m35.980912544s ago: executing program 0 (id=76): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) times(0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001340)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xc, 0x7f}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) r6 = syz_open_procfs(0x0, &(0x7f0000001200)='net/udp6\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="28000000010701010004000000000000010000091400078008170140000000060800024000000001961de6d75f265b21981f8c6654ccbc8c16f203632052178091fca6ebe1c2c9549545bed1eb9b4e7c931af447fd223300d06009d57fba0a0716587b4eb928113feb63b2f517f77bb621f69f37ea3feccfe62f43df87c8a6a1987c0ecb38d3c9b91dea1100a912ff4fc3d9a903"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000000)={0x100, 0x31384142, 0x0, @stepwise={0x0, 0x400, 0x0, 0xc, 0xfffffffc}}) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) getrlimit(0xa, &(0x7f0000001180)) 4m34.307857859s ago: executing program 0 (id=84): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xc4d73000) syz_clone(0xa005180, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006440), r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd15}, 0x20000013) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f00000016c0)={0x12, &(0x7f0000001600)=[{0x46, '\x00', @st={0x4, [{0x2, @uvalue=0x7}, {0x0, @svalue=0xfffffffffffff583}, {0x3, @uvalue=0xfffffffffffffffc}, {0x2, @svalue=0x200}]}, 0x3}]}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x4080, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) set_mempolicy(0x3, 0x0, 0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={0x0, 0x128}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20004030) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x2070bd27, 0x25dfdbff, {0xa, 0x40, 0xc0}, [@IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x142}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x36, 0x1, 0xf, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) 4m32.868215322s ago: executing program 0 (id=87): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x77359400}, {r2, r3+60000000}}, &(0x7f0000000180)) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4000}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0, 0x0, @local}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x640100fe}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x8000) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 4m31.694680201s ago: executing program 0 (id=91): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x5, 0xa0200f10, 0x80d, 0x8, 0x8, 0x401, 0x0, 0x0, 0x10, 0xf}}, 0x50) 4m31.441610422s ago: executing program 0 (id=92): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x82, 0x1, 0x5, 0x3, 0xfffffffffffffffa, 0x2, 0x3e, 0x8, 0x501, 0x40, 0x3ad, 0x0, 0x40, 0x38, 0x1, 0x7, 0x44e, 0x17c}, [{0x3, 0x0, 0x9, 0x3ff, 0x101, 0x4b4, 0x9, 0x1}]}, 0x78) close(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x11, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x60000000) 4m30.775204966s ago: executing program 32 (id=92): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x82, 0x1, 0x5, 0x3, 0xfffffffffffffffa, 0x2, 0x3e, 0x8, 0x501, 0x40, 0x3ad, 0x0, 0x40, 0x38, 0x1, 0x7, 0x44e, 0x17c}, [{0x3, 0x0, 0x9, 0x3ff, 0x101, 0x4b4, 0x9, 0x1}]}, 0x78) close(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x11, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x60000000) 2m53.334501744s ago: executing program 4 (id=505): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(&(0x7f0000000340), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00089dcf6dd91caab22e91af2d9b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000e46a00002e110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000d000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r6) keyctl$set_timeout(0xf, r6, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x0, 0x0, 0x0, 0x1, 0xd3, &(0x7f0000001380)=""/211, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1000005}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xe, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) 2m52.19140713s ago: executing program 4 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x4c, 0x3, 0x40, 0x5ab, 0x60, 0x1106, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0xf4, 0x7, 0x50}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0x20, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x81, 0x1, 0x9}, {0x6, 0x24, 0x1a, 0x22, 0x18}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xe8, 0x3, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0xe, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x7f, 0x2}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d0304000000feffffff130000000c0009800800020000000000"], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x581, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004003}, 0x0) 2m49.898335443s ago: executing program 4 (id=521): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x891c, &(0x7f0000000040)={'geneve1\x00', @random="02001800"}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7fff, 0x8769, 0x117, 0xa00, 0x6, 0x80200, r1}) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1000000}}, 0x10) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x6}}}, 0x10) syz_io_uring_setup(0x78f1, &(0x7f0000000080)={0x0, 0xbb36, 0x10000, 0xfffffffe, 0x40}, 0xfffffffffffffffe, 0x0) 2m49.64236694s ago: executing program 4 (id=523): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(0x0, 0x2, 0x202000) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4004}}}, 0x24}}, 0x40) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x9000000) 2m46.762896007s ago: executing program 4 (id=529): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}, 0x1, 0x0, 0x2000000000000000}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0], 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x104}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x4000000) 2m44.195022056s ago: executing program 4 (id=537): socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x394}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r6, 0xe) landlock_restrict_self(r6, 0x9) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 2m29.112325023s ago: executing program 33 (id=537): socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x394}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r6, 0xe) landlock_restrict_self(r6, 0x9) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 7.872122791s ago: executing program 5 (id=1147): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x2}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc2000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="eb5974e8be09e387ab90b1569489ca152362cb44b1952d7a95d4e348dd0a24fdb5fbd2dc1f3ddba2f36dd88226e8ab7b58818a357b167f7671a57d73594a9107053189f3589268715fdfc605ce82d5053ca0394bd3ef6ccbdf534483f3c1d4f9ff65fb1863033c0b1caa3693e04df2ec20276f06deaacfacc12fcba68de29bde9a2ea9ba457ea429c807659f0625a5eb47b1ec44b0aa784104dfb70463705ab40799c86b2eb83432002fec798f0bdef9e3129d6fd289675b3398fa9f922160f45eade8d18b595a0fc72cd89e7ce9112fdd0994337ac9fdf91c43f4551bc2e594a4ed9151fe9bdfa478ce6047b4a2f3a6e1a2c24151a1", 0xf6}, {&(0x7f00000012c0)="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", 0xf8a}], 0x2, 0x0, 0x0, 0x20008014}], 0x1, 0x4814) recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000000e40)=""/133, 0x85}], 0x1}, 0x4}], 0x1, 0x400001c3, 0x0) symlink(0x0, 0x0) 7.788597146s ago: executing program 1 (id=1148): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) close(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000280)="d7e709134e97914c36c08652714aed2032e040ba020c8049f1bfcf8aed01fb1c2a96a76aeee894f34e4ac0b60b429f64b21cfd49810c4b1a796c28bdbb94c4cc8383c377017146ff13bdbb56159951b2d5eb32ad69c1448395c4f4a0c998ae7d49ce30ce7d9c6852b20509fdf2de442fae1123ff97a1de4c6d50486f296c7ffb4c46212252fd3f0fb1", 0x89}, {&(0x7f0000000980)="3ecc3b467122aff45ce455916ee99a1a60102fa65fc6415f62d4a03bd3d66707274560a9f42246aece1ac3630bb85de1a8153395d932ef09b56995123ba21de6ad3c5a3919aaa222d78bceba9631275c9384e015cfffa0ac6c0838e5ac5c4c4529ae2907d7e474aaf506827c6a5d545bd35818b4c4c6d8521931025abec25d7bef7599da432e2d11f09e4da9f80b13e35c778242d1bfadabf5eb4afab4ca538b06", 0xa1}, {&(0x7f0000000100)}, {&(0x7f0000000a40)="88b12ebdb3c1baec2d17288efe23802c64c9bae0a0f81e30eeb7207cfa90a5f70ff79d1490393827ff9baf8ac2042f3b75cf8507624440465e980efd9a060dd526c4ab4c2e24a08fffa2a78604a066", 0x4f}, {&(0x7f00000003c0)}, {&(0x7f00000004c0)="f70d20f86f8877ac67c76caaae15d8a234be452c3dd0b89653499e9fa69bc2b6ce37a68e943d87b1b68456cb8a40a98b7e71", 0x32}, {&(0x7f0000000580)="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", 0xff}], 0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) fchmod(r0, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)={0x40, 0x17, 0x11, "0a248c0291390e000000005e9ccddd623b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x14, &(0x7f00000001c0), 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xa5, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240400e4}, 0x0) 7.589479953s ago: executing program 3 (id=1149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0009df6187ea928a3385a8ba1400000000000000000000001d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc5", 0xb2}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.568882065s ago: executing program 6 (id=1150): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000001010900060904000601036d7201092108000901220502090581034000070d1200"/54], &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x9, 0x0, 0x3, 0x40, 0x4}, 0x12, &(0x7f0000000140)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x3, 0x1}, @ptm_cap={0x3}]}, 0x2, [{0x2b, &(0x7f0000000180)=@string={0x2b, 0x3, "bbf1fb1def5c308f9e0a15db646aa3067028eb8d49c26c3711367bdc9f74fc0d12a4bf5c44fda57920"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42c}}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x189900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) 7.418308908s ago: executing program 3 (id=1153): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rdma_dest={0x18, 0x114, 0x2, {0x6, 0x7}}], 0x18, 0x20040001}, 0x20000080) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e0, 0xffffffff, 0xffffffff, 0x2e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xa, 0x0, 0x9d6, '\x00', 'syz1\x00', {0x7fffffffffffffff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'macvlan1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x41, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xe0, {0x100}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) 7.327346287s ago: executing program 3 (id=1154): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000200)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110013e083f10cc04332558fc0102030109022400010509401a0904a807020855fe980905eb020004020205090523ea"], 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) sendmmsg$inet(r2, &(0x7f0000000580)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)="df2fbc61b38713ff22161b12b37044c6ecc625a08d91a93eb9be51e353b88b451505e7c7fac39e9c08bfcf9bc9fc616dcd5e517bf7d4bbcc7d620ee1089ceb847918f5b67c4aa4b507b7829feb14cae2d23be10872b432b64d278437ed5e0d76cf10700034722e2bbe0282d60b1db9d45d34a0f6c36f818b1a37522ff4f4585a6f8c936a6ec9a592071d83b335eb9d4ef456e86c3b20490f2ddf80ea48e0b47ae836e9ba"}, {&(0x7f0000000300)="7271754202e6ba8c4a061311c803c801f1f794753cd6a713a48c4d183b6e6bf5b9dfc426f463e86494dbfe06981aa0a4fee1d433d687728eeba5725dbc89c46de9c438fa18824f94446761a7c59ecf4d66dfac85d20fecef41215aba7033929fe655ce964721f14f8ebe27d9120f6a5163ada3e5e5c0fcddf59fc49daaed195cd5b937acfda6234beedd9c56e4ba33195dd01fff0317d155b00a834f20b83016a7d637b7f25a99abaf2969472615b04838aba58bca8d9da2f0c76f42f826a4e9da5a21d091336a69374136a5b68f178734d391460092b30e8ce836dc27d30e6565cf59973f343a2dd917cd057661e1f8"}, {&(0x7f0000000440)="bcc399f7465ef0e1c9eb47bb63df3d6ede2384bc5c74bf4ef9a65d5c2f5a478321578c702def5e6b47073408934267dae65354e49eed07625850479a27f5cd0277ccf76caa92a2803a9c8ce92e5c6bcf61c859fa0d90b3e944ade6d37e1c4d76b9f1f2b3eb8f7151d2e92c01bad45541a383b954cd5ab0bf42359f16803fca97667f96805788170952a6ab9334318cd67dfd48c68e83b0410a52791e1e04f4b628515191dd6649969637574d6d11815dd5c957851754af9ca54568c54202b702ca21fe42b5"}]}}], 0x400000000000294, 0x40015) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r3, 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x24, @loopback, 0x23}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 6.554815947s ago: executing program 5 (id=1155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x1a6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 5.465234313s ago: executing program 5 (id=1156): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160007000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 5.396938314s ago: executing program 5 (id=1157): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109f7ffffff010000000904000000010100000a24010000000201020624040000520524050000072408040300bc0524050005090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b2402017f0200017e8e072401000000000905820910000000000725018100ffff"], 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40300) syz_usb_control_io$lan78xx(r3, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0003c2000000c2039b31fcc9cfa4e81680b193d62b26515b9beeadc425ef80833cad5cab313eff6eb407f1fe0a83170a8a606158ae4ef6b5db75dcbae9b2a928522969b66fc4206a005a53dd3e5528807c066907be7b14cb7174dc3ad09c6a2bc98991db88343d06086d57edc4b0ccabd0629549933caa840c0450f5dc9c19941f0e8021f87a8793495830c4bebdc39f4d372b7521451589e46e125d27b9926a6d7c29bc34892320"]}, &(0x7f00000010c0)={0x34, &(0x7f0000000480)=ANY=[@ANYBLOB="40141a000000bc100ca70500000000000000ce34c1b7faa6e57fc2ae18000000"], &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000640)={0xc0, 0xa1, 0x4, 0x4}, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(r5, 0x501c4814, &(0x7f00000001c0)={0x2, 0x100, 0x0, 0x401, 0x7, 0x6}) r6 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SOUND_MIXER_READ_STEREODEVS(r6, 0x80044dfb, &(0x7f0000000040)) r7 = dup3(r2, r1, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) link(&(0x7f0000000b40)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) write$ppp(r6, &(0x7f0000000280)="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", 0xfa) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_EXTENDED_ERROR(r8, 0xc00c6211, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x2, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000200)={0xfffffbff}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f00000005c0)="e5"}) socket$igmp6(0xa, 0x3, 0x2) 4.669484218s ago: executing program 1 (id=1158): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000400)={0xdb10, 0x0, r0}) syz_io_uring_setup(0x7934, &(0x7f0000002640)={0x0, 0xcb64, 0x4000, 0x2, 0x65}, &(0x7f00000000c0)=0x0, &(0x7f0000000440)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x1000007, @loopback, 0xff}, 0x1c) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000280)=[{0x2a, '\x00', @st={0x4, [{0x3, @uvalue=0xafa}, {0x1, @uvalue=0x8000000000000001}, {0x2, @uvalue=0xff}, {0x2, @uvalue=0x401}]}, 0x4}, {0x5, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0xd}, {0x27, '\x00', @st={0x4, [{0x2, @uvalue=0x80000000}, {0x0, @svalue}, {0x2, @uvalue=0x3}, {0x1, @uvalue=0x1ff}]}, 0xe6}]}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0)={r6, 0x0, r7}, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="060000000000000020000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50) r9 = socket$alg(0x26, 0x5, 0x0) r10 = syz_open_dev$vcsu(&(0x7f0000000100), 0xff, 0x100) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000200)) bind$alg(r9, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r11 = accept4(r9, 0x0, 0x0, 0x800) io_uring_enter(r10, 0x3757, 0xe418, 0x3, &(0x7f0000000240)={[0x6]}, 0x8) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r11) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000026c0)={0xfcec, r12, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa88b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xeb}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb849}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffd058}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0xec, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x28000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x31}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa912}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc8bf}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff4f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffe}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x82e}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2e9340}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xafa3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x17}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}]}]}]}, 0x278}}, 0x20008000) r13 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f00000001c0)="140000001600f963d25a80648456dc921f6b718d12", 0x15}], 0x1}, 0x804) recvmmsg$unix(r11, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x4007, @fd=r13, 0x2, &(0x7f0000002c00)=[{&(0x7f0000000480)="7468da45c9880c095def0cdafe829525a0656f88287795c55c5e796b069a285fade9", 0x22}, {&(0x7f0000000540)="15994eac1fcf2d7b1a31120851678b9714d7f53f5f7437c8514e", 0x1a}, {&(0x7f0000002a00)="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", 0xfa}, {&(0x7f0000002b00)="ec22acf86bd65727601510e76af6dd9674ec1bb7fd61e240094ee9920fbf1b18e3002c5b1a6c40399bdce8b19adcfa7c6e0dff8f242b282b16af510da4a25658cb89b633de4ade482e789d877d82f4ee238d0deb2b473f8666ce83e5d288880ca012369a757991e87d0b4232cfb4f7f994745a22f98ec9d308469562621fdbfd10329cded175a46dfba9834c95cb87fab4e7f724f6ec16c719618f8a425a9b2375c65b7cedd67a71767fe081537d1381e2f6ddac402cdbf0b59c882b36a928563f1b34c5fc2c64691407f43a8768a15ca3a6b340ad089c00eb7217685c16b913354fddcee271", 0xe6}], 0x4, 0x4, 0x1, {0x3}}) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 4.574492222s ago: executing program 1 (id=1159): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005480)=@delchain={0x13c, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xf0, 0x2, [@TCA_BASIC_EMATCHES={0x80, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x50, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x89c6, 0xb2}, {0x9, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='0', @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR=')']}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0x6c, 0x3, [@m_sample={0x68, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x29, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.547243141s ago: executing program 1 (id=1160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x5, 0x0, {0xfffffffffffffffc, 0x8e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x7, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chroot(&(0x7f0000000100)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000200)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x3e, 0x81, 0x38}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) fadvise64(r6, 0x1, 0x8000000000000001, 0x3) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000020005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024005000012080001400000000014000300"], 0xc4}, 0x1, 0x1000000}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') exit(0xf) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='!