last executing test programs: 14m37.658641137s ago: executing program 1 (id=92): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e657665"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r4 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @empty}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='vcan0\x00', 0x4, 0x6, 0x93d}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x204}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$SG_GET_SG_TABLESIZE(r6, 0x227f, &(0x7f0000000240)) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="0002020100000008ff", @ANYRES8=r4, @ANYRES32=r3], 0x18) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0xdffd, 0x7, @remote, 0x4}, 0x1c) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r9, 0x4004af07, &(0x7f0000000240)=r10) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000040)={0x1, r10}) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) 14m37.153875545s ago: executing program 1 (id=96): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES64=r0, @ANYRESHEX], 0x38}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2c, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1, 0xbc}}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async, rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}}) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) (rerun: 32) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) (async, rerun: 32) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f08000280", 0x20) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) ioctl$sock_FIOGETOWN(r8, 0x40305839, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, 0x0, 0x0) (async, rerun: 32) listen(0xffffffffffffffff, 0xda90) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) (async) syz_io_uring_setup(0xa000bdc, &(0x7f0000000380)={0x0, 0x498, 0x800, 0x1, 0x163}, &(0x7f0000000dc0), &(0x7f0000000240)) 14m36.648818692s ago: executing program 1 (id=100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) getpid() (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x202, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x5c}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) (async) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x6) (async) uname(&(0x7f0000000540)=""/230) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) shutdown(r0, 0x1) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001300)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000013c0)={0x8, 0x0, &(0x7f0000001340)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x0, 0x7, 0x1, "1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0x9, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) 14m36.406940794s ago: executing program 1 (id=103): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x3, r0, 'id0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000000c0)={{0x2, 0x2}, 0xb97ed8f5d3455dee, 0x401, 0x3484, {0x8, 0x7}, 0x2d, 0x7}) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10000}, 0xc) close(r2) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', r3, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x220) timerfd_gettime(0xffffffffffffffff, 0x0) 14m36.123256401s ago: executing program 1 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2c, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x2c}}, 0x0) 14m35.49382101s ago: executing program 1 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6001, 0x27) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc, 0x37}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040005) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @mcast2, 0x5}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 14m34.684130544s ago: executing program 32 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6001, 0x27) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc, 0x37}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040005) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @mcast2, 0x5}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 9m19.893212633s ago: executing program 0 (id=1421): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="d30500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x1151, 0x800, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffdfc, 0x0, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r8, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0xf400, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000940)="a0ce49ec17a6acd64419a61f999f042de10cf09f974a1db3494d0847b9101d77a7343ca4012151a05f3a3fedc2be29cc53923ca3b8664e4c4800b8132e60c1b5c3aa822b40c9b77973e10b106eb6bd63762de546751df6646f13b26733062cec9f2a27272ae0066614d2bee8a2e8e843eeb8cb23d5cb0c0e712d7a814f071567013fb6f386d5f5cc69cf3014551d22ea921708ddfc910fcdbc8fff5ce569ab9952fdb799b7f5c9b9ef64d8da7417c2f37066aa1f6df5051581f2f104a50b8a8576b87321d0cc538e195a618ddd8619695558644771cd57b439f617d7a78b1e36105ed241521577245cdab0d2ef7e3aa6adb8f540b0f650f9071146ffcb51ccf20b84df62929c3099851eb9ab711ec570f60f1e8a91195b36d5b0453e568c6f46d90acef45a14c22b3a08ebe190f40be812b267661deff7f94c117cd484e977bf575617028951a116a3b26cec297494e502beed3eba0b14d4138eb8954d30ee5492d6c2cb78f8a6cfac3af40ed4624620b6369359ed6c9df99556f84ef066bf778b0c90fc6140cd4210ab627d35906789ed42db64a0e04aff8c4d9153d156eba890036079efdb7d4ca380d6eed0957e1d08316d9a067fd298e6f460c517040e5cfe5dfb375983ad66b931a4cee83911e961faacd948720cdd738bb653fc6f0875ea051e442dd870d9f1baa45b71fdc583c7f937bf7d06e678547d5cfdccabd3ae8aa3a93671b285f736f9c6b91dd0830eaf719ea421c7f099d6ecc1e460a203ecbffbe279f88aa7c45fc6cf281e6234d5ef881306a0bce31993b287229281ae22504d652e10c53e1acbea83d87ed23cfb94c8d5b69229e020bdc2589cb8299a35b44caa05e466e259eebaae5134525dd0608275591696acf01db481ad1ff2d9ee55f3db957b3f0dfd33d444bb0c1a32120ac7b04963b08c1543c8bf91def7462a33706e1b2d585abde0975d00098fb961d5764ad697e540ec6056e709f5fc821d473058977b0ce5e76ba5dc02aeff47fd14ca81d00365911f9333b3f3d6fda1132918ed33af3d3f75aca39f0c701f599b8df2e21ad53ca52c68f11789c41c9718817e93eeb546c0d6dd2c57d0158f9f441435c3172c77c707e928fd6cc5a756fac722926f7175560af4387a9f6a7a0b5845244354464f3ee0ba769e76b33c984533c2ca651b18e13ff4438477a1cc285bda468e162460bf452b11ea4e2a4ac4477f732a6753c2c2653e776dc9ba7d9a9045d2d63c1e3f9db80934f905dea49837da2f77d06dd9c1e6f9099612a22bdbeca1bc59f8857239590eb0a9c8a484d9896921ca3a9a05c630c8afb5e90672dc48e921ae2827412d6e4c992dab30f8e34b379842c2cf3eb5ec265465bc6c3b1d3854da8a450419057b3e64f3cc686d77d20aa5c7e211d1a8a1caf6b1e9843d878e55057c8e14fa3dcbc33ef771625cc8ea9eee6cd1f5538949ad3edfe81e4339a04aee19996d88dfa7ca3df26ed523eb9da1106d1c9ad9dd80398ef7e6a6d691b7f474fcdae17d53c995aa8b770e73eff65d6368702cb728309b5ed20f7479c0603f6a81476c019035bc50415123757ab3ff837dffc8a957f63ef2cb071fad5973b91e184c2f445b9952ff5bcd6bbe695a8b274bcec6c504fd7ed85c1768127988bfed35178d51f35498802c2893504d2c3906ea69bec38c04449288279be17f6e523fd75c637b2584f2204c6d13a0a891949426928f099b1c28fbeb62fe8ec844ceadf159587b2ed2a1a70284af452a722b2f70058511163950831f00e79a80819abaee2a929de6ec6a898790e0ca68baffc421a9e76eb81d63213e00011bbd9d61e8c404b6353fe9a09448d4e4a16181d0a28595a553704a4ca73fa06e1c20006723e170822cf970b4ec81cde347eabbd0e1a7ac1820f2006c35b6fc96680e7de9407d3eacd2e49122b3e8972b0b9241dfd258368e2cd86d62132156e0c2b98fe9c29ba9768fb1411e3c5e90af75a720964c8d89c2854e50d2cc9fc6477717ae7ecf7b921d05a6bf741c4f10540158ad4b8a53502f6e91e7981df8cdf5bcab2773c71c0ec97d09b7152ee0b2725f29ffe27da62b1e26e064fc60e907ebad31ed636ad045d22dc2a4502101c90797c5a373467d5e32196227db38baa4af8b31cc2f8527f577be6b25e9f94cc484c024e9a264f4893059ceaf9b1f728d03bd1251dcaded49eb14dc05b790cc6ef9e567f535a3ab94426b22653e0551b51001dab55c5ae88aaeabcfaeae4074a70ee6ef2aa52e05f2412bcec36765d6050a6ad53fc04c70bba655ebb63e63a718585e52ad6b56117391351c91d0019b07db65abdc30f96cc6be6dd4a3aa5482f779cc605ba056df36825310eacf15220467402d9c9493276f06154ee3fa5d43ae3a376e7411e73fa7494636421e462cc48a15619717ccd2bf52c0a44d38d96e1b437070ababf0c7e5b8217347aae1360060cbd3e31efac9d56f7abf3264582d55c55408bd14af39970bd62a417dad3969db81208590a95e0ab0256efba807604ef4fdb76bd219efe5b904c2afb77221e7a5042f76287ac0570456dec1cfe78d852eab4ea7e503407d5286310501a2f3cbfcc12935a227fc0410703ec40d408a00fa3b7406e4cc606d9cc5e42032cd415b428f6789e5945997902817384deef5b7d07325d404e1f5572a5e734fd77c64a93415fcb396305ac8a8d11fbc2619d680a83ce67c7fb68e12192fb8214ae9f5f1149accc87f81c761627cc4c4d751e3064b51fcfd7e3c3f3f8ff915bb19b159da1648b457b58f25ec7a2dd858f606de57cf1c57406a6f0360ec2a2d07615a304fdefdff596d46993d756a6292840872e57508eb692fab848b5bbdca91ff031f74cddc03878c8f41579db1959e5dcdbd8e6a342e6b10e3f98e79410d0718a0d5550aa0242a33ef28b963c2bcd8dd98249347cf0411f4cfa6df7ee4bada21b9ef78335f98b212b64813aa152a8127026bfb63c2649d7b20862f1e72971afcc8e43a8b2c07a38c0cc1d72b07eacd197e92c51c66790aeed91d8af15fd7b258c07cf975e3c40182f12ae06c06632ae0a4ea5d8e9b0a325741c49c34cb375dc177cee68183f142d767403cbde9de6661be9104d703c472f78473098d30402b2aae56ee702191bc49eef7e5957baf531fc1cab23968f620adc702b62296bfa859920db9bd7bf9873ad735c2cec0cdd75be451a91c3e59a0b04d7d1c91855432a8a60cd926a2a480fc561a8aa1a9a1c5ef43b159ab3b51156ecb378a9dd3f4b3e58a9147a4cccb4538e2a34b4e1e8f45e187bc18c67a4bd01afad4e1dad70a66b91498855e1ab2220cbda515593d171e334f0eb4cd3c1cad614b4d53ead556a82f606c477c8347f546d92b36548d6d3f215d16d9374398dabd7bf27adcedb7a2403b6637ca4bdda285ae3122e0cf20a79ae646aaa4c48aaa04c36e7d679d0b64ccd36fe71fb8d1ad595446d50c728f449d4c78c922f58ad60e37d4dd01a2091034a219d3933f8da906501c0431a4698d192065276196f6959e3f45224308ca86cf846afec7361c8c510790ab884152e5c23012b6f5a3f8783dc8e94ff186e217c151d66543e906d82177afdf98554a2c838bad582b229f22bc3b96aa83b665bb77491ec8a2609306a493b8b2b876", 0xa16}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x24004801}}], 0x2, 0x20008004) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 9m18.684365181s ago: executing program 0 (id=1430): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x93ea05013bd5580e) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x40800) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x0) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000400)=""/202) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xd552, 0x30, 0x7, 0x9}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 9m16.401113694s ago: executing program 0 (id=1440): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc80", @ANYRES32=0x0, @ANYBLOB="0800028004003380"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 9m16.172763592s ago: executing program 0 (id=1442): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x8}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x2000800, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x68}}, 0x8000) r3 = socket(0x1e, 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000cc0)={{r3}, 0x0, 0xc, @inherit={0x80, &(0x7f0000000900)={0x0, 0x7, 0x6, 0x7f, {0x8, 0x5, 0x800, 0x6105, 0xffffffffffff9169}, [0xfffffffffffffffe, 0x0, 0xffffffffffff054e, 0x7ff, 0x5, 0x5, 0x0]}}, @subvolid=0x43d9}) connect$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x1}}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r0, &(0x7f0000000200)="820d", &(0x7f0000000240)=@buf="d065b62b80f0a036fc142167cf33de0a0dc6c1238e369451bf8323a607a45d58069b7ecfaf690375fefa10b90a003e0d44a83dffc390cd", 0x1}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000100)={0x2, @win={{0xe369, 0x5, 0xfffff9b6, 0x4}, 0x0, 0xffffffa5, 0x0, 0xd, 0x0, 0x60}}) shmdt(r4) sendfile(0xffffffffffffffff, r0, &(0x7f0000002080)=0x3a, 0x23b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x200040, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x1ff3, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xfe, 0x4, 0x6, 0x9, 0xe6d1, 0x2, 0x40000065, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0xf, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0x6, 0x9, 0x9, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x9, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x2, 0xc5, 0x99, 0x4, 0x2ed, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000004, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x6910, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x800003, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x7, 0xc0, 0x20000003, 0x7, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x5, 0x5, 0x9, 0xfc, 0x7fff, 0x1, 0x3, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x9, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x8, 0x3, 0x7, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x0) shmctl$IPC_RMID(0x0, 0xb00) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x866d014d088730b6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 9m15.489306761s ago: executing program 0 (id=1444): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xb, 0x3, "91abc12404cf37"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x88}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x11, 0xffffffffffffff10, 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x63, 0x0, 0x0) syz_io_uring_setup(0x5e0, &(0x7f0000000100)={0x0, 0x4fc7, 0x1000, 0x1, 0x74}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x10100, 0x3, 0x8000001, 0x0, r5}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r7, &(0x7f0000000440)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, r8, 0x80, &(0x7f00000003c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, 0x1}, 0x0, 0x0, 0x1}) socket(0x2, 0x80805, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') 9m13.975308808s ago: executing program 0 (id=1446): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x6) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x6) (async) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) (async) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) (async) 8m58.804559955s ago: executing program 33 (id=1446): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x6) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x6) (async) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) (async) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) (async) 11.743445269s ago: executing program 2 (id=4280): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="d30500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x1151, 0x800, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffdfc, 0x0, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r8, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0xf400, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000940)="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", 0xa16}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x24004801}}], 0x2, 0x20008004) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0x204001) syz_usb_disconnect(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 9.320606704s ago: executing program 6 (id=4291): futex(0xfffffffffffffffe, 0x4, 0x81, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x6, &(0x7f0000000240)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000005c0)={0x18, &(0x7f0000000480)={0x0, 0x18, 0x1, '5'}, 0x0, 0x0, 0x0, 0x0}) 7.703238279s ago: executing program 4 (id=4297): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'veth1_vlan\x00', 0x803}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000040)={0x22, {{0x29, 0x0, 0x0, @private1, 0x800000b0}}}, 0x88) r3 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r3, 0x2, 0xf, &(0x7f0000000100)=""/214) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000319021508fd070100e56a0102030109022400010c0a40060904"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) semctl$GETZCNT(r3, 0x3, 0xf, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) semctl$SEM_INFO(r3, 0x1, 0x13, &(0x7f0000000000)=""/18) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, '%-#%', 0x3a, '///W', 0x3a, './file0', 0x3a, [0x46, 0x43]}, 0x31) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) inotify_init() semget$private(0x0, 0x20000000102, 0x40) syz_emit_ethernet(0x56, &(0x7f0000000240)={@random="c074e32afe57", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@canfd={0xd, {{0x3, 0x1}, 0x30, 0x2, 0x0, 0x0, "f9f7033056d6ab04627ea302c6791f6ccf32ecb662c18f241e463a54ca9b18682f9d1c52f05e41a6cef8dd2d59e22322298abac1ed6908a9adc3b011f9ec3628"}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$FE_READ_STATUS(0xffffffffffffffff, 0x80046f45, &(0x7f0000001180)) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = semget$private(0x0, 0x3, 0x214) semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000000040)=""/56) 7.291590372s ago: executing program 2 (id=4299): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x7c, 0x2, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) r3 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000280)={0x14, &(0x7f00000004c0)={0x20, 0x23, 0xf6, {0xf6, 0x23, "2d800dba902c1b3aed1d0d700ae585c2534418a45c3deb1276896445554d1456d21e927ad71c4b3008522e10bf3177dbb9f11ccaa0da7f541138d4ea5a11e4190c060c2b970da7ce43818a77b5a7c3d6f596bb42fd9b6cbe4dec34cfca1137f739d65d13a4482f020d94d7d95988cfdc1ad97ae6e4452b2a738d3a7d0e4b5d84c0d124f7edfb46ae85a5d1fbd2d699b11ce2b396e7df4b3ca1111abb49c03aaa1797c126e06ec8987254c38fd4f4824d092bb57b3537ed330dd459e91449b85cccea12ec66afaea2457b0c6a393129c34c03c5350c67a02679e704a19b358dd022f465f05bbc688fab7ac2e76269964c365596eb"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f00000005c0)={0x40, 0x15, 0xc9, "4b6db3f34023874713bfcb0086f5b702cab1d62c1d00016f45291e23a79cc6b99204d04ba7dad6db814cd911ee844c2b1d7dc6c0593100da05725a38d0500657e35ed8b0dab67cb58adcc7f4f4adadfe5381e384e858377c7a01c5edf6022c41f70e6e1da46e227fc6637c0d1895cfe8e098b9535334d7ab99bf71ececec9a1f65765d88002e68a41ec84ccca6665fac99abb6f9c7445183b6be44366fabcda6a973a4dcfe2e5fa536bc72437c24da8b87d21c9ded282898106e8b231d4f11257e8b2e863944a48bf5"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x77}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x8, 0x1, 0x3, 0x9, 0x71, 0x75, 0xffff, 0x81, 0xfff, 0x1, 0x4, 0x401}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f00000006c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000740)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000180)={0x34, &(0x7f0000000800)={0x40, 0x7, 0x69, "3946d6c7e3f382d7d58e3a72b93e0725f735d7bd0bafa76ef02e552bd2adc66e5d1443a99622c70ac50e119a4b1a937401cda9dbfa6c65080d2ebba0e4adffbfd67645ec84e64ab0494645e65444597d7f8bde51a9e6fae8960f2df4592000833f7992abff5726e1ad"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000380)={0x40, 0x16, 0x4, "68037bd5"}, 0x0, 0x0}) (async) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r1, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a0000000000060002000100000014002000ff"], 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x0) 5.948739847s ago: executing program 6 (id=4303): read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000000)=""/60, 0x3c, 0x7984e2f8) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0xffffffdd) r1 = syz_open_dev$vim2m(0x0, 0xfffffffffffffff6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x1012, 0x1, @discrete={0xfffffffe, 0x7fff}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0xfc, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0xfffffffc, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x3, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x4, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb57, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0xfff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 5.521207221s ago: executing program 2 (id=4304): r0 = socket$inet6(0xa, 0x3, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001580)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x28}}], 0x1, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000450009000000000000002d3f000003000034688a98771319124a28cd619198a5ca3fd342a7a10d83719eab6257eba964d26b91dd99ed1bdcde3a1a2df346971ce136f1e95df66e12d7aea05b5ba1fa50917296b39e04f919fcb6"], 0x14}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4}, {0x6, 0xff}]}) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) fstat(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x4e20, 0x8, 0x4e23, 0x2, 0x2, 0x80, 0x80, 0x1d, 0x0, r9}, {0x40, 0x3, 0xb, 0x9, 0x3, 0x10, 0x8, 0x5}, {0x66, 0x400, 0x4, 0x9b}, 0x10000, 0x6e6bba, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d3, 0x2b}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3503, 0x2, 0x2, 0x1, 0xffffff48, 0x7, 0xfffffffd}}, 0xe8) truncate(&(0x7f0000000240)='./file0\x00', 0x1) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4840) syz_open_dev$rtc(&(0x7f0000000040), 0x3ff, 0x400) 5.074001549s ago: executing program 5 (id=4306): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001880)={&(0x7f0000000580)={0xa, 0x4e20, 