last executing test programs: 4m26.801188373s ago: executing program 4 (id=1974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x1, 0xffff, 0x0, 0xffffffff, 0x75, 0x46b, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m26.037725736s ago: executing program 4 (id=1979): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x12}, {0xffff, 0xffff}, {0x10, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_ECN={0x6, 0x4, 0x1}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x3, 0xb, 0x2, 0x1, 0xbcc, 0x7}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x88000}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c950c4900801089000b4d3ee3a09a8425eeb32d803f4a3bd2456e0d6cd9b2f50ab67a7013104b3486df4bdc1f2d296b7ab0c12d5564055980ec798b533a04689222ebcffcb2", @ANYRES16=r3, @ANYBLOB="010300000000ffffffff1100000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 4m25.217473905s ago: executing program 4 (id=1982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 4m25.026624511s ago: executing program 4 (id=1983): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000016000100b1d7010088d230f70a00000004000000140001"], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x6}]}}]}, 0x44}}, 0x8850) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x4010) 4m24.68302565s ago: executing program 4 (id=1984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x218, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x1f0, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @loopback, 0x6d2}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x154, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x10c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x218}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) 4m24.306161593s ago: executing program 4 (id=1987): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 4m24.003376871s ago: executing program 32 (id=1987): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 1m21.399157472s ago: executing program 1 (id=2562): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a", 0xa}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26040885}, 0x4810) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) 1m18.263619102s ago: executing program 1 (id=2571): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000000)='/proc\x00\x00s\x92ync_\t\x00\x00\x00\x03\x1b\xcf\xc5\x15\xe6\xd7E\x88\x00\xd1l,\x00\x00\x00\x00\x00\x00\x00\x00\xd7\x965\x1aq'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sysfs$1(0x1, &(0x7f0000000100)='((@]\\\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000), 0x10) read(r2, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) 1m18.048343299s ago: executing program 1 (id=2572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x3, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x3, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffe000, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x200001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x800000, 0x0, 0x6, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0xfffffffd, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x80000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x6}, {0xff, 0x0, 0x0, 0x10}}}]}}]}, 0x45c}}, 0x0) 1m17.858524588s ago: executing program 1 (id=2574): syz_usb_connect(0x4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003580)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000001c0)="11366af4eb58cee2331cb4200fce011044ec95b9cc0693c5f0c55f901ed7009b72d88b938e949f3ead045cfddc4bc9fb73b69a197a0508556f2e8fc7adcf52ee422e9e1356210f2f85bf0bfa7aaf1553597351132ab68871675a63", 0x5b}, {&(0x7f0000000240)="5bffae0dea18dd8b53c08e5d3c67c8aa527f2d5577fce92469e62f5bfa596f25ab225e957f768ef6531612", 0x2b}, {&(0x7f0000000280)="4b531a38394c32d9170178684373132fb437c41a039c3cd7e80ea836b657bd74d35836cbb99ee31e9515ad092cc9d26c064e1fc92c11f61d181e066b9c728558fba97d5e95fe72feb704063e91c41f04fbfdf7abc9f6d1d40d7cb94db174f4dfdede9e215c8825805cb68f9b74feb2cbb222ae28a19a344a5640ce40afc1c0329b3a4d24f68d208c5bad31bb17717bd561045abe42bfdad03da74cda6c91dc96a7e631898fadcfc34c0e", 0xaa}, {&(0x7f00000003c0)="2d96d8ec7cd9db7ae071a7672b63fde45864fe352ce69647f6acf2d9fd6257d1faa4aa237ee708b65240dffd194570e00db456339f4822a1df8b4c9b40672ba39e94a761274a53406c25e90ac04572b89594a0b1b69476d9cd7e13143a1812106620adaf3833243644d0176c9101067f5391965ea4ef8fbbe8dea2330d7eb8883c7fe7cc632505ce0d7d504afbeec36ef227648ffb7024f1cc8e1d12aad55317dae31a47c68238c131c3cca10071e6584b62278dadd6a12a9fb8fc7cda233863305daa70fbc29b06eec765b9971ee41c11fd56168d65af02", 