\x00', 0xfffffffffffffff8) 4.455075068s ago: executing program 6 (id=1161): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) write$P9_RREADDIR(r0, &(0x7f00000002c0)={0x8d, 0x29, 0x2, {0xff, [{{0x1, 0x4, 0x1}, 0x7fff, 0x7, 0x7, './file0'}, {{0x40, 0x4, 0x3}, 0x34, 0x4, 0x7, './file0'}, {{0x10, 0x4, 0x6}, 0x2, 0xfd, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x8, 0x4, 0xd, './file0/file0'}]}}, 0x8d) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') copy_file_range(r1, 0x0, r1, &(0x7f0000000180)=0xfffffffffffff470, 0x0, 0x0) linkat(r0, &(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x10c091, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x824, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f000905e702100000fa0009058202"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.size\x00') ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000000100)={r2, &(0x7f0000000000)='team_slave_1\x00', 0x40000, &(0x7f0000000040)={@align=0x5, {0x6, 0x200, 0x3}}, 0xf5c, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x8000}) 4.374872257s ago: executing program 2 (id=1162): syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x11) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0xfc, 0x4, "b83beb", 0x10, 0x26, "51c39ea35b93cbcc44dc8a8f27eabae7903b2dd0e773ddf230083ef7d3650e750b504567c28a92c37c0cf151371de6bac57d26beaa8aec6171e753e5c8f17cdf19badf31eaf1b085235621de4dc48b398205e7dd36b1fb5a38bf7d57a097a593ed07ab2f2804c79101c542144f629c964757ce2c0fd64e6a42e5bf726250f17fdac0df24813169c24aae79940cd8c35fef0cbdc9dc0adbb10f5e3eeb45fc97d98889115051277136e3f8655a915475083125e3ee1fa06b4506725b65618eda5d1f03f26856d84aaa7c523541af2b482bb930b08f76aa5f00"}]}}}, 0x102) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, 0x0) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) 4.336975982s ago: executing program 2 (id=1163): recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x53}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b9a48f10b1134200c9070102030109022400010100"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r5, 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x405e, 0x4) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) statfs(&(0x7f0000000340)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000440)) sendmmsg$sock(r0, &(0x7f00000044c0), 0x0, 0x0) recvfrom(r1, &(0x7f00000000c0)=""/60, 0x3c, 0x40, 0x0, 0x0) 4.23918283s ago: executing program 3 (id=1164): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4ddf, 0x1}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r3, r3, 0x0, 0x2000fb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) ptrace$getsig(0x4202, 0x0, 0x5, &(0x7f00000011c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x80, 0x4) 3.54224016s ago: executing program 1 (id=1165): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x4ff, 0x4) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000180)={0x0, 0x8, 0x3, "a2ce7d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getpid() syz_pidfd_open(r3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000000000008608ffffffff0102"], 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) r4 = dup(0xffffffffffffffff) write$binfmt_elf64(r4, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0xcd, 0xd, 0x5, 0xc, 0x4, 0x1, 0x3e, 0x7, 0x1de, 0x40, 0x2d9, 0x3c8, 0x1, 0x38, 0x1, 0x9, 0x80, 0x6}, [{0x7, 0xa, 0xc5e, 0xb, 0x5, 0x6, 0x9, 0x9}]}, 0x78) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x8) fanotify_mark(r4, 0x200, 0x28001021, r5, &(0x7f0000000480)='./file0\x00') fcntl$lock(r1, 0x22, &(0x7f0000000340)={0x1, 0x3, 0x88, 0x10001, r3}) socket$nl_route(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="209d1a0e71f45d1f6c04853ff3d9565bb5ed3a14f4959809838d33a7a1c33b9154c1358aeac452827073f6a39d571a68be79cab7108066f39c8e6fc598d1ae2a66cadfd4862a820af9ac914e8da15c6c13532ededeacf6537d2215b8f047abf26e030349791d6a9c10ec4bc9a7390cbfe98917ddaf8b8d57ea0b24d2cba3257e0c9ee29f95a9815f902eb0104a", @ANYRESOCT=r3], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_control_io$sierra_net(r6, &(0x7f0000000000)={0x14, &(0x7f0000000100)={0x20, 0x10, 0x94, {0x94, 0x21, "c06a4759db34f0187370ba952dd4120a7ea078efaa8df5d7ef2a02066dd6b74741588d6aa7a0692444c34dc97eb28593b8bb3afa97925aadc5d98fa3e23c34e293c4efa2acd327e2fb30cf459252531479369cb9679f02c87fcae81ba213d72727a2077fd219981e1d61abba4b50328481c2a966cab267704159cee5ceb8452236791397367a9edfae941284dc22e5c6dd54"}}, &(0x7f00000001c0)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "96da0ba8c10599b94ef998cb85b35a0ca78672020aa7b44ebd1a66140c381a3624888cba059640cfd9cb86a7d27f94fedc52123b9452504cc013025ba62c138b7db7fe253ba36791a79238fb1a2e1b9511365b405df0e7507800ca51c49c8a66d5eb1197f0c5772736397ff0787956627d73de15512ac28611bfd0a024ee40d3236f5238575807e2794c22a8739b53fe1a641d255babb071831167"}}}, &(0x7f0000000300)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="20187800a804af847575bf7cd50000f9065f27c2b2ca8cd6b71a924e3f29484c38e9e5031e45084e51d19fc5ef731de35ed868be56943fa00bb25a0c48582177e2947051cee84ded81fe9e6f0f0335809be7872dbaad29e297e05d194136fc353635da80eed7bcb79a35e47333acbe86069d80c69fe3e3dd38679b4f9f8d4fed5fd454e1cba4d4ea9ce124e2be4f70a381ed7ea3f38fb9b00c44f47e35c3584953d3ec86a7dbfc5431d1674ea2b43f167b294c69160cbcfd18e93588fba151a8ecfa2babf0d7d0d7d3b0d45656b28578452610206968"], &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000080)={0x21, 0x0, 0x3, "feba04"}}) close(0x3) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb434, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x5, 0xe9, &(0x7f0000000d40)=ANY=[@ANYBLOB="120110e9e32780193e9d86014000010203010902d70003010830070904000000010100000a2401ff0700030605ff0924030502030605f50d2407050600d98728e1c6fc930c2407050500f4ae388898ee0f2406040504070006000a0004007f0c24020301010604ff0308050904010000010200000904010101010200000905010940007f00a307250100010200090402000001020000090402010101e4ffff08240202fd35d900001124020200000100033ec937576c7123840a24020101030901bf160724012a05040007240100030110090582090002900909072501000905003eb6eb525cec26a92d5e5b3107bb350347ec6e0bef657a51fdd9800adb48ddbea30382fe1553ef00c8b61d94331af0973f4cb1792c36356309a8577b58b1c8092aa72d23ee76ba3016719cd61979350afb24d93cd73eb07585e9bcbca3935bf1a3e218d889596612a8eb760891264e4e583364fa2a3853aaa391ab449003eb3c761143ccdba2e335bdb75b592c8215de06788f99199921572b9336fa9356fbe3aeb217e526890c909512edc3aaffaf7bfd928b6f497f9ae1625a453a8ba3c9ad4090a16d8a5d91bbd2d27184a52de39fb2a2af35db0b395ae34d10131d3d9f7d68054a4614d5af528b1d5931e55813a7e4196ec3c0b1d010958dac4c1f1708f540d3e8ac9dafa82f8d516601a92de7333f9dbd4b73cd7f43db7c13e90d7b5134fcaf2de2021b54cb080c1cdda914beaebcb44bbcb0ad24aad15d63a9cc330c7182ce47dc0f"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x1, 0x9, 0x3, 0x8}, 0x25, &(0x7f00000002c0)={0x5, 0xf, 0x25, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "b9b7e86037c73153fd6fe16f680f9d2f"}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x8, 0x0, 0xf0d}]}, 0x1, [{0x8b, &(0x7f0000000bc0)=@string={0x8b, 0x3, "c171b49516c5846364018783b03576edc4eded4dd26c65bc9eda40d928b4a5112a7ca9223a5453f7e2f0523c81343b1fbb363aab9a2c4f828803b248940d6f49a3b27ed0728d32875380ae30f7cad16bcb8c351c57d240b078c1667ca358b30e04e585e79ec041d53c8822b71353ca2097c7c0e0830d2ab7b5029076bf430e71a88b9e01bf98adc9ed"}}]}) 2.909915638s ago: executing program 6 (id=1166): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x1a6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 2.761626206s ago: executing program 3 (id=1167): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="050000000003000000004400000008000300", @ANYRES32=r1, @ANYBLOB="040008010d0024009806000000000000000000000a0018"], 0xac}}, 0x0) 2.526469014s ago: executing program 3 (id=1168): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x98, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) lseek(r2, 0x0, 0x2) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x141, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{0x0}, {0x0}, {&(0x7f00000002c0)="d238577f92411fbb7e1b375e170c6776baea17aa460c46faff7e7e19852bbb784647f77b5449421bf7043d6fd555de986c9c8b65b14b15277af57e5b3a31055d5343", 0x42}, {&(0x7f0000000900)}], 0x4, &(0x7f0000000740)}}, {{0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x4048080}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c80)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="000100000002000071000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x70, 0x404}}], 0x3, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r6], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) 2.058756017s ago: executing program 5 (id=1169): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x57, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xa}, 0x8) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000063c0001802c000180140003000000000000000000000000000000000014000400ff0100ddffffffffffffff00000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0x3}}], 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1.853762657s ago: executing program 6 (id=1170): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005480)=@delchain={0x13c, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xf0, 0x2, [@TCA_BASIC_EMATCHES={0x80, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x50, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x89c6, 0xb2}, {0x9, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='0', @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR=')']}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0x6c, 0x3, [@m_sample={0x68, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x29, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.594205742s ago: executing program 6 (id=1171): syz_open_dev$loop(0x0, 0x75f, 0xa382) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1acf9bd7, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rmdir(&(0x7f0000000040)='./file0\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x0, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x4}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050020000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) 1.161545431s ago: executing program 2 (id=1172): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_io_uring_setup(0x10f, &(0x7f00000009c0)={0x0, 0x46ee, 0x10000, 0xffffdffd, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000001080)=0x0) close(0x3) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x67f, 0x64, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r5, 0x0, 0x0, 0x5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006400), 0x0, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xc48b, 0x10, 0x3, 0x35d}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r4, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x3, 0xfffffffffffffff7, 0x0, 0x2, 0x2}) 928.819995ms ago: executing program 2 (id=1173): syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x11) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0xfc, 0x4, "b83beb", 0x10, 0x26, "51c39ea35b93cbcc44dc8a8f27eabae7903b2dd0e773ddf230083ef7d3650e750b504567c28a92c37c0cf151371de6bac57d26beaa8aec6171e753e5c8f17cdf19badf31eaf1b085235621de4dc48b398205e7dd36b1fb5a38bf7d57a097a593ed07ab2f2804c79101c542144f629c964757ce2c0fd64e6a42e5bf726250f17fdac0df24813169c24aae79940cd8c35fef0cbdc9dc0adbb10f5e3eeb45fc97d98889115051277136e3f8655a915475083125e3ee1fa06b4506725b65618eda5d1f03f26856d84aaa7c523541af2b482bb930b08f76aa5f00"}]}}}, 0x102) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, 0x0) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) 705.928909ms ago: executing program 2 (id=1174): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0xe0ff, {0xa, 0x0, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x400}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) 570.011504ms ago: executing program 1 (id=1175): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0], 0x2c2) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_ENDIAN(0x13, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xfc, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}}}]}, @CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x8}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1b}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}, 0xfc}}, 0x48004) socket$nl_netfilter(0x10, 0x3, 0xc) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 569.148885ms ago: executing program 2 (id=1176): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x98, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) lseek(r2, 0x0, 0x2) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x141, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{0x0}, {0x0}, {&(0x7f00000002c0)="d238577f92411fbb7e1b375e170c6776baea17aa460c46faff7e7e19852bbb784647f77b5449421bf7043d6fd555de986c9c8b65b14b15277af57e5b3a31055d5343", 0x42}, {&(0x7f0000000900)}], 0x4, &(0x7f0000000740)}}, {{0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x4048080}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c80)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="000100000002000071000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x70, 0x404}}], 0x3, 0x0) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r7, 0x627, 0x4c1, 0x63, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r6], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) 302.057346ms ago: executing program 6 (id=1177): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) 0s ago: executing program 5 (id=1178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000480)=0x30) socket$inet(0x2, 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x8, 0x4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x5393, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000000)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x10, 0x0) read$FUSE(r8, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) write$char_usb(r5, 0x0, 0x0) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r4) syz_open_dev$sndctrl(0x0, 0x0, 0x8801) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4}}) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0xff, 0x1}, 0x20) kernel console output (not intermixed with test programs): 257.140863][ T5906] usb 3-1: config 0 descriptor?? [ 257.148118][ T61] usb 6-1: SerialNumber: syz [ 257.156331][ T5906] kvaser_usb 3-1:0.0: error -EMSGSIZE: Cannot get software info [ 257.166247][ T61] usb 6-1: config 0 descriptor?? [ 257.173579][ T5906] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 257.383823][ T796] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 257.459424][ T8622] bond1: (slave geneve2): making interface the new active one [ 257.518898][ T8622] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 257.543141][ T1028] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 257.563063][ T61] port100 6-1:0.232: NFC: Could not find bulk-in or bulk-out endpoint [ 257.581585][ T796] usb 2-1: device descriptor read/64, error -71 [ 257.591647][ T1028] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 257.612980][ T61] usb 6-1: USB disconnect, device number 23 [ 257.622248][ T1028] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 257.657838][ T1028] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 257.676632][ T5906] usb 3-1: USB disconnect, device number 29 [ 257.843640][ T796] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 257.904350][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.697'. [ 258.003599][ T796] usb 2-1: device descriptor read/64, error -71 [ 258.124396][ T796] usb usb2-port1: attempt power cycle [ 258.288658][ T8662] Invalid logical block size (4194304) [ 258.459587][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'. [ 258.493624][ T796] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 258.511866][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.700'. [ 258.522570][ T796] usb 2-1: device descriptor read/8, error -71 [ 258.531311][ T8664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.578255][ T8667] syzkaller0: entered promiscuous mode [ 258.587145][ T8667] syzkaller0: entered allmulticast mode [ 258.603244][ T8664] bond4: (slave dummy0): Releasing backup interface [ 258.649796][ T8664] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 258.764288][ T796] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 258.808280][ T796] usb 2-1: device descriptor read/8, error -71 [ 258.815831][ T8671] netlink: 56 bytes leftover after parsing attributes in process `syz.2.702'. [ 258.925679][ T796] usb usb2-port1: unable to enumerate USB device [ 258.975309][ T8675] netlink: 'syz.6.704': attribute type 1 has an invalid length. [ 259.072034][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.6.704'. [ 259.266487][ T5906] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 259.434742][ T5906] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 259.449970][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.462380][ T5906] usb 3-1: Product: syz [ 259.470828][ T5906] usb 3-1: Manufacturer: syz [ 259.476881][ T5906] usb 3-1: SerialNumber: syz [ 259.896746][ T5906] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 259.929234][ T5906] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 261.174721][ T8678] fuse: Bad value for 'fd' [ 261.411621][ T5906] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 261.444161][ T5906] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 261.454829][ T5906] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 261.466310][ T5906] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 261.513691][ T796] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 261.544075][ T8698] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.550837][ T8698] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.557623][ T8698] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.566643][ T5906] usb 3-1: USB disconnect, device number 30 [ 261.604061][ T8698] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.621911][ T8698] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.630809][ T8698] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 261.664725][ T796] usb 7-1: Using ep0 maxpacket: 16 [ 261.673146][ T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.690082][ T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.701440][ T796] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 261.715220][ T796] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 261.724759][ T796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.748004][ T796] usb 7-1: config 0 descriptor?? [ 261.904946][ T5878] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 262.093600][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 262.098795][ T5906] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 262.124307][ T5878] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 262.132992][ T5878] usb 4-1: config 1 has no interface number 0 [ 262.145017][ T5878] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 262.170247][ T5878] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 262.372178][ T5878] usb 4-1: config 1 interface 105 has no altsetting 0 [ 262.504289][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 262.544652][ T5906] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.557285][ T5878] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 262.576912][ T796] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0008/input/input35 [ 262.594053][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.602990][ T5906] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.612975][ T5878] usb 4-1: Product: syz [ 262.617577][ T5878] usb 4-1: Manufacturer: syz [ 262.623649][ T5878] usb 4-1: SerialNumber: syz [ 262.631542][ T5906] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 262.656350][ T5906] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 262.673037][ T5906] usb 2-1: Product: syz [ 262.679299][ T796] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 262.694025][ T8701] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.708260][ T5906] usb 2-1: Manufacturer: syz [ 262.713062][ T8701] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.919935][ T5906] hub 2-1:4.0: USB hub found [ 263.202156][ T5906] hub 2-1:4.0: 2 ports detected [ 263.293602][ T8701] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 263.300887][ T8701] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 263.594995][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 263.595050][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 263.601122][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.661954][ T5906] hub 2-1:4.0: set hub depth failed [ 263.684160][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 263.690361][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 263.693752][ T5820] Bluetooth: hci4: command 0x0c1a tx timeout [ 263.722332][ T5906] usb 2-1: USB disconnect, device number 32 [ 263.759959][ T5878] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 263.760777][ T8701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.811047][ T8701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.829911][ T5878] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 263.844189][ T5878] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 263.877272][ T5878] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 34:7c:ea:65:83:67 [ 263.911517][ T5878] usb 4-1: USB disconnect, device number 32 [ 263.939116][ T5878] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 263.995813][ T5878] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 264.008278][ T5878] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 264.021250][ T5878] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 264.044169][ T796] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 264.213634][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 