0x4, @private0, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001740)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18, 0x4000}, 0x8050) 5.023815275s ago: executing program 5 (id=4307): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x67, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, 0x0, 0x0) 4.6024527s ago: executing program 4 (id=4308): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.405505489s ago: executing program 4 (id=4309): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) (async) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x80085665, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="81100600000000009500000000000000d3a2ea0b068e75da3a2fb6c46439324dfe021c305a753bf4fdf3549d7b7308bc4c0e6949bf81a89bd8b2dd97361a10b1ac2fcaa25e62f6030aee68326a7b880406a18e971ebf3f5dea83fa3fa037f00200e91d1d3b71eeb5346ca9193ad5a122de01c0d2212ae7d25d9e40c0c368a0d9bb21d008628c"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) close(r5) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x498042, 0x0) (async) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00ffff0000000000000000000700000b0500010007e2ff00"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) (async) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) (async) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {}, 0x1, 0x40, 0xaa, 0x0, 0x1, 0x1, 0xffffffff, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) 4.404506029s ago: executing program 2 (id=4310): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000031700090025bd70711de1bd25060000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 4.310906056s ago: executing program 6 (id=4311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0501ffffffff0a0000002e0000000800", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 4.273241573s ago: executing program 2 (id=4312): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680)) r4 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e21, 0x3, 'fo\x00', 0x5, 0xa7e, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000180)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000001c0)={0x52, 0xffff, 0x560c, {0x803, 0x9}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x1, {0x2, 0x5, 0xfffb, 0xa}, 0x0, 0x0}}) 4.249521331s ago: executing program 5 (id=4313): futex(0xfffffffffffffffe, 0x4, 0x81, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000005c0)={0x18, &(0x7f0000000480)={0x0, 0x18, 0x1, '5'}, 0x0, 0x0, 0x0, 0x0}) 3.926771986s ago: executing program 6 (id=4314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000340)) (fail_nth: 3) 3.23664129s ago: executing program 6 (id=4315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_connect(0x3, 0x44, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x45, 0xd1, 0xa5, 0xff, 0x9fb, 0x6026, 0x4172, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x4, 0xfb, 0x70, 0xb, "", [{{0x9, 0x4, 0x2, 0x2, 0x2, 0x9a, 0x5f, 0xa4, 0x9, [], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x1, 0x4, 0x39, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x6, 0xff, 0x5}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x0, 0x7, 0x4, 0xf4, 0x20, 0x3}, 0x88, &(0x7f0000000440)={0x5, 0xf, 0x88, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x8, 0xf, 0x14, [0xfff0, 0xff00c0, 0xc0, 0xff00c0, 0xff00c0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x6, 0x2, 0x6, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x5, 0xe}, @generic={0x4a, 0x10, 0x4, "bd8ec9de1a42e238101b1b53bc8a265f170da327e694b894ecf47c51d2c9f44c1c7dcf550b7f161a5f5f7024ba0a12c0a12a355a98462f27dc3110473ab7d6a8140f2ca322954e"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0xd, 0x9}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x418}}]}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) r3 = syz_io_uring_setup(0x6131, &(0x7f0000000140)={0x0, 0x79b0, 0x400, 0x1, 0x48024a}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000240)=0xc) sched_setattr(r7, &(0x7f0000000280)={0x38, 0x6, 0x10000000, 0x3, 0x8, 0x80, 0x800, 0x9, 0xd1, 0x2}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r2, 0x87, 0x0, 0x0, 0x16}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0001}]}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r10}) r11 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r11, 0x0) r12 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r12, 0x402, 0x8000003d) landlock_restrict_self(r11, 0x0) landlock_restrict_self(r11, 0x0) landlock_restrict_self(r11, 0x1) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r10, 0x0, &(0x7f0000000800)="e200e743f60cba1335bad8075c67c2a666c492f56b95b9ac03424eb972866b35db7042a0e161eb677623441dff54154f9b6cc2306a63038110298587db632012fc06f51dc603ed4cc4e3e1e707e6c5d5fd3fec24ffa0fe9af2c8715fc216e73976f388f309b1fc81648b2ce6c133326325c04010972abb2353d86421329950ab8bb9e4f3c549d28e8033052764f40211ca34f639f1e3ff49f591f7a62eba08796105cac579836a662719fce4d149192777336396e49d2a6a1ea35cccd8e756e6e23f960930d4e306be6765b9933789c1c4ae58035e78d7c8a160afccdf842ffdefe2cbd698e78c4be5ddb75a2a30ac0ff16a2528fdd3e71aa6fd6031c85f1707ac1a6e5d037ba0823a94f56e10ecadcf72563f578bb9d4071450c667eec895351a921205dfdfa4e0e505bddf426331c4273ae9f83d4f6e51dfb6ab515da9634152fd1387d6af51be964da15b35cf7b621a3355914496a6ea006e4f103eb08721986eac1d26210a13c8af12e4c62a3bea34e6a74f2a1e46296ae96218f94438e33648b233317c931b360ea0ccb12ba8d39308aff449a701c844ac848ffaf7cfd9ca6a1e1a6ef2e55e2505fda8989684392398cbeb74202ba97d22e6ed43ca109fc4c6b0499cafb6a38fa86df3623ce71d3579b857bfdcaddd4eddf7442134377017d404a9828937ae11e411b1f2f33b5ba2c35c5d4db5747e0df7b571b7c15ced43fc7393d9cb585af46cd7b5dd43bdef4c70c27bc21a4c5c80e6d4c6f96d14b8b6cc81c715ad887ba31ec9f5cd1a87951f27fd7af0c00b11b760abfd6dce3211a5ee63ebe69376ea4e50474f3b2f83b78edd55e1a2e77c0ae798e8a47fdfe55e6202764c9dffaadba4d975ab770156eee52b6418b2e0cd0d561668846a3260175b778788b01585bc4daf06616c0e94d350f8781c9635fda345bb967c2fd13ea5da882676f836f3c5ac25938b76c0cdcd19b68e1dbb6c8cd8279765c0be7fd0fa2cac8cd49c71a28f35aa09a821752d356005d7487457d20a7cf3c99f8db3e773d7196c7da1926b2e1154055b39234601a50d0ef68c82d22c3f088b3f6cfa6c9c616c88d5e1b81c9b970adc86bbd1e9d421a7935731033576fd5038b09c3429a02fe379f250a6210ac3e69f67fd832ed9670ecfe040ec762adc52eba87afc177778ebfe96617d0cf1ef6ebad62e19de247bcb1660beceae1de7ae820fae53372fd1fd3b585c4269b69edc07f9902daf58b5a25901057206be2b6a4063730d367081f83143f756c1b31214f6abe89cf78751456fc4d81f666572f800640bd04fe6d0637f4fcbe8f494f0e617cb4baa3459d82f196a0c9e20f433fb36d23bfee1663bc6d4b53fc5805488397b2beafa6a04e1d3fbb6f3e39a0c7997c202ec5959637e123808c4077308181cbf7acb36867a7b860eb624a25aafda95e3ff5308fd106cc3287ce872e1f8323db124d6f03490352d57fcf60c619abe7ef81f51cb70ae9bd2f02f06e8a7c41e6b439bec84515f1ae83b39cffe8370e8bb2bc09c35f346ad6cb7526a779b870fed04dd9cb658ba3ad4484c4cd6fb19e9a4e071978a072120ee5fef2b1728a289bf645f536c4284a09479fd73a89eea9d72a30066a5e56524366a6faf8eeda9ddf5600e7efba256987f73210403687813be1263791bad9c76b43056574f09b4b5ba473b938e87dec42544223648f2db2cd98a96ab3109975b4f7bb769b77ac5cda8a6aed392ecc7919fdf86950dd2d66bf1bee55e4a11c57b685caccc799fe7bb80f92f10802ca95cf72fcf3dc2aab8c4af99ef4c09db6103a1fd06ec186706d56d2059bf20d517c7fae1e3e8744b088f97fe6fa4a6ea603cc201f46e989c9644c72619957f01d0b3721a6586d8f223b7e80ad14ed4f728798766dccb3a2c94c4ed1764e4e2369953bb6244d43ca4db909a2d70d80953ba26c3aa2a0468719323c52a9b43815f29c8b44691f3618d26f2c26f00937d0d72671987c9a495b262d13cdaa183957e4d74f417aa5c25b8c9fcc99ddb0b96721a419715d59f10f557e7cd94407d573f28688d15ef24066cf06337c9f68ecbbd59dcff7ea064a0ff91b833d31bc35a8abe3ab55181297075a62f0e0b19bb0a036dc0c3e3d7dd57c0e4ea629ca78255d2620aeb2c35cb32de12e0bce404ff6067fc0cdc46fab731569b9edb7ae59a8162b4901d0c0aa50d0d9a010b405c57a18611dd9cb020a969c9d3410bc3e8690eabcb343879f5d709a5162e06c91372eee37fe3eb7bdf6cf9e10b407763d507d54e73af873d8b7e25e9062aa7ed6a6de2f3a35c7c374bb6b535d61841bf04600c9988e77dc0a13765022f121be57b66b330fbfbb9e34d799a25ac91365d5c84e5dc275aa25256c827059b1dfcfd76d677db2cba2b468121f7acc7b700a639916350adef8ae361ab9b2adefbc73f2ccb84796017c77d41064ca8f6afc7971d62d14f5eed55fdf248038b9c035c3439c1a9c0aff4a424000f1619539b901c8a155d619bec33e4e7da45d0d3a2fcc515c22ff149173b428484d5e794cc27f77892863e2b2250fe7d43aa0d837529722616a318be030cd476c11fd2db42a8b913ee446818b1bc22452d7b3f35c400f121337bd4273490e4456e77f161962735da949f973f7612bab9a117b2a6bad967b0dfe2365115ac8e2aa3e52cbe744a01ac8b43f9bb9d3d6020c001bdc56e16b063ab4b6dd64be9722e39d4fc46f739357afa6884e36d161e6a266cbedd959b07ac307c0e55afc17e1e91f4bcca893461e2580d102fe71c701bbec5d23d62e5707f42e41e767099b5e7c91c2e4ea4266282ae2aae41145e5871a294729bb91fc82a9a7044b677751fa187fb655dd9defdb7cf3ff734a30c4e8025c8e0151c386b27208878a2", 0x800, 0x9}) (async) ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r10, 0x0, &(0x7f0000000800)="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", 0x800, 0x9}) close_range(r8, 0xffffffffffffffff, 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x627, 0x4c1, 0x63, 0x0, 0x0) (async) io_uring_enter(r3, 0x627, 0x4c1, 0x63, 0x0, 0x0) 3.236493923s ago: executing program 4 (id=4316): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 2.899237798s ago: executing program 3 (id=4317): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x16, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xa, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0xffffffff, 0x9, 0x5, 0x2, 0x0, 0x6, 0x203, 0x1ff, 0x2ab, 0x0, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1ffffe, 0x1f461e2a, 0x7, 0xe661, 0x7fff, 0x7fff, 0x3, 0x7fff, 0x4c75, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x12, 0x6, 0x3, 0x2, 0x5, 0x6, 0x8f, 0x6, 0x6, 0x7, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e9, 0xcb, 0xf9, 0x0, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x4, 0x7, 0x6, 0x8, 0xe, 0x7ff, 0x1, 0x0, 0xfffffffe, 0x7, 0x4, 0x8000, 0x9, 0x3fe, 0x405, 0x4, 0x4, 0xfb, 0x5, 0x8001, 0x5f31, 0xbcf5, 0x1, 0x534, 0x2, 0x6, 0x4, 0x1009, 0x80000008, 0x9, 0x6, 0xfffff800, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x0, 0x3, 0x9, 0xfffffffb, 0x7, 0x3, 0x9, 0x48c93694, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x9, 0x7fff, 0x80000000, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e9, 0x9, 0x5, 0x2, 0x2, 0x804, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfad, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x206, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x3, 0xfffffffa, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x40000005, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0xf, 0x4, 0x1003, 0x101, 0x10000, 0x6, 0x1, 0xffff, 0xe620, 0x9, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x2, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x10001, 0x100, 0x95fe, 0x4, 0x2000002, 0xffff, 0x3, 0x1, 0x10080, 0xe013e92d, 0x8, 0x30b1d693, 0x5a2b, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000940)={'macvlan1\x00', &(0x7f0000000880)=@ethtool_gstrings={0x1b, 0x7, 0x87, "b32183212a51b69debbae7d2cbc0bbb576d45d805146782e2e91d50e92f124b4b07b19c66212973940e44c3f504d7ccaa5ad21b494e84ccb657c9bd195fa5333a0ebb2eb487fc5d71f51e5a2d62d5eac3f8aefe344890e180d56da0cb21b1a123359005c9a78d5b59866a04dde788a2513ae0af67e29a6a11c4172e21b227953a5c37970278b8e"}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000090000000800000040"], 0x50) syz_emit_ethernet(0x82, &(0x7f0000000740)={@broadcast, @random='\x00\x00B\f\x00', @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x11}, @dstopts={0x32, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x6ec8, 0x80, 0x2000007, 0x3ce}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r9) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x6c}}, 0x0) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}], 0x1, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f00000003c0)={r11}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000340)={r11, @in6={{0xa, 0x4e21, 0x5, @local, 0x4}}, 0x0, 0x1, 0x0, 0xff, 0x401}, &(0x7f0000000240)=0x98) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r2, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x20, 0x0, 0x0) r12 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r12, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r13, 0x79d580beb8b2365f, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 2.801550525s ago: executing program 4 (id=4318): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) r4 = fsopen(&(0x7f00000002c0)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000380)='io#harset\x05\x83d,\x80?\x80V\xee\xd6\x04\x87ek\xbd5+z%\xce\xc3\x9a\x13\x93V\xb8\x03\'5\xb3B\x01=\xf4\xff4\x8b\xff\x8d\x87\xd0[\x7f\xd7\xeb?cd\xee\xf6\xe4\x1e\x8c\xb3\xaf\xcc\xb3\x1fS\xb0.\'\x95\xd7\xf3\xf0\x9ao\xc9L\fi\x04?\x95\x12!\xd7!\xdbeKs\xf7}\xd7\x7f\xc5\x85\xd5\x94%\xb5Zr\x11\x06-c\n\xef\xf36', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x20, 0xa9e7, 0x3, &(0x7f0000000040)={[0xfffffffffffffffa]}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdc02, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {0x2, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = eventfd(0xfffffffc) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r14, 0x11}) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x2, r14, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r15], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.526752603s ago: executing program 3 (id=4319): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.303200282s ago: executing program 3 (id=4320): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) clock_adjtime(0x17, &(0x7f00000001c0)={0xffffffff, 0x400000000000040, 0xb, 0x0, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0x1, 0x0, 0x8, 0x1, 0x41, 0xe5a, 0x6, 0x5, 0x3, 0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0, 0x88000000, 0x400000}) 1.894148755s ago: executing program 3 (id=4321): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000540)=0x5, 0x4) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x19) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$sock(r0, &(0x7f0000000500)={&(0x7f0000000240)=@can={0x1d, r4}, 0x80, &(0x7f0000003680)=[{&(0x7f00000002c0)="da6fa0a95704d9b4752db65cbd7b852ef46868c7cccc46eb", 0x18}, {&(0x7f0000000340)="c7034ff06adc3ef16b6c906cbb0796fdb709b877911d68bae7bac436f2042c821a79aa67672b", 0x26}, {&(0x7f0000000380)="0ed8b1098651d3afe34003c161b6050fbc436f1e31359144fffabdb08c727f6b4012c8d0e6711014ca3e12e4884f600e393ab44a2fe3be76687fbd844958c28f5bb0448fb9774dcfc38be648f30f260d24ef73958f7ae4cfcae3e75e531758c61285b11b5db5f343144b3d338ab5281a7401fb40b3f638dc72553ce2a0e5947de9a2d934fd3887ae6f5e11ef7dc44bd15dbb2739bc77df0aad33e9", 0x9b}, {&(0x7f00000004c0)="c2f0b6765505afd29a351a40bb0f5cf03dc54f32fbd2de719ac09f", 0x1b}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000000480)="d44489156c680cf79ba3dfe0a5efa8e545429505ee1d41be8e35d625f79d2a06a425b0b7674adb38f0a4f8b64cee08cf50289ae9ae8d5a544a92ead66c", 0x3d}, {&(0x7f00000005c0)="74ffe1020e452a0633e730b219020fb76c32f06ef31a60e5bf3a555fc0b071a4e87f3bc106d1e92979e3becfce", 0x2d}, {&(0x7f0000002680)="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", 0x1000}], 0x9, &(0x7f0000003740)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xc00000}}, @txtime={{0x18, 0x1, 0x3d, 0x2953}}, @txtime={{0x18, 0x1, 0x3d, 0x4a7e}}, @mark={{0x14, 0x1, 0x24, 0xfffff8f6}}, @txtime={{0x18, 0x1, 0x3d, 0x85}}, @timestamping={{0x14, 0x1, 0x25, 0x200005}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0xc0}, 0x4000810) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000580)={0x7e, "5e4bf5407530c3f0411f20fa7f72b802feba879a5c2f428e78c145b6b3b701a7", 0x3, 0x1}) getcwd(&(0x7f0000003800)=""/214, 0xd6) 1.763191336s ago: executing program 3 (id=4322): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x24}, 0x2404000c) 1.297940727s ago: executing program 3 (id=4323): socket(0xa, 0x3, 0xff) r0 = socket(0x400000000010, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) dup3(r2, 0xffffffffffffffff, 0x6700000000000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24060400) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xd0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="080641663151c9e0ad01"], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r4, &(0x7f0000000100), 0xfef0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000060000000008001e0001000000ad73e7d6c17520a693730e60e288ad91edc7"], 0x24}}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b000000000000000000000000000000000008000100010006b5"], 0x20}}, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r9 = signalfd4(r8, &(0x7f00000001c0)={[0x4c28071e]}, 0x8, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r9, 0xc0106440, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000240)}) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 681.830177ms ago: executing program 34 (id=4323): socket(0xa, 0x3, 0xff) r0 = socket(0x400000000010, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) dup3(r2, 0xffffffffffffffff, 0x6700000000000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24060400) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xd0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="080641663151c9e0ad01"], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r4, &(0x7f0000000100), 0xfef0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000060000000008001e0001000000ad73e7d6c17520a693730e60e288ad91edc7"], 0x24}}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b000000000000000000000000000000000008000100010006b5"], 0x20}}, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r9 = signalfd4(r8, &(0x7f00000001c0)={[0x4c28071e]}, 0x8, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r9, 0xc0106440, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000240)}) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 666.866156ms ago: executing program 5 (id=4325): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) umount2(0x0, 0x1) fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/111, 0xfffffffffffffd73) (fail_nth: 4) 663.248201ms ago: executing program 2 (id=4326): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x70, 0x0}}, 0xfdbc) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffe, 0x1}) 661.230966ms ago: executing program 4 (id=4327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x200c000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x95, 0x42, 0x3b, 0x8, 0x4e2, 0x1400, 0xcf87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0xd, 0xcd, 0x0, 0x2, 0x35, 0x5b, 0x3}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, 0x0, 0x808) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r9, 0x1, 0x0, 0x3914, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$nl_route(0x10, 0x3, 0x0) 249.214875ms ago: executing program 5 (id=4328): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000480), 0x0) 138.202653ms ago: executing program 5 (id=4329): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=""/67, 0x43}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000001d40)=""/135, 0x87}, {&(0x7f0000000b80)=""/167, 0xa7}, {&(0x7f0000000c40)=""/4091, 0xffb}, {&(0x7f0000000240)=""/171, 0xab}], 0x8}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x268, 0x0, 0x3, [{{0x20000000000003, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0x3ff, 0x6, 0x0, 0x6, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r3, r4, 0x1, 0x3}}, {0x0, 0x7, 0x119, 0x300, '\x13\xa7\xe4?\xd4\xcb`<\xee\xca\xe3n\xd0@\xbdM\xd0\xde3y\xb8\xbe\x14\xfd\xa1s\xcd\x9f\xe04\xf1\xbcp;\b\xf2?QC\xb4|\x9dK\x02g\xd1\xadz\x00\xfex\xa8\xda\"\x00\x00\x00\x00\xa0,\n\xfe)\xde\x14\xdd\v\'\x99\xed\x0e9\x89S\xd1\xc55\x1b\x0eL\xb5\xf8Y\xa2\x99W\xb7\xbbe\\\x19y\xf9z\x83\xc4\xc3\x98C\xcc\xe0\x02\xc6\x81\xe3!