0xd8}, {&(0x7f00000004c0)="74c31a641cf4de160433bebaccd4189dfda52ec14d893a5b78c6902b637395363c3988fae88bc3b8dcb893625d8848265c8ebea0bb5e781cb37e3aa2a7fd894846ab0ba73e3b1872644e88f7cdb1ea974ba8df9673861ab378248e2cf54c0b0de690df3535409ed32e333abafa2d7319e13a7f142f009b71f32b22bd09db869fee1316b4a1475d427003a5d6a577e1d534246a9dd11b619a5dc58c", 0x9b}, {&(0x7f0000000580)="58facef5036861e33deec1baa39d9da600bc2d86cd0c16c4a447921fe3525a46096774b3e21e1e684b96893a1dcfba70431c1466c1e8794f852f6e61ffbc84f30adacd1969b4596c7b165e52c8da3e6676a10a2411da8f21a43003a6c77b39e90c5c7b66a04aadef7e03a5365691c1f942c9b97a2fb7d7a24cdac0819154b83ed3d0a204e3c0856c", 0x88}, {&(0x7f0000000640)="707259213447a3b3f586396fdc6ba1977bdaf0ea8309a4dceb29329f6e2a2b3f61a7dc3ddb48df8914ebba69ff6db4acb2737f85ed3e46457c64f707ef5b7cb8d3e3d0ebd01c49b4326b4bc612d645ba5fbdca68c9f1bf2766", 0x59}, {&(0x7f00000006c0)="c6d987edcc069d9e7b83eeca5110fb0d0545926e569aeccd516abad3977b3c9875c5841844cd42dfd86756131366e3761539718e0adc457d29f39bfd94b271abaa", 0x41}, {&(0x7f0000000740)="dd7224bf802f1428ba259ab4b309fc4d1eb1f69c398457572c78d14f9afd3468a1853601540b776cce20e908eb02d9ba4de283c21d09a9af89dd99170e08719428ac9588b63a56576a2a0e3cd4530dff155b475e501755748fce4691babc93a043ba53857c0b74d113ea3c0ce794", 0x6e}], 0x9}}, {{&(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000880)="87db9c5916e0deb2e8c23bfad046449cc541b8a411a901ee76bda3a37908ae471672e76b6c40539e8b3bec743eb181424bd44248fe4644810659823d2d53d78acab2fe4ec11a52b0ef4d4de607aeb7b9e38c06276fad9a28c3ca9ad6f94e362677a9e1f74e679eb7e9b563b22defc2b2293ea9a770c38feae64de7f2499c2414e967a5c9c4d672f043d5d67da8e271461b5f30919a7c00451f1e273e6ec6e112f67900f3f4566e7d0eb97bc2c949ecb1355af9f42e1dbe594fd96d6f3781cc46dac4945eeb7f2ac2d936307d", 0xcc}, {&(0x7f0000000980)="bb559b90787b07dc921eaf0a39894877886bdd481de515b8a16d2bbc3578489616ea2bf4a0003e469056d98e3ac843a987fdf36dab0a50036f7c3ce88fb1bd0b0efd8a8264d44fcaeb0f6428dc457d36c2a06a770e36d2a244b73038d35a", 0x5e}, {&(0x7f0000000b00)="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", 0xfb}, {&(0x7f0000000c00)="528ad0a080d2569422b99a2bc00619ec0b678fc21baecd45a18a9b40412b0c40abb22a5cd457519bfaad4fa2907df3e069b71dc8bb44b91d5f861e91c609be5d43e2229dc6fe57059affa0abf0588e3faa6416c28fc894ca73e018eaa371782b7829f3712a0fd3bcdd9905b6d8ada6159a78ad58f2897de6de8fb1fd5143778ca48b", 0x82}, {&(0x7f0000000cc0)="9be4c961bb4ecec0698670a243d1865c1e027e79918f9b947ee6c214e8f0dff5108ac6f8dd739655366f77c2806d5d3293", 0x31}, {&(0x7f0000000d00)="ecf3355473c46087ba2af155137f9d80a62acd85d8f6b550f2fa86acf05182ff5df67487217ff37918ee4546fc98945be22b7632df2ff0160970f5162dcf598f474249a85cba888322af0f0a2d35d6f025b44ca1579b620abe67", 0x5a}, {&(0x7f0000000d80)="e70f3590e55660394faf02f59384631bed13d5f8632a7a0a6fb5c8a9a69807dea7540a76e93832413bffee6642a02c909484086eea476e0c87f51fe44c99abfcd0fa495230d87e4ba83a3acc3c0a3c4fee13f1e20e59bad735963af1ce3826cc2f4e480153", 0x65}, {&(0x7f0000000e00)="4ad657c6dbdb3031361b42345beb756aea946e89adc48235476dad69092d5450cbd4157c682ddbd2f3575b78c0c1623fb3c5e044ca016b6e6c1e722c78f3e993461e721c2435c0c6c0e77a0a572ffe", 0x4f}, {&(0x7f0000001200)="032205fcdec03e97761136bb9998e70841325311c783993ade2a2e473aa9354ef272a51d6a8801b79d5bf37ce18aeffc548137cc72a1e5cfd7250cb21e1ad016ba27b56e58048ca8332f7c29e711c329d27193d483359d2693452e1dca4375367b46e4838e4946cd1d3b6872a41cbd0dddc0408d724b0bcba3a0eb6600", 0x7d}], 0x9}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000f00)="28844c7721b4919a05bf54c2ddf557cb218cb2f95b383f476c87833ea5af678d0c7e098fba0a45184a858ec6f6ce713e66b9967877ee1f0d2c969d595344e62712a668bde2966c1e7c759598e390776313d1e7364c2f", 0x56}], 0x1, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac141422dd00000000000000"], 0x110}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001440)="cf0fd975dc6b8ae1ee4bf5e1058ceaf751d7e3ae4af88ffdb0703fff29b13583704f140903f85c96cb38269de984dad7e1bf207753e1bbda3848da2d70802424af566b7e127586a156460890a65f46808ff8f12f226be92c0d9fc0e0a7d856921efa4433ed6bb9f590fc9bc14196f8f11d946fb309cea92d000340ef3eb5369455b955d0f065c1ef83141cf5f0336c810345cdbdeb250177b49d8c6eaa5482ada1e2a08c1bf4cc654abe3f3da065bc770a9599e5b1e3e642030fbd7ec11b72b79096148020644b91fd1dfae3547cb33e", 0xd0}, {&(0x7f0000000e80)="aa4b55b22ed94adfad1f56dfd2fa417fd3468758ccfcde3612f73ba08d8870456a606e03f22319687c408418b4efd5aa67e2de8d550e9600e2f741ace2256ef2510086294630d23c34f0964fae6391642cf10409eb28b94e10cc8e229b6c399d66e3559eb696808c3d9aea19650cbd1f4aa48d39c5cca19cc9", 