264.222211][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.261800][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.292754][ T796] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 264.428262][ T5906] usb 7-1: USB disconnect, device number 9 [ 264.451663][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.517319][ T796] usb 3-1: config 0 descriptor?? [ 264.583015][ T796] hub 3-1:0.0: USB hub found [ 264.781450][ T796] hub 3-1:0.0: 1 port detected [ 265.079117][ T8738] syzkaller0: entered promiscuous mode [ 265.084745][ T8738] syzkaller0: entered allmulticast mode [ 265.385664][ T796] hub 3-1:0.0: activate --> -90 [ 265.403315][ T8757] netlink: 'syz.3.718': attribute type 3 has an invalid length. [ 266.722405][ T796] usb 3-1-port1: config error [ 267.034594][ T5906] usb 3-1: USB disconnect, device number 31 [ 269.503634][ T796] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 269.565505][ T8816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.676577][ T796] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.687790][ T796] usb 7-1: config 0 has no interface number 0 [ 269.695570][ T796] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 269.712777][ T796] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 269.724459][ T796] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 269.753678][ T796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.771623][ T796] usb 7-1: config 0 descriptor?? [ 269.804357][ T8816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.811871][ T8815] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 269.829460][ T796] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 269.845193][ T8816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 269.880342][ T8816] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 269.886812][ T8816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 269.903693][ T8816] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 270.036541][ T796] usb 7-1: USB disconnect, device number 10 [ 270.042511][ C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 270.323678][ T5946] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 270.438574][ T8836] syzkaller0: entered promiscuous mode [ 270.444552][ T8836] syzkaller0: entered allmulticast mode [ 270.535260][ T5946] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 270.546545][ T5946] usb 4-1: config 0 interface 0 has no altsetting 0 [ 270.573930][ T5946] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 270.602083][ T796] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 270.612963][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 270.624300][ T5946] usb 4-1: Product: syz [ 270.629528][ T5946] usb 4-1: Manufacturer: syz [ 270.640728][ T5946] usb 4-1: SerialNumber: syz [ 270.667216][ T5946] usb 4-1: config 0 descriptor?? [ 270.679052][ T5946] usb 4-1: selecting invalid altsetting 0 [ 270.763633][ T796] usb 7-1: Using ep0 maxpacket: 8 [ 270.770991][ T796] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.791983][ T796] usb 7-1: config 0 has no interface number 0 [ 270.812980][ T796] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.859386][ T796] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 270.879041][ T8822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.894131][ T8822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.895984][ T796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.915851][ T8822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.958539][ T8822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.003690][ T796] usb 7-1: config 0 descriptor?? [ 271.028526][ T796] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 271.227563][ T796] usb 7-1: USB disconnect, device number 11 [ 271.420341][ T8823] binder: 8821:8823 ioctl c0306201 200000000380 returned -14 [ 271.434020][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 271.839648][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 271.845944][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 271.917606][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 271.923810][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 271.923834][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 271.937785][ T796] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 272.108545][ T796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 272.125802][ T796] usb 3-1: not running at top speed; connect to a high speed hub [ 272.135543][ T796] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 272.145339][ T796] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 272.153918][ T796] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 272.163215][ T796] usb 3-1: config 129 has no interface number 0 [ 272.169636][ T796] usb 3-1: config 129 has no interface number 1 [ 272.176738][ T796] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 272.190415][ T796] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 272.201804][ T796] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 272.215423][ T796] usb 3-1: config 129 interface 135 has no altsetting 0 [ 272.222465][ T796] usb 3-1: config 129 interface 5 has no altsetting 0 [ 272.230441][ T796] usb 3-1: language id specifier not provided by device, defaulting to English [ 272.252221][ T796] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 272.272400][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.281132][ T796] usb 3-1: Manufacturer:  [ 272.286086][ T796] usb 3-1: SerialNumber: Ჸ [ 272.515559][ T796] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.522888][ T796] usb 3-1: MIDIStreaming interface descriptor not found [ 272.636378][ T796] usb 3-1: USB disconnect, device number 32 [ 272.703273][ T5892] usb 4-1: USB disconnect, device number 33 [ 273.860893][ T8864] syzkaller0: entered promiscuous mode [ 273.878812][ T8864] syzkaller0: entered allmulticast mode [ 274.043673][ T61] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 274.283690][ T5892] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 274.303626][ T61] usb 6-1: Using ep0 maxpacket: 16 [ 274.350528][ T61] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 274.373924][ T61] usb 6-1: config 1 has no interface number 0 [ 274.388610][ T61] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 274.411094][ T61] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 274.433020][ T61] usb 6-1: config 1 interface 105 has no altsetting 0 [ 274.447427][ T5892] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 274.458086][ T5892] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 274.476517][ T61] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 274.490339][ T5892] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 274.507158][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.528770][ T5892] usb 2-1: config 220 has no interface number 2 [ 274.536065][ T61] usb 6-1: Product: syz [ 274.545342][ T61] usb 6-1: Manufacturer: syz [ 274.552606][ T5892] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 274.553030][ T8875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.584691][ T61] usb 6-1: SerialNumber: syz [ 274.597481][ T5892] usb 2-1: config 220 interface 0 has no altsetting 0 [ 274.725724][ T8862] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 274.726258][ T5892] usb 2-1: config 220 interface 76 has no altsetting 0 [ 274.740959][ T8862] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 274.767123][ T5892] usb 2-1: config 220 interface 1 has no altsetting 0 [ 274.803244][ T5892] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 274.826870][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.864293][ T5892] usb 2-1: Product: syz [ 275.043940][ T5892] usb 2-1: Manufacturer: syz [ 275.049232][ T5892] usb 2-1: SerialNumber: syz [ 275.232757][ T8862] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 275.244837][ T8862] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 275.273397][ T5892] usb 2-1: selecting invalid altsetting 0 [ 275.281088][ T5892] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 275.289699][ T5892] uvcvideo 2-1:220.0: No valid video chain found. [ 275.304091][ T5892] usb 2-1: selecting invalid altsetting 0 [ 275.310422][ T5892] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 275.323808][ T5892] usb 2-1: USB disconnect, device number 33 [ 275.433680][ T5946] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 275.462924][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.474387][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.585238][ T5946] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 275.595349][ T5946] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.607861][ T5946] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 275.617116][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 275.626398][ T5946] usb 3-1: Product: syz [ 275.630691][ T5946] usb 3-1: Manufacturer: syz [ 275.635315][ T5946] usb 3-1: SerialNumber: syz [ 275.642457][ T5946] usb 3-1: config 0 descriptor?? [ 275.653932][ T5946] usb 3-1: selecting invalid altsetting 0 [ 275.726246][ T61] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 275.869531][ T8883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.883741][ T8883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.931006][ T8883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.945304][ T8883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.977909][ T8889] netlink: 'syz.1.749': attribute type 10 has an invalid length. [ 275.993508][ T8889] team0: Port device netdevsim0 added [ 275.999777][ T61] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 276.034333][ T61] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 34:7c:ea:65:83:67 [ 276.062891][ T61] usb 6-1: USB disconnect, device number 24 [ 276.104661][ T61] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 276.152686][ T8893] netlink: 112 bytes leftover after parsing attributes in process `syz.3.750'. [ 276.195916][ T61] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 276.205749][ T61] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 276.226043][ T61] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 276.315121][ T8886] binder: 8882:8886 ioctl c0306201 200000000380 returned -14 [ 276.744884][ T8911] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.756'. [ 277.654089][ T8927] fuse: Unknown parameter '' [ 277.964660][ T8942] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 277.971392][ T8942] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 278.001402][ T8942] vhci_hcd vhci_hcd.0: Device attached [ 278.123833][ T5892] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 278.172762][ T5946] usb 3-1: USB disconnect, device number 33 [ 278.234069][ T61] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 278.286408][ T5892] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 278.303621][ T5892] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.322183][ T5892] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 278.323947][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 278.341436][ T5892] usb 6-1: config 1 has no interface number 0 [ 278.362345][ T5892] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 278.394626][ T5892] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 278.422556][ T5892] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.444081][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.452177][ T5892] usb 6-1: Product: syz [ 278.459153][ T5892] usb 6-1: Manufacturer: syz [ 278.464280][ T5892] usb 6-1: SerialNumber: syz [ 278.478721][ T8951] sctp: [Deprecated]: syz.2.766 (pid 8951) Use of int in max_burst socket option deprecated. [ 278.478721][ T8951] Use struct sctp_assoc_value instead [ 278.525504][ T10] usb 4-1: config index 0 descriptor too short (expected 8228, got 36) [ 278.539934][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.560107][ T10] usb 4-1: config 0 has no interfaces? [ 278.574264][ T10] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 278.583938][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.591936][ T10] usb 4-1: Product: syz [ 278.597565][ T10] usb 4-1: Manufacturer: syz [ 278.602240][ T10] usb 4-1: SerialNumber: syz [ 278.610778][ T10] usb 4-1: config 0 descriptor?? [ 278.746381][ T8958] netlink: 'syz.5.764': attribute type 46 has an invalid length. [ 278.754224][ T8958] netlink: 'syz.5.764': attribute type 19 has an invalid length. [ 278.761972][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.764'. [ 278.763648][ T5906] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 278.880323][ T8942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.765'. [ 278.943797][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 278.944907][ T8943] vhci_hcd: connection reset by peer [ 278.961002][ T10] usb 4-1: USB disconnect, device number 34 [ 278.977450][ T60] vhci_hcd vhci_hcd.3: stop threads [ 278.986271][ T6055] udevd[6055]: setting owner of /dev/bus/usb/004/034 to uid=0, gid=0 failed: No such file or directory [ 279.003423][ T5906] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 279.013301][ T60] vhci_hcd vhci_hcd.3: release socket [ 279.019334][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.029607][ T60] vhci_hcd vhci_hcd.3: disconnect device [ 279.036019][ T5878] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 279.074340][ T5906] usb 7-1: config 0 descriptor?? [ 279.097053][ T5906] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 279.207330][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 279.216396][ T5878] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 279.224658][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.237679][ T5878] usb 2-1: config 0 has no interface number 0 [ 279.247317][ T5878] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.260093][ T5878] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.280877][ T5878] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.311728][ T5878] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.334759][ T5878] usb 2-1: config 0 interface 52 has no altsetting 0 [ 279.341548][ T5878] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 279.351017][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.371310][ T5878] usb 2-1: config 0 descriptor?? [ 279.602638][ T5878] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input36 [ 279.713787][ T5946] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 279.792489][ T8959] random: crng reseeded on system resumption [ 279.897130][ T5946] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 279.906573][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.915483][ T5946] usb 3-1: Product: syz [ 279.920456][ T5946] usb 3-1: Manufacturer: syz [ 279.927366][ T5946] usb 3-1: SerialNumber: syz [ 280.310210][ T5906] gspca_sonixj: reg_w1 err -71 [ 280.343725][ T5906] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 280.365284][ T5906] usb 7-1: USB disconnect, device number 12 [ 280.378672][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 280.393913][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 280.473047][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 280.485577][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 280.495841][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 280.510694][ T5946] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 280.763350][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 280.788564][ T8976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 280.801838][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.775'. [ 280.811304][ T8976] veth0_to_batadv: entered allmulticast mode [ 280.823141][ T8976] bond2: (slave dummy0): Releasing active interface [ 280.837007][ T8976] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 280.905628][ T5892] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 280.934630][ T5892] usb 6-1: USB disconnect, device number 25 [ 281.083231][ T8984] netlink: 'syz.5.777': attribute type 1 has an invalid length. [ 281.211420][ T8987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.777'. [ 281.246383][ T8984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.280689][ T8993] bond2: (slave dummy0): making interface the new active one [ 281.319862][ T10] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 281.362568][ T8993] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 281.483923][ T5892] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 281.505954][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 281.505984][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 281.520553][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.520582][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 281.520610][ T10] usb 4-1: Product: syz [ 281.520626][ T10] usb 4-1: Manufacturer: syz [ 281.520639][ T10] usb 4-1: SerialNumber: syz [ 281.523370][ T10] usb 4-1: config 0 descriptor?? [ 281.538107][ T10] usb 4-1: selecting invalid altsetting 0 [ 281.548591][ T8999] fuse: Bad value for 'fd' [ 281.574513][ T9000] netlink: 20 bytes leftover after parsing attributes in process `syz.5.780'. [ 281.574529][ T9000] netlink: 52 bytes leftover after parsing attributes in process `syz.5.780'. [ 281.719605][ T5200] usb 2-1: USB disconnect, device number 34 [ 281.796957][ T8980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.859079][ T8980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.916095][ T8980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.918336][ T8980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.286269][ T8985] binder: 8979:8985 ioctl c0306201 200000000380 returned -14 [ 282.633709][ T5946] usb 3-1: USB disconnect, device number 34 [ 282.986242][ T9012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.272949][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.5.787'. [ 283.326300][ T9023] netlink: 28 bytes leftover after parsing attributes in process `syz.5.787'. [ 283.347367][ T9021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.347976][ T9023] veth0_to_batadv: entered allmulticast mode [ 283.355265][ T61] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 283.356326][ T9021] bond2: (slave dummy0): Releasing active interface [ 283.369637][ T9021] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 284.074685][ T5946] usb 4-1: USB disconnect, device number 35 [ 284.296474][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 284.459583][ T10] usb 2-1: device descriptor read/64, error -71 [ 284.793626][ T5892] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 284.833608][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 284.965334][ T5892] usb 7-1: config 5 has an invalid interface number: 171 but max is 0 [ 284.993637][ T10] usb 2-1: device descriptor read/64, error -71 [ 285.511196][ T10] usb usb2-port1: attempt power cycle [ 285.531729][ T5892] usb 7-1: config 5 has no interface number 0 [ 285.546310][ T5892] usb 7-1: config 5 interface 171 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 285.585276][ T5892] usb 7-1: config 5 interface 171 altsetting 2 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 285.608186][ T5892] usb 7-1: config 5 interface 171 altsetting 2 endpoint 0x89 is Bulk; changing to Interrupt [ 285.629953][ T5892] usb 7-1: config 5 interface 171 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 8 [ 285.654944][ T5892] usb 7-1: config 5 interface 171 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.668728][ T5200] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 285.794450][ T5892] usb 7-1: config 5 interface 171 has no altsetting 0 [ 285.808164][ T9056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.840219][ T5892] usb 7-1: string descriptor 0 read error: -22 [ 285.848040][ T5892] usb 7-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=2b.43 [ 285.854568][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 285.893019][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.903987][ T5200] usb 6-1: Using ep0 maxpacket: 16 [ 285.914176][ T10] usb 2-1: device descriptor read/8, error -71 [ 285.928540][ T5200] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 285.960956][ T9040] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 285.986933][ T9061] fuse: Bad value for 'user_id' [ 285.992493][ T5200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.012530][ T9061] fuse: Bad value for 'user_id' [ 286.028013][ T5200] usb 6-1: Product: syz [ 286.053421][ T5200] usb 6-1: Manufacturer: syz [ 286.091612][ T5200] usb 6-1: SerialNumber: syz [ 286.730508][ T5200] usb 6-1: config 0 descriptor?? [ 286.880284][ T5200] hub 6-1:0.0: bad descriptor, ignoring hub [ 286.990456][ T5200] hub 6-1:0.0: probe with driver hub failed with error -5 [ 287.059588][ T5892] usb 7-1: USB disconnect, device number 