\x87\xfa1Fa\xd6I{\xdb3N\xb1f\xc3\x89\x13,\xafi\xcf\x95\xc2%\t\xa1\x16eaK\xd1\x18*\xcd~<\xce\x15\xb8\xb1\xd7<\xa3\xfc\xef{\x927\xbc\xae\xef\xef\x12u\xa6\x9c\x8f\x1c\xa2\x88E8\xe7\x84FN%\x8d\xfd\xb2\xafSw<\xc0\xb0S\xaa\xcd\x7f>\xc8\x9f\xaf;\xcat\xc2\xa7\r|\xddf&\xc6\xef\xd1\xc7\xcc\xcb+HDtb\xcanN\x1f\xe1\xbbx\xfa\rUw0`N\x1e\xfa\x86;P\xce\xebw\xf4\x14k\x13\xe2\xba\xce\x02C\xeaR|\xd6\a\xeb\xb8\x98\xf6|\xa5\x01\xd4\xae\x8e\xe0O\x87\x1e\x81\x1aW\'\x00\x98\xc6\a\xc9R\x04\xb9iW\x10\xa0/\x8b\xa9\r\xfc'}}]}, 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f0000000340)=""/145, 0x91) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 0s ago: executing program 6 (id=4330): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f0000000940)='9p\x00', 0x1) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): T17093] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 855.739831][T17093] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 855.759555][T17093] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 855.768608][T17093] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 855.799617][T17093] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 855.821611][T17093] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 855.840520][T17093] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 855.859691][T17093] usb 6-1: Product: syz [ 855.863941][T17093] usb 6-1: Manufacturer: syz [ 855.908475][T17093] cdc_wdm 6-1:1.0: skipping garbage [ 855.921376][T17093] cdc_wdm 6-1:1.0: skipping garbage [ 855.959943][T17093] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 855.969645][T17093] cdc_wdm 6-1:1.0: Unknown control protocol [ 856.440248][T18476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3533'. [ 856.603976][T18480] syzkaller0: entered promiscuous mode [ 856.609835][T18480] syzkaller0: entered allmulticast mode [ 857.009254][ T5977] usb 6-1: USB disconnect, device number 21 [ 857.771354][T18508] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3545'. [ 858.225145][T18517] syzkaller0: entered promiscuous mode [ 858.248111][T18517] syzkaller0: entered allmulticast mode [ 859.101183][T18538] syzkaller0: entered promiscuous mode [ 859.117119][T18538] syzkaller0: entered allmulticast mode [ 859.170667][T17091] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 859.343991][T17091] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 859.363329][T17091] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 859.389571][T17091] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 859.409149][T17091] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 859.439864][T17091] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 859.462757][T17091] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 859.480972][T17091] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 859.509578][T17091] usb 6-1: Product: syz [ 859.518994][T17091] usb 6-1: Manufacturer: syz [ 859.593688][T17091] cdc_wdm 6-1:1.0: skipping garbage [ 859.599642][T17091] cdc_wdm 6-1:1.0: skipping garbage [ 859.623933][T17091] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 859.630632][T17091] cdc_wdm 6-1:1.0: Unknown control protocol [ 860.254673][T18563] syzkaller0: entered promiscuous mode [ 860.260666][ T5895] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 860.273878][T18563] syzkaller0: entered allmulticast mode [ 860.462932][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 860.522916][ T5895] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 860.572150][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.606103][T17093] usb 6-1: USB disconnect, device number 22 [ 860.648752][ T5895] usb 7-1: Product: syz [ 860.657319][ T5895] usb 7-1: Manufacturer: syz [ 860.668658][ T5895] usb 7-1: SerialNumber: syz [ 860.700291][ T5895] usb 7-1: config 0 descriptor?? [ 860.975405][ T5895] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 062 [ 861.493633][T18580] loop2: detected capacity change from 0 to 7 [ 861.514583][ T5945] Dev loop2: unable to read RDB block 7 [ 861.538422][ T5945] loop2: AHDI p1 p2 p3 [ 861.554260][ T5945] loop2: partition table partially beyond EOD, truncated [ 861.572337][ T5945] loop2: p1 start 1818582900 is beyond EOD, truncated [ 861.595723][ T5945] loop2: p3 start 335544320 is beyond EOD, truncated [ 861.604950][T18580] Dev loop2: unable to read RDB block 7 [ 861.619242][T18580] loop2: AHDI p1 p2 p3 [ 861.626208][T18580] loop2: partition table partially beyond EOD, truncated [ 861.635259][T18580] loop2: p1 start 1818582900 is beyond EOD, truncated [ 861.659618][T18580] loop2: p3 start 335544320 is beyond EOD, truncated [ 862.961293][T17091] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 863.045620][ T5895] usb 7-1: USB disconnect, device number 62 [ 863.129562][T17091] usb 3-1: Using ep0 maxpacket: 16 [ 863.156116][T17091] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 863.201483][T17091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.282617][T17091] usb 3-1: Product: syz [ 863.286946][T17091] usb 3-1: Manufacturer: syz [ 863.292000][T17091] usb 3-1: SerialNumber: syz [ 863.305740][T17091] usb 3-1: config 0 descriptor?? [ 863.700319][T18606] program syz.2.3580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 863.998183][T17091] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 864.030121][T17091] usb 3-1: USB disconnect, device number 119 [ 864.359594][T17075] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 864.533489][T17075] usb 7-1: unable to get BOS descriptor or descriptor too short [ 864.560836][T17075] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 864.897177][T17075] usb 7-1: can't read configurations, error -71 [ 865.599699][T17091] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 865.771732][T17091] usb 4-1: Using ep0 maxpacket: 32 [ 865.980817][T17091] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 866.017564][T17091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.038574][T17091] usb 4-1: Product: syz [ 866.058870][T17091] usb 4-1: Manufacturer: syz [ 866.077347][T17091] usb 4-1: SerialNumber: syz [ 866.101809][T17091] usb 4-1: config 0 descriptor?? [ 866.140869][T18657] netlink: 'syz.4.3598': attribute type 3 has an invalid length. [ 866.446458][T17091] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 019 [ 868.448018][T18692] netlink: 'syz.5.3611': attribute type 3 has an invalid length. [ 868.595412][T18695] binder: BINDER_SET_CONTEXT_MGR already set [ 868.621097][T18695] binder: 18694:18695 ioctl 4018620d 200000004a80 returned -16 [ 869.046388][ T5895] usb 4-1: USB disconnect, device number 19 [ 870.033841][T18711] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3619'. [ 870.055915][T18711] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3619'. [ 870.078529][T18711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3619'. [ 870.183909][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.190874][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.126325][T18726] netlink: 'syz.2.3624': attribute type 3 has an invalid length. [ 871.591135][T18731] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 871.627252][T18731] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 871.651376][T18731] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 871.706194][T18731] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 872.266199][T17092] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 872.470777][T17092] usb 4-1: Using ep0 maxpacket: 32 [ 872.521693][T17092] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 872.559816][T17092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.609670][T17092] usb 4-1: Product: syz [ 872.614012][T17092] usb 4-1: Manufacturer: syz [ 872.626819][T17092] usb 4-1: SerialNumber: syz [ 872.708358][T17092] usb 4-1: config 0 descriptor?? [ 872.806265][T18754] netlink: 'syz.2.3636': attribute type 3 has an invalid length. [ 872.818958][T18753] kvm: apic: phys broadcast and lowest prio [ 872.877347][T17091] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 872.988940][T17092] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 020 [ 873.041316][T17091] usb 7-1: Using ep0 maxpacket: 16 [ 873.073301][T17091] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 873.100451][T17091] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.135955][T17091] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.166870][T17091] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 873.211110][T17091] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 873.237990][T17091] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.289843][T17091] usb 7-1: config 0 descriptor?? [ 873.619766][T18064] Bluetooth: hci2: command 0x0c1a tx timeout [ 873.625915][T11135] Bluetooth: hci0: command 0x0c1a tx timeout [ 873.699784][T18064] Bluetooth: hci4: command 0x0c1a tx timeout [ 873.738346][T17091] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.004E/input/input130 [ 873.779619][T18064] Bluetooth: hci3: command 0x0c1a tx timeout [ 873.810776][ T5895] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 873.822633][T17091] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.004E/input/input131 [ 873.955671][T17091] kye 0003:0458:5013.004E: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.6-1/input0 [ 873.987972][T17091] usb 7-1: USB disconnect, device number 65 [ 874.003540][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short [ 874.028719][ T5895] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 874.052902][ T5895] usb 6-1: can't read configurations, error -71 [ 874.150645][T18773] fido_id[18773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 874.426342][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3646'. [ 874.762785][T18781] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 874.770278][T18781] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 874.782030][T18781] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 874.791087][T18781] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 874.798616][T18788] netlink: 'syz.5.3649': attribute type 3 has an invalid length. [ 874.841296][T18788] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3649'. [ 875.029722][ T5957] usb 4-1: USB disconnect, device number 20 [ 875.099396][T18792] kvm: apic: phys broadcast and lowest prio [ 875.531012][T18798] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 875.537363][T18798] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 875.552170][T18798] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 875.590031][T18798] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 875.781493][T18805] loop2: detected capacity change from 0 to 7 [ 875.845932][T16880] Dev loop2: unable to read RDB block 7 [ 875.857012][T16880] loop2: AHDI p1 p2 p3 [ 875.865672][T16880] loop2: partition table partially beyond EOD, truncated [ 875.874659][T16880] loop2: p1 start 1818582900 is beyond EOD, truncated [ 875.882644][T16880] loop2: p3 start 335544320 is beyond EOD, truncated [ 875.904337][T18805] Dev loop2: unable to read RDB block 7 [ 875.921111][T18805] loop2: AHDI p1 p2 p3 [ 875.932731][T18805] loop2: partition table partially beyond EOD, truncated [ 875.968138][T18805] loop2: p1 start 1818582900 is beyond EOD, truncated [ 875.996414][T18805] loop2: p3 start 335544320 is beyond EOD, truncated [ 876.322388][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3661'. [ 876.339696][ T5895] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 876.403554][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3661'. [ 876.523052][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short [ 876.534616][ T5895] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 876.557440][ T5895] usb 6-1: can't read configurations, error -71 [ 876.634041][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3661'. [ 876.689604][ T5957] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 876.869651][ T5957] usb 7-1: Using ep0 maxpacket: 32 [ 876.925803][ T5957] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 876.938558][ T5957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.999226][ T5957] usb 7-1: Product: syz [ 877.004031][ T5957] usb 7-1: Manufacturer: syz [ 877.008692][ T5957] usb 7-1: SerialNumber: syz [ 877.060754][ T5957] usb 7-1: config 0 descriptor?? [ 877.206765][T18837] kvm: apic: phys broadcast and lowest prio [ 877.349093][ T5957] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 066 [ 877.539935][T18064] Bluetooth: hci2: command 0x0c1a tx timeout [ 877.546321][T11135] Bluetooth: hci0: command 0x0c1a tx timeout [ 877.579001][T18845] loop2: detected capacity change from 0 to 7 [ 877.587116][T18845] Dev loop2: unable to read RDB block 7 [ 877.593023][T18845] loop2: AHDI p1 p2 p3 [ 877.597631][T18845] loop2: partition table partially beyond EOD, truncated [ 877.619732][T18064] Bluetooth: hci3: command 0x0c1a tx timeout [ 877.625855][T18064] Bluetooth: hci4: command 0x0c1a tx timeout [ 877.638882][T18845] loop2: p1 start 1818582900 is beyond EOD, truncated [ 877.646373][T18845] loop2: p3 start 335544320 is beyond EOD, truncated [ 877.725394][T18848] fuse: Bad value for 'group_id' [ 877.730632][T18848] fuse: Bad value for 'group_id' [ 878.203426][T18850] cgroup: fork rejected by pids controller in /syz4 [ 878.312578][T18883] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 878.326288][T18883] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 878.339286][T18883] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 878.358636][T18883] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 879.124720][T19706] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 879.163094][T19706] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 879.197514][T19706] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 879.236033][T19706] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 879.472824][T19713] fuse: Bad value for 'group_id' [ 879.477842][T19713] fuse: Bad value for 'group_id' [ 879.484928][T17093] usb 7-1: USB disconnect, device number 66 [ 879.631870][T19717] kvm: apic: phys broadcast and lowest prio [ 880.461761][T19736] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 880.491537][T19736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 880.515888][T19736] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 880.546860][T19736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 880.581814][T19744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3694'. [ 880.612330][T19747] fuse: Bad value for 'group_id' [ 880.626461][T19747] fuse: Bad value for 'group_id' [ 881.500079][T17093] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 881.613412][T19767] kvm: apic: phys broadcast and lowest prio [ 881.653697][T17093] usb 6-1: device descriptor read/64, error -71 [ 881.932517][T17093] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 882.098349][T17093] usb 6-1: device descriptor read/64, error -71 [ 882.231538][T17093] usb usb6-port1: attempt power cycle [ 882.341782][T19799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3718'. [ 882.419874][T18064] Bluetooth: hci0: command 0x0c1a tx timeout [ 882.497310][T19798] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 882.504798][T18064] Bluetooth: hci2: command 0x0c1a tx timeout [ 882.511778][T19798] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 882.586842][T18064] Bluetooth: hci3: command 0x0c1a tx timeout [ 882.593034][T11135] Bluetooth: hci4: command 0x0c1a tx timeout [ 882.604135][T19798] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 882.645908][T19798] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 882.669687][T17093] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 882.700323][T17093] usb 6-1: device descriptor read/8, error -71 [ 882.748038][T19806] syzkaller0: entered promiscuous mode [ 882.768903][T19806] syzkaller0: entered allmulticast mode [ 882.939638][T17093] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 882.981487][T17093] usb 6-1: device descriptor read/8, error -71 [ 883.191104][T17093] usb usb6-port1: unable to enumerate USB device [ 883.413780][T19822] kvm: apic: phys broadcast and lowest prio [ 883.490078][T17093] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 883.498444][T19826] loop2: detected capacity change from 0 to 7 [ 883.513057][ T5945] Dev loop2: unable to read RDB block 7 [ 883.528981][ T5945] loop2: AHDI p1 p2 p3 [ 883.539154][ T5945] loop2: partition table partially beyond EOD, truncated [ 883.554862][ T5945] loop2: p1 start 1818582900 is beyond EOD, truncated [ 883.569414][ T5945] loop2: p3 start 335544320 is beyond EOD, truncated [ 883.597828][T19826] Dev loop2: unable to read RDB block 7 [ 883.605654][T19826] loop2: AHDI p1 p2 p3 [ 883.615583][T19826] loop2: partition table partially beyond EOD, truncated [ 883.645009][T19826] loop2: p1 start 1818582900 is beyond EOD, truncated [ 883.662410][T19826] loop2: p3 start 335544320 is beyond EOD, truncated [ 883.813640][T17093] usb 5-1: unable to get BOS descriptor or descriptor too short [ 883.830567][T17093] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 883.866983][T17093] usb 5-1: can't read configurations, error -71 [ 884.509686][T11135] Bluetooth: hci0: command 0x0c1a tx timeout [ 884.579576][T11135] Bluetooth: hci2: command 0x0c1a tx timeout [ 884.593396][ T5895] IPVS: starting estimator thread 0... [ 884.661961][T11135] Bluetooth: hci3: command 0x0c1a tx timeout [ 884.661972][T18064] Bluetooth: hci4: command 0x0c1a tx timeout [ 884.689793][T19855] IPVS: using max 39 ests per chain, 93600 per kthread [ 884.700150][T19859] kvm: apic: phys broadcast and lowest prio [ 885.780162][T17091] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 885.951310][T17091] usb 6-1: device descriptor read/64, error -71 [ 886.211514][T17091] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 886.221000][ T5895] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 886.391423][T17091] usb 6-1: device descriptor read/64, error -71 [ 886.497149][T17093] usb 7-1: new low-speed USB device number 67 using dummy_hcd [ 886.510170][T17091] usb usb6-port1: attempt power cycle [ 886.517812][ T5895] usb 3-1: unable to get BOS descriptor or descriptor too short [ 886.549615][ T5895] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 886.562227][ T5895] usb 3-1: can't read configurations, error -71 [ 886.649746][T17093] usb 7-1: device descriptor read/64, error -71 [ 886.850199][T17085] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 886.869790][T17091] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 886.900530][T17091] usb 6-1: device descriptor read/8, error -71 [ 886.909621][T17093] usb 7-1: new low-speed USB device number 68 using dummy_hcd [ 887.038045][T17085] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 887.059642][T17093] usb 7-1: device descriptor read/64, error -71 [ 887.066308][T17085] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 887.076869][T17085] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 887.090365][T17085] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 887.119753][T17085] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 887.156854][T17091] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 887.166380][T17085] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 887.176453][T17093] usb usb7-port1: attempt power cycle [ 887.185827][T17085] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 887.199154][T17091] usb 6-1: device descriptor read/8, error -71 [ 887.207643][T17085] usb 4-1: Product: syz [ 887.212055][T17085] usb 4-1: Manufacturer: syz [ 887.222925][T17085] cdc_wdm 4-1:1.0: skipping garbage [ 887.228284][T17085] cdc_wdm 4-1:1.0: skipping garbage [ 887.236165][T17085] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 887.249251][T17085] cdc_wdm 4-1:1.0: Unknown control protocol [ 887.303544][T19915] kvm: apic: phys broadcast and lowest prio [ 887.322114][T17091] usb usb6-port1: unable to enumerate USB device [ 887.539742][T17093] usb 7-1: new low-speed USB device number 69 using dummy_hcd [ 887.581750][T17093] usb 7-1: device descriptor read/8, error -71 [ 887.829949][T17093] usb 7-1: new low-speed USB device number 70 using dummy_hcd [ 887.875071][T17093] usb 7-1: device descriptor read/8, error -71 [ 887.926035][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 888.012566][T17093] usb usb7-port1: unable to enumerate USB device [ 888.224454][T19937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3761'. [ 888.806891][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3764'. [ 889.444617][T19957] kvm: apic: phys broadcast and lowest prio [ 889.590780][T17085] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 889.640185][T17091] usb 4-1: USB disconnect, device number 21 [ 890.636207][T17085] usb 6-1: unable to get BOS descriptor or descriptor too short [ 890.693689][T17085] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 890.733262][T17085] usb 6-1: can't read configurations, error -71 [ 891.209634][ T5977] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 891.361837][ T5977] usb 4-1: device descriptor read/64, error -71 [ 891.561620][T19993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3776'. [ 891.679689][ T5977] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 891.694671][T19995] kvm: apic: phys broadcast and lowest prio [ 891.789923][ T5957] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 891.819624][ T5977] usb 4-1: device descriptor read/64, error -71 [ 891.929944][ T5977] usb usb4-port1: attempt power cycle [ 891.984145][ T5957] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 