0x79}, {&(0x7f0000001700)="97c04af9108499b5fb19a3fe1a2412cd9ce614cd6047b59e9cd00e2ae19d74442ef9fa5bcf26a88394d47e8582d0b9749a4329dbc21451c23b693df110d26965cec5448db90f4f1538257fa96f9e353b00260935ebf289184d4089acd1c8", 0x5e}, {&(0x7f0000001780)="687a21613927f0937bb413e9f9ad069c851e0af8950a4b537cbc043fd0e4352781e18602693815fdb5d3c051e45ae2dc40ae6d9da3509e299a22f75f60d8c956282e1df62558056d72ec96fbe46cef60ed2033b4314deccc854ef2fb1f5f836f96460ef58cf8f0", 0x67}, {&(0x7f0000001880)="bc99e52d3f5376abe2e1671ae92dcd2b24c4f1f0f76c8767d47a72fe35c3adc9652fef0f546c3e6a5a965ad91a08661c2723caa4055b4eb4d32370be182a499912ebdfb953b515dee052d467a6a24f20adb3bfba9b4a8ee914b23aad1ad9ac86501eea43564be8b06f25860e543ea476534f9c7257c2ed1a24684d8eb3b34c544d8f7f44fb424c6c8de847ded8ef66c4942919707568aff2677c2ef2ca3567043e7596fabd940207f307f5ccf860861ead7e", 0xb2}], 0x5, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast2}}}], 0x20}}, {{&(0x7f0000001a80)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001b80), 0x0, &(0x7f0000001bc0)=[@ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x96, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @private=0xa010100, @multicast2]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x3c}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5d83398b}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0xc0}}, {{&(0x7f0000001c80)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000002180)=[{&(0x7f0000001cc0)}, {&(0x7f0000001d40)="f1f5ae12ef5a3afd7ad883ba6c912f62c55d4618e7f1c4ea81411f9b02cadeae56d81360bac7875123ca9a3296b0fdcc6fa6d23d1e3680e2588b337ea7376e814aeb4bc7b3cc68d99ec4663c889c1905996ee82ed27f698c0e20230ba786ed2bb7158c030afaccf051ee5c0adbde1920acc2f964d06f2748a5123641464d8846992cf4a34997d26059ee686a11fa02b7faa521ff51276c519dec2faf24acc28c722e1883ece025fd9677d0f2bc38731a55c5527f4b34087cc293d9e91216ec84d98b515cc852aac65da3e091a4f030e412de3fdb4f467a011a5980ec8d49a287", 0xe0}, {0x0}, {&(0x7f0000001f00)="44767d3921e38ce75c2ad88f4353b5e522557f2dc668ee9a3f77f8d911887c03e15161c20dab0c139ffbc08897a694759a805a264d326a2501370b951bef5f0b60807f36431c00d6eaa52d57ac606f1672d2469af05f3bfd85cc29fb0e5290a037a5da4ba8929edc011fea12548c947d90540425e8e6b130d407e0b77ee9423d35ea134b97dfb58ef01843d8fcfe028ba259d6ff91d1a10d7648e54ec75cc1b5a24b04284f769e", 0xa7}, {&(0x7f0000001fc0)}, {&(0x7f0000002000)="3bcc950cf5e6f33a", 0x8}, {&(0x7f0000002080)="7a19af00c1bf5d2de6581cf39a1f4f969f5744bb3bf694ed7ed294b646eb9e6d1566c7ed83c0a5a3bbe95e7a3c2757706a0ab062e80c7a88d485bfc2f76e3eb4f80292bbdbab7be56daab14fb741ebda3aba03cd2a33ab1f6ef742e513c0a7f223e4c6f195dcc29d14f4d4e9b9d58812a6e7fde505c99d0906ec4b2eb35f9a691d7bd9daa944698eda6af0816ff244a166488493dcb51b54afaa1751969c0b6941fb9f2f0fa6069115c3fab3eb8d4c6aada979eb888080a8232385ff483f096ecfbd585e2ca952e7fddb890da1aa7a8a1ae71dcc3c5875939afe3dbe12f4829520950873bd0fdc4166f2a05001ac2b22fa049188d6429a2ded96", 0xfa}], 0x7, &(0x7f0000002200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002240)="1e002d090007263a92281a18c99c6cca107fb39a20bf329cdd3ada09b268731e7884de4b561df46f64c578590d0b7fe0e9fe186b188e8743c8bc2d38f36236d3fd9890dba982ffe3ba03556c1c653fdb334a316a47c0306880f015086c699f8e59ea40b4abfd1ba128e105c239f17fc40ac9477afe0aa490f82a21b387793d6801429396a2cd25064bdc8a15aebc75f609aa3ed8e216", 0x96}, {&(0x7f0000002300)="c6f16e54af5c5fcb2ce4393523846793198be383c58c28e795f0c11bda288ce2a5838a73058362fa85e693ab5552a96a8f46f004c11fec685702d63f0ccf7cc1257c39bb9b63d613193480da13cb6c3b4decb4d32d254f14ad8d90b03daab0ef23ffa0da66e2d1d2c7e248c2", 0x6c}, {&(0x7f0000002380)="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", 0x1000}], 0x3, &(0x7f00000033c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x53, 0x0, 0x2, [0x9, 0x4, 0x7, 0xffffffff, 0x7, 0x0, 0x80]}]}}}], 0x60}}, {{&(0x7f0000003440)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000003500)=[{&(0x7f0000003480)="fefafa285d42fbb7ebd61086c2fe7f54b4c49111b0186954761b25c4774222129cd75d87fcc51fbf7a3591f6fdd0316f9cae6d033b6d1e7150e7e86fe31972cf07806ce9d9", 0x45}], 0x1, &(0x7f0000003540)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa7}}], 0x18}}], 0x9, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0xfffffffffffffd08) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01020000000000000000010000000900030073797a32000000000900010073797a3100000000080007006e617400140004800800014000000003080002400ce055622c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a0500000000000000007a31000000000800024000000001140000001100010000000000000000000000000a00"/228], 