14 [ 287.073704][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 287.207088][ T10] usb 2-1: device descriptor read/8, error -71 [ 287.253617][ T5946] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 287.325442][ T10] usb usb2-port1: unable to enumerate USB device [ 287.485698][ T5946] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 287.493302][ T5946] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.519530][ T5946] usb 3-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 287.611171][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.863584][ T10] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 287.885141][ T5946] usb 3-1: config 0 descriptor?? [ 287.916696][ T5946] usbhid 3-1:0.0: can't add hid device: -22 [ 287.937234][ T5946] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 288.132194][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 288.179326][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 288.246691][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 288.271438][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 288.323562][ T10] usb 2-1: Product: syz [ 288.470856][ T10] usb 2-1: Manufacturer: syz [ 288.477050][ T10] usb 2-1: SerialNumber: syz [ 288.488222][ T10] usb 2-1: config 0 descriptor?? [ 288.496590][ T10] usb 2-1: selecting invalid altsetting 0 [ 288.839754][ T9073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.862683][ T9073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.904894][ T9073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.918027][ T9073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.076668][ T10] usb 6-1: USB disconnect, device number 26 [ 289.289893][ T9075] binder: 9072:9075 ioctl c0306201 200000000380 returned -14 [ 289.571101][ T5892] usb 3-1: USB disconnect, device number 35 [ 290.340331][ T796] usb 2-1: USB disconnect, device number 39 [ 290.430466][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 290.516125][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 290.516142][ T29] audit: type=1400 audit(1772236031.826:378): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9114 comm="syz.6.814" [ 290.769670][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 290.792931][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.813583][ T10] usb 3-1: Product: syz [ 290.823585][ T10] usb 3-1: Manufacturer: syz [ 290.836797][ T10] usb 3-1: SerialNumber: syz [ 291.341513][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 291.379373][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 291.393088][ T9125] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.401612][ T9125] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.466286][ T9125] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 291.493051][ T9125] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 291.500440][ T9125] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.506813][ T9125] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 291.813683][ T796] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 291.965908][ T796] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 292.001651][ T796] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 292.003444][ T9137] netlink: 'syz.5.819': attribute type 1 has an invalid length. [ 292.032736][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 292.053129][ T796] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 292.073752][ T796] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 292.081958][ T796] usb 2-1: Product: syz [ 292.086970][ T796] usb 2-1: Manufacturer: syz [ 292.091602][ T796] usb 2-1: SerialNumber: syz [ 292.112199][ T796] usb 2-1: config 0 descriptor?? [ 292.113845][ T9140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.819'. [ 292.124854][ T796] usb 2-1: selecting invalid altsetting 0 [ 292.128598][ T9137] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.178305][ T9137] bond3: (slave dummy0): Releasing backup interface [ 292.206156][ T9137] bond4: (slave dummy0): making interface the new active one [ 292.231507][ T9137] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 292.240635][ T5892] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 292.408088][ T796] usb 2-1: USB disconnect, device number 40 [ 292.415155][ T5892] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 253, using maximum allowed: 30 [ 292.433752][ T5892] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.453389][ T5892] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 292.471669][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.481178][ T5892] usb 7-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 292.490475][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.509515][ T5892] usb 7-1: config 0 descriptor?? [ 292.543706][ T5914] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 292.640536][ T9108] fuse: Bad value for 'fd' [ 292.698875][ T5914] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 292.708220][ T6568] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 292.715989][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.722539][ T5892] usbhid 7-1:0.0: can't add hid device: -71 [ 292.729074][ T5914] usb 4-1: Product: syz [ 292.736486][ T5914] usb 4-1: Manufacturer: syz [ 292.741982][ T5892] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 292.742127][ T5914] usb 4-1: SerialNumber: syz [ 292.759480][ T5892] usb 7-1: USB disconnect, device number 15 [ 292.847302][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 292.861526][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 292.872715][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 292.883091][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 292.891077][ T6568] usb 6-1: Using ep0 maxpacket: 16 [ 292.903129][ T10] usb 3-1: USB disconnect, device number 36 [ 292.919333][ T6568] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 292.935578][ T6568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.947091][ T6568] usb 6-1: config 0 descriptor?? [ 292.955437][ T6568] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 293.155496][ T6568] usb 6-1: Detected FT232B [ 293.384681][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 293.430938][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 293.441506][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 293.441692][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 293.482774][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 293.513643][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 293.549524][ T5914] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 293.557668][ T6568] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 293.593751][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 293.593906][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 293.599883][ T5820] Bluetooth: hci4: command 0x0c1a tx timeout [ 293.611965][ T6568] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 293.649216][ T6568] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 293.702616][ T6568] usb 6-1: USB disconnect, device number 27 [ 293.742189][ T6568] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 293.793358][ T6568] ftdi_sio 6-1:0.0: device disconnected [ 293.833110][ T10] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 293.841324][ T5914] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 294.022336][ T10] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 294.033921][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 294.046584][ T5914] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.064668][ T5914] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 294.084065][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 294.094031][ T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 294.103854][ T5914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.123669][ T10] usb 7-1: Product: syz [ 294.133749][ T5914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 294.145632][ T10] usb 7-1: Manufacturer: syz [ 294.150222][ T10] usb 7-1: SerialNumber: syz [ 294.175406][ T5914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 294.187936][ T10] usb 7-1: config 0 descriptor?? [ 294.197908][ T10] usb 7-1: selecting invalid altsetting 0 [ 294.216262][ T5914] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.245732][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.277852][ T5914] usb 3-1: Product: syz [ 294.290579][ T5914] usb 3-1: Manufacturer: syz [ 294.349269][ T5914] cdc_wdm 3-1:1.0: skipping garbage [ 294.361491][ T5914] cdc_wdm 3-1:1.0: skipping garbage [ 294.379352][ T5914] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 294.406705][ T5914] cdc_wdm 3-1:1.0: Unknown control protocol [ 294.425527][ T9155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.456336][ T9155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.479359][ T9168] fuse: Bad value for 'fd' [ 294.489911][ T9155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.514171][ T9155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.550388][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 294.557150][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 294.563669][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 294.570276][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 294.576924][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 294.583526][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 294.590095][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 294.596699][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 294.603106][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 294.609708][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 294.615987][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 294.622578][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 294.629298][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 294.629479][ T5914] usb 3-1: USB disconnect, device number 37 [ 294.635896][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 294.635912][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 294.891033][ T9159] binder: 9154:9159 ioctl c0306201 200000000380 returned -14 [ 295.530424][ T5892] usb 4-1: USB disconnect, device number 36 [ 296.436115][ T10] usb 7-1: USB disconnect, device number 16 [ 296.601633][ T5200] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 296.788943][ T9201] netlink: 64 bytes leftover after parsing attributes in process `syz.6.839'. [ 296.799242][ T5200] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 253, using maximum allowed: 30 [ 296.810616][ T5200] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.840065][ T5200] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 296.868308][ T9202] syzkaller1: entered promiscuous mode [ 296.877568][ T5200] usb 3-1: config 0 interface 0 has no altsetting 0 [ 296.924901][ T9202] syzkaller1: entered allmulticast mode [ 296.930195][ T5200] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 296.988317][ T5200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.021056][ T5200] usb 3-1: config 0 descriptor?? [ 297.245603][ T5200] usbhid 3-1:0.0: can't add hid device: -71 [ 297.251703][ T5200] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 297.263962][ T5200] usb 3-1: USB disconnect, device number 38 [ 298.105922][ T9228] FAULT_INJECTION: forcing a failure. [ 298.105922][ T9228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.119208][ T9228] CPU: 0 UID: 0 PID: 9228 Comm: syz.2.846 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.119227][ T9228] Tainted: [L]=SOFTLOCKUP [ 298.119230][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.119236][ T9228] Call Trace: [ 298.119240][ T9228] [ 298.119245][ T9228] dump_stack_lvl+0xe8/0x150 [ 298.119264][ T9228] should_fail_ex+0x412/0x560 [ 298.119278][ T9228] _copy_from_user+0x2d/0xb0 [ 298.119295][ T9228] video_usercopy+0x36f/0x14b0 [ 298.119309][ T9228] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 298.119320][ T9228] ? __pfx___video_do_ioctl+0x10/0x10 [ 298.119332][ T9228] ? __pfx_video_usercopy+0x10/0x10 [ 298.119348][ T9228] ? __fget_files+0x2a/0x420 [ 298.119362][ T9228] ? __fget_files+0x2a/0x420 [ 298.119374][ T9228] ? __fget_files+0x3a0/0x420 [ 298.119387][ T9228] v4l2_ioctl+0x18d/0x1e0 [ 298.119398][ T9228] ? __pfx_v4l2_ioctl+0x10/0x10 [ 298.119408][ T9228] __se_sys_ioctl+0xfc/0x170 [ 298.119420][ T9228] do_syscall_64+0x14d/0xf80 [ 298.119429][ T9228] ? trace_irq_disable+0x3b/0x150 [ 298.119442][ T9228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.119454][ T9228] ? clear_bhb_loop+0x40/0x90 [ 298.119466][ T9228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.119476][ T9228] RIP: 0033:0x7f178ff9c799 [ 298.119486][ T9228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.119495][ T9228] RSP: 002b:00007f1790e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.119506][ T9228] RAX: ffffffffffffffda RBX: 00007f1790215fa0 RCX: 00007f178ff9c799 [ 298.119513][ T9228] RDX: 0000200000000100 RSI: 00000000c040565f RDI: 0000000000000003 [ 298.119520][ T9228] RBP: 00007f1790e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 298.119525][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.119531][ T9228] R13: 00007f1790216038 R14: 00007f1790215fa0 R15: 00007f179033fa48 [ 298.119545][ T9228] [ 298.993024][ T9243] capability: warning: `syz.2.849' uses 32-bit capabilities (legacy support in use) [ 299.125493][ T9250] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 299.273904][ T5892] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 299.469506][ T5914] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 299.483599][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 299.527551][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.599102][ T5892] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 299.619909][ T5892] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 299.630325][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.638754][ T5892] usb 2-1: Product: syz [ 299.643020][ T5892] usb 2-1: Manufacturer: syz [ 299.647965][ T5892] usb 2-1: SerialNumber: syz [ 299.716877][ T5914] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.725493][ T5914] usb 4-1: config 0 has no interface number 0 [ 299.770876][ T5914] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 299.799367][ T29] audit: type=1326 audit(1772236041.116:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9259 comm="syz.2.855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f178ff9c799 code=0x0 [ 299.872528][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.899614][ T5914] usb 4-1: Product: syz [ 299.905143][ T5914] usb 4-1: Manufacturer: syz [ 299.913987][ T5914] usb 4-1: SerialNumber: syz [ 299.929710][ T5914] usb 4-1: config 0 descriptor?? [ 300.082513][ T5914] snd-usb-us122l 4-1:0.1: usb_set_interface error [ 300.379716][ T5914] snd-usb-us122l 4-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 300.486283][ T9266] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.763999][ T5906] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 300.946959][ T5906] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 253, using maximum allowed: 30 [ 300.976231][ T5906] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.994245][ T5906] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 301.013217][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.023628][ T5946] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 301.032957][ T5906] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 301.033642][ T5914] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 301.050290][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.080173][ T5906] usb 3-1: config 0 descriptor?? [ 301.193582][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 301.202973][ T5946] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 301.220299][ T5914] usb 6-1: config 5 has an invalid interface number: 202 but max is 1 [ 301.233437][ T5946] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 301.244717][ T5914] usb 6-1: config 5 has an invalid interface number: 60 but max is 1 [ 301.252823][ T5914] usb 6-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 301.265491][ T5946] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 301.281405][ T5914] usb 6-1: config 5 has no interface number 0 [ 301.293801][ T5914] usb 6-1: config 5 has no interface number 1 [ 301.306706][ T5914] usb 6-1: config 5 interface 202 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 301.308185][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 301.318826][ T5914] usb 6-1: config 5 interface 202 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 584 [ 301.344584][ T5914] usb 6-1: config 5 interface 202 altsetting 3 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 301.344852][ T5946] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.365445][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 301.373201][ T5914] usb 6-1: config 5 interface 202 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 301.384626][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.387716][ T5906] usb 3-1: USB disconnect, device number 39 [ 301.392628][ T5946] usb 7-1: Product: syz [ 301.392648][ T5946] usb 7-1: Manufacturer: syz [ 301.447592][ T5914] usb 6-1: config 5 interface 202 altsetting 3 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 301.469074][ T5946] usb 7-1: SerialNumber: syz [ 301.475671][ T5914] usb 6-1: config 5 interface 202 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 301.496919][ T5914] usb 6-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 301.541658][ T5914] usb 6-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 301.552943][ T5914] usb 6-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 301.566439][ T5914] usb 6-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 301.582977][ T5914] usb 6-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 301.600662][ T5914] usb 6-1: config 5 interface 202 altsetting 3 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 301.635689][ T5914] usb 6-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 301.654545][ T5914] usb 6-1: config 5 interface 60 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 301.672099][ T5914] usb 6-1: config 5 interface 60 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 301.692220][ T5914] usb 6-1: config 5 interface 60 altsetting 9 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 301.710587][ T5914] usb 6-1: config 5 interface 60 altsetting 9 has a duplicate endpoint with address 0x8E, skipping [ 301.741027][ T5914] usb 6-1: config 5 interface 60 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 301.752525][ T5914] usb 6-1: config 5 interface 60 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 301.773752][ T5914] usb 6-1: config 5 interface 60 altsetting 9 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 301.787272][ T5914] usb 6-1: config 5 interface 202 has no altsetting 0 [ 301.794735][ T5914] usb 6-1: config 5 interface 60 has no altsetting 0 [ 301.803069][ T29] audit: type=1326 audit(1772236043.116:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.6.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f9c799 code=0x7ffc0000 [ 301.805825][ T5914] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=18.24 [ 301.846207][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.920299][ T5914] usb 6-1: Product: 餶覇숆雸詥ꑗሾ拥谴톢꩒ዼ嘰࠽롙惰➉ꑻ櫑됳詣否焌䄠ż鿧諾秄ٸ⯫ㅠ沬䏒ꊥﵿ殰꜁镁᥉◚涩䔿㿶芷⑆鞌햜珞ﮗ흀름鱓哫腫઱崇沠衤辦@爑焑皬䲕五९깈✯讙닝 [ 301.921359][ T29] audit: type=1326 audit(1772236043.116:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.6.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f9c799 code=0x7ffc0000 [ 302.000901][ T29] audit: type=1326 audit(1772236043.156:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.6.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd486f9c799 code=0x7ffc0000 [ 302.027021][ T29] audit: type=1326 audit(1772236043.156:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.6.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f9c799 code=0x7ffc0000 [ 302.052579][ T5914] usb 6-1: Manufacturer: ᠉ [ 302.053075][ T29] audit: type=1326 audit(1772236043.156:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.6.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f9c799 code=0x7ffc0000 [ 302.082152][ T5914] usb 6-1: SerialNumber: syz [ 302.082325][ T29] audit: type=1326 audit(1772236043.156:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.6.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd486f9c799 code=0x7ffc0000 [ 302.111272][ T29] audit: type=1326 audit(1772236043.156:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.6.