892.012131][ T5957] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 892.036042][ T5957] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 892.061135][ T5957] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 892.075056][ T5957] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 892.096255][ T5957] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 892.105992][ T5957] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 892.115557][ T5957] usb 7-1: Product: syz [ 892.120434][ T5957] usb 7-1: Manufacturer: syz [ 892.151499][ T5957] cdc_wdm 7-1:1.0: skipping garbage [ 892.173331][ T5957] cdc_wdm 7-1:1.0: skipping garbage [ 892.198541][ T5957] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 892.205482][ T5957] cdc_wdm 7-1:1.0: Unknown control protocol [ 892.279969][ T5977] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 892.310806][ T5977] usb 4-1: device descriptor read/8, error -71 [ 892.569582][ T5977] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 892.601436][ T5977] usb 4-1: device descriptor read/8, error -71 [ 892.720061][ T5977] usb usb4-port1: unable to enumerate USB device [ 892.814078][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -EPIPE [ 894.228696][T20033] kvm: apic: phys broadcast and lowest prio [ 894.492121][T20034] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3792'. [ 894.546351][T17093] usb 7-1: USB disconnect, device number 71 [ 894.552754][T20034] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3792'. [ 894.566855][T20034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3792'. [ 894.624262][T20040] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3793'. [ 895.370386][T20046] kvm: apic: phys broadcast and lowest prio [ 895.873862][T20066] kvm: apic: phys broadcast and lowest prio [ 895.979978][T17091] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 896.025309][T20069] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3805'. [ 896.100530][ T5977] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 896.124849][T17091] usb 5-1: device descriptor read/64, error -71 [ 896.284199][ T5977] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 896.299545][ T5977] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 896.334288][ T5977] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 896.361035][ T5977] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 896.390215][T17091] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 896.395439][ T5977] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 896.431928][ T5977] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 896.465836][ T5977] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 896.490834][ T5977] usb 7-1: Product: syz [ 896.504686][ T5977] usb 7-1: Manufacturer: syz [ 896.551800][ T5977] cdc_wdm 7-1:1.0: skipping garbage [ 896.557088][ T5977] cdc_wdm 7-1:1.0: skipping garbage [ 896.570389][T17091] usb 5-1: device descriptor read/64, error -71 [ 896.571531][ T5977] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 896.627483][ T5977] cdc_wdm 7-1:1.0: Unknown control protocol [ 896.646022][T20086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3811'. [ 896.690585][T17091] usb usb5-port1: attempt power cycle [ 896.989599][ T5977] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 897.039739][T17091] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 897.090420][T17091] usb 5-1: device descriptor read/8, error -71 [ 897.154949][ T5977] usb 6-1: Using ep0 maxpacket: 32 [ 897.179651][ T5977] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 897.208449][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.219731][ T5977] usb 6-1: Product: syz [ 897.224046][ T5977] usb 6-1: Manufacturer: syz [ 897.228841][ T5977] usb 6-1: SerialNumber: syz [ 897.239882][ T5977] usb 6-1: config 0 descriptor?? [ 897.245150][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -EPIPE [ 897.330071][T17091] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 897.393605][T17091] usb 5-1: device descriptor read/8, error -71 [ 897.475241][ T5977] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 037 [ 897.520251][T17091] usb usb5-port1: unable to enumerate USB device [ 897.953403][T20104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3817'. [ 898.321999][T17093] usb 6-1: USB disconnect, device number 37 [ 898.870553][T17093] usb 7-1: USB disconnect, device number 72 [ 898.986418][T20114] loop2: detected capacity change from 0 to 7 [ 899.011642][T20114] Dev loop2: unable to read RDB block 7 [ 899.033216][T20114] loop2: AHDI p1 p2 p3 [ 899.045285][T20116] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3822'. [ 899.076186][T20114] loop2: partition table partially beyond EOD, truncated [ 899.130042][T20114] loop2: p1 start 1818582900 is beyond EOD, truncated [ 899.169453][T20114] loop2: p3 start 335544320 is beyond EOD, truncated [ 899.625044][ T30] audit: type=1326 audit(1772773737.840:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20128 comm="syz.3.3828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd99399c799 code=0x0 [ 899.849621][T17077] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 899.941995][ T5977] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 900.029790][T17077] usb 3-1: device descriptor read/64, error -71 [ 900.163922][ T5977] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 900.209865][ T5977] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 900.213278][T17091] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 900.278452][ T5977] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 900.288046][ T5977] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 900.309182][ T5977] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 900.331257][T17077] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 900.365029][ T5977] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 900.374784][ T5977] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 900.569592][T17077] usb 3-1: device descriptor read/64, error -71 [ 900.582010][T17091] usb 5-1: Using ep0 maxpacket: 32 [ 900.589583][ T5977] usb 7-1: Product: syz [ 900.598209][ T5977] usb 7-1: Manufacturer: syz [ 900.615357][ T5977] cdc_wdm 7-1:1.0: skipping garbage [ 900.627492][ T5977] cdc_wdm 7-1:1.0: skipping garbage [ 900.635977][ T5977] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 900.649563][ T5977] cdc_wdm 7-1:1.0: Unknown control protocol [ 900.755192][T17077] usb usb3-port1: attempt power cycle [ 901.315500][T17091] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 901.325676][T17091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.329899][T17077] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 901.334845][T17091] usb 5-1: Product: syz [ 901.346221][T17091] usb 5-1: Manufacturer: syz [ 901.351328][T17091] usb 5-1: SerialNumber: syz [ 901.399622][T17077] usb 3-1: device descriptor read/8, error -71 [ 901.418657][T17091] usb 5-1: config 0 descriptor?? [ 901.649642][T17077] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 901.657360][T17091] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 003 [ 901.714806][T17077] usb 3-1: device descriptor read/8, error -71 [ 901.840236][T17077] usb usb3-port1: unable to enumerate USB device [ 902.034356][T20159] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3837'. [ 902.522745][T17093] usb 5-1: USB disconnect, device number 3 [ 902.663461][T20163] loop2: detected capacity change from 0 to 7 [ 902.670828][T20163] Dev loop2: unable to read RDB block 7 [ 902.676454][T20163] loop2: AHDI p1 p2 p3 [ 902.688974][T20163] loop2: partition table partially beyond EOD, truncated [ 902.709430][T17077] usb 7-1: USB disconnect, device number 73 [ 902.727135][T20163] loop2: p1 start 1818582900 is beyond EOD, truncated [ 902.766500][T20163] loop2: p3 start 335544320 is beyond EOD, truncated [ 903.838588][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3849'. [ 904.872905][T20210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3858'. [ 905.021902][T20210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3858'. [ 905.314034][T20210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3858'. [ 905.673510][T20222] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 905.687676][T20222] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 905.710037][T20222] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 905.716364][T20222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 906.059623][T17091] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 906.115045][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3867'. [ 906.225451][T17091] usb 4-1: unable to get BOS descriptor or descriptor too short [ 906.435292][T17091] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 906.482484][T17091] usb 4-1: can't read configurations, error -71 [ 906.826258][T20250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3868'. [ 907.244079][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3872'. [ 907.485531][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3872'. [ 907.725243][T18064] Bluetooth: hci0: command 0x0c1a tx timeout [ 907.743192][T11135] Bluetooth: hci2: command 0x0c1a tx timeout [ 907.784574][T11135] Bluetooth: hci3: command 0x0c1a tx timeout [ 907.790796][T18064] Bluetooth: hci4: command 0x0c1a tx timeout [ 908.061234][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3872'. [ 908.679673][ T5957] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 908.852817][ T5957] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.884573][ T5957] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 908.901169][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.961882][ T5957] usb 7-1: config 0 descriptor?? [ 909.195341][ T5957] usbhid 7-1:0.0: can't add hid device: -71 [ 909.216170][ T5957] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 909.251982][ T5957] usb 7-1: USB disconnect, device number 74 [ 909.689596][T17091] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 909.859671][T17091] usb 5-1: Using ep0 maxpacket: 16 [ 909.895411][T17091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 909.920394][T17091] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 909.935113][T17091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.964497][T17091] usb 5-1: Product: syz [ 909.972994][T17091] usb 5-1: Manufacturer: syz [ 909.977752][T17091] usb 5-1: SerialNumber: syz [ 910.008249][T17091] usb 5-1: config 0 descriptor?? [ 910.034366][T17091] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 910.083318][T17091] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 910.122209][T20309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3887'. [ 910.380569][T17085] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 910.540322][T17085] usb 3-1: Using ep0 maxpacket: 32 [ 910.555816][T17085] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 910.575013][T17085] usb 3-1: config 4 has no interface number 0 [ 910.590827][T17085] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.619643][T17085] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.637795][T17085] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 910.651420][T17091] em28xx 5-1:0.0: chip ID is em2874 [ 910.657336][T17085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.693809][T17085] hub 3-1:4.128: USB hub found [ 910.891044][T17085] hub 3-1:4.128: 2 ports detected [ 910.896227][T17085] hub 3-1:4.128: Using single TT (err -22) [ 911.097190][T17085] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 911.122039][T17085] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 911.196369][T17085] usb 3-1: USB disconnect, device number 126 [ 911.267789][T17091] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 911.333311][T17091] em28xx 5-1:0.0: board has no eeprom [ 912.423970][T20300] em28xx 5-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 912.479659][T17091] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 912.487869][T17091] em28xx 5-1:0.0: dvb set to bulk mode. [ 912.493739][T17085] em28xx 5-1:0.0: Binding DVB extension [ 912.516169][T17091] usb 5-1: USB disconnect, device number 4 [ 912.536633][T17091] em28xx 5-1:0.0: Disconnecting em28xx [ 912.692867][T17085] em28xx 5-1:0.0: Registering input extension [ 912.920830][T20359] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3901'. [ 913.052448][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3902'. [ 913.060476][T17085] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 913.068018][T17085] Registered IR keymap rc-empty [ 913.100193][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3902'. [ 913.128091][T17085] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 913.141242][T20361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3902'. [ 913.183529][T17085] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input139 [ 913.213937][T17085] em28xx 5-1:0.0: Input extension successfully initialized [ 913.228847][T17091] em28xx 5-1:0.0: Closing input extension [ 913.254850][T20367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3903'. [ 913.264318][T20365] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3904'. [ 913.454002][T17091] em28xx 5-1:0.0: Freeing device [ 913.644291][ T30] audit: type=1326 audit(1772773751.860:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20369 comm="syz.3.3905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd99399c799 code=0x0 [ 913.831509][T17077] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 914.126207][T17077] usb 7-1: Using ep0 maxpacket: 32 [ 914.133668][T17077] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 914.151911][T17077] usb 7-1: config 4 has no interface number 0 [ 914.180652][T17077] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.233317][T17077] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.267922][T17077] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 914.306719][T17077] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.435406][T17077] hub 7-1:4.128: USB hub found [ 914.617998][T17077] hub 7-1:4.128: 2 ports detected [ 914.644380][T17077] hub 7-1:4.128: Using single TT (err -22) [ 914.699694][ T5895] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 914.827098][T17077] hub 7-1:4.128: hub_hub_status failed (err = -71) [ 914.842698][T17077] hub 7-1:4.128: config failed, can't get hub status (err -71) [ 914.856927][ T5895] usb 6-1: config index 0 descriptor too short (expected 34751, got 36) [ 914.875779][ T5895] usb 6-1: config 156 has too many interfaces: 195, using maximum allowed: 32 [ 914.908739][ T5895] usb 6-1: config 156 has an invalid descriptor of length 0, skipping remainder of the config [ 914.924441][T17077] usb 7-1: USB disconnect, device number 75 [ 914.950798][ T5895] usb 6-1: config 156 has 1 interface, different from the descriptor's value: 195 [ 914.986533][ T5895] usb 6-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 915.017388][ T5895] usb 6-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 915.049857][ T5895] usb 6-1: Manufacturer: syz [ 915.078074][ T5895] usbhid 6-1:156.0: couldn't find an input interrupt endpoint [ 915.183182][T20388] loop2: detected capacity change from 0 to 7 [ 915.191458][ T5945] Dev loop2: unable to read RDB block 7 [ 915.197168][ T5945] loop2: AHDI p1 p2 p3 [ 915.201797][ T5945] loop2: partition table partially beyond EOD, truncated [ 915.210505][ T5945] loop2: p1 start 1818582900 is beyond EOD, truncated [ 915.217575][ T5945] loop2: p3 start 335544320 is beyond EOD, truncated [ 915.234323][T20388] Dev loop2: unable to read RDB block 7 [ 915.242547][T20388] loop2: AHDI p1 p2 p3 [ 915.257194][T20388] loop2: partition table partially beyond EOD, truncated [ 915.279805][T20388] loop2: p1 start 1818582900 is beyond EOD, truncated [ 915.287240][T20388] loop2: p3 start 335544320 is beyond EOD, truncated [ 915.295249][T20389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3910'. [ 915.306006][T20383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.329083][T20383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.380741][T17085] usb 6-1: USB disconnect, device number 38 [ 915.598393][T20395] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3914'. [ 915.871820][T17091] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 916.457867][T20407] loop2: detected capacity change from 0 to 7 [ 916.481595][T17091] usb 5-1: unable to get BOS descriptor or descriptor too short [ 916.490450][T17091] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 916.498086][T17091] usb 5-1: can't read configurations, error -71 [ 916.529436][ T5945] Dev loop2: unable to read RDB block 7 [ 916.535322][ T5945] loop2: AHDI p1 p2 p3 [ 916.539845][ T5945] loop2: partition table partially beyond EOD, truncated [ 916.550238][ T5945] loop2: p1 start 1818582900 is beyond EOD, truncated [ 916.557605][ T5945] loop2: p3 start 335544320 is beyond EOD, truncated [ 916.565641][T20407] Dev loop2: unable to read RDB block 7 [ 916.661411][T20407] loop2: AHDI p1 p2 p3 [ 916.665755][T20407] loop2: partition table partially beyond EOD, truncated [ 916.679566][T20407] loop2: p1 start 1818582900 is beyond EOD, truncated [ 916.686604][T20407] loop2: p3 start 335544320 is beyond EOD, truncated [ 917.018004][T20417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3922'. [ 917.309847][T17085] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 917.469862][T17085] usb 4-1: Using ep0 maxpacket: 32 [ 917.478933][T17085] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 917.488248][T17085] usb 4-1: config 4 has no interface number 0 [ 917.498352][T17085] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.527391][T17085] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.552589][T17085] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 917.572191][T17085] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.616006][T17085] hub 4-1:4.128: USB hub found [ 917.881967][T20439] batman_adv: batadv0: Adding interface: gretap1 [ 917.895993][T20439] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.922979][T20439] batman_adv: batadv0: Interface activated: gretap1 [ 917.959692][T17085] hub 4-1:4.128: 2 ports detected [ 917.964900][T17085] hub 4-1:4.128: Using single TT (err -22) [ 918.014994][T17085] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 918.022164][T17085] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 918.072700][T17085] usb 4-1: USB disconnect, device number 28 [ 920.114826][T20488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3946'. [ 920.399640][T17091] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 920.649652][T17091] usb 4-1: Using ep0 maxpacket: 32 [ 920.657518][T17091] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 920.687521][T17091] usb 4-1: config 4 has no interface number 0 [ 920.698877][T17091] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.714896][T17091] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.931292][T20500] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 920.969574][T20500] team0: Port device batadv1 added [ 921.022212][T17091] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 921.094234][T20509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3955'. [ 921.492251][T17091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.594777][T17091] hub 4-1:4.128: USB hub found [ 921.715542][T17091] hub 4-1:4.128: 2 ports detected [ 921.717344][T20516] vlan2: entered allmulticast mode [ 921.737419][T17091] hub 4-1:4.128: Using single TT (err -22) [ 921.739777][T20516] bridge1: entered allmulticast mode [ 921.773833][T20509] bridge1: port 1(bond0) entered blocking state [ 921.828694][T20509] bridge1: port 1(bond0) entered disabled state [ 921.866514][T20509] bond0: entered allmulticast mode [ 921.907088][T20509] bond_slave_0: entered allmulticast mode [ 921.915605][T20509] bond_slave_1: entered allmulticast mode [ 921.927750][T17091] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 921.942065][T17091] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 921.975095][T20509] bond0: entered promiscuous mode [ 921.999653][T20509] bond_slave_0: entered promiscuous mode [ 922.014920][T17091] usb 4-1: USB disconnect, device number 29 [ 922.016790][T20509] bond_slave_1: entered promiscuous mode [ 922.050618][T20509] bridge1: port 1(bond0) entered blocking state [ 922.057008][T20509] bridge1: port 1(bond0) entered forwarding state [ 922.693808][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3963'. [ 922.799673][T17085] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 922.971995][T20549] ip6gre2: entered promiscuous mode [ 