0xe4}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x1, @thr={&(0x7f0000001340)="c780e97dd51a6ce8e42ec213de7d05979f80bddecdc5ec60f08acdf51056eecff071d785eb2c5d9c8e9aa7586fb187b671215b2e99fc0eae5a14d70b9c26104d095107d5200000939f80998bf59f5b22d99e284e665373c39ac18297aa302ade214a8a514d521d89bc549c523876a322db1b4eb3e5da88ae74bead5c4619ddd1648734559fe2778ba9bebb4fe4f03f0f90c2c46b408d4842b9115b2a08ded1cc647065e9c94d51d952a55affb45417fc00948b35db5f292d39570af16954ee8b282aed6315f31a8a87504153c1617121e86ded9457c761935ba0aad3c31ac3115699e05b413bd86d319cce35", &(0x7f0000001540)="402737b68b0e684dbab71b065632640843c5c98ff7518c3a16e0308f03cfb173247c5cce42fde5b4256d1a51c38a1a1eaa5ad29003b728e3cfa5c98d9442318ac67c9cc32b08270fcf4062083eb3a94d5899fcafa510d0b693316a726625036cec978670b2500340d2b5a0be0e6912b402f0c315dba0bb03419855aee94fd0744b9f85aa6c8714544b9baa9f0cf70aa9505b61fc1871720a36b9f280d4d206736236b84d78aab8b631944d553f51fd7d40a9acda2c5f82ed964a653305e8191a5502"}}, &(0x7f0000bbdffc)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') inotify_add_watch(r6, 0x0, 0x87000a52) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000040)={r4, 0x7}, &(0x7f0000000080)=0x8) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x700, 0xfdef) 1m16.409354959s ago: executing program 3 (id=2576): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001c00)={0x34, &(0x7f0000000440)={0x0, 0x15, 0x1, "ae"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x1, 0x46, {0x46, 0x44, "e3ef002f3911d0b7c6e7a5b348f90b7b19c34dc6394f50a134fa9b8ca26eaba346743c017533a0f49e9c935d76129657655a7743233e03f8e7548e74507d31f3eecf80c1"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x40, 0x0, 0x56, "929ccfa2a5e576a3e74365765327b28fe47f206f6e0f72f1d26db1ef258d42df6805ae0874adab9ea17499685e5328b6783c7b206cc324b9f1bacbd8a595d2adf5dc4a2e21f9ee10fba74f6de7b634a91f0f4ef316d5"}, &(0x7f0000000740)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m12.972539236s ago: executing program 1 (id=2581): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = semget(0x3, 0x0, 0x600) semctl$IPC_RMID(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0xfffffffffffffdaf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m12.750957906s ago: executing program 3 (id=2584): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x3, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x3, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffff1, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x200001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x800000, 0x0, 0x6, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0xfffffffd, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x80000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x6}, {0xff, 0x0, 0x0, 0x10}}}]}}]}, 0x45c}}, 0x0) 1m12.565186635s ago: executing program 3 (id=2586): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="8857c5fc68d9c508a3cc02", 0xb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="a027", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="a4a67040682526806acc114a4a7dfe68fe53374a8060569786", 0x19}, {&(0x7f0000000240)="4f5422535c747dd25d8ee892da88282730d4beb74f630e5fe484d0a057f1cecabc07d9bd761b92c1d89075435c56980a69831e3ace20e45e41503cb4f994e0996c68ce3fcad667471bc2269a9ae684529a1c2a26b8f680e49576c51e0bb6b2178c4738e076e5f0552d61edc5c1103f7cdc32d39dfc0b2619dbe6f6ef8d477650d27c090146a4c09849537c8aee4383022e1841c80c54cfd023f62b6f83c241fafcb6404435719db8a695374fde6196918ba06883db", 0xb5}, {&(0x7f0000000300)="5d387f3ca8f237c4806c4fd136f00da2bfe425ce1f0c9a5d3eacca8423241748c36ccc5916ca6414737b2245996b5ae2fd990f41bbadce2a2f8e0f0af543e9d061e0acee948badb66208c2f50fd4990efa6f8ddcbc43f46a4799c4886fdaed53c2f76d3acdffa8128997bb42c0c9a7f996e632f7a595403ba79ad4368338d2ff15bcb00e515433e9e9b976036afb4f877b69f270aaef70ffe1df7c478b7c471aa95065e73d5f7ddc9b90510582cdc08393de56c4ff58174e6fc7994692579e32ce7b9b6ee894f16bd5516c0bb63a9b4e46a1ca6e776c88ea563addc2", 0xdc}, {&(0x7f0000000400)="c75b331521315f83ec275598ab951e9e1a4e215f29c2ba0dc15b534dc662b958ca4254f49fde32588458efe87ed123562c5cee75a9a2d165179e745bc9d55c817ce2b239ac02de353544271f730d1fd41478383557f839d5679010d4be610bafb35dfaf50d6358460f677f2c9dd8378f6e5bb2fcb2d97c20b60d9bf597f08aeb9f73df296f0119ff99f2f8a9936696a22bfa45be01966a2d4c3e4fd385dcd4686a4e328b1786adc2c0aa9787c9d9026e9ef2b2c87f16cff89538cb0aa2518cd4468205d04aec40a4c0530332d8bc094ea4a891e23f6f6586aeb05a48a068902ca408637fadb5cd", 