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f9c799 code=0x7ffc0000 [ 302.153896][ T29] audit: type=1326 audit(1772236043.156:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.6.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f9c799 code=0x7ffc0000 [ 302.178712][ T29] audit: type=1326 audit(1772236043.156:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.6.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd486f9c799 code=0x7ffc0000 [ 302.206005][ T9278] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 302.216819][ T9278] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 302.317008][ T6568] usb 4-1: USB disconnect, device number 37 [ 302.503620][ T796] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 302.653091][ T5914] ums_eneub6250 6-1:5.202: USB Mass Storage device detected [ 302.668460][ T796] usb 3-1: No LPM exit latency info found, disabling LPM. [ 302.680917][ T796] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 302.692549][ T796] usb 3-1: config 1 interface 0 has no altsetting 0 [ 302.722623][ T5914] ums_eneub6250 6-1:5.60: USB Mass Storage device detected [ 302.730008][ T6568] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 302.848430][ T10] usb 2-1: USB disconnect, device number 41 [ 302.862838][ T5914] usb 6-1: USB disconnect, device number 28 [ 302.935900][ T6568] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 302.947828][ T6568] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.969352][ T6568] usb 4-1: config 0 descriptor?? [ 302.984686][ T6568] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 303.189246][ T9290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.202059][ T9290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.212751][ T6568] gp8psk: usb in 128 operation failed. [ 303.220268][ T6568] gp8psk: usb in 137 operation failed. [ 303.228994][ T6568] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 303.259840][ T6568] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 303.339880][ T6568] usb 4-1: USB disconnect, device number 38 [ 303.613601][ T5200] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 303.775715][ T5200] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 303.797815][ T5200] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 303.805825][ T5946] usb 7-1: USB disconnect, device number 17 [ 303.948379][ T5200] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 304.009363][ T8849] udevd[8849]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.105552][ T5200] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 304.123600][ T5200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.143304][ T5200] usb 6-1: Product: syz [ 304.147566][ T5200] usb 6-1: Manufacturer: syz [ 304.165810][ T5200] usb 6-1: SerialNumber: syz [ 304.196212][ T5200] usb 6-1: config 0 descriptor?? [ 304.214871][ T9304] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 304.224500][ T5200] usb 6-1: ucan: probing device on interface #0 [ 304.244002][ T5200] usb 6-1: ucan: invalid endpoint configuration [ 304.250346][ T5200] usb 6-1: ucan: probe failed; try to update the device firmware [ 304.458240][ T5200] usb 6-1: USB disconnect, device number 29 [ 304.555502][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 305.409753][ T796] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 305.483547][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.501097][ T9331] tipc: Started in network mode [ 305.512392][ T9331] tipc: Node identity , cluster identity 4711 [ 305.516707][ T796] usb 3-1: can't set config #1, error -71 [ 305.532686][ T9331] tipc: Failed to obtain node identity [ 305.546526][ T9331] tipc: Enabling of bearer rejected, failed to enable media [ 305.548142][ T796] usb 3-1: USB disconnect, device number 40 [ 305.562246][ T9335] syzkaller0: entered promiscuous mode [ 305.571476][ T9335] syzkaller0: entered allmulticast mode [ 305.896741][ T9349] netlink: 'syz.2.877': attribute type 1 has an invalid length. [ 305.950889][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.877'. [ 306.053926][ T9352] netlink: del zone limit has 8 unknown bytes [ 307.662997][ T9335] netlink: 44 bytes leftover after parsing attributes in process `syz.6.872'. [ 307.684003][ T9349] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 307.730178][ T9353] bond5: (slave dummy0): Releasing backup interface [ 307.956635][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 308.199934][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz.5.882'. [ 308.300800][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.884'. [ 308.384589][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.882'. [ 309.151170][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 309.152381][ T29] audit: type=1400 audit(1772236050.446:421): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9388 comm="syz.1.888" [ 309.314131][ T796] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 309.463952][ T61] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 309.476995][ T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.509819][ T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.545368][ T796] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 309.597034][ T796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.629744][ T796] usb 7-1: config 0 descriptor?? [ 309.648710][ T61] usb 3-1: Using ep0 maxpacket: 16 [ 309.660654][ T61] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.692336][ T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.723436][ T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 309.742949][ T61] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 309.757998][ T61] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.973972][ T61] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 309.988831][ T61] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 309.997066][ T61] usb 3-1: Manufacturer: syz [ 310.004713][ T61] usb 3-1: config 0 descriptor?? [ 310.174530][ T9402] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 310.236614][ T9402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 310.324277][ T9402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.891'. [ 310.333780][ T61] rc_core: IR keymap rc-hauppauge not found [ 310.341095][ T61] Registered IR keymap rc-empty [ 310.350003][ T61] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.373663][ T61] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.406386][ T9402] bond3: (slave dummy0): Releasing backup interface [ 310.420636][ T61] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 310.461256][ T61] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input37 [ 310.482746][ T61] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.503639][ T61] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.505758][ T9402] bond4: (slave dummy0): making interface the new active one [ 310.536437][ T61] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.569720][ T9402] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 310.574912][ T61] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.603758][ T61] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.623820][ T61] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.644241][ T61] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.674105][ T61] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.704540][ T61] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.753630][ T61] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.807843][ T61] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 310.831871][ T61] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 310.846584][ T9417] netlink: 60 bytes leftover after parsing attributes in process `syz.3.894'. [ 310.862266][ T61] usb 3-1: USB disconnect, device number 41 [ 310.870925][ T9417] unsupported nlmsg_type 40 [ 311.205083][ T61] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 311.384167][ T61] usb 3-1: Using ep0 maxpacket: 16 [ 311.394763][ T61] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.413696][ T61] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 311.432030][ T61] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 311.442229][ T61] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.450639][ T61] usb 3-1: Product: syz [ 311.455586][ T61] usb 3-1: Manufacturer: syz [ 311.473232][ T61] usb 3-1: SerialNumber: syz [ 311.664917][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 311.813719][ T5946] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 311.844665][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 311.862981][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.875026][ T10] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 312.024755][ T9441] xt_TPROXY: Can be used only with -p tcp or -p udp [ 312.039371][ T5946] usb 6-1: Invalid ep0 maxpacket: 64 [ 312.078666][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 312.087883][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.106230][ T10] usb 4-1: Product: syz [ 312.110496][ T10] usb 4-1: Manufacturer: syz [ 312.116475][ T10] usb 4-1: SerialNumber: syz [ 312.145412][ T796] usbhid 7-1:0.0: can't add hid device: -71 [ 312.167141][ T796] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 312.255343][ T5946] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 312.285012][ T796] usb 7-1: USB disconnect, device number 18 [ 312.433902][ T5946] usb 6-1: Invalid ep0 maxpacket: 64 [ 312.498157][ T5946] usb usb6-port1: attempt power cycle [ 312.676661][ T9449] xt_TPROXY: Can be used only with -p tcp or -p udp [ 312.727782][ T9450] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 312.903686][ T5946] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 312.928885][ T5946] usb 6-1: Invalid ep0 maxpacket: 64 [ 313.017599][ T9454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.905'. [ 313.064099][ T5946] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 313.120495][ T5946] usb 6-1: Invalid ep0 maxpacket: 64 [ 313.139067][ T5946] usb usb6-port1: unable to enumerate USB device [ 313.562260][ T796] usb 3-1: USB disconnect, device number 42 [ 313.617438][ T9460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.908'. [ 313.713685][ T5892] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 313.885008][ T5892] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 253, using maximum allowed: 30 [ 313.897990][ T5892] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.914947][ T5892] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 313.944655][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 313.958805][ T5892] usb 7-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 313.980496][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.007474][ T5892] usb 7-1: config 0 descriptor?? [ 314.229923][ T5892] usbhid 7-1:0.0: can't add hid device: -71 [ 314.240686][ T5892] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 314.263800][ T5892] usb 7-1: USB disconnect, device number 19 [ 315.562287][ T61] usb 4-1: USB disconnect, device number 39 [ 315.621758][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'. [ 316.673644][ T5946] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 316.704808][ T9488] tipc: Started in network mode [ 316.709728][ T9488] tipc: Node identity 4004, cluster identity 4711 [ 316.752714][ T9488] tipc: Node number set to 16388 [ 316.841194][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 316.907186][ T5946] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.943269][ T5946] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 316.965707][ T5946] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 316.976157][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.007321][ T9505] fuse: Unknown parameter 'g0xffffffffffffffff' [ 317.015693][ T9505] fuse: Unknown parameter '0xffffffffffffffff' [ 317.045821][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 317.055933][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.062410][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.062551][ T5946] usb 3-1: Product: syz [ 317.083168][ T5946] usb 3-1: Manufacturer: syz [ 317.124292][ T796] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 317.140777][ T5946] usb 3-1: SerialNumber: syz [ 317.235804][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 317.245546][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.270963][ T10] usb 2-1: config 0 descriptor?? [ 317.307968][ T10] cp210x 2-1:0.0: cp210x converter detected [ 317.315777][ T796] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 253, using maximum allowed: 30 [ 317.429601][ T796] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.440156][ T796] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 317.453569][ T796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 317.460233][ T796] usb 4-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 317.777004][ T9518] xt_TPROXY: Can be used only with -p tcp or -p udp [ 317.840531][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.922521][ T796] usb 4-1: config 0 descriptor?? [ 318.136459][ T796] usbhid 4-1:0.0: can't add hid device: -71 [ 318.143470][ T796] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 318.204266][ T796] usb 4-1: USB disconnect, device number 40 [ 318.245206][ T10] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 318.288916][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 318.490988][ T9525] netlink: 'syz.6.927': attribute type 1 has an invalid length. [ 318.498801][ T9525] netlink: 'syz.6.927': attribute type 2 has an invalid length. [ 318.614137][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.928'. [ 318.999856][ T9537] syz_tun: entered allmulticast mode [ 319.661133][ T61] usb 2-1: USB disconnect, device number 42 [ 319.694412][ T61] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 319.748961][ T61] cp210x 2-1:0.0: device disconnected [ 320.322239][ T796] usb 3-1: USB disconnect, device number 43 [ 320.976610][ T9578] netlink: 20 bytes leftover after parsing attributes in process `syz.5.938'. [ 320.986362][ T9578] netlink: 24 bytes leftover after parsing attributes in process `syz.5.938'. [ 321.043620][ T9574] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.050319][ T9574] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.057289][ T9574] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 321.085558][ T9574] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 321.093904][ T9574] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.107596][ T9574] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 321.357938][ T9589] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[9589] [ 321.426542][ T5892] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 321.500935][ T29] audit: type=1400 audit(1772236062.806:422): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9586 comm="syz.3.944" [ 321.908554][ T5892] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 321.918525][ T5892] usb 7-1: config 0 has no interface number 0 [ 321.925705][ T5892] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 321.937950][ T5892] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 322.017676][ T5892] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 322.046066][ T5892] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 322.080283][ T5892] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 322.233757][ T5892] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 322.289431][ T5892] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 322.298905][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.308809][ T5892] usb 7-1: config 0 descriptor?? [ 322.324296][ T9570] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 322.390057][ T9570] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 322.450585][ T5892] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 322.958688][ T5820] Bluetooth: hci1: command 0x0c1a tx timeout [ 323.114452][ T5820] Bluetooth: hci0: command 0x0c1a tx timeout [ 323.120576][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 323.120597][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 323.133326][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 323.133567][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 323.334482][ T61] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 323.738478][ T61] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 323.757841][ T61] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.785402][ T61] usb 4-1: Product: syz [ 323.798779][ T61] usb 4-1: Manufacturer: syz [ 323.813634][ T61] usb 4-1: SerialNumber: syz [ 324.050963][ T61] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 324.091279][ T61] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 324.121465][ T61] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 324.159527][ T61] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 324.967746][ T61] usb 7-1: USB disconnect, device number 20 [ 324.996458][ T61] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 325.210436][ T29] audit: type=1400 audit(1772236066.516:423): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9611 comm="syz.2.950" [ 325.470875][ T9624] netlink: 60 bytes leftover after parsing attributes in process `syz.6.951'. [ 325.587187][ T9623] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 325.596610][ T9623] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 325.603404][ T9623] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 325.612353][ T9623] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 325.619427][ T9623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 325.626384][ T9623] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 326.114260][ T9630] fuse: Bad value for 'fd' [ 327.093644][ T61] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 327.289267][ T5200] usb 4-1: USB disconnect, device number 41 [ 327.383725][ T61] usb 3-1: Using ep0 maxpacket: 16 [ 327.401801][ T61] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 327.444916][ T61] usb 3-1: config 0 has no interface number 0 [ 327.474986][ T61] usb 3-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 327.512944][ T61] usb 3-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 327.535367][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 327.545757][ T61] usb 3-1: config 0 interface 11 has no altsetting 0 [ 327.590849][ T61] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b [ 327.616224][ T61] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.641347][ T61] usb 3-1: Product: syz [ 327.648281][ T61] usb 3-1: Manufacturer: syz [ 327.668275][ T61] usb 3-1: SerialNumber: syz [ 327.675554][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 327.681568][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 327.687618][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 327.693623][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.699595][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.732839][ T61] usb 3-1: config 0 descriptor?? [ 327.942976][ T9655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.960'. [ 328.048676][ T61] usb 3-1: Expected 3 endpoints, found: 0 [ 328.073647][ T9655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.960'. [ 328.117697][ T61] usb 3-1: USB disconnect, device number 44 [ 328.441686][ T9665] FAULT_INJECTION: forcing a failure. [ 328.441686][ T9665] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 328.593648][ T9665] CPU: 1 UID: 0 PID: 9665 Comm: syz.2.962 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.593686][ T9665] Tainted: [L]=SOFTLOCKUP [ 328.593692][ T9665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.593713][ T9665] Call Trace: [ 328.593718][ T9665] [ 328.593723][ T9665] dump_stack_lvl+0xe8/0x150 [ 328.593742][ T9665] should_fail_ex+0x412/0x560 [ 328.593757][ T9665] prepare_alloc_pages+0x22a/0x650 [ 328.593773][ T9665] __alloc_frozen_pages_noprof+0x12f/0x380 [ 328.593787][ T9665] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 328.593800][ T9665] ? __pfx_policy_nodemask+0x10/0x10 [ 328.593813][ T9665] ? __lock_acquire+0x6b5/0x2cf0 [ 328.593828][ T9665] alloc_pages_mpol+0x232/0x4a0 [ 328.593842][ T9665] alloc_pages_noprof+0xa8/0x190 [ 328.593854][ T9665] pte_alloc_one+0x23/0x370 [ 328.593870][ T9665] __do_fault+0xd1/0x390 [ 328.593882][ T9665] do_pte_missing+0x5c4/0x3750 [ 328.593895][ T9665] ? _raw_spin_unlock+0x28/0x50 [ 328.593912][ T9665] handle_mm_fault+0x1bec/0x3310 [ 328.593935][ T9665] ? handle_mm_fault+0xee/0x3310 [ 328.593952][ T9665] ? __pfx_handle_mm_fault+0x10/0x10 [ 328.593975][ T9665] ? lock_mm_and_find_vma+0xa7/0x340 [ 328.593989][ T9665] do_user_addr_fault+0x75b/0x1340 [ 328.594009][ T9665] exc_page_fault+0x6a/0xc0 [ 328.594024][ T9665] asm_exc_page_fault+0x26/0x30 [ 328.594034][ T9665] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 328.594049][ T9665] Code: e9 14 49 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 328.594062][ T9665] RSP: 0018:ffffc9000ccafc78 EFLAGS: 00050202 [ 328.594077][ T9665] RAX: ffffffff84ae43ff RBX: 0000000000000002 RCX: 0000000000000002 [ 328.594088][ T9665] RDX: 0000000000000000 RSI: ffffffff8c1f55e0 RDI: 0000200000000000 [ 328.594099][ T9665] RBP: ffffc9000ccafee0 R08: 0000000000000001 R09: 0000000000000002 [ 328.594108][ T9665] R10: dffffc0000000000 R11: fffffbfff183eabc R12: 0000200000000002 [ 328.594118][ T9665] R13: 00007ffffffff000 R14: ffffffff8c1f55e0 R15: 0000200000000000 [ 328.594135][ T9665] ? _copy_to_user+0x9f/0xb0 [ 328.594162][ T9665] _copy_to_user+0x8a/0xb0 [ 328.594183][ T9665] keyctl_capabilities+0x50/0x160 [ 328.594195][ T9665] __se_sys_keyctl+0x4cc/0x9e0 [ 328.594206][ T9665] ? __pfx___se_sys_keyctl+0x10/0x10 [ 328.594218][ T9665] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 328.594229][ T9665] ? __fget_files+0x3a0/0x420 [ 328.594245][ T9665] ? fput+0xa0/0xd0 [ 328.594258][ T9665] ? ksys_write+0x242/0x270 [ 328.594269][ T9665] ? __pfx_ksys_write+0x10/0x10 [ 328.594281][ T9665] ? __x64_sys_keyctl+0x20/0xc0 [ 328.594292][ T9665] do_syscall_64+0x14d/0xf80 [ 328.594300][ T9665] ? trace_irq_disable+0x3b/0x150 [ 328.594314][ T9665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.594324][ T9665] ? clear_bhb_loop+0x40/0x90 [ 328.594336][ T9665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.594345][ T9665] RIP: 0033:0x7f178ff9c799 [ 328.594356][ T9665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.594364][ T9665] RSP: 002b:00007f1790e5b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 328.594374][ T9665] RAX: ffffffffffffffda RBX: 00007f1790215fa0 RCX: 00007f178ff9c799 [ 328.594380][ T9665] RDX: ffffffffffffffae RSI: 0000200000000000 RDI: 000000000000001f [ 328.594387][ T9665] RBP: 00007f1790e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 328.594392][ T9665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.594398][ T9665] R13: 00007f1790216038 R14: 00007f1790215fa0 R15: 00007f179033fa48 [ 328.594414][ T9665] [ 329.461594][ T9673] binder: 9672:9673 unknown command 1667589734 [ 329.493699][ T9673] binder: 9672:9673 ioctl c0306201 200000000080 returned -22 [ 330.645695][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.970'. [ 330.692240][ T61] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 330.887308][ T61] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.896100][ T61] usb 7-1: config 0 has no interface number 0 [ 330.906054][ T61] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.937477][ T61] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.964483][ T61] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.997982][ T61] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 331.025712][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.053866][ T61] usb 7-1: config 0 descriptor?? [ 331.704212][ T61] input: HID 28bd:0042 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0042.0009/input/input38 [ 331.772835][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.969'. [ 331.812407][ T61] uclogic 0003:28BD:0042.0009: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.6-1/input1 [ 331.859791][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 331.977485][ T61] usb 7-1: USB disconnect, device number 21 [ 332.053590][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 332.066550][ T10] usb 4-1: config 0 has no interfaces? [ 332.076889][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 332.094067][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.116770][ T10] usb 4-1: config 0 descriptor?? [ 332.133845][ T5892] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 332.150878][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 332.295683][ T5892] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 332.322009][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 332.339931][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 332.370389][ T5892] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 332.379926][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.388313][ T5892] usb 6-1: Product: syz [ 332.392532][ T5892] usb 6-1: Manufacturer: syz [ 332.405268][ T5892] usb 6-1: SerialNumber: syz [ 332.427861][ T5892] usb 6-1: config 0 descriptor?? [ 332.444332][ T9713] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 332.453343][ T5892] usb 6-1: ucan: probing device on interface #0 [ 332.466615][ T5892] usb 6-1: ucan: invalid endpoint configuration [ 332.474051][ T5892] usb 6-1: ucan: probe failed; try to update the device firmware [ 332.684910][ T5892] usb 6-1: USB disconnect, device number 34 [ 332.824074][ T9732] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 333.150230][ T29] audit: type=1400 audit(1772236074.466:424): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9735 comm="syz.1.983" [ 334.173074][ T9757] netlink: 'syz.5.989': attribute type 1 has an invalid length. [ 334.200842][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 334.245965][ T9761] netlink: 28 bytes leftover after parsing attributes in process `syz.5.989'. [ 334.335471][ T9757] 8021q: adding VLAN 0 to HW filter on device bond5 [ 334.358552][ T9762] bond4: (slave dummy0): Releasing active interface [ 334.415671][ T9762] bond5: (slave dummy0): making interface the new active one [ 334.432826][ T9762] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 334.618630][ T5946] usb 4-1: USB disconnect, device number 42 [ 335.033170][ T5200] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 335.051291][ T29] audit: type=1400 audit(1772236076.276:425): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9789 comm="syz.3.998" [ 335.253585][ T5200] usb 3-1: Using ep0 maxpacket: 16 [ 335.261912][ T5200] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.274727][ T5200] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 335.288719][ T5200] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 335.298726][ T5200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.315716][ T5200] usb 3-1: Product: syz [ 335.320307][ T5200] usb 3-1: Manufacturer: syz [ 335.326029][ T5200] usb 3-1: SerialNumber: syz [ 335.363897][ T796] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 335.513728][ T796] usb 7-1: Using ep0 maxpacket: 16 [ 335.522802][ T796] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 335.543767][ T796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.555724][ T796] usb 7-1: config 0 descriptor?? [ 335.570043][ T796] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 335.578014][ T5946] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 335.754780][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 335.761964][ T5946] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 335.771674][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.881653][ T9805] xt_TPROXY: Can be used only with -p tcp or -p udp [ 335.890664][ T796] usb 7-1: Detected FT232B [ 335.961666][ T5946] usb 2-1: config 0 descriptor?? [ 335.999935][ T5946] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 336.330909][ T796] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 336.348325][ T796] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 336.357824][ T796] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 336.423624][ T796] usb 7-1: USB disconnect, device number 22 [ 336.440610][ T796] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 336.476266][ T796] ftdi_sio 7-1:0.0: device disconnected [ 337.218228][ T5946] gspca_sonixj: reg_w1 err -71 [ 337.233835][ T5946] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 337.260867][ T5946] usb 2-1: USB disconnect, device number 43 [ 337.809896][ T5946] usb 3-1: USB disconnect, device number 45 [ 338.010444][ T9843] x_tables: duplicate underflow at hook 3 [ 338.403588][ T6568] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 338.498423][ T9852] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 338.559412][ T6568] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 338.581734][ T6568] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.660784][ T6568] usb 2-1: config 0 has no interface number 0 [ 338.693811][ T6568] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 338.718321][ T6568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.756847][ T6568] usb 2-1: Product: syz [ 338.786036][ T6568] usb 2-1: Manufacturer: syz [ 338.805879][ T6568] usb 2-1: SerialNumber: syz [ 338.855397][ T6568] usb 2-1: config 0 descriptor?? [ 338.951075][ T6568] ims_pcu 2-1:0.41: Missing CDC union descriptor [ 338.969567][ T6568] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 339.247587][ T9857] netlink: 'syz.2.1016': attribute type 4 has an invalid length. [ 340.904225][ T5946] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 341.066091][ T5946] usb 3-1: device descriptor read/64, error -71 [ 341.520838][ T5946] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 341.619222][ T61] usb 2-1: USB disconnect, device number 44 [ 341.713612][ T5946] usb 3-1: device descriptor read/64, error -71 [ 341.764977][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 341.792089][ T9897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.814833][ T5829] Bluetooth: hci1: connection err: -111 [ 341.824944][ T5946] usb usb3-port1: attempt power cycle [ 342.095638][ T9900] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1029'. [ 342.246370][ T5946] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 342.304148][ T5946] usb 3-1: device descriptor read/8, error -71 [ 342.573780][ T5946] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 342.630228][ T5946] usb 3-1: device descriptor read/8, error -71 [ 342.775987][ T5946] usb usb3-port1: unable to enumerate USB device [ 342.810835][ T9909] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1032'. [ 343.239539][ T9929] binder: 9918:9929 ioctl 400c620e 200000000100 returned -22 [ 343.317127][ T9929] batadv_slave_1: entered promiscuous mode [ 344.588156][ T9965] fuse: Bad value for 'fd' [ 345.080055][ T9973] veth0_to_batadv: left allmulticast mode [ 345.405852][ T9977] netlink: 3752 bytes leftover after parsing attributes in process `syz.5.1053'. [ 345.713972][ T796] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 345.771914][ T9987] sctp: [Deprecated]: syz.5.1054 (pid 9987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.771914][ T9987] Use struct sctp_sack_info instead [ 345.848211][ T5829] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 345.858385][ T5829] Bluetooth: hci1: Injecting HCI hardware error event [ 345.867529][ T5829] Bluetooth: hci1: hardware error 0x00 [ 345.933644][ T796] usb 7-1: device descriptor read/64, error -71 [ 346.233653][ T796] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 346.522845][ T796] usb 7-1: device descriptor read/64, error -71 [ 346.583976][ T9994] tipc: Enabling of bearer rejected, failed to enable media [ 346.664064][ T796] usb usb7-port1: attempt power cycle [ 346.832416][ T5820] Bluetooth: hci4: Malformed Event: 0x13 [ 346.972826][ T5820] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 347.396969][ T796] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 347.455669][ T796] usb 7-1: device descriptor read/8, error -71 [ 347.703614][ T796] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 347.717089][T10013] netlink: 3752 bytes leftover after parsing attributes in process `syz.5.1064'. [ 347.923691][ T5829] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 348.169580][T10019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1065'. [ 348.306839][T10021] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1065'. [ 348.321327][T10019] 8021q: adding VLAN 0 to HW filter on device bond6 [ 348.402584][T10021] bond6: entered allmulticast mode [ 348.441913][ T796] usb 7-1: device descriptor read/8, error -71 [ 348.572194][T10024] ip6gre1: entered allmulticast mode [ 348.583957][ T796] usb usb7-port1: unable to enumerate USB device [ 348.752205][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.845827][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.925764][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.966551][ T796] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 349.043751][ T5892] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 349.145636][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 349.166481][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.183609][ T796] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 349.218915][ T796] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 349.228895][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 349.241787][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.247165][ T5892] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 349.306359][ T796] usb 4-1: config 0 descriptor?? [ 349.331668][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.364499][ T5892] usb 6-1: config 0 descriptor?? [ 349.381541][ T5892] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 349.689508][T10041] FAULT_INJECTION: forcing a failure. [ 349.689508][T10041] name failslab, interval 1, probability 0, space 0, times 0 [ 349.710412][T10041] CPU: 0 UID: 0 PID: 10041 Comm: syz.1.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.710441][T10041] Tainted: [L]=SOFTLOCKUP [ 349.710446][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.710456][T10041] Call Trace: [ 349.710463][T10041] [ 349.710470][T10041] dump_stack_lvl+0xe8/0x150 [ 349.710501][T10041] should_fail_ex+0x412/0x560 [ 349.710524][T10041] should_failslab+0xa8/0x100 [ 349.710544][T10041] __kmalloc_noprof+0xe8/0x760 [ 349.710560][T10041] ? tomoyo_encode+0x28b/0x550 [ 349.710583][T10041] tomoyo_encode+0x28b/0x550 [ 349.710608][T10041] tomoyo_realpath_from_path+0x58d/0x5d0 [ 349.710638][T10041] ? tomoyo_path_number_perm+0x219/0x630 [ 349.710656][T10041] tomoyo_path_number_perm+0x246/0x630 [ 349.710676][T10041] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 349.710693][T10041] ? __lock_acquire+0x6b5/0x2cf0 [ 349.710723][T10041] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 349.710760][T10041] ? __fget_files+0x2a/0x420 [ 349.710785][T10041] ? __fget_files+0x2a/0x420 [ 349.710802][T10041] ? __fget_files+0x3a0/0x420 [ 349.710821][T10041] ? __fget_files+0x2a/0x420 [ 349.710846][T10041] security_file_ioctl+0xc3/0x2a0 [ 349.710867][T10041] __se_sys_ioctl+0x47/0x170 [ 349.710889][T10041] do_syscall_64+0x14d/0xf80 [ 349.710902][T10041] ? trace_irq_disable+0x3b/0x150 [ 349.710916][T10041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.710925][T10041] ? clear_bhb_loop+0x40/0x90 [ 349.710937][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.710947][T10041] RIP: 0033:0x7f25dc19c799 [ 349.710959][T10041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.710972][T10041] RSP: 002b:00007f25dd033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.710991][T10041] RAX: ffffffffffffffda RBX: 00007f25dc415fa0 RCX: 00007f25dc19c799 [ 349.711004][T10041] RDX: 0000200000000000 RSI: 00000000c0485660 RDI: 0000000000000008 [ 349.711016][T10041] RBP: 00007f25dd033090 R08: 0000000000000000 R09: 0000000000000000 [ 349.711027][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.711038][T10041] R13: 00007f25dc416038 R14: 00007f25dc415fa0 R15: 00007f25dc53fa48 [ 349.711057][T10041] [ 349.711216][T10044] binder: 10042:10044 ioctl 4018620d 0 returned -22 [ 349.955285][T10041] ERROR: Out of memory at tomoyo_realpath_from_path. [ 350.105772][ T796] usbhid 4-1:0.0: can't add hid device: -71 [ 350.111765][ T796] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 350.127830][ T796] usb 4-1: USB disconnect, device number 43 [ 350.296891][T10052] netlink: 3752 bytes leftover after parsing attributes in process `syz.6.1075'. [ 350.502324][T10058] blktrace: Concurrent blktraces are not allowed on loop4 [ 350.679309][ T5892] gspca_sonixj: reg_r err -110 [ 350.701447][ T5892] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 350.721107][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 350.773697][T10062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 350.807224][T10062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1079'. [ 350.897939][T10062] bond2: entered allmulticast mode [ 351.183590][T10071] netlink: 'syz.1.1081': attribute type 8 has an invalid length. [ 351.255242][ T796] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 351.423616][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 351.430511][ T796] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 351.439745][ T796] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 351.450218][ T796] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 351.487832][ T796] usb 4-1: config 1 has no interface number 0 [ 351.494698][ T796] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.516503][ T796] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 351.532608][ T796] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 351.545104][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.619751][ T796] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 351.788965][ T796] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 351.823244][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1084'. [ 351.885969][ T61] usb 6-1: USB disconnect, device number 35 [ 352.018588][T10081] netlink: 3752 bytes leftover after parsing attributes in process `syz.5.1086'. [ 352.294026][ T29] audit: type=1400 audit(1772236093.526:426): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10082 comm="syz.2.1085" [ 352.455441][T10089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.468360][T10089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.574890][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.582527][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.675798][T10095] bridge0: entered allmulticast mode [ 352.728920][ T796] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 352.796363][ T5946] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 352.943200][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.951738][ T796] usb 7-1: Using ep0 maxpacket: 16 [ 352.969280][ T796] usb 7-1: unable to get BOS descriptor or descriptor too short [ 352.985885][ T796] usb 7-1: config 1 interface 0 has no altsetting 0 [ 353.004028][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.015378][ T796] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 353.025081][ T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.064894][ T796] usb 7-1: Product: syz [ 353.077515][ T796] usb 7-1: Manufacturer: syz [ 353.086504][ T796] usb 7-1: SerialNumber: syz [ 353.331985][T10093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.340797][T10093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.385999][ T796] usbhid 7-1:1.0: can't add hid device: -71 [ 353.398092][ T796] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 353.426497][ T796] usb 7-1: USB disconnect, device number 27 [ 353.576052][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1091'. [ 353.619910][T10105] 8021q: adding VLAN 0 to HW filter on device bond6 [ 353.641342][T10105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1091'. [ 353.654100][T10105] bond6: entered allmulticast mode [ 354.023792][ T796] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 354.183615][ T796] usb 6-1: Using ep0 maxpacket: 16 [ 354.212079][ T796] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.222550][ T796] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 354.239231][ T796] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 354.248827][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.256976][ T796] usb 6-1: Product: syz [ 354.265020][ T796] usb 6-1: Manufacturer: syz [ 354.270577][ T796] usb 6-1: SerialNumber: syz [ 354.411637][ T6568] usb 4-1: USB disconnect, device number 44 [ 354.418489][ T6568] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 354.804092][T10132] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1098'. [ 355.130100][T10136] xt_TPROXY: Can be used only with -p tcp or -p udp [ 355.664997][ T796] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 355.846291][ T796] usb 7-1: Using ep0 maxpacket: 32 [ 355.872753][ T796] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 355.890092][ T796] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 355.900752][ T796] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 355.914138][ T796] usb 7-1: Product: syz [ 355.931058][ T796] usb 7-1: Manufacturer: syz [ 355.942216][ T796] usb 7-1: SerialNumber: syz [ 355.997831][ T796] usb 7-1: config 0 descriptor?? [ 