922.977394][T20549] ip6gre2: entered allmulticast mode [ 923.044412][T17085] usb 3-1: unable to get BOS descriptor or descriptor too short [ 923.062854][T17085] usb 3-1: config 1 has an invalid interface number: 43 but max is 1 [ 923.093654][T17085] usb 3-1: config 1 has no interface number 1 [ 923.115224][T17085] usb 3-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 923.143369][T17085] usb 3-1: config 1 interface 0 has no altsetting 0 [ 923.168228][T17085] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 923.208489][T17085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.283595][T17085] usb 3-1: Product: syz [ 923.315021][T17085] usb 3-1: Manufacturer: syz [ 923.331808][T17085] usb 3-1: SerialNumber: syz [ 923.516512][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 923.561408][T17092] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 923.577016][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 923.649684][T17093] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 923.746470][T17085] gspca_main: spca501-2.14.0 probing 0000:0000 [ 923.755411][T17085] gspca_spca501: reg write: error -71 [ 923.786339][T17085] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 923.817494][T17085] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 923.826167][T17093] usb 7-1: Using ep0 maxpacket: 16 [ 923.871366][T17085] usb 3-1: USB disconnect, device number 127 [ 923.885101][T17093] usb 7-1: unable to get BOS descriptor or descriptor too short [ 923.909842][T17091] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 923.922290][T17093] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.976604][T17093] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 923.994135][T17093] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.028113][T17093] usb 7-1: Product: syz [ 924.046635][T17093] usb 7-1: Manufacturer: syz [ 924.094825][T17093] usb 7-1: SerialNumber: syz [ 924.175049][T17091] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 924.769199][T17093] usb 7-1: bad CDC descriptors [ 924.827197][T17093] usb 7-1: USB disconnect, device number 76 [ 926.154802][T20612] tipc: Started in network mode [ 926.159873][T20612] tipc: Node identity 42a4794361fb, cluster identity 4711 [ 926.167188][T20612] tipc: Enabled bearer , priority 0 [ 926.177376][T20612] tipc: Resetting bearer [ 926.266372][T20608] tipc: Disabling bearer [ 926.519611][ T5895] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 926.616753][T20633] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 926.671921][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.684227][ T5895] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 926.700341][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.798870][ T5895] usb 3-1: config 0 descriptor?? [ 927.072167][ T5895] usbhid 3-1:0.0: can't add hid device: -71 [ 927.089210][ T5895] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 927.153094][ T5895] usb 3-1: USB disconnect, device number 2 [ 927.619676][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 928.209706][T20663] input: syz1 as /devices/virtual/input/input141 [ 929.327094][T20678] fuse: Invalid rootmode [ 930.822410][T20710] : entered promiscuous mode [ 930.960254][T20712] kvm: apic: phys broadcast and lowest prio [ 931.009783][ T5957] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 931.175950][ T5957] usb 4-1: unable to get BOS descriptor or descriptor too short [ 931.223189][ T5957] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 931.257726][ T5957] usb 4-1: can't read configurations, error -71 [ 931.625197][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.632057][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.819635][T17091] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 931.950106][T20732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4042'. [ 931.981373][T17091] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.999828][T17091] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 932.017403][T17091] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.051774][T17091] usb 6-1: config 0 descriptor?? [ 932.057709][ T30] audit: type=1326 audit(1772773770.270:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.2.4043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49e519c799 code=0x0 [ 932.282701][T17091] usbhid 6-1:0.0: can't add hid device: -71 [ 932.294779][T17091] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 932.398835][T17091] usb 6-1: USB disconnect, device number 39 [ 933.399656][T17085] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 933.571997][T17085] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 933.584316][T17085] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 933.602151][T17085] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 933.640345][T17085] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 933.673514][T17085] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 933.706484][T17085] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 933.724142][T17085] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 933.744160][T17085] usb 4-1: Product: syz [ 933.756440][T17085] usb 4-1: Manufacturer: syz [ 933.761466][T17091] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 933.800523][T17085] cdc_wdm 4-1:1.0: skipping garbage [ 933.831798][T17085] cdc_wdm 4-1:1.0: skipping garbage [ 933.839397][T17085] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 933.849784][T17085] cdc_wdm 4-1:1.0: Unknown control protocol [ 933.923573][T17091] usb 3-1: unable to get BOS descriptor or descriptor too short [ 933.954776][T17091] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 933.970475][T17091] usb 3-1: can't read configurations, error -71 [ 934.482172][ T5895] usb 7-1: new low-speed USB device number 77 using dummy_hcd [ 934.645166][ T5895] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 934.689686][ T5895] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 934.719885][ T5895] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 934.831413][ T5895] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 934.855649][ T5895] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 934.897611][ T5895] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 934.936809][ T5895] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 935.070340][ T5895] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 935.109636][ T5895] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.147973][ T5895] usb 7-1: string descriptor 0 read error: -22 [ 935.163171][ T5895] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 935.204754][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.255371][ T5895] adutux 7-1:168.0: interrupt endpoints not found [ 935.285690][ T30] audit: type=1326 audit(1772773773.470:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20788 comm="syz.5.4060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc67979c799 code=0x0 [ 935.573041][T20772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.590575][T20772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.674033][T17085] usb 7-1: USB disconnect, device number 77 [ 936.099721][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 936.159928][T17091] usb 4-1: USB disconnect, device number 32 [ 936.669727][T17091] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 936.839634][T17091] usb 4-1: Using ep0 maxpacket: 8 [ 936.853470][T17091] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 936.946832][T17091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.004187][T17091] usb 4-1: Product: syz [ 937.022502][T17091] usb 4-1: Manufacturer: syz [ 937.071299][T17091] usb 4-1: SerialNumber: syz [ 937.093317][T17091] usb 4-1: config 0 descriptor?? [ 937.129411][T17091] gspca_main: se401-2.14.0 probing 047d:5003 [ 937.502025][T17085] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 937.523802][T17091] gspca_se401: Too many frame sizes [ 937.659731][T17092] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 937.672594][T17085] usb 7-1: unable to get BOS descriptor or descriptor too short [ 937.718161][T17085] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 937.744089][T17085] usb 7-1: can't read configurations, error -71 [ 937.751670][T17093] usb 4-1: USB disconnect, device number 33 [ 937.824463][T17092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.849635][T17092] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 937.859117][T17092] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.891729][T17092] usb 6-1: config 0 descriptor?? [ 938.161282][T17092] usbhid 6-1:0.0: can't add hid device: -71 [ 938.167788][T17092] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 938.193199][T17092] usb 6-1: USB disconnect, device number 40 [ 938.488637][ T30] audit: type=1326 audit(1772773776.700:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20825 comm="syz.6.4074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f922ab9c799 code=0x0 [ 938.711992][T17092] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 938.859745][T17085] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 938.891166][T17092] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 938.904576][T17092] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 938.916461][T17092] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 938.934584][T17092] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 938.946239][T17092] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 938.961987][T17092] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 938.982009][T17092] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 938.996757][T17092] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 939.011339][T17092] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 939.035047][T17085] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 939.050541][T17085] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 939.071455][T17092] usb 4-1: string descriptor 0 read error: -22 [ 939.081958][T17092] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 939.101258][T17085] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 939.121793][T17092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.134794][T17085] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 939.150476][T17085] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 939.175775][T17092] adutux 4-1:168.0: interrupt endpoints not found [ 939.200395][T17085] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 939.212643][T17085] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 939.229809][T17085] usb 5-1: Product: syz [ 939.234406][T17085] usb 5-1: Manufacturer: syz [ 939.256737][T17085] cdc_wdm 5-1:1.0: skipping garbage [ 939.269647][T17085] cdc_wdm 5-1:1.0: skipping garbage [ 939.277058][T17085] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 939.283662][T17085] cdc_wdm 5-1:1.0: Unknown control protocol [ 939.554548][T20823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.633263][T20823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.763652][T17085] usb 4-1: USB disconnect, device number 34 [ 941.206492][ T30] audit: type=1326 audit(1772773779.420:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20858 comm="syz.5.4085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc67979c799 code=0x0 [ 941.248967][T20862] sctp: [Deprecated]: syz.3.4083 (pid 20862) Use of int in max_burst socket option. [ 941.248967][T20862] Use struct sctp_assoc_value instead [ 941.488043][ T5957] usb 5-1: USB disconnect, device number 7 [ 941.559607][ T5895] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 941.736770][ T5895] usb 7-1: unable to get BOS descriptor or descriptor too short [ 941.757464][ T5895] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 941.768549][ T5895] usb 7-1: can't read configurations, error -71 [ 942.455999][ T5957] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 942.747278][ T5957] usb 6-1: Using ep0 maxpacket: 16 [ 942.782938][T20884] loop2: detected capacity change from 0 to 7 [ 942.790672][T20884] Dev loop2: unable to read RDB block 7 [ 942.796305][T20884] loop2: AHDI p1 p2 p3 [ 942.800842][T20884] loop2: partition table partially beyond EOD, truncated [ 942.812129][T20884] loop2: p1 start 1818582900 is beyond EOD, truncated [ 942.819014][T20884] loop2: p3 start 335544320 is beyond EOD, truncated [ 942.827190][ T5957] usb 6-1: config 0 has an invalid interface number: 24 but max is 0 [ 942.835960][ T5957] usb 6-1: config 0 has no interface number 0 [ 942.842286][ T5957] usb 6-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.861529][ T5957] usb 6-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.892367][ T5957] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 942.920406][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.967108][ T5957] usb 6-1: config 0 descriptor?? [ 943.430733][ T5957] usbhid 6-1:0.24: can't add hid device: -71 [ 943.444334][ T5957] usbhid 6-1:0.24: probe with driver usbhid failed with error -71 [ 943.470138][ T5957] usb 6-1: USB disconnect, device number 41 [ 943.515175][ T30] audit: type=1326 audit(1772773781.730:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20896 comm="syz.4.4099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc913f9c799 code=0x0 [ 943.669407][T20902] netem: change failed [ 944.339634][T17085] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 944.515571][T17085] usb 6-1: Using ep0 maxpacket: 16 [ 944.535986][T17085] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.620178][T17085] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 944.695169][T17085] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 944.743291][T17085] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 944.783414][T17085] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 944.796479][ T5895] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 944.841263][T17085] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 944.869652][T17085] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 944.892791][T17085] usb 6-1: Manufacturer: syz [ 944.921772][T17085] usb 6-1: config 0 descriptor?? [ 944.998582][ T5895] usb 4-1: unable to get BOS descriptor or descriptor too short [ 945.035896][ T5895] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 945.055825][ T5895] usb 4-1: can't read configurations, error -71 [ 945.287197][T20939] kvm: apic: phys broadcast and lowest prio [ 945.441613][T17085] rc_core: IR keymap rc-hauppauge not found [ 945.462381][T17085] Registered IR keymap rc-empty [ 945.467548][T17085] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 945.513116][T17085] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 945.545349][T17085] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 945.562652][T17085] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input147 [ 945.579025][T17085] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 945.630307][T17085] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 945.659682][T17085] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 945.684654][T17085] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 945.719845][T17085] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 945.750528][T17085] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 945.792012][T17085] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 945.839822][T17085] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 945.869703][T17085] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 945.890729][T17085] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 945.911927][T20960] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4116'. [ 945.923844][T17085] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 945.953540][T17085] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 946.190810][ T5895] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 946.199778][T17075] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 946.369581][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 946.374879][T17075] usb 7-1: Using ep0 maxpacket: 32 [ 946.393337][ T5895] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 946.409736][T17075] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 946.419561][ T5895] usb 4-1: config 0 has no interface number 0 [ 946.426887][T17075] usb 7-1: config 4 has no interface number 0 [ 946.439747][ T5895] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 946.450998][T17075] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.469883][ T5895] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 946.482415][T17075] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.493008][ T5895] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 946.506190][T17075] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 946.515612][ T5895] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 946.532094][T17075] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.542273][ T5895] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 946.573876][T17075] hub 7-1:4.128: USB hub found [ 946.587857][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.611142][ T5895] usb 4-1: config 0 descriptor?? [ 946.667308][ T5895] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 946.772789][T17075] hub 7-1:4.128: 2 ports detected [ 946.778191][T17075] hub 7-1:4.128: Using single TT (err -22) [ 946.932966][ T5895] usb 4-1: USB disconnect, device number 37 [ 946.966812][ T5895] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 946.997215][T17075] hub 7-1:4.128: hub_hub_status failed (err = -71) [ 947.024524][T17075] hub 7-1:4.128: config failed, can't get hub status (err -71) [ 947.083219][T17075] usb 7-1: USB disconnect, device number 82 [ 947.230426][ T5895] usb 6-1: USB disconnect, device number 42 [ 947.248425][T20976] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 947.783538][T20989] team0: Port device team_slave_0 removed [ 948.151903][T21011] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4134'. [ 948.352832][T21016] ip6tnl1: entered allmulticast mode [ 948.399679][ T5977] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 948.589573][ T5977] usb 5-1: Using ep0 maxpacket: 16 [ 948.601918][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.629668][T17075] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 948.648335][ T5977] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 948.663321][ T5977] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 948.719930][ T5977] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 948.759593][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.789217][ T5977] usb 5-1: config 0 descriptor?? [ 948.822250][T17075] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.841818][ T5977] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 948.855566][T17075] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.886005][T17075] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 948.900422][T17075] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 948.910401][T17075] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.977624][T17075] usb 7-1: config 0 descriptor?? [ 949.180626][T21029] FAULT_INJECTION: forcing a failure. [ 949.180626][T21029] name failslab, interval 1, probability 0, space 0, times 0 [ 949.203822][T21029] CPU: 1 UID: 0 PID: 21029 Comm: syz.5.4140 Tainted: G L syzkaller #0 PREEMPT(full) [ 949.203861][T21029] Tainted: [L]=SOFTLOCKUP [ 949.203870][T21029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 949.203884][T21029] Call Trace: [ 949.203894][T21029] [ 949.203905][T21029] dump_stack_lvl+0xe8/0x150 [ 949.203947][T21029] should_fail_ex+0x412/0x560 [ 949.203983][T21029] should_failslab+0xa8/0x100 [ 949.204016][T21029] __kmalloc_cache_noprof+0x88/0x660 [ 949.204043][T21029] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 949.204074][T21029] ? __genradix_ptr+0x1e1/0x220 [ 949.204102][T21029] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 949.204141][T21029] sctp_association_new+0x15d3/0x25e0 [ 949.204192][T21029] sctp_connect_new_asoc+0x2e4/0x6b0 [ 949.204230][T21029] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 949.204282][T21029] ? __local_bh_enable_ip+0xd0/0x130 [ 949.204312][T21029] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 949.204341][T21029] ? security_sctp_bind_connect+0x7e/0x2c0 [ 949.204372][T21029] sctp_sendmsg+0x1528/0x2c10 [ 949.204421][T21029] ? __pfx_sctp_sendmsg+0x10/0x10 [ 949.204456][T21029] ? aa_sk_perm+0x6d5/0x900 [ 949.204498][T21029] ? __pfx_aa_sk_perm+0x10/0x10 [ 949.204527][T21029] ? sock_rps_record_flow+0x19/0x400 [ 949.204551][T21029] ? __pfx_inet_sendmsg+0x10/0x10 [ 