0xe7}, {&(0x7f0000000500)="eff48c3b2c9b99dd9e8255c3035805f4522579a8998b66118981ceaf07b5b21e08527b50a21502349013406ae074d299099333c3ac520e862b301ab5b01eae34b72b8ce58af83d321352dd03f118213793a775a16e95f5cacf5f", 0x5a}], 0x5, &(0x7f0000001540)=ANY=[], 0x310}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000600)="bc868b1f94d77ed4496d9ae535", 0xd}], 0x1}}], 0x5, 0x28048005) 1m12.353087976s ago: executing program 3 (id=2589): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2a, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000005280), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000005340)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x1, 0x0, {"5df5c6554d65e4f296575d99e79d6d3e"}, 0xe, 0x1, 0x1}}}, 0x90) socket(0x1000000010, 0x80000, 0x0) getsockname(r3, &(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, 0x0, &(0x7f0000000000)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000100)=0xffff0080) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xc}, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) close(r4) unshare(0x42000000) 1m10.723717957s ago: executing program 1 (id=2591): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb701) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x3, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x3, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) shutdown(r5, 0x2) (async) shutdown(r5, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x1, 0x4}, 0x80, 0x0}, 0x20000814) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x1, 0x4}, 0x80, 0x0}, 0x20000814) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 1m10.46522556s ago: executing program 3 (id=2593): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) 1m9.645135911s ago: executing program 3 (id=2594): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000240)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x401}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x1, 0xfff, 0x4, {0x4, @sdr={0x59565955, 0x8f98}}, 0xffffeffd}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000000)={0x3000201c}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x480, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000080)=@l={0x92, 0x3, 0xb0, 0x5, 0x5, 0xf9, 0xf801}) bind$alg(r4, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) r6 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x62d5, 0x11600000, 0xff, 0x2, 0x7, 0x9, 0x0, 0x0, 0x1, 0xf}}, 0x50) keyctl$setperm(0x5, r6, 0x0) syz_emit_ethernet(0x72, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100030086dd6002adf700383aff00000000008000000000ffff0a8101020900000000000000000013000000000102009078000000006000641a00043aff00000000000000000000000000000000000000000000fe000000ffffe000190103bba8c1b77c06e7bcf6ff0e35ada52abfb4b3201b689d27e4b83adfd29e3091fe36964904d893c053291d0ddb0b943e53cc696affd0be927b177e8529d2979a5113856883fba88101a3056e9d7b7e9971c4d507c833fa4bfba6ae2e2b0b5441a7f626f7024806ccf6f72710136de483b8202e3d69e3"], 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"}) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 55.034789602s ago: executing program 33 (id=2591): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb701) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x3, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x3, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) shutdown(r5, 0x2) (async) shutdown(r5, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x1, 0x4}, 0x80, 0x0}, 0x20000814) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x1, 0x4}, 0x80, 0x0}, 0x20000814) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 54.425217364s ago: executing program 34 (id=2594): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000240)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x401}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x1, 0xfff, 0x4, {0x4, @sdr={0x59565955, 0x8f98}}, 0xffffeffd}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000000)={0x3000201c}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x480, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000080)=@l={0x92, 0x3, 0xb0, 0x5, 0x5, 0xf9, 0xf801}) bind$alg(r4, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) r6 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x62d5, 0x11600000, 0xff, 0x2, 0x7, 0x9, 0x0, 0x0, 0x1, 