356.148027][T10140] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 356.673576][ T796] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 356.836916][ T796] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 253, using maximum allowed: 30 [ 356.859398][ T796] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.886424][ T796] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 356.927209][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 356.942182][ T796] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 356.957206][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.039419][ T5946] usb 6-1: USB disconnect, device number 36 [ 357.067947][ T796] usb 3-1: config 0 descriptor?? [ 357.298815][ T796] usbhid 3-1:0.0: can't add hid device: -71 [ 357.318940][ T796] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 357.344153][ T796] usb 3-1: USB disconnect, device number 50 [ 357.385962][ T29] audit: type=1400 audit(1772236098.686:427): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10157 comm="syz.3.1105" [ 357.811937][T10171] netlink: 'syz.5.1108': attribute type 1 has an invalid length. [ 357.875155][T10173] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1109'. [ 357.986581][T10171] 8021q: adding VLAN 0 to HW filter on device bond7 [ 358.131320][T10175] bond5: (slave dummy0): Releasing active interface [ 358.167592][T10175] bond7: (slave dummy0): making interface the new active one [ 358.208018][T10175] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 358.358281][ T796] usb 7-1: USB disconnect, device number 28 [ 358.672082][T10182] kvm: pic: non byte write [ 358.700713][T10188] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1113'. [ 358.798369][T10191] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1113'. [ 359.033858][ T796] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 359.243853][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 359.261147][ T796] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.272298][ T796] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 359.287795][ T796] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 359.303566][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.313184][ T796] usb 4-1: Product: syz [ 359.322348][ T796] usb 4-1: Manufacturer: syz [ 359.327605][ T796] usb 4-1: SerialNumber: syz [ 359.332704][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1118'. [ 359.399975][T10202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.352938][T10211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.372666][T10211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.476322][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.485786][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.627670][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.641394][ T796] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 360.659529][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.835492][ T796] usb 7-1: Using ep0 maxpacket: 8 [ 360.866126][ T796] usb 7-1: config 5 has an invalid interface number: 202 but max is 1 [ 360.876082][ T29] audit: type=1400 audit(1772236102.176:428): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10226 comm="syz.2.1123" [ 360.895723][ T796] usb 7-1: config 5 has an invalid interface number: 60 but max is 1 [ 360.904217][ T796] usb 7-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 360.960848][ T796] usb 7-1: config 5 has no interface number 0 [ 361.104752][ T796] usb 7-1: config 5 has no interface number 1 [ 361.223661][ T796] usb 7-1: config 5 interface 202 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 361.256178][ T796] usb 7-1: config 5 interface 202 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 584 [ 361.288374][ T796] usb 7-1: config 5 interface 202 altsetting 3 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 361.356356][ T796] usb 7-1: config 5 interface 202 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 361.368747][ T796] usb 7-1: config 5 interface 202 altsetting 3 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 361.380446][ T796] usb 7-1: config 5 interface 202 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 361.394273][ T796] usb 7-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 361.406850][ T796] usb 7-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 361.419354][ T796] usb 7-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 361.433129][ T796] usb 7-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 361.531172][ T796] usb 7-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 361.554165][ T796] usb 7-1: config 5 interface 202 altsetting 3 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 361.668373][ T796] usb 7-1: config 5 interface 202 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 361.696970][ T796] usb 7-1: config 5 interface 60 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 361.813995][ T6568] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 361.838865][ T5946] usb 4-1: USB disconnect, device number 45 [ 361.855478][ T796] usb 7-1: config 5 interface 60 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 361.873558][ T796] usb 7-1: config 5 interface 60 altsetting 9 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 362.043592][ T6568] usb 6-1: Using ep0 maxpacket: 16 [ 362.064630][ T6568] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.078170][ T6568] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 362.094808][ T6568] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 362.111127][ T796] usb 7-1: config 5 interface 60 altsetting 9 has a duplicate endpoint with address 0x8E, skipping [ 362.122243][ T6568] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 362.141612][ T796] usb 7-1: config 5 interface 60 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 362.161652][ T796] usb 7-1: config 5 interface 60 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 362.182384][ T6568] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 362.193133][ T6568] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 362.202554][ T6568] usb 6-1: Manufacturer: syz [ 362.211526][ T796] usb 7-1: config 5 interface 60 altsetting 9 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 362.226956][ T6568] usb 6-1: config 0 descriptor?? [ 362.372694][ T796] usb 7-1: config 5 interface 202 has no altsetting 0 [ 362.382786][ T796] usb 7-1: config 5 interface 60 has no altsetting 0 [ 362.392848][ T796] usb 7-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=18.24 [ 362.411707][ T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.474028][ T796] usb 7-1: Product: 餶覇숆雸詥ꑗሾ拥谴톢꩒ዼ嘰࠽롙惰➉ꑻ櫑됳詣否焌䄠ż鿧諾秄ٸ⯫ㅠ沬䏒ꊥﵿ殰꜁镁᥉◚涩䔿㿶芷⑆鞌햜珞ﮗ흀름鱓哫腫઱崇沠衤辦@爑焑皬䲕五९깈✯讙닝 [ 362.505903][ T796] usb 7-1: Manufacturer: ᠉ [ 362.512505][ T796] usb 7-1: SerialNumber: syz [ 362.536481][T10218] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 362.544969][T10218] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 362.650104][ T5200] usb 6-1: USB disconnect, device number 37 [ 362.973052][ T796] ums_eneub6250 7-1:5.202: USB Mass Storage device detected [ 363.120248][ T796] ums_eneub6250 7-1:5.60: USB Mass Storage device detected [ 363.294382][ T796] usb 7-1: USB disconnect, device number 29 [ 363.839161][T10270] netlink: 'syz.6.1135': attribute type 1 has an invalid length. [ 363.925606][T10270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.993075][T10270] bond2: (slave dummy0): making interface the new active one [ 364.049101][T10270] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 364.293593][ T796] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 364.456655][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 364.464782][ T796] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.475420][ T796] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 364.487193][ T796] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 364.497366][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.508861][T10291] warning: `syz.1.1141' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 364.523089][ T796] usb 3-1: Product: syz [ 364.527461][ T796] usb 3-1: Manufacturer: syz [ 364.532401][ T796] usb 3-1: SerialNumber: syz [ 366.726165][T10315] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.1146'. [ 366.811478][ T29] audit: type=1326 audit(1772236108.126:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.5.1147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd945b9c799 code=0x0 [ 366.871461][ T29] audit: type=1326 audit(1772236108.186:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.5.1147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd945b9c799 code=0x0 [ 366.999986][ T5892] usb 3-1: USB disconnect, device number 51 [ 367.353615][ T796] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 367.363837][ T5945] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 367.423587][ T5892] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 367.505757][ T5945] usb 7-1: device descriptor read/64, error -71 [ 367.518919][ T796] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 367.528337][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.536634][ T796] usb 2-1: Product: syz [ 367.541200][ T796] usb 2-1: Manufacturer: syz [ 367.546942][ T796] usb 2-1: SerialNumber: syz [ 367.556191][ T796] usb 2-1: config 0 descriptor?? [ 367.563746][ T6568] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 367.584613][ T5892] usb 3-1: too many configurations: 252, using maximum allowed: 8 [ 367.605654][ T5892] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 76 [ 367.623575][ T5892] usb 3-1: can't read configurations, error -22 [ 367.736035][ T6568] usb 4-1: Using ep0 maxpacket: 16 [ 367.743751][ T6568] usb 4-1: config 5 has an invalid interface number: 168 but max is 0 [ 367.752600][ T6568] usb 4-1: config 5 has no interface number 0 [ 367.753734][ T5892] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 367.759210][ T6568] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 367.779046][ T5945] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 367.790771][ T6568] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 367.805286][ T796] hso 2-1:0.0: Failed to find BULK IN ep [ 367.815428][ T796] usb-storage 2-1:0.0: USB Mass Storage device detected [ 367.822494][ T6568] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 367.837680][ T6568] usb 4-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 367.851078][ T6568] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 367.889603][ T6568] usb 4-1: config 5 interface 168 has no altsetting 0 [ 367.901759][ T6568] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 367.912316][ T6568] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.921747][ T6568] usb 4-1: Product: syz [ 367.924349][ T5892] usb 3-1: too many configurations: 252, using maximum allowed: 8 [ 367.926730][ T6568] usb 4-1: Manufacturer: syz [ 367.939477][ T6568] usb 4-1: SerialNumber: syz [ 367.945758][ T5945] usb 7-1: device descriptor read/64, error -71 [ 367.946255][ T5892] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 76 [ 367.956176][T10333] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 367.978605][ T5892] usb 3-1: can't read configurations, error -22 [ 367.985748][ T5892] usb usb3-port1: attempt power cycle [ 368.054268][ T5945] usb usb7-port1: attempt power cycle [ 368.323714][ T5892] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 368.355978][ T5892] usb 3-1: too many configurations: 252, using maximum allowed: 8 [ 368.364977][ T5892] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 76 [ 368.374510][ T5892] usb 3-1: can't read configurations, error -22 [ 368.423607][ T5945] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 368.454318][ T5945] usb 7-1: device descriptor read/8, error -71 [ 368.503751][ T5892] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 368.524678][ T5892] usb 3-1: too many configurations: 252, using maximum allowed: 8 [ 368.535603][ T5892] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 76 [ 368.544544][ T5892] usb 3-1: can't read configurations, error -22 [ 368.551292][ T5892] usb usb3-port1: unable to enumerate USB device [ 368.713773][ T5945] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 368.735256][ T5945] usb 7-1: device descriptor read/8, error -71 [ 368.854363][ T5945] usb usb7-port1: unable to enumerate USB device [ 369.147804][T10345] netlink: 'syz.5.1156': attribute type 4 has an invalid length. [ 369.157130][T10345] netlink: 'syz.5.1156': attribute type 7 has an invalid length. [ 369.165426][T10345] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1156'. [ 369.583625][ T5945] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 369.735313][ T5945] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 369.745714][ T5945] usb 6-1: config 0 interface 0 has no altsetting 0 [ 369.754679][ T5945] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 369.764137][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 369.772345][ T5945] usb 6-1: Product: syz [ 369.776632][ T5945] usb 6-1: Manufacturer: syz [ 369.781255][ T5945] usb 6-1: SerialNumber: syz [ 369.789174][ T5945] usb 6-1: config 0 descriptor?? [ 369.798473][ T5945] usb 6-1: selecting invalid altsetting 0 [ 369.883969][ T5892] usb 2-1: USB disconnect, device number 45 [ 370.010869][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.028485][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.043029][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.054572][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.221606][T10362] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1162'. [ 370.308248][ T6568] usb 4-1: NFC: Unable to get FW version [ 370.326193][ T6568] pn533_usb 4-1:5.168: probe with driver pn533_usb failed with error -90 [ 370.354067][ T6568] usb 4-1: USB disconnect, device number 46 [ 370.417757][T10349] binder: 10346:10349 ioctl c0306201 200000000380 returned -14 [ 370.494544][T10368] blktrace: Concurrent blktraces are not allowed on loop4 [ 370.533610][ T796] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 370.541372][ T5945] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 370.693586][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 370.700864][ T5945] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 370.717950][ T796] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.731465][ T5945] usb 7-1: config 0 has no interface number 0 [ 370.737790][ T796] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 370.747083][ T5945] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 370.763316][ T796] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 370.774704][ T5945] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.786965][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.800774][ T5945] usb 7-1: config 0 interface 113 has no altsetting 0 [ 370.807924][ T796] usb 3-1: Product: syz [ 370.812096][ T796] usb 3-1: Manufacturer: syz [ 370.820272][ T5945] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 370.829913][ T796] usb 3-1: SerialNumber: syz [ 370.837444][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.848305][ T5945] usb 7-1: Product: syz [ 370.860063][ T5945] usb 7-1: Manufacturer: syz [ 370.868658][ T5945] usb 7-1: SerialNumber: syz [ 370.884425][ T5945] usb 7-1: config 0 descriptor?? [ 370.897676][ T5945] pn533_usb 7-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 371.105376][T10359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.112142][ T5945] usb 7-1: USB disconnect, device number 34 [ 371.277657][ T5200] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 371.447627][ T5200] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.521947][ T5200] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 371.534487][ T5200] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.581219][ T5200] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 371.590719][ T5200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.606423][ T5200] usb 2-1: Product: syz [ 371.617169][ T5200] usb 2-1: Manufacturer: syz [ 371.628186][ T5200] usb 2-1: SerialNumber: syz [ 371.658258][ T5200] hub 2-1:1.0: bad descriptor, ignoring hub [ 371.666248][ T5200] hub 2-1:1.0: probe with driver hub failed with error -5 [ 371.858477][T10371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.872504][ T5200] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 371.884280][T10371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.938072][T10371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.948957][T10371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.954689][T10381] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1167'. [ 371.993170][T10371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.005311][T10371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.541754][ T5200] usb 6-1: USB disconnect, device number 38 [ 372.715091][T10371] usb 2-1: reset high-speed USB device number 46 using dummy_hcd [ 372.913794][ T5946] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 373.063569][ T5946] usb 4-1: device descriptor read/64, error -71 [ 373.163258][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1171'. [ 373.222251][T10371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.239503][T10371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.430489][ T5945] usb 3-1: USB disconnect, device number 56 [ 373.456500][ T796] usb 2-1: USB disconnect, device number 46 [ 373.475236][ T796] usblp0: removed [ 373.493923][ T5946] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 373.643673][ T5946] usb 4-1: device descriptor read/64, error -71 [ 373.760429][ T5946] usb usb4-port1: attempt power cycle [ 373.787689][T10401] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1173'. [ 373.926152][T10403] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.163776][ T5946] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 374.218852][ T5946] usb 4-1: device descriptor read/8, error -71 [ 374.573569][ T5946] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 374.596598][ T5946] usb 4-1: device descriptor read/8, error -71 [ 374.646629][ T30] INFO: task syz.4.537:8035 blocked for more than 143 seconds. [ 374.654441][ T30] Tainted: G L syzkaller #0 [ 374.678341][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.703415][ T30] task:syz.4.537 state:D stack:23904 pid:8035 tgid:8035 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 374.714016][ T5946] usb usb4-port1: unable to enumerate USB device [ 374.743626][ T61] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 374.766936][ T30] Call Trace: [ 374.773139][ T30] [ 374.783181][ T30] __schedule+0x1585/0x5340 [ 374.799590][ T30] ? __pfx___schedule+0x10/0x10 [ 374.813451][ T30] ? schedule+0x90/0x360 [ 374.934768][ T30] schedule+0x164/0x360 [ 374.939070][ T30] schedule_timeout+0xc3/0x2c0 [ 374.951412][ T30] ? finish_task_switch+0x240/0x920 [ 374.963573][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 374.973686][ T61] usb 3-1: device descriptor read/64, error -71 [ 374.984890][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 374.997726][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 375.015619][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.029873][ T30] ? wait_for_completion+0x274/0x5e0 [ 375.040216][ T30] wait_for_completion+0x2cc/0x5e0 [ 375.047849][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 375.068488][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 375.090780][ T30] restrict_one_thread_callback+0x320/0x570 [ 375.096925][ T5200] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 375.113545][ T30] task_work_run+0x1d9/0x270 [ 375.125397][ T30] ? __pfx_task_work_run+0x10/0x10 [ 375.169467][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 375.185573][ T30] get_signal+0x11eb/0x1330 [ 375.206162][ T30] ? __free_object+0x442/0x5e0 [ 375.232525][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 375.238083][ T61] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 375.253543][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 375.266619][ T5200] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 375.277302][ T5200] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 375.287930][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 375.288042][ T5200] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 375.319170][ T5200] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 375.330271][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 375.350582][ T5200] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 375.350660][ T30] ? futex_wait_restart+0x1f5/0x470 [ 375.373786][ T61] usb 3-1: device descriptor read/64, error -71 [ 375.398742][ T5200] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 