949.204574][T21029] ? inet_sendmsg+0x2f4/0x370 [ 949.204596][T21029] ? __pfx_inet_sendmsg+0x10/0x10 [ 949.204619][T21029] __sys_sendto+0x5de/0x710 [ 949.204656][T21029] ? __pfx___sys_sendto+0x10/0x10 [ 949.204685][T21029] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 949.204722][T21029] ? __fget_files+0x3a0/0x420 [ 949.204768][T21029] ? ksys_write+0x242/0x270 [ 949.204794][T21029] ? __pfx_ksys_write+0x10/0x10 [ 949.204824][T21029] __x64_sys_sendto+0xde/0x100 [ 949.204861][T21029] do_syscall_64+0x14d/0xf80 [ 949.204893][T21029] ? trace_irq_disable+0x3b/0x150 [ 949.204925][T21029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.204947][T21029] ? clear_bhb_loop+0x40/0x90 [ 949.204976][T21029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.204997][T21029] RIP: 0033:0x7fc67979c799 [ 949.205018][T21029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.205038][T21029] RSP: 002b:00007fc67a59d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 949.205062][T21029] RAX: ffffffffffffffda RBX: 00007fc679a15fa0 RCX: 00007fc67979c799 [ 949.205078][T21029] RDX: 000000000000fffd RSI: 00002000000000c0 RDI: 0000000000000004 [ 949.205092][T21029] RBP: 00007fc67a59d090 R08: 0000200000000280 R09: 0000000000000010 [ 949.205106][T21029] R10: 00000000000000c1 R11: 0000000000000246 R12: 0000000000000001 [ 949.205120][T21029] R13: 00007fc679a16038 R14: 00007fc679a15fa0 R15: 00007fc679b3fa48 [ 949.205153][T21029] [ 949.878199][T17075] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 950.101394][T21038] kvm: apic: phys broadcast and lowest prio [ 950.760402][T17092] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 950.931470][T17092] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 950.946035][T17092] usb 3-1: config 0 has no interface number 0 [ 950.952530][T17092] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 950.967400][T17092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.981528][T17092] usb 3-1: config 0 descriptor?? [ 951.022328][T17092] usb 3-1: selecting invalid altsetting 1 [ 951.033431][T17092] dvb_ttusb_budget: ttusb_init_controller: error [ 951.040289][T17092] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 951.196447][T17092] DVB: Unable to find symbol cx22700_attach() [ 951.263158][T17075] usb 5-1: USB disconnect, device number 8 [ 951.325922][T17092] DVB: Unable to find symbol tda10046_attach() [ 951.340822][T17092] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 951.364206][T17092] usb 3-1: USB disconnect, device number 5 [ 951.837129][T21055] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 951.911420][T17093] usb 7-1: USB disconnect, device number 83 [ 952.352800][T21072] loop2: detected capacity change from 0 to 7 [ 952.376678][ T5945] Dev loop2: unable to read RDB block 7 [ 952.389830][ T5945] loop2: AHDI p1 p2 p3 [ 952.401180][ T5945] loop2: partition table partially beyond EOD, truncated [ 952.421905][ T5945] loop2: p1 start 1818582900 is beyond EOD, truncated [ 952.431794][ T5945] loop2: p3 start 335544320 is beyond EOD, truncated [ 952.457294][T21072] Dev loop2: unable to read RDB block 7 [ 952.472887][T21072] loop2: AHDI p1 p2 p3 [ 952.496488][T21072] loop2: partition table partially beyond EOD, truncated [ 952.521235][T21072] loop2: p1 start 1818582900 is beyond EOD, truncated [ 952.546970][T21072] loop2: p3 start 335544320 is beyond EOD, truncated [ 952.739808][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 954.204276][ T5957] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 954.395639][ T5957] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 954.439580][ T5957] usb 3-1: config 0 has no interface number 0 [ 954.460562][ T5957] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 954.500593][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.557776][ T5957] usb 3-1: config 0 descriptor?? [ 954.587989][T21104] loop2: detected capacity change from 0 to 7 [ 954.608111][ T5957] usb 3-1: selecting invalid altsetting 1 [ 954.630026][ T5957] dvb_ttusb_budget: ttusb_init_controller: error [ 954.636429][ T5957] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 954.657014][ T5945] Dev loop2: unable to read RDB block 7 [ 954.676737][ T5945] loop2: AHDI p1 p2 p3 [ 954.695635][ T5945] loop2: partition table partially beyond EOD, truncated [ 954.773618][ T5945] loop2: p1 start 1818582900 is beyond EOD, truncated [ 954.814433][ T5945] loop2: p3 start 335544320 is beyond EOD, truncated [ 954.858474][T21104] Dev loop2: unable to read RDB block 7 [ 954.877886][T21104] loop2: AHDI p1 p2 p3 [ 954.888668][T21104] loop2: partition table partially beyond EOD, truncated [ 954.936267][T21104] loop2: p1 start 1818582900 is beyond EOD, truncated [ 954.972819][T21104] loop2: p3 start 335544320 is beyond EOD, truncated [ 954.988688][ T5957] DVB: Unable to find symbol cx22700_attach() [ 955.118837][T21110] kvm: apic: phys broadcast and lowest prio [ 955.203231][ T5957] DVB: Unable to find symbol tda10046_attach() [ 955.225317][ T5957] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 955.257595][ T5957] usb 3-1: USB disconnect, device number 6 [ 955.647194][T21128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4169'. [ 956.157688][T21138] kvm: pic: level sensitive irq not supported [ 956.158606][T21138] kvm: pic: single mode not supported [ 956.166153][T21138] picdev_write: 268 callbacks suppressed [ 956.166176][T21138] kvm: pic: non byte write [ 956.191784][T21138] kvm: pic: non byte write [ 956.197720][T21138] kvm: pic: non byte write [ 956.252425][T21138] kvm: pic: non byte write [ 956.643307][T21143] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 956.669755][T21143] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 957.248018][T21152] kvm: apic: phys broadcast and lowest prio [ 957.909684][T17085] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 958.065573][T17085] usb 3-1: Using ep0 maxpacket: 32 [ 958.082940][T17085] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 958.135365][T17085] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 958.149547][T17085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.157605][T17085] usb 3-1: Product: syz [ 958.165416][T17085] usb 3-1: Manufacturer: syz [ 958.176462][T17085] usb 3-1: SerialNumber: syz [ 958.187401][T17085] usb 3-1: config 0 descriptor?? [ 958.638775][T21191] loop2: detected capacity change from 0 to 7 [ 958.647796][T21191] Dev loop2: unable to read RDB block 7 [ 958.649828][T17075] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 958.655124][T21191] loop2: AHDI p1 p2 p3 [ 958.666088][T21191] loop2: partition table partially beyond EOD, truncated [ 958.674120][T21191] loop2: p1 start 1818582900 is beyond EOD, truncated [ 958.681368][T21191] loop2: p3 start 335544320 is beyond EOD, truncated [ 958.819636][T17075] usb 4-1: Using ep0 maxpacket: 16 [ 958.826900][T17075] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 958.836853][T17075] usb 4-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 958.862960][T17075] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 958.883075][T17075] usb 4-1: config 1 has no interface number 1 [ 958.899753][T17075] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 958.936535][T17075] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x2E, changing to 0xE [ 958.948510][T17075] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 101, changing to 7 [ 958.962651][T17075] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 26214, setting to 1024 [ 958.977916][T17075] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 958.987741][T17075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.996169][T17075] usb 4-1: Product: syz [ 959.001014][T17075] usb 4-1: Manufacturer: syz [ 959.005657][T17075] usb 4-1: SerialNumber: syz [ 959.159620][ T5977] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 959.224701][T21185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.250837][T21185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.288960][T17075] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 959.317841][T17075] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 959.331693][ T5977] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 959.350964][T17075] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 959.369694][ T5977] usb 6-1: config 0 has no interface number 0 [ 959.386246][ T5977] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 959.418082][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.437893][ T5977] usb 6-1: config 0 descriptor?? [ 959.446864][T17075] usb 4-1: USB disconnect, device number 38 [ 959.462891][T21209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4199'. [ 959.475613][ T5977] usb 6-1: selecting invalid altsetting 1 [ 959.523096][ T5977] dvb_ttusb_budget: ttusb_init_controller: error [ 959.541981][ T5977] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 959.703718][ T5977] DVB: Unable to find symbol cx22700_attach() [ 959.772787][ T5977] DVB: Unable to find symbol tda10046_attach() [ 959.782059][ T5977] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 959.807741][ T5977] usb 6-1: USB disconnect, device number 43 [ 960.536330][T17085] usb 3-1: USB disconnect, device number 7 [ 960.590947][T17093] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 960.617172][T21239] loop2: detected capacity change from 0 to 7 [ 960.628702][ T5945] Dev loop2: unable to read RDB block 7 [ 960.639716][ T5945] loop2: AHDI p1 p2 p3 [ 960.643961][ T5945] loop2: partition table partially beyond EOD, truncated [ 960.660578][ T5945] loop2: p1 start 1818582900 is beyond EOD, truncated [ 960.667966][ T5945] loop2: p3 start 335544320 is beyond EOD, truncated [ 960.677071][T21239] Dev loop2: unable to read RDB block 7 [ 960.690076][T21239] loop2: AHDI p1 p2 p3 [ 960.696092][T21239] loop2: partition table partially beyond EOD, truncated [ 960.704439][T21239] loop2: p1 start 1818582900 is beyond EOD, truncated [ 960.712341][T21239] loop2: p3 start 335544320 is beyond EOD, truncated [ 960.751132][T17093] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.775404][T17093] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 960.786600][T17093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.801024][T17093] usb 5-1: config 0 descriptor?? [ 960.971420][ T5977] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 961.014847][T17093] usbhid 5-1:0.0: can't add hid device: -71 [ 961.031230][T17093] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 961.062216][T17093] usb 5-1: USB disconnect, device number 9 [ 961.149563][ T5977] usb 7-1: Using ep0 maxpacket: 8 [ 961.161062][ T5977] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.182823][ T5977] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 961.204864][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.261142][ T5977] usb 7-1: config 0 descriptor?? [ 961.302035][ T5977] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 961.373662][T17075] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 961.499376][ T5977] usb 7-1: USB disconnect, device number 84 [ 961.545567][T17075] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 961.576289][T17075] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 961.588406][T17075] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 961.603678][T17075] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 961.618237][T17075] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 961.650809][T17075] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 961.701278][T17075] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 961.721495][T17075] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 961.778690][T17075] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 961.838662][T17075] usb 4-1: string descriptor 0 read error: -22 [ 961.846022][T17075] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 961.875679][T17075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.908511][T17075] adutux 4-1:168.0: interrupt endpoints not found [ 962.106358][T17085] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 962.150954][T21243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.160424][T21243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.244687][T17091] usb 4-1: USB disconnect, device number 39 [ 962.281402][T17085] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 962.303794][T17085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.313797][T17085] usb 3-1: Product: syz [ 962.319052][T17085] usb 3-1: Manufacturer: syz [ 962.332418][T17085] usb 3-1: SerialNumber: syz [ 962.352569][T17085] usb 3-1: config 0 descriptor?? [ 962.549601][T17075] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 962.709551][T17075] usb 6-1: Using ep0 maxpacket: 16 [ 962.717873][T17075] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 962.731364][T17075] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 962.751763][T17075] usb 6-1: string descriptor 0 read error: -22 [ 962.778818][T17075] usb 6-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 962.805321][T17085] mos7840 3-1:0.0: required endpoints missing [ 962.812959][T17091] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 962.819195][T17075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.850463][T17085] usb 3-1: USB disconnect, device number 8 [ 962.914960][T17075] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 963.035299][T17091] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 963.061832][T17091] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 963.108579][T17091] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 963.130115][T17075] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 963.140567][T17091] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 963.171226][T17091] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 963.200805][T17075] usb 6-1: USB disconnect, device number 44 [ 963.206202][T17091] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 963.219589][ T5977] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 963.239131][T17091] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 963.251152][T17091] usb 4-1: Product: syz [ 963.255400][T17091] usb 4-1: Manufacturer: syz [ 963.284657][T17091] cdc_wdm 4-1:1.0: skipping garbage [ 963.311603][T17091] cdc_wdm 4-1:1.0: skipping garbage [ 963.318722][T17091] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 963.328210][T17091] cdc_wdm 4-1:1.0: Unknown control protocol [ 963.429594][ T5977] usb 5-1: Using ep0 maxpacket: 32 [ 963.449428][T21274] FAULT_INJECTION: forcing a failure. [ 963.449428][T21274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.467758][ T5977] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 963.479748][T21274] CPU: 0 UID: 0 PID: 21274 Comm: syz.6.4221 Tainted: G L syzkaller #0 PREEMPT(full) [ 963.479783][T21274] Tainted: [L]=SOFTLOCKUP [ 963.479792][T21274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 963.479807][T21274] Call Trace: [ 963.479816][T21274] [ 963.479825][T21274] dump_stack_lvl+0xe8/0x150 [ 963.479862][T21274] should_fail_ex+0x412/0x560 [ 963.479896][T21274] _copy_from_user+0x2d/0xb0 [ 963.479941][T21274] get_user_ifreq+0x6b/0x180 [ 963.479968][T21274] sock_ioctl+0x704/0x7f0 [ 963.479996][T21274] ? __pfx_sock_ioctl+0x10/0x10 [ 963.480024][T21274] ? __fget_files+0x3a0/0x420 [ 963.480056][T21274] ? __fget_files+0x2a/0x420 [ 963.480092][T21274] ? bpf_lsm_file_ioctl+0x9/0x20 [ 963.480121][T21274] ? __pfx_sock_ioctl+0x10/0x10 [ 963.480146][T21274] __se_sys_ioctl+0xfc/0x170 [ 963.480175][T21274] do_syscall_64+0x14d/0xf80 [ 963.480209][T21274] ? trace_irq_disable+0x3b/0x150 [ 963.480241][T21274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.480265][T21274] ? clear_bhb_loop+0x40/0x90 [ 963.480292][T21274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.480314][T21274] RIP: 0033:0x7f922ab9c799 [ 963.480335][T21274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.480355][T21274] RSP: 002b:00007f922b9ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 963.480379][T21274] RAX: ffffffffffffffda RBX: 00007f922ae15fa0 RCX: 00007f922ab9c799 [ 963.480395][T21274] RDX: 00002000000003c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 963.480410][T21274] RBP: 00007f922b9ba090 R08: 0000000000000000 R09: 0000000000000000 [ 963.480425][T21274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.480437][T21274] R13: 00007f922ae16038 R14: 00007f922ae15fa0 R15: 00007f922af3fa48 [ 963.480469][T21274] [ 963.827185][ T5977] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 963.836537][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.851777][ T5977] usb 5-1: Product: syz [ 963.867424][ T5977] usb 5-1: Manufacturer: syz [ 963.934800][ T5977] usb 5-1: SerialNumber: syz [ 963.974585][ T5977] usb 5-1: config 0 descriptor?? [ 964.301970][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 964.689839][ T5977] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 964.839582][ T5977] usb 7-1: Using ep0 maxpacket: 32 [ 964.848823][ T5977] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 964.850153][T17091] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 964.861478][ T5977] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 964.874047][ T5977] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 964.883565][ T5977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 964.897023][ T5977] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 964.915352][ T5977] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 964.957970][ T5977] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 964.968674][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.986243][ T5977] usb 7-1: config 0 descriptor?? [ 965.019637][T17091] usb 3-1: device descriptor read/64, error -71 [ 965.209758][ T5977] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 85 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 965.228936][ T5977] usb 7-1: USB disconnect, device number 85 [ 965.242583][ T5977] usblp1: removed [ 965.261608][T17091] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 965.299637][T17093] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 965.399619][T17091] usb 3-1: device descriptor read/64, error -71 [ 965.473560][T17093] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 965.481295][T17093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 965.492419][T17093] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 965.504738][T17093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 965.518363][T17091] usb usb3-port1: attempt power cycle [ 965.524257][T17093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 965.538317][T17093] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 965.546397][T17093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 965.557539][T17093] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 965.576862][T17093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 965.601901][T17093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 965.640627][T17093] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 965.667225][T17093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 965.699892][T17093] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 965.732667][T17093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 965.755322][T17092] usb 4-1: USB disconnect, device number 40 [ 965.805298][T17093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 965.879640][T17091] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 965.920965][T17091] usb 3-1: device descriptor read/8, error -71 [ 965.936108][T17085] usb 5-1: USB disconnect, device number 10 [ 966.209778][T17091] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 966.250652][T17091] usb 3-1: device descriptor read/8, error -71 [ 966.370322][T17091] usb usb3-port1: unable to enumerate USB device [ 966.552561][T21315] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4231'. [ 966.563742][T21315] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4231'. [ 966.574231][T21315] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4231'. [ 966.649565][ T5895] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 966.779569][ T5895] usb 5-1: device descriptor read/64, error -71 [ 967.019750][ T5895] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 967.159551][ T5895] usb 5-1: device descriptor read/64, error -71 [ 967.280025][ T5895] usb usb5-port1: attempt power cycle [ 967.629776][ T5895] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 967.713089][ T5895] usb 5-1: device descriptor read/8, error -71 [ 967.945758][T21330] loop2: detected capacity change from 0 to 7 [ 967.957431][ T5945] Dev loop2: unable to read RDB block 7 [ 967.966392][ T5945] loop2: AHDI p1 p2 p3 [ 967.976223][ T5945] loop2: partition table partially beyond EOD, truncated [ 967.989600][ T5895] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 968.002749][ T5945] loop2: p1 start 1818582900 is beyond EOD, truncated [ 968.013313][ T5945] loop2: p3 start 335544320 is beyond EOD, truncated [ 968.024449][ T5895] usb 5-1: device descriptor read/8, error -71 [ 968.033542][T21330] Dev loop2: unable to read RDB block 7 [ 968.057787][T21330] loop2: AHDI p1 p2 p3 [ 968.070411][T17093] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 968.099863][T21330] loop2: partition table partially beyond EOD, truncated [ 968.114920][T17093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.128738][T21330] loop2: p1 start 1818582900 is beyond EOD, truncated [ 968.140269][ T5895] usb usb5-port1: unable to enumerate USB device [ 968.147826][T21330] loop2: p3 start 335544320 is beyond EOD, truncated [ 968.155972][T17093] usb 6-1: can't set config #168, error -71 [ 968.169733][T17093] usb 6-1: USB disconnect, device number 45 [ 968.689568][T17093] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 968.820081][ T5977] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 968.854403][T17093] usb 7-1: Using ep0 maxpacket: 32 [ 968.867371][T17093] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 968.889584][T17093] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.897674][T17093] usb 7-1: Product: syz [ 968.902375][T17093] usb 7-1: Manufacturer: syz [ 968.907026][T17093] usb 7-1: SerialNumber: syz [ 968.931985][T17093] usb 7-1: config 0 descriptor?? [ 968.999611][ T5977] usb 6-1: Using ep0 maxpacket: 32 [ 969.011188][ T5977] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 969.031202][ T5977] usb 6-1: config 0 has no interface number 0 [ 969.043337][ T5977] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 969.052870][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.069623][ T5977] usb 6-1: Product: syz [ 969.075673][ T5977] usb 6-1: Manufacturer: syz [ 969.089999][ T5977] usb 6-1: SerialNumber: syz [ 969.106740][ T5977] usb 6-1: config 0 descriptor?? [ 969.132703][ T5977] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 969.160314][ T5977] usb 6-1: selecting invalid altsetting 1 [ 969.167902][ T5977] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 969.172033][T17093] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 086 [ 969.203309][ T5977] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 969.240729][ T5977] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 969.261009][ T5977] usb 6-1: media controller created [ 969.312228][ T5977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 969.362507][T21341] i2c i2c-1: failure reading data [ 969.716420][T21360] kvm: apic: phys broadcast and lowest prio [ 969.792670][T17093] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 969.905484][ T5977] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 969.932266][T17093] usb 4-1: device descriptor read/64, error -71 [ 969.935616][ T5977] zl10353_read_register: readreg error (reg=127, ret==-71) [ 969.957347][ T5977] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 970.029552][ T5957] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 970.066621][ T5977] usb 6-1: USB disconnect, device number 46 [ 970.170030][T17093] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 970.201712][ T5957] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 970.209513][ T5957] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 970.224648][ T5957] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 970.237536][ T5957] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 970.249322][ T5957] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 970.307368][ T5957] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 970.310029][T17093] usb 4-1: device descriptor read/64, error -71 [ 970.809559][ T5957] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 970.828225][ T5957] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 970.848523][ T5957] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 970.869187][ T5957] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 970.895207][T17093] usb usb4-port1: attempt power cycle [ 970.919646][ T5977] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 970.931921][ T5957] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 970.939415][ T5957] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 970.951915][ T5957] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 970.963879][ T5957] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 971.059975][ T5957] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 971.121483][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.132807][ T5977] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 971.150097][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.178458][ T5977] usb 6-1: config 0 descriptor?? [ 971.319740][T17093] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 971.340478][T17093] usb 4-1: device descriptor read/8, error -71 [ 971.371034][T17092] usb 7-1: USB disconnect, device number 86 [ 971.400030][ T5977] usbhid 6-1:0.0: can't add hid device: -71 [ 971.422617][ T5977] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 971.448039][ T5977] usb 6-1: USB disconnect, device number 47 [ 971.579981][T17093] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 971.600707][T17093] usb 4-1: device descriptor read/8, error -71 [ 971.709883][T21379] loop2: detected capacity change from 0 to 7 [ 971.710591][T17093] usb usb4-port1: unable to enumerate USB device [ 971.735304][ T5945] Dev loop2: unable to read RDB block 7 [ 971.741268][ T5945] loop2: AHDI p1 p2 p3 [ 971.745797][ T5945] loop2: partition table partially beyond EOD, truncated [ 971.755407][ T5945] loop2: p1 start 1818582900 is beyond EOD, truncated [ 971.763212][ T5945] loop2: p3 start 335544320 is beyond EOD, truncated [ 971.773335][T21379] Dev loop2: unable to read RDB block 7 [ 971.793480][T21379] loop2: AHDI p1 p2 p3 [ 971.802623][T21379] loop2: partition table partially beyond EOD, truncated [ 971.817393][T21379] loop2: p1 start 1818582900 is beyond EOD, truncated [ 971.824957][T21379] loop2: p3 start 335544320 is beyond EOD, truncated [ 972.293364][T21386] vivid-006: disconnect [ 972.337250][T21386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 972.352472][T21386] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 972.371725][T21385] vivid-006: reconnect [ 972.710763][ T5957] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 972.720178][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.751058][ T5957] usb 3-1: can't set config #168, error -71 [ 972.778680][ T5957] usb 3-1: USB disconnect, device number 13 [ 972.990259][T21403] kvm: apic: phys broadcast and lowest prio [ 973.159625][T17092] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 973.329660][T17092] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.359903][T17092] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 973.398100][T17092] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 973.425622][T17092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.456187][T17092] usb 6-1: Product: syz [ 973.474679][T17092] usb 6-1: Manufacturer: syz [ 973.479361][T17092] usb 6-1: SerialNumber: syz [ 973.488769][T21409] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4263'. [ 973.504028][T17092] usb 6-1: config 0 descriptor?? [ 973.669571][T17092] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 973.701208][T21416] netlink: 'syz.3.4266': attribute type 1 has an invalid length. [ 973.730985][T17093] usb 6-1: USB disconnect, device number 48 [ 973.820178][T17092] usb 5-1: Using ep0 maxpacket: 32 [ 973.830496][T17092] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 973.840232][T17092] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.851916][T17092] usb 5-1: Product: syz [ 973.861767][T17092] usb 5-1: Manufacturer: syz [ 973.871909][T17092] usb 5-1: SerialNumber: syz [ 973.880433][T21418] loop2: detected capacity change from 0 to 7 [ 973.895473][T17092] usb 5-1: config 0 descriptor?? [ 973.903903][T21418] Dev loop2: unable to read RDB block 7 [ 973.910745][T21418] loop2: AHDI p1 p2 p3 [ 973.919345][T21418] loop2: partition table partially beyond EOD, truncated [ 973.933944][T21418] loop2: p1 start 1818582900 is beyond EOD, truncated [ 973.941551][T21418] loop2: p3 start 335544320 is beyond EOD, truncated [ 974.116637][T17092] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 015 [ 974.357280][ T30] audit: type=1326 audit(1772773812.570:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67979c799 code=0x7ffc0000 [ 974.431558][ T30] audit: type=1326 audit(1772773812.570:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67979c799 code=0x7ffc0000 [ 974.479227][ T30] audit: type=1326 audit(1772773812.570:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fc67979c799 code=0x7ffc0000 [ 974.641765][T21429] FAULT_INJECTION: forcing a failure. [ 974.641765][T21429] name failslab, interval 1, probability 0, space 0, times 0 [ 974.690503][ T30] audit: type=1326 audit(1772773812.910:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67979c799 code=0x7ffc0000 [ 974.719788][T21429] CPU: 1 UID: 0 PID: 21429 Comm: syz.2.4272 Tainted: G L syzkaller #0 PREEMPT(full) [ 974.719825][T21429] Tainted: [L]=SOFTLOCKUP [ 974.719833][T21429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 974.719847][T21429] Call Trace: [ 974.719857][T21429] [ 974.719901][T21429] dump_stack_lvl+0xe8/0x150 [ 974.719946][T21429] should_fail_ex+0x412/0x560 [ 974.719996][T21429] should_failslab+0xa8/0x100 [ 974.720025][T21429] ? skb_clone+0x212/0x3a0 [ 974.720048][T21429] kmem_cache_alloc_noprof+0x87/0x650 [ 974.720071][T21429] ? __netlink_lookup+0xc6/0x8b0 [ 974.720111][T21429] skb_clone+0x212/0x3a0 [ 974.720138][T21429] __netlink_deliver_tap+0x404/0x850 [ 974.720194][T21429] ? netlink_deliver_tap+0x2e/0x1b0 [ 974.720225][T21429] netlink_deliver_tap+0x19c/0x1b0 [ 974.720257][T21429] netlink_unicast+0x7e3/0x9b0 [ 974.720292][T21429] ? __pfx_netlink_unicast+0x10/0x10 [ 974.720321][T21429] ? netlink_sendmsg+0x650/0xb40 [ 974.720348][T21429] ? skb_put+0x11b/0x210 [ 974.720385][T21429] netlink_sendmsg+0x813/0xb40 [ 974.720424][T21429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.720458][T21429] ? aa_sock_msg_perm+0xf1/0x1b0 [ 974.720490][T21429] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 974.720519][T21429] ____sys_sendmsg+0x972/0x9f0 [ 974.720563][T21429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.720608][T21429] ? import_iovec+0x73/0xa0 [ 974.720646][T21429] ___sys_sendmsg+0x2a5/0x360 [ 974.720673][T21429] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.720753][T21429] ? __fget_files+0x2a/0x420 [ 974.720784][T21429] ? __fget_files+0x3a0/0x420 [ 974.720827][T21429] __x64_sys_sendmsg+0x1bd/0x2a0 [ 974.720852][T21429] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 974.720885][T21429] ? __pfx_ksys_write+0x10/0x10 [ 974.720928][T21429] do_syscall_64+0x14d/0xf80 [ 974.720961][T21429] ? trace_irq_disable+0x3b/0x150 [ 974.720993][T21429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.721016][T21429] ? clear_bhb_loop+0x40/0x90 [ 974.721043][T21429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.721066][T21429] RIP: 0033:0x7f49e519c799 [ 974.721087][T21429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.721107][T21429] RSP: 002b:00007f49e609b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.721131][T21429] RAX: ffffffffffffffda RBX: 00007f49e5415fa0 RCX: 00007f49e519c799 [ 974.721148][T21429] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 974.721164][T21429] RBP: 00007f49e609b090 R08: 0000000000000000 R09: 0000000000000000 [ 974.721178][T21429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.721192][T21429] R13: 00007f49e5416038 R14: 00007f49e5415fa0 R15: 00007f49e553fa48 [ 974.721231][T21429] [ 974.722030][T21429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4272'. [ 974.902360][ T30] audit: type=1326 audit(1772773812.920:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67979c799 code=0x7ffc0000 [ 975.012614][T21429] : entered promiscuous mode [ 975.084400][T21436] xfrm0: entered promiscuous mode [ 975.092191][T21436] xfrm0: entered allmulticast mode [ 975.102624][T21426] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4270'. [ 975.169701][ T30] audit: type=1326 audit(1772773812.930:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21428 comm="syz.6.4271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f922ab9c799 code=0x0 [ 975.192001][ T30] audit: type=1326 audit(1772773813.320:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc67979c799 code=0x7ffc0000 [ 975.217007][ T30] audit: type=1326 audit(1772773813.320:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67979c799 code=0x7ffc0000 [ 975.242801][ T30] audit: type=1326 audit(1772773813.320:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67979c799 code=0x7ffc0000 [ 975.289927][ T30] audit: type=1326 audit(1772773813.320:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc67979c799 code=0x7ffc0000 [ 975.370759][T21441] loop2: detected capacity change from 0 to 7 [ 975.410387][T21441] Dev loop2: unable to read RDB block 7 [ 975.420902][T21442] Lens A: ================= START STATUS ================= [ 975.428654][T21442] Lens A: Focus, Absolute: 0 [ 975.429831][T21441] loop2: AHDI p1 p2 p3 [ 975.439685][T21442] Lens A: ================== END STATUS ================== [ 975.463831][T21441] loop2: partition table partially beyond EOD, truncated [ 975.492856][T21441] loop2: p1 start 1818582900 is beyond EOD, truncated [ 975.516982][T21441] loop2: p3 start 335544320 is beyond EOD, truncated [ 975.781398][ T5977] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 975.952196][ T5977] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 975.967304][ T5977] usb 6-1: config 0 has no interface number 0 [ 975.981588][ T5977] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 976.002385][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.028513][ T5977] usb 6-1: config 0 descriptor?? [ 976.066163][ T5977] usb 6-1: selecting invalid altsetting 1 [ 976.085229][ T5977] dvb_ttusb_budget: ttusb_init_controller: error [ 976.100268][ T5977] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 976.313890][ T5977] DVB: Unable to find symbol cx22700_attach() [ 976.361525][ T5957] usb 5-1: USB disconnect, device number 15 [ 976.500332][ T5977] DVB: Unable to find symbol tda10046_attach() [ 976.643194][ T5977] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 976.655767][ T5977] usb 6-1: USB disconnect, device number 49 [ 976.867741][T21467] loop2: detected capacity change from 0 to 7 [ 976.892149][T21467] Dev loop2: unable to read RDB block 7 [ 976.910226][T21467] loop2: AHDI p1 p2 p3 [ 976.914447][T21467] loop2: partition table partially beyond EOD, truncated [ 976.942159][T21467] loop2: p1 start 1818582900 is beyond EOD, truncated [ 976.959274][T21467] loop2: p3 start 335544320 is beyond EOD, truncated [ 977.201220][T21472] fuse: Unknown parameter 'Oroqp_id' [ 978.546679][T21492] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4289'. [ 979.161797][T21503] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 979.173108][T21503] bridge2: entered promiscuous mode [ 979.222736][T17092] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 979.391255][T17092] usb 7-1: Using ep0 maxpacket: 32 [ 979.421042][T17092] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 979.432053][T17092] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.447674][T17092] usb 7-1: Product: syz [ 979.459219][T17092] usb 7-1: Manufacturer: syz [ 979.481780][T17092] usb 7-1: SerialNumber: syz [ 979.508900][T17092] usb 7-1: config 0 descriptor?? [ 979.821696][T17092] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 087 [ 980.459612][ T5957] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 980.629580][ T5977] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 980.637397][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 980.650405][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.689664][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 980.734742][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 980.754397][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 980.799735][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 980.819748][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 980.851653][ T5977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 980.870554][ T5977] usb 5-1: not running at top speed; connect to a high speed hub [ 980.890250][T21530] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4300'. [ 980.898473][ T5957] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 980.911156][ T5977] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 980.921793][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.931023][ T5957] usb 4-1: Product: syz [ 980.935670][ T5957] usb 4-1: Manufacturer: syz [ 980.940762][ T5957] usb 4-1: SerialNumber: syz [ 980.947365][ T5977] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 980.959578][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.970981][ T5957] usb 4-1: config 0 descriptor?? [ 980.977585][T21517] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 980.985453][ T5977] usb 5-1: Product: syz [ 980.986667][T17092] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 980.995270][ T5977] usb 5-1: Manufacturer: syz [ 981.004630][ T5977] usb 5-1: SerialNumber: syz [ 981.219792][T17092] usb 3-1: Using ep0 maxpacket: 32 [ 981.226899][T21517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.258599][T21521] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 981.258599][T21521] The task syz.4.4297 (21521) triggered the difference, watch for misbehavior. [ 981.284005][T21517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.294541][T17092] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 981.304444][T17092] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.337963][T17092] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 981.349160][T17092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.359273][T17092] usb 3-1: Product: syz [ 981.364492][T21521] binfmt_misc: register: failed to install interpreter file ./file0 [ 981.378359][T17092] usb 3-1: Manufacturer: syz [ 981.384184][T17092] usb 3-1: SerialNumber: syz [ 981.393449][T17092] usb 3-1: config 0 descriptor?? [ 981.408608][T17092] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 981.976830][T17085] usb 7-1: USB disconnect, device number 87 [ 982.023001][T17092] gspca_sunplus: reg_r err -32 [ 982.374897][T21527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.389942][T21527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.470373][ T5957] rc_core: IR keymap rc-snapstream-firefly not found [ 982.478155][ T5957] Registered IR keymap rc-empty [ 982.629871][ T5957] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 982.738074][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 982.738089][ T30] audit: type=1326 audit(1772773820.950:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21546 comm="syz.2.4304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49e519c799 code=0x0 [ 982.771751][ T5957] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input148 [ 982.958510][ T5957] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input149 [ 982.993197][ T5957] usb 4-1: USB disconnect, device number 45 [ 982.999245][ C1] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 983.342226][ T5977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 983.439809][T17092] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 983.488933][T17092] usb 3-1: USB disconnect, device number 14 [ 983.776952][T21567] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4311'. [ 983.814572][ T5977] snd-usb-audio 5-1:12.0: probe with driver snd-usb-audio failed with error -2 [ 983.857603][ T5977] usb 5-1: USB disconnect, device number 16 [ 983.993154][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.080181][T17091] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 984.142687][T21574] FAULT_INJECTION: forcing a failure. [ 984.142687][T21574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.206250][T21574] CPU: 1 UID: 0 PID: 21574 Comm: syz.6.4314 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.206285][T21574] Tainted: [L]=SOFTLOCKUP [ 984.206294][T21574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 984.206308][T21574] Call Trace: [ 984.206320][T21574] [ 