375.408049][ T5200] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 375.417211][ T5200] usb 6-1: Product: syz [ 375.417212][ T30] exit_to_user_mode_loop+0x86/0x480 [ 375.417242][ T30] ? rcu_is_watching+0x15/0xb0 [ 375.432773][ T5200] usb 6-1: Manufacturer: syz [ 375.449757][ T30] do_syscall_64+0x32d/0xf80 [ 375.460669][ T5200] cdc_wdm 6-1:1.0: skipping garbage [ 375.464944][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.479287][ T5200] cdc_wdm 6-1:1.0: skipping garbage [ 375.485378][ T61] usb usb3-port1: attempt power cycle [ 375.497473][ T30] ? clear_bhb_loop+0x40/0x90 [ 375.508362][ T5200] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 375.520088][ T5200] cdc_wdm 6-1:1.0: Unknown control protocol [ 375.524478][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.545402][ T30] RIP: 0033:0x7f2bb2d9c799 [ 375.555551][ T30] RSP: 002b:00007f2bb313fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000db [ 375.566736][ T30] RAX: fffffffffffffdfc RBX: 0000000000033994 RCX: 00007f2bb2d9c799 [ 375.575020][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2bb301618c [ 375.583206][ T30] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 375.592619][ T30] R10: 00007f2bb313fcb0 R11: 0000000000000246 R12: 00007f2bb313fcd0 [ 375.603461][ T30] R13: 00007f2bb301618c R14: 00000000000339c6 R15: 00007f2bb313fcb0 [ 375.611801][ T30] [ 375.667994][ T30] INFO: task syz.4.537:8036 blocked for more than 144 seconds. [ 375.686933][ T30] Tainted: G L syzkaller #0 [ 375.698458][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.718284][ T30] task:syz.4.537 state:D stack:27744 pid:8036 tgid:8035 ppid:5837 task_flags:0x400140 flags:0x00080006 [ 375.739792][ T30] Call Trace: [ 375.745930][ T30] [ 375.751214][ T30] __schedule+0x1585/0x5340 [ 375.759063][ T30] ? register_lock_class+0x31/0x2e0 [ 375.769560][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.776169][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.783814][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.790438][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.797546][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.804141][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.810366][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.816944][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.823221][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.829811][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.836073][ T5906] usb 6-1: USB disconnect, device number 39 [ 375.862988][ T30] ? __pfx___schedule+0x10/0x10 [ 375.869080][ T30] ? schedule+0x90/0x360 [ 375.874490][ T30] schedule+0x164/0x360 [ 375.878921][ T30] schedule_timeout+0xc3/0x2c0 [ 375.884180][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 375.889537][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 375.895393][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 375.900853][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.906634][ T30] ? wait_for_completion+0x274/0x5e0 [ 375.912281][ T30] wait_for_completion+0x2cc/0x5e0 [ 375.918407][ T61] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 375.918930][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 375.932324][ T30] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 375.941707][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 375.949220][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 375.957601][ T61] usb 3-1: device descriptor read/8, error -71 [ 375.957855][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 375.969868][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 376.002491][ T30] do_syscall_64+0x14d/0xf80 [ 376.010420][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.020732][ T30] ? clear_bhb_loop+0x40/0x90 [ 376.028805][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.034778][ T30] RIP: 0033:0x7f2bb2d9c799 [ 376.039311][ T30] RSP: 002b:00007f2bb3b8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 376.053286][ T30] RAX: ffffffffffffffda RBX: 00007f2bb3015fa0 RCX: 00007f2bb2d9c799 [ 376.061363][ T30] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000009 [ 376.072909][ T30] RBP: 00007f2bb2e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 376.088965][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.102466][ T30] R13: 00007f2bb3016038 R14: 00007f2bb3015fa0 R15: 00007f2bb313fa48 [ 376.116362][ T30] [ 376.119429][ T30] INFO: task syz.4.537:8038 blocked for more than 144 seconds. [ 376.139602][ T30] Tainted: G L syzkaller #0 [ 376.153138][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.176060][ T30] task:syz.4.537 state:D stack:26784 pid:8038 tgid:8035 ppid:5837 task_flags:0x400140 flags:0x00080006 [ 376.203137][ T30] Call Trace: [ 376.210801][ T30] [ 376.217691][ T30] __schedule+0x1585/0x5340 [ 376.222249][ T30] ? register_lock_class+0x31/0x2e0 [ 376.233634][ T61] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 376.248647][ T30] ? __pfx___schedule+0x10/0x10 [ 376.258442][ T30] ? schedule+0x90/0x360 [ 376.262720][ T30] schedule+0x164/0x360 [ 376.273126][ T30] schedule_timeout+0xc3/0x2c0 [ 376.274290][ T61] usb 3-1: device descriptor read/8, error -71 [ 376.286914][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.296151][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 376.306503][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.318497][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.327599][ T30] ? wait_for_completion+0x274/0x5e0 [ 376.337702][ T30] wait_for_completion+0x2cc/0x5e0 [ 376.347321][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 376.353763][ T30] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 376.360276][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 376.366969][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 376.374033][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 376.379239][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 376.388112][ T30] do_syscall_64+0x14d/0xf80 [ 376.392720][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.398831][ T30] ? clear_bhb_loop+0x40/0x90 [ 376.403872][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.403992][ T61] usb usb3-port1: unable to enumerate USB device [ 376.409778][ T30] RIP: 0033:0x7f2bb2d9c799 [ 376.409800][ T30] RSP: 002b:00007f2bb0ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 376.409821][ T30] RAX: ffffffffffffffda RBX: 00007f2bb3016180 RCX: 00007f2bb2d9c799 [ 376.409835][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 376.445340][ T30] RBP: 00007f2bb2e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 376.453309][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.461321][ T30] R13: 00007f2bb3016218 R14: 00007f2bb3016180 R15: 00007f2bb313fa48 [ 376.469441][ T30] [ 376.472469][ T30] INFO: task iou-wrk-8038:8039 blocked for more than 145 seconds. [ 376.490146][ T30] Tainted: G L syzkaller #0 [ 376.496995][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.505770][ T30] task:iou-wrk-8038 state:D stack:28392 pid:8039 tgid:8035 ppid:5837 task_flags:0x404050 flags:0x00080002 [ 376.517723][ T30] Call Trace: [ 376.521076][ T30] [ 376.524101][ T30] __schedule+0x1585/0x5340 [ 376.528696][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 376.533678][ T30] ? __pfx___schedule+0x10/0x10 [ 376.538618][ T30] ? schedule+0x90/0x360 [ 376.542856][ T30] schedule+0x164/0x360 [ 376.547043][ T30] schedule_timeout+0xc3/0x2c0 [ 376.551904][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 376.557380][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.562535][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.567793][ T30] ? wait_for_completion+0x274/0x5e0 [ 376.573094][ T30] wait_for_completion+0x2cc/0x5e0 [ 376.578394][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 376.584110][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.590158][ T30] restrict_one_thread_callback+0x320/0x570 [ 376.596142][ T30] task_work_run+0x1d9/0x270 [ 376.600857][ T30] ? __pfx_task_work_run+0x10/0x10 [ 376.606048][ T30] get_signal+0x11eb/0x1330 [ 376.610666][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 376.616117][ T30] ? __pfx_process_timeout+0x10/0x10 [ 376.621571][ T30] io_wq_worker+0x7e6/0xfc0 [ 376.626185][ T30] ? __pfx_io_wq_worker+0x10/0x10 [ 376.631255][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.636861][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.642061][ T30] ? __pfx_io_wq_worker+0x10/0x10 [ 376.647139][ T30] ret_from_fork+0x51e/0xb90 [ 376.651871][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 376.657022][ T30] ? __switch_to+0xc7d/0x1450 [ 376.661788][ T30] ? __pfx_io_wq_worker+0x10/0x10 [ 376.666896][ T30] ret_from_fork_asm+0x1a/0x30 [ 376.671686][ T30] [ 376.674947][ T30] INFO: task iou-wrk-8038:8040 blocked for more than 145 seconds. [ 376.682764][ T30] Tainted: G L syzkaller #0 [ 376.690207][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.699697][ T30] task:iou-wrk-8038 state:D stack:28464 pid:8040 tgid:8035 ppid:5837 task_flags:0x404050 flags:0x00080006 [ 376.711736][ T30] Call Trace: [ 376.715199][ T30] [ 376.718157][ T30] __schedule+0x1585/0x5340 [ 376.722706][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 376.727781][ T30] ? __pfx___schedule+0x10/0x10 [ 376.732666][ T30] ? schedule+0x90/0x360 [ 376.737319][ T30] schedule+0x164/0x360 [ 376.741504][ T30] schedule_timeout+0xc3/0x2c0 [ 376.746544][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 376.752128][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.757230][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.762457][ T30] ? wait_for_completion+0x274/0x5e0 [ 376.767951][ T30] wait_for_completion+0x2cc/0x5e0 [ 376.773079][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 376.778768][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.783980][ T30] restrict_one_thread_callback+0x320/0x570 [ 376.789986][ T30] task_work_run+0x1d9/0x270 [ 376.795337][ T30] ? __pfx_task_work_run+0x10/0x10 [ 376.800472][ T30] get_signal+0x11eb/0x1330 [ 376.805041][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 376.810538][ T30] ? __pfx_process_timeout+0x10/0x10 [ 376.815943][ T30] io_wq_worker+0x7e6/0xfc0 [ 376.820566][ T30] ? __pfx_io_wq_worker+0x10/0x10 [ 376.825667][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.830783][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.836041][ T30] ? __pfx_io_wq_worker+0x10/0x10 [ 376.841081][ T30] ret_from_fork+0x51e/0xb90 [ 376.845856][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 376.851104][ T30] ? __switch_to+0xc7d/0x1450 [ 376.855863][ T30] ? __pfx_io_wq_worker+0x10/0x10 [ 376.860983][ T30] ret_from_fork_asm+0x1a/0x30 [ 376.865832][ T30] [ 376.868892][ T30] INFO: task syz.4.537:8041 blocked for more than 145 seconds. [ 376.876778][ T30] Tainted: G L syzkaller #0 [ 376.883745][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.892501][ T30] task:syz.4.537 state:D stack:28832 pid:8041 tgid:8035 ppid:5837 task_flags:0x400040 flags:0x00080006 [ 376.905085][ T30] Call Trace: [ 376.908381][ T30] [ 376.911310][ T30] __schedule+0x1585/0x5340 [ 376.915906][ T30] ? __pfx___schedule+0x10/0x10 [ 376.920889][ T30] ? schedule+0x90/0x360 [ 376.925182][ T30] schedule+0x164/0x360 [ 376.929427][ T30] schedule_timeout+0xc3/0x2c0 [ 376.934266][ T30] ? futex_unqueue+0x22/0x240 [ 376.938953][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 376.944361][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.949403][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.954666][ T30] ? wait_for_completion+0x274/0x5e0 [ 376.959979][ T30] wait_for_completion+0x2cc/0x5e0 [ 376.965166][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 376.970817][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.975898][ T30] restrict_one_thread_callback+0x320/0x570 [ 376.981888][ T30] task_work_run+0x1d9/0x270 [ 376.986510][ T30] ? __pfx_task_work_run+0x10/0x10 [ 376.991640][ T30] ? __pfx_futex_wait+0x10/0x10 [ 376.996559][ T30] get_signal+0x11eb/0x1330 [ 377.001736][ T30] ? do_futex+0x333/0x420 [ 377.006160][ T30] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 377.012188][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 377.017811][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 377.024019][ T30] exit_to_user_mode_loop+0x86/0x480 [ 377.029318][ T30] ? rcu_is_watching+0x15/0xb0 [ 377.034278][ T30] do_syscall_64+0x32d/0xf80 [ 377.038878][ T30] ? trace_irq_disable+0x3b/0x150 [ 377.043968][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.050042][ T30] ? clear_bhb_loop+0x40/0x90 [ 377.054763][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.060843][ T30] RIP: 0033:0x7f2bb2d9c799 [ 377.065351][ T30] RSP: 002b:00007f2bb0bc60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 377.073848][ T30] RAX: fffffffffffffe00 RBX: 00007f2bb3016278 RCX: 00007f2bb2d9c799 [ 377.082669][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2bb3016278 [ 377.090718][ T30] RBP: 00007f2bb3016270 R08: 0000000000000000 R09: 0000000000000000 [ 377.098741][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.107509][ T30] R13: 00007f2bb3016308 R14: 00007f2bb313f960 R15: 00007f2bb313fa48 [ 377.115568][ T30] [ 377.118978][ T30] INFO: task syz.4.537:8042 blocked for more than 145 seconds. [ 377.129068][ T30] Tainted: G L syzkaller #0 [ 377.135841][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.144789][ T30] task:syz.4.537 state:D stack:28136 pid:8042 tgid:8035 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 377.160174][ T30] Call Trace: [ 377.163739][ T30] [ 377.166692][ T30] __schedule+0x1585/0x5340 [ 377.171236][ T30] ? __pfx___schedule+0x10/0x10 [ 377.176584][ T30] ? schedule+0x90/0x360 [ 377.180854][ T30] schedule+0x164/0x360 [ 377.185422][ T30] schedule_timeout+0xc3/0x2c0 [ 377.190217][ T30] ? futex_unqueue+0x22/0x240 [ 377.196038][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 377.201445][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 377.207870][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 377.213280][ T30] ? wait_for_completion+0x274/0x5e0 [ 377.219778][ T30] wait_for_completion+0x2cc/0x5e0 [ 377.225631][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 377.231290][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 377.236810][ T30] restrict_one_thread_callback+0x320/0x570 [ 377.242726][ T30] task_work_run+0x1d9/0x270 [ 377.247369][ T30] ? __pfx_task_work_run+0x10/0x10 [ 377.252493][ T30] ? __pfx_futex_wait+0x10/0x10 [ 377.257409][ T30] get_signal+0x11eb/0x1330 [ 377.261924][ T30] ? rcu_is_watching+0x15/0xb0 [ 377.267082][ T30] ? do_futex+0x333/0x420 [ 377.271419][ T30] ? io_uring_create+0x6be/0x980 [ 377.276420][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 377.281974][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 377.288200][ T30] exit_to_user_mode_loop+0x86/0x480 [ 377.293546][ T30] ? rcu_is_watching+0x15/0xb0 [ 377.298327][ T30] do_syscall_64+0x32d/0xf80 [ 377.302927][ T30] ? trace_irq_disable+0x3b/0x150 [ 377.308600][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.314755][ T30] ? clear_bhb_loop+0x40/0x90 [ 377.319444][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.325402][ T30] RIP: 0033:0x7f2bb2d9c799 [ 377.329820][ T30] RSP: 002b:00007f2bb07a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 377.338266][ T30] RAX: fffffffffffffe00 RBX: 00007f2bb3016368 RCX: 00007f2bb2d9c799 [ 377.346263][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2bb3016368 [ 377.357257][ T30] RBP: 00007f2bb3016360 R08: 0000000000000000 R09: 0000000000000000 [ 377.365283][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.373256][ T30] R13: 00007f2bb30163f8 R14: 00007f2bb313f960 R15: 00007f2bb313fa48 [ 377.381281][ T30] [ 377.384369][ T30] [ 377.384369][ T30] Showing all locks held in the system: [ 377.392081][ T30] 1 lock held by khungtaskd/30: [ 377.396971][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 377.406866][ T30] 2 locks held by kworker/u8:4/60: [ 377.412418][ T30] #0: ffff88801d7c6948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 377.423681][ T30] #1: ffffc9000211fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 377.436240][ T30] 4 locks held by kworker/u8:8/3568: [ 377.441618][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 377.451584][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 377.460514][ T30] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 377.469530][ T30] #3: ffffffff9a4a88b8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 377.479868][ T30] 2 locks held by getty/5582: [ 377.484592][ T30] #0: ffff88803290e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 377.494416][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 377.504587][ T30] [ 377.507032][ T30] ============================================= [ 377.507032][ T30] [ 377.517012][ T30] NMI backtrace for cpu 0 [ 377.517037][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 377.517061][ T30] Tainted: [L]=SOFTLOCKUP [ 377.517067][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.517077][ T30] Call Trace: [ 377.517084][ T30] [ 377.517091][ T30] dump_stack_lvl+0xe8/0x150 [ 377.517118][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 377.517139][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 377.517162][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 377.517185][ T30] sys_info+0x135/0x170 [ 377.517202][ T30] watchdog+0xfd9/0x1030 [ 377.517230][ T30] ? watchdog+0x21a/0x1030 [ 377.517260][ T30] kthread+0x388/0x470 [ 377.517277][ T30] ? __pfx_watchdog+0x10/0x10 [ 377.517298][ T30] ? __pfx_kthread+0x10/0x10 [ 377.517315][ T30] ret_from_fork+0x51e/0xb90 [ 377.517339][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 377.517358][ T30] ? __switch_to+0xc7d/0x1450 [ 377.517380][ T30] ? __pfx_kthread+0x10/0x10 [ 377.517398][ T30] ret_from_fork_asm+0x1a/0x30 [ 377.517433][ T30] [ 377.517445][ T30] Sending NMI from CPU 0 to CPUs 1: [ 377.634266][ C1] NMI backtrace for cpu 1 [ 377.634284][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.634304][ C1] Tainted: [L]=SOFTLOCKUP [ 377.634310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.634319][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 377.634343][ C1] Code: 7e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 1d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 377.634355][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 377.634369][ C1] RAX: 00000000007159a7 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 377.634379][ C1] RDX: 0000000000000001 RSI: ffffffff8def2a5a RDI: ffffffff8c27ab80 [ 377.634390][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 377.634401][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901189b0 [ 377.634411][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 0000000000000001 [ 377.634421][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 377.634433][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.634444][ C1] CR2: 00007f17901e6158 CR3: 0000000048fe0000 CR4: 00000000003526f0 [ 377.634457][ C1] Call Trace: [ 377.634464][ C1] [ 377.634469][ C1] default_idle+0x9/0x20 [ 377.634485][ C1] default_idle_call+0x72/0xb0 [ 377.634501][ C1] do_idle+0x1bd/0x500 [ 377.634520][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 377.634541][ C1] ? __pfx_do_idle+0x10/0x10 [ 377.634563][ C1] cpu_startup_entry+0x43/0x60 [ 377.634580][ C1] start_secondary+0x101/0x110 [ 377.634597][ C1] common_startup_64+0x13e/0x147 [ 377.634619][ C1] [ 377.806485][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 377.813358][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 377.824020][ T30] Tainted: [L]=SOFTLOCKUP [ 377.828351][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.838416][ T30] Call Trace: [ 377.841687][ T30] [ 377.844641][ T30] vpanic+0x56c/0xa60 [ 377.848683][ T30] ? __pfx___schedule+0x10/0x10 [ 377.853530][ T30] ? __pfx_vpanic+0x10/0x10 [ 377.858028][ T30] ? __pfx_console_unlock+0x10/0x10 [ 377.863254][ T30] panic+0xc5/0xd0 [ 377.866966][ T30] ? __pfx_panic+0x10/0x10 [ 377.871380][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 377.876751][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 377.882901][ T30] watchdog+0x1023/0x1030 [ 377.887229][ T30] ? watchdog+0x21a/0x1030 [ 377.891646][ T30] kthread+0x388/0x470 [ 377.895702][ T30] ? __pfx_watchdog+0x10/0x10 [ 377.900373][ T30] ? __pfx_kthread+0x10/0x10 [ 377.904958][ T30] ret_from_fork+0x51e/0xb90 [ 377.909552][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 377.914661][ T30] ? __switch_to+0xc7d/0x1450 [ 377.919344][ T30] ? __pfx_kthread+0x10/0x10 [ 377.923923][ T30] ret_from_fork_asm+0x1a/0x30 [ 377.928692][ T30] [ 377.932048][ T30] Kernel Offset: disabled [ 377.936361][ T30] Rebooting in 86400 seconds..