984.206330][T21574] dump_stack_lvl+0xe8/0x150 [ 984.206368][T21574] should_fail_ex+0x412/0x560 [ 984.206403][T21574] _copy_to_user+0x31/0xb0 [ 984.206441][T21574] simple_read_from_buffer+0xe1/0x170 [ 984.206478][T21574] proc_fail_nth_read+0x1bb/0x230 [ 984.206516][T21574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 984.206551][T21574] ? rw_verify_area+0x2a6/0x4d0 [ 984.206575][T21574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 984.206608][T21574] vfs_read+0x20c/0xa70 [ 984.206630][T21574] ? fdget_pos+0x246/0x320 [ 984.206676][T21574] ? __pfx___mutex_lock+0x10/0x10 [ 984.206700][T21574] ? __pfx_vfs_read+0x10/0x10 [ 984.206726][T21574] ? __fget_files+0x2a/0x420 [ 984.206772][T21574] ? __fget_files+0x3a0/0x420 [ 984.206803][T21574] ? __fget_files+0x2a/0x420 [ 984.206850][T21574] ksys_read+0x150/0x270 [ 984.206877][T21574] ? __pfx_ksys_read+0x10/0x10 [ 984.206898][T21574] ? fput+0xa0/0xd0 [ 984.206941][T21574] do_syscall_64+0x14d/0xf80 [ 984.206974][T21574] ? trace_irq_disable+0x3b/0x150 [ 984.207007][T21574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.207030][T21574] ? clear_bhb_loop+0x40/0x90 [ 984.207058][T21574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.207081][T21574] RIP: 0033:0x7f922ab5cfce [ 984.207102][T21574] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 984.207122][T21574] RSP: 002b:00007f922b9b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 984.207147][T21574] RAX: ffffffffffffffda RBX: 00007f922b9ba6c0 RCX: 00007f922ab5cfce [ 984.207163][T21574] RDX: 000000000000000f RSI: 00007f922b9ba0a0 RDI: 0000000000000004 [ 984.207178][T21574] RBP: 00007f922b9ba090 R08: 0000000000000000 R09: 0000000000000000 [ 984.207193][T21574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.207207][T21574] R13: 00007f922ae16038 R14: 00007f922ae15fa0 R15: 00007f922af3fa48 [ 984.207248][T21574] [ 984.689610][T17091] usb 3-1: Using ep0 maxpacket: 8 [ 984.729886][T17092] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 984.744127][T17091] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 984.766644][T17091] usb 3-1: config 179 has no interface number 0 [ 984.777841][T17091] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 984.829322][T17091] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 984.841498][T17091] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 984.866829][T17091] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 984.878759][T17091] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 984.909686][T17092] usb 6-1: Using ep0 maxpacket: 32 [ 984.928646][T17092] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 984.940818][T17091] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 984.959698][T17092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.973015][T17091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.981639][T17092] usb 6-1: Product: syz [ 984.985836][T17092] usb 6-1: Manufacturer: syz [ 985.002096][T17092] usb 6-1: SerialNumber: syz [ 985.058933][T21569] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 985.079069][T17092] usb 6-1: config 0 descriptor?? [ 985.151475][ T5895] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 985.183293][T21582] CIFS: iocharset name too long [ 985.306495][ T5895] usb 7-1: device descriptor read/64, error -71 [ 985.317097][T17092] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 050 [ 985.334060][T21585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4318'. [ 985.441587][T21585] bridge0: entered promiscuous mode [ 985.490439][T21585] bridge0: port 3(macsec1) entered blocking state [ 985.500087][T17092] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input150 [ 985.537253][T21585] bridge0: port 3(macsec1) entered disabled state [ 985.580510][ T5895] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 985.626711][T21585] macsec1: entered allmulticast mode [ 985.729660][T21585] bridge0: entered allmulticast mode [ 985.785434][T21585] macsec1: left allmulticast mode [ 985.789872][ T5895] usb 7-1: device descriptor read/64, error -71 [ 985.819363][T21585] bridge0: left allmulticast mode [ 985.899470][T21585] bridge0: left promiscuous mode [ 985.906523][ T5895] usb usb7-port1: attempt power cycle [ 986.029770][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 986.295456][ T5895] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 986.320634][ T5895] usb 7-1: device descriptor read/8, error -71 [ 986.559586][ T5895] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 986.581977][ T5895] usb 7-1: device descriptor read/8, error -71 [ 986.690169][ T5895] usb usb7-port1: unable to enumerate USB device [ 986.911887][ T5895] usb 3-1: USB disconnect, device number 15 [ 986.911996][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 986.926241][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 986.961111][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.978816][T17091] usb 6-1: USB disconnect, device number 50 [ 987.147573][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.251454][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.352389][T21601] FAULT_INJECTION: forcing a failure. [ 987.352389][T21601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.403276][T21601] CPU: 1 UID: 0 PID: 21601 Comm: syz.5.4325 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.403313][T21601] Tainted: [L]=SOFTLOCKUP [ 987.403321][T21601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 987.403335][T21601] Call Trace: [ 987.403343][T21601] [ 987.403353][T21601] dump_stack_lvl+0xe8/0x150 [ 987.403389][T21601] should_fail_ex+0x412/0x560 [ 987.403420][T21601] _copy_to_user+0x31/0xb0 [ 987.403458][T21601] simple_read_from_buffer+0xe1/0x170 [ 987.403495][T21601] proc_fail_nth_read+0x1bb/0x230 [ 987.403539][T21601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 987.403573][T21601] ? rw_verify_area+0x2a6/0x4d0 [ 987.403596][T21601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 987.403628][T21601] vfs_read+0x20c/0xa70 [ 987.403649][T21601] ? putname+0x2e/0x130 [ 987.403679][T21601] ? path_getxattrat+0x385/0x460 [ 987.403706][T21601] ? __pfx_vfs_read+0x10/0x10 [ 987.403728][T21601] ? __pfx_path_getxattrat+0x10/0x10 [ 987.403773][T21601] ksys_read+0x150/0x270 [ 987.403799][T21601] ? __pfx_ksys_read+0x10/0x10 [ 987.403833][T21601] do_syscall_64+0x14d/0xf80 [ 987.403866][T21601] ? trace_irq_disable+0x3b/0x150 [ 987.403898][T21601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.403920][T21601] ? clear_bhb_loop+0x40/0x90 [ 987.403946][T21601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.403966][T21601] RIP: 0033:0x7fc67975cfce [ 987.403986][T21601] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 987.404004][T21601] RSP: 002b:00007fc67a59cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 987.404028][T21601] RAX: ffffffffffffffda RBX: 00007fc67a59d6c0 RCX: 00007fc67975cfce [ 987.404044][T21601] RDX: 000000000000000f RSI: 00007fc67a59d0a0 RDI: 0000000000000004 [ 987.404058][T21601] RBP: 00007fc67a59d090 R08: 0000000000000000 R09: 0000000000000000 [ 987.404072][T21601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.404085][T21601] R13: 00007fc679a16038 R14: 00007fc679a15fa0 R15: 00007fc679b3fa48 [ 987.404116][T21601] [ 987.636407][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.749747][T17092] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 987.834388][T18064] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 987.852332][T18064] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 987.877421][T18064] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 987.886616][T18064] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 987.895041][T18064] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 988.036253][ C1] ------------[ cut here ]------------ [ 988.041852][ C1] !local->started [ 988.041880][ C1] WARNING: net/mac80211/rx.c:5471 at ieee80211_rx_list+0x291a/0x3710, CPU#1: syz.4.4327/21602 [ 988.056004][ C1] Modules linked in: [ 988.060029][ C1] CPU: 1 UID: 0 PID: 21602 Comm: syz.4.4327 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.071295][ C1] Tainted: [L]=SOFTLOCKUP [ 988.075852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 988.086035][ C1] RIP: 0010:ieee80211_rx_list+0x291a/0x3710 [ 988.092057][ C1] Code: 90 e9 79 df ff ff e8 55 e7 a0 f6 e9 6f df ff ff e8 4b e7 a0 f6 e9 65 df ff ff e8 41 e7 a0 f6 e9 5b df ff ff e8 37 e7 a0 f6 90 <0f> 0b 90 e9 4d df ff ff e8 29 e7 a0 f6 48 c7 44 24 68 00 00 00 00 [ 988.111759][ C1] RSP: 0018:ffffc90000a08b80 EFLAGS: 00010246 [ 988.117891][ C1] RAX: ffffffff8b24b239 RBX: ffff888035669625 RCX: ffff888022308000 [ 988.126077][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000005 [ 988.134148][ C1] RBP: ffffc90000a08dd0 R08: ffffffff8b24c113 R09: ffffffff8e7602e0 [ 988.142210][ C1] R10: 0000000000000002 R11: 0000000000000100 R12: ffff88802bcb33c0 [ 988.150281][ C1] R13: dffffc0000000000 R14: ffff88803566b128 R15: ffffffff8b24c113 [ 988.158327][ C1] FS: 00007fc914dbc6c0(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 988.167363][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 988.174078][ C1] CR2: 00007fc913fe9e80 CR3: 000000006149a000 CR4: 00000000003526f0 [ 988.182144][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 000000007a08253c [ 988.190199][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 988.198227][ C1] Call Trace: [ 988.201596][ C1] [ 988.204476][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 988.210735][ C1] ? lapic_next_event+0x11/0x20 [ 988.215658][ C1] ? clockevents_program_event+0x247/0x350 [ 988.221578][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 988.227093][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 988.232158][ C1] ? lock_acquire+0xf0/0x2e0 [ 988.236817][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 988.241978][ C1] ? ieee80211_rx_napi+0xd3/0x3e0 [ 988.247073][ C1] ieee80211_rx_napi+0x1b1/0x3e0 [ 988.252127][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 988.257653][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 988.263759][ C1] ? skb_dequeue+0x124/0x160 [ 988.268449][ C1] ieee80211_handle_queued_frames+0xe8/0x1e0 [ 988.274647][ C1] tasklet_action_common+0x2da/0x4b0 [ 988.280138][ C1] handle_softirqs+0x22a/0x870 [ 988.284962][ C1] ? do_softirq+0x76/0xd0 [ 988.289339][ C1] ? __alloc_skb+0x186/0x7d0 [ 988.294023][ C1] ? __alloc_skb+0x186/0x7d0 [ 988.298666][ C1] do_softirq+0x76/0xd0 [ 988.302923][ C1] [ 988.305901][ C1] [ 988.308885][ C1] __local_bh_enable_ip+0xf8/0x130 [ 988.314099][ C1] __alloc_skb+0x1aa/0x7d0 [ 988.318575][ C1] rtmsg_ifinfo_build_skb+0x84/0x260 [ 988.324013][ C1] rtmsg_ifinfo+0x8c/0x1a0 [ 988.328497][ C1] netif_close_many+0x284/0x420 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 988.333518][ C1] ? __pfx_netif_close_many+0x10/0x10 [ 988.338956][ C1] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 988.344680][ C1] netif_close+0x160/0x220 [ 988.349338][ C1] ? __pfx_netif_close+0x10/0x10 [ 988.354377][ C1] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 988.360812][ C1] dev_close+0x10a/0x220 [ 988.365192][ C1] nl80211_del_interface+0xd2/0x140 [ 988.370508][ C1] genl_family_rcv_msg_doit+0x22a/0x330 [ 988.376112][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 988.382291][ C1] ? bpf_lsm_capable+0x9/0x20 [ 988.387067][ C1] ? security_capable+0x7e/0x2c0 [ 988.392120][ C1] genl_rcv_msg+0x61c/0x7a0 [ 988.396680][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 988.401801][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 988.407311][ C1] ? __pfx_nl80211_del_interface+0x10/0x10 [ 988.413211][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 988.422547][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 988.427558][ C1] netlink_rcv_skb+0x232/0x4b0 [ 988.432427][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 988.437506][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 988.442903][ C1] ? down_read+0x272/0x2e0 [ 988.447407][ C1] ? genl_rcv+0xd/0x40 [ 988.451590][ C1] genl_rcv+0x28/0x40 [ 988.455732][ C1] netlink_unicast+0x80f/0x9b0 [ 988.460611][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 988.465952][ C1] ? netlink_sendmsg+0x650/0xb40 [ 988.470990][ C1] ? skb_put+0x11b/0x210 [ 988.475296][ C1] netlink_sendmsg+0x813/0xb40 [ 988.480183][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 988.485541][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 988.490598][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 988.495938][ C1] ____sys_sendmsg+0x972/0x9f0 [ 988.500828][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 988.506184][ C1] ? import_iovec+0x73/0xa0 [ 988.510799][ C1] ___sys_sendmsg+0x2a5/0x360 [ 988.515539][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 988.520838][ C1] ? futex_wake+0x4ac/0x580 [ 988.525440][ C1] ? __fget_files+0x2a/0x420 [ 988.530134][ C1] ? __fget_files+0x3a0/0x420 [ 988.534888][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 988.539935][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 988.545457][ C1] ? rcu_is_watching+0x15/0xb0 [ 988.550331][ C1] do_syscall_64+0x14d/0xf80 [ 988.554987][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.561143][ C1] ? clear_bhb_loop+0x40/0x90 [ 988.565891][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.571884][ C1] RIP: 0033:0x7fc913f9c799 [ 988.576346][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.596225][ C1] RSP: 002b:00007fc914dbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 988.604734][ C1] RAX: ffffffffffffffda RBX: 00007fc914215fa0 RCX: 00007fc913f9c799 [ 988.612799][ C1] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 988.620856][ C1] RBP: 00007fc914032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 988.629308][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 988.637408][ C1] R13: 00007fc914216038 R14: 00007fc914215fa0 R15: 00007fc91433fa48 [ 988.645488][ C1] [ 988.648572][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 988.655896][ C1] CPU: 1 UID: 0 PID: 21602 Comm: syz.4.4327 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.666882][ C1] Tainted: [L]=SOFTLOCKUP [ 988.671257][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 988.681396][ C1] Call Trace: [ 988.684756][ C1] [ 988.687635][ C1] vpanic+0x56c/0xa60 [ 988.691712][ C1] ? __pfx__printk+0x10/0x10 [ 988.696342][ C1] ? __pfx_vpanic+0x10/0x10 [ 988.700903][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 988.706229][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 988.711523][ C1] panic+0xc5/0xd0 [ 988.715299][ C1] ? __pfx_panic+0x10/0x10 [ 988.719791][ C1] __warn+0x315/0x4f0 [ 988.723834][ C1] ? ieee80211_rx_list+0x291a/0x3710 [ 988.729186][ C1] ? ieee80211_rx_list+0x291a/0x3710 [ 988.734535][ C1] __report_bug+0x29a/0x540 [ 988.739233][ C1] ? ieee80211_rx_list+0x291a/0x3710 [ 988.744571][ C1] ? __pfx___report_bug+0x10/0x10 [ 988.749662][ C1] ? sta_info_get_bss+0x58/0x390 [ 988.754715][ C1] ? ieee80211_rx_list+0x291a/0x3710 [ 988.760053][ C1] report_bug+0x16a/0x220 [ 988.764439][ C1] ? ieee80211_rx_list+0x291a/0x3710 [ 988.769770][ C1] ? ieee80211_rx_list+0x291c/0x3710 [ 988.775100][ C1] handle_bug+0x9c/0x200 [ 988.779398][ C1] exc_invalid_op+0x1a/0x50 [ 988.783951][ C1] asm_exc_invalid_op+0x1a/0x20 [ 988.788850][ C1] RIP: 0010:ieee80211_rx_list+0x291a/0x3710 [ 988.794805][ C1] Code: 90 e9 79 df ff ff e8 55 e7 a0 f6 e9 6f df ff ff e8 4b e7 a0 f6 e9 65 df ff ff e8 41 e7 a0 f6 e9 5b df ff ff e8 37 e7 a0 f6 90 <0f> 0b 90 e9 4d df ff ff e8 29 e7 a0 f6 48 c7 44 24 68 00 00 00 00 [ 988.814459][ C1] RSP: 0018:ffffc90000a08b80 EFLAGS: 00010246 [ 988.820583][ C1] RAX: ffffffff8b24b239 RBX: ffff888035669625 RCX: ffff888022308000 [ 988.828603][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000005 [ 988.836620][ C1] RBP: ffffc90000a08dd0 R08: ffffffff8b24c113 R09: ffffffff8e7602e0 [ 988.844645][ C1] R10: 0000000000000002 R11: 0000000000000100 R12: ffff88802bcb33c0 [ 988.852659][ C1] R13: dffffc0000000000 R14: ffff88803566b128 R15: ffffffff8b24c113 [ 988.860677][ C1] ? ieee80211_rx_napi+0xd3/0x3e0 [ 988.865739][ C1] ? ieee80211_rx_napi+0xd3/0x3e0 [ 988.870798][ C1] ? ieee80211_rx_list+0x2919/0x3710 [ 988.876120][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 988.882303][ C1] ? lapic_next_event+0x11/0x20 [ 988.887178][ C1] ? clockevents_program_event+0x247/0x350 [ 988.893023][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 988.898514][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 988.903503][ C1] ? lock_acquire+0xf0/0x2e0 [ 988.908157][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 988.913248][ C1] ? ieee80211_rx_napi+0xd3/0x3e0 [ 988.918307][ C1] ieee80211_rx_napi+0x1b1/0x3e0 [ 988.923288][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 988.928780][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 988.934637][ C1] ? skb_dequeue+0x124/0x160 [ 988.939270][ C1] ieee80211_handle_queued_frames+0xe8/0x1e0 [ 988.945293][ C1] tasklet_action_common+0x2da/0x4b0 [ 988.950666][ C1] handle_softirqs+0x22a/0x870 [ 988.955485][ C1] ? do_softirq+0x76/0xd0 [ 988.959887][ C1] ? __alloc_skb+0x186/0x7d0 [ 988.964514][ C1] ? __alloc_skb+0x186/0x7d0 [ 988.969133][ C1] do_softirq+0x76/0xd0 [ 988.973777][ C1] [ 988.976728][ C1] [ 988.979678][ C1] __local_bh_enable_ip+0xf8/0x130 [ 988.984835][ C1] __alloc_skb+0x1aa/0x7d0 [ 988.990078][ C1] rtmsg_ifinfo_build_skb+0x84/0x260 [ 988.995418][ C1] rtmsg_ifinfo+0x8c/0x1a0 [ 988.999875][ C1] netif_close_many+0x284/0x420 [ 989.004774][ C1] ? __pfx_netif_close_many+0x10/0x10 [ 989.010193][ C1] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 989.015862][ C1] netif_close+0x160/0x220 [ 989.020312][ C1] ? __pfx_netif_close+0x10/0x10 [ 989.025292][ C1] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 989.031563][ C1] dev_close+0x10a/0x220 [ 989.035848][ C1] nl80211_del_interface+0xd2/0x140 [ 989.041090][ C1] genl_family_rcv_msg_doit+0x22a/0x330 [ 989.046673][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 989.052778][ C1] ? bpf_lsm_capable+0x9/0x20 [ 989.057490][ C1] ? security_capable+0x7e/0x2c0 [ 989.062459][ C1] genl_rcv_msg+0x61c/0x7a0 [ 989.067002][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.072053][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 989.077453][ C1] ? __pfx_nl80211_del_interface+0x10/0x10 [ 989.083288][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 989.088772][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 989.093747][ C1] netlink_rcv_skb+0x232/0x4b0 [ 989.098558][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.103606][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 989.108934][ C1] ? down_read+0x272/0x2e0 [ 989.113380][ C1] ? genl_rcv+0xd/0x40 [ 989.117481][ C1] genl_rcv+0x28/0x40 [ 989.121493][ C1] netlink_unicast+0x80f/0x9b0 [ 989.126301][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 989.131620][ C1] ? netlink_sendmsg+0x650/0xb40 [ 989.136583][ C1] ? skb_put+0x11b/0x210 [ 989.140861][ C1] netlink_sendmsg+0x813/0xb40 [ 989.145663][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.150980][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 989.155954][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 989.161295][ C1] ____sys_sendmsg+0x972/0x9f0 [ 989.166112][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 989.171446][ C1] ? import_iovec+0x73/0xa0 [ 989.175989][ C1] ___sys_sendmsg+0x2a5/0x360 [ 989.180693][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 989.185916][ C1] ? futex_wake+0x4ac/0x580 [ 989.190496][ C1] ? __fget_files+0x2a/0x420 [ 989.195132][ C1] ? __fget_files+0x3a0/0x420 [ 989.199854][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 989.204825][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 989.210314][ C1] ? rcu_is_watching+0x15/0xb0 [ 989.215129][ C1] do_syscall_64+0x14d/0xf80 [ 989.219754][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.226025][ C1] ? clear_bhb_loop+0x40/0x90 [ 989.230746][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.236665][ C1] RIP: 0033:0x7fc913f9c799 [ 989.241376][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.261007][ C1] RSP: 002b:00007fc914dbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.269448][ C1] RAX: ffffffffffffffda RBX: 00007fc914215fa0 RCX: 00007fc913f9c799 [ 989.277476][ C1] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 989.285473][ C1] RBP: 00007fc914032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 989.293466][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.301472][ C1] R13: 00007fc914216038 R14: 00007fc914215fa0 R15: 00007fc91433fa48 [ 989.309491][ C1] [ 989.313135][ C1] Kernel Offset: disabled [ 989.317513][ C1] Rebooting in 86400 seconds..