0xf}}, 0x50) keyctl$setperm(0x5, r6, 0x0) syz_emit_ethernet(0x72, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100030086dd6002adf700383aff00000000008000000000ffff0a8101020900000000000000000013000000000102009078000000006000641a00043aff00000000000000000000000000000000000000000000fe000000ffffe000190103bba8c1b77c06e7bcf6ff0e35ada52abfb4b3201b689d27e4b83adfd29e3091fe36964904d893c053291d0ddb0b943e53cc696affd0be927b177e8529d2979a5113856883fba88101a3056e9d7b7e9971c4d507c833fa4bfba6ae2e2b0b5441a7f626f7024806ccf6f72710136de483b8202e3d69e3"], 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"}) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 5.953090254s ago: executing program 2 (id=2734): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000008000000bf"]) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', r1, 0x0, 0x260) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xa, 0x2, 0x8ae9, 0x200, 'syz0\x00', 0xa2ff}, 0x2, 0x400, 0x6, r3, 0x4, 0x1, 'syz1\x00', &(0x7f00000001c0)=['-\x00', ')+\\[.!.#*}/\'%[\x00', '\x00', '\'-(\x00'], 0x16}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0xa0}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x2, 0x45, 0x0, "00000000000000000000000000000000000000f300000000000000000000000000000000350d0000000000000000000083c0d55760b2d13d000c00cbcd00800000000000000000080000008000"}, 0xd8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x10000}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/111) syz_usb_connect$uac1(0x0, 0x8b, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x6, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff, 0x6}, [@feature_unit={0x13, 0x24, 0x6, 0x1, 0x3, 0x6, [0x8, 0x7, 0x1, 0x0, 0x9, 0xa], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0xb0, 0x5, {0x7, 0x25, 0x1, 0x2, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd8, 0x40, 0xfb, {0x7, 0x25, 0x1, 0x1, 0xed, 0x1}}}}}}}]}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x17c, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x1d}, [@nested={0xc, 0xc6, 0x0, 0x1, [@nested={0x4, 0x112}, @nested={0x4, 0x120}]}, @generic="002ee471e8058e584220fbb64011d2d03dbe64d5ab8245938ec4e8a0001d284d0b0d50e457668bfcf0ca370f6bc5b340098869812537d76708345e72d58745146b78a0b75b5fde2320b42885cc8e30c0307fece845a710bc20665b133a6385c9525cb8466032e9f9bc7471acf53ca9c1c2d844e1295f06161256ed915ae3c9527b51a81d9a698b0582f625e07dd597d1847caf38c1aba6b58741b44af65445643a510c0ca91d12aa9be18fb07fe4fcd9be756de3a677fbe5d60637a8ff2c7492a8403a7cf82277512b", @nested={0x8d, 0xe8, 0x0, 0x1, [@nested={0x4, 0x4c}, @nested={0x4, 0xda}, @generic="be2426c214902c109815a2db5a62937a8f25d478342558d6929fd0c0b9e179b0797904f8e9ba37a4443820ad0f450fbbc2bf763aacac4aacc5c155683a0744b91d552592071325d249572cb36adcf81e557c95d526ceaaf81f2cdf0310e144056a7de65f77218b42016f970a87ba8cfb0a6f7a7ae5e9ce291e", @nested={0x4, 0x12b}, @typed={0x4, 0x10a}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x800}, 0x804) 5.002936819s ago: executing program 5 (id=2737): r0 = syz_open_procfs(0x0, &(0x7f0000001080)='net/icmp\x00') read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0xfda3) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x1fe, 0x12) 4.870015043s ago: executing program 5 (id=2739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r3 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x48, r7, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}]}]}, 0x48}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) 4.278598165s ago: executing program 2 (id=2740): r0 = socket$netlink(0x10, 0x3, 0xb) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) (async) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r1, 0x5}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10000}, 0xc) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpgrp(0x0) 3.745212051s ago: executing program 2 (id=2741): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x0, 0x100}}}}}}}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x581000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x31, 0x80000, 0x7) bind$l2tp6(r3, &(0x7f0000000240)={0xa, 0x0, 0xcb5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3, 0x4}, 0x20) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000340)='./cgroup\x00', 0x0, 0x120) getdents(r4, &(0x7f0000000000)=""/78, 0x4e) getdents64(r4, 0xfffffffffffffffe, 0x41) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x115440) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 3.553522407s ago: executing program 5 (id=2742): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@empty, @empty, 0x0, "daf86eed51d59c3b227a93fc7264db425e9d015e14f17c0900497e00b3bb00", 0x7, 0x6, 0xffffff9d, 0xffffe6df}, 0x3c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d492000000010902"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="100000000000000001"], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000100)=0x5, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="380000005400010026bdf0010000000007000000", @ANYBLOB="58feb8de8fec3aad22b2443bb30c9ecbe9a7b7c7f76821b7ce863af621c89d8c517b776838c78795c061207ef87a1c0e7e886e2e01a66ae6cd115eb8a03f075f79ed0395df42f0ee3488fd796ab8c8e3f4724539763ff7650b1e886eb03839967361f3f584e9cdcf86d85c2003f1825cf48dd721fdee52dc3e3a87bd1b5100488d98dbbcb2dd59aa15e6c417e962ce5a08658468ecc3785809c1824432d9d823dd03ece1426eecf84ddb8721b6784a3dea7be852a368427c5497ad5bd9828dccc4314405c566f7d81e45", @ANYRES64], 0x38}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f00000001c0)=@l2={0x1f, 0x7fe0, @none, 0x5}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)="d702bc58761e4093a04d37e1efad8b804a6315a00048ed2ecda1d89116323b9e4701814108151c54fff3db7091ebb9a3a77f4f115ad0162983d371d836d6527b840f224faaf237cfa65b97ce4d225579d856bb467b8709421374026195594deeefe6336578", 0x65}, {&(0x7f0000000400)="db027366b8530f611384c42df39afc6e4e62062a99d2b1f80a37debd9a18f9261774cefc6a9ba7cb91ca80eafe03e4f5a70f07be023511325065379e11675c58ae1c8c2302ef52122229431086c8b8e77eddde0111c7cccc064cfed85d921b402e10ef6adc28489155cd64e2ed7bf5", 0x6f}, {&(0x7f0000000480)="a8741986e4e09b70bf9e28ad558d76068120a328c265d10645f960b7887fe73160a410bfa3c378c78de31e6643e82893a0de8264a173fac6d814ab20a70f99918a012adbd8fedc4b057f2af45a2777dadb0dc63ffa44d26e307372396f9a13739406851af0599c2ea47de039f302b1aa7288d7b3f9754e7548ab2f8f30a1c89da8490b3de5daea72974398d85212b36b3de76e250aab204e237fcfea267dde3a093f44f58621660867f9ca3c", 0xac}, {&(0x7f0000000300)="4f16", 0x2}, {&(0x7f00000005c0)="dcbbe0702a1e216a9aa63613929595fecce0883f08d91bad6d51ac3438fdac1ad694276505090113d26ccc9746986682d8f62a99897ed6054fc3020e49d0a166c6d8ad1946b4fbf33da6a916a9744cb76518bac3fe2cb2827a53dafc92f4524a98c96012700864fbaff81adc4c5dcf8fafdb611e620ad8a44cfae1b3ad4ba8154295a8e22431e8d89bc8897cd9d1ed5f88c0877b19d5", 0x96}, {&(0x7f00000007c0)="02db2caf53d7802e9cb18a4286821e790cc6c01298236a85f5f1054581e2c230bb595204915ad7ddd6b31912a67bd3646ce3e8a34662a219d1780bcdbfc96f22d0efff7f98f796bd2f3e0012978c860620b48bfc541aa9c451aca18f2b94eb3e2571b9ab9a2afe982ea1b519c2cae165292573284c74741260cb02c0d51159394002cee1e0b8eb77a5364386846124ef81c6af95ce57f908c57b5aca7d281d83ae6f40feffeb75e4eb7aefc67d19d2739e260939e3a3535ed00f8cd7e1cdf51a551b7813140ff382f6e23aadfc3096782163e1ba942a637ce82e98b18270c0535d14a6004e4d22a1d104a52fe8d290", 0xef}, {&(0x7f00000008c0)="bfb4bf1374e149e1a7ba82c30318cad978e6b6f936f1dd8deb5d065150a00daf84a0c9dabb60c90d71296b34d7acf01247e0b5c0e5d057fc36fea5396b4218ecbaf61550fd9a559e40fd300cbebc8cff83c725aa03161397511f78e0707fbb627a00aa74cf959a7a43803d8ce6ad7efa8f99c39314ed96bfdc1502640486529905c030b41b58355c4533fafbbee417d397fbffff6eea61d514adef6441fb02ddaa17ed1e9ec56217ce871e5cb436a2ec049603f461a529149eda9a674e9a61e9798043f572974af3e1e991babf2476ed3ca85a7a7f0e3f41", 0xd8}], 0x7, &(0x7f00000009c0)=[{0x20, 0x0, 0xf, "36eb14c9a99ee724559cdf"}, {0x40, 0x3a, 0x7ff, "1ff55b3e66d12518cb6a8d2305ee22548ed922905525d94d8e62285cb67601a9c2e183ec336d5e4eaba18b1810"}, {0x88, 0x1, 0x9, "85c0dc7d798d66e3cfc6cd5ea5b04470c131765e41d749856623cb9a059f2a93934338c272e509a8874509d954b58533c49e8eb027792fcf735be711cdd82aa36b4624bdca025c06f2743e0c27bc2e1909df9c055ef8c595bfe0a49d971a0792f10b4f6fecafcd5f2ac70076dd5da2193f62"}], 0xe8}, 0x8004) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="20000280", @ANYRES32=r9, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32], 0x58}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r10, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 3.16669108s ago: executing program 0 (id=2743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000c000040000000030a89e10000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d61746368000000240002800c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a300000000014000000110001"], 0xe8}}, 0x0) 3.049186932s ago: executing program 0 (id=2744): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000040800000000000000040000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5121b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a0100000000000000e28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c251112e2a59ea0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe91bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6c597eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e64103602000000db47d7990d5a007faccb2f86660079f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab2127cd472a2e4a7f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d8418351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="8857c5fc68d9c508a3cc02", 0xb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="a027", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="a4a67040682526806acc114a4a7dfe68fe53374a8060569786", 0x19}, {&(0x7f0000000240)="4f5422535c747dd25d8ee892da88282730d4beb74f630e5fe484d0a057f1cecabc07d9bd761b92c1d89075435c56980a69831e3ace20e45e41503cb4f994e0996c68ce3fcad667471bc2269a9ae684529a1c2a26b8f680e49576c51e0bb6b2178c4738e076e5f0552d61edc5c1103f7cdc32d39dfc0b2619dbe6f6ef8d477650d27c090146a4c09849537c8aee4383022e1841c80c54cfd023f62b6f83c241fafcb6404435719db8a695374fde6196918ba06883db", 0xb5}, {&(0x7f0000000300)="5d387f3ca8f237c4806c4fd136f00da2bfe425ce1f0c9a5d3eacca8423241748c36ccc5916ca6414737b2245996b5ae2fd990f41bbadce2a2f8e0f0af543e9d061e0acee948badb66208c2f50fd4990efa6f8ddcbc43f46a4799c4886fdaed53c2f76d3acdffa8128997bb42c0c9a7f996e632f7a595403ba79ad4368338d2ff15bcb00e515433e9e9b976036afb4f877b69f270aaef70ffe1df7c478b7c471aa95065e73d5f7ddc9b90510582cdc08393de56c4ff58174e6fc7994692579e32ce7b9b6ee894f16bd5516c0bb63a9b4e46a1ca6e776c88ea563addc2", 0xdc}, {&(0x7f0000000400)="c75b331521315f83ec275598ab951e9e1a4e215f29c2ba0dc15b534dc662b958ca4254f49fde32588458efe87ed123562c5cee75a9a2d165179e745bc9d55c817ce2b239ac02de353544271f730d1fd41478383557f839d5679010d4be610bafb35dfaf50d6358460f677f2c9dd8378f6e5bb2fcb2d97c20b60d9bf597f08aeb9f73df296f0119ff99f2f8a9936696a22bfa45be01966a2d4c3e4fd385dcd4686a4e328b1786adc2c0aa9787c9d9026e9ef2b2c87f16cff89538cb0aa2518cd4468205d04aec40a4c0530332d8bc094ea4a891e23f6f6586aeb05a48a068902ca408637fadb5cd", 0xe7}, {&(0x7f0000000500)="eff48c3b2c9b99dd9e8255c3035805f4522579a8998b66118981ceaf07b5b21e08527b50a21502349013406ae074d299099333c3ac520e862b301ab5b01eae34b72b8ce58af83d321352dd03f118213793a775a16e95f5cacf5f", 0x5a}], 0x5, &(0x7f0000001540)=ANY=[], 0x310}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000600)="bc868b1f94d77ed4496d9ae535", 0xd}], 0x1}}], 0x5, 0x28048005) 3.033773203s ago: executing program 0 (id=2745): socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4f4}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x816}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) (async) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5, 0x0, 0xff}, 0x18) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r6) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b0001010000000904000002070101"], 0x0) 2.895252278s ago: executing program 2 (id=2746): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, 0x0, 0x20, 0x70b92d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xc0000}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xcaa7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x10001}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040854}, 0x4014) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2d4, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x7}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4e12}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0x2}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x14c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x66, 0x0, "e0a0b89fab3ef5b59d5253a67ad5bd6a58ea680a914c29a4535a32e8c81dd8bdbeb590f1b7ddba5bc836ba6bab32d2865e56b9618f9bc29ee166c8e0606aa7c4b6c44cf772f5e0b0e161383cec9db6e8a56d9c61cf49f2dcd4b907b6ba89dd98327b"}, @NL80211_BAND_2GHZ={0xd3, 0x0, "7734b5cfa39bcf6aa99817f305cb7641f2cc545a832fee604d7627c6c7c7240ca8aa30b4ab791a667909db90eec148f18dc4f299408f1e3e047d7f2bb5116084e85c67a71b0897c3b9babe01db2389140b978124cf69e2a8edb99c0c29b988e73b472be56d830af4016621c097425b8f484a82f856b471b188bb9f873db03c116bd4af77981126a8fd104aae7e52d7561fbd6b281e8938d7612c0a7744e829fc8e7b8edbf836aad42f1999cf9aeb2542a76117a284adb083b8f9105760f1043796e3b770d4266abb92f2efe31cba81"}, @NL80211_BAND_60GHZ={0xc, 0x2, "a612ce43e52ffdb3"}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_IE={0x11c, 0x2a, [@perr={0x84, 0x109, {0x8, 0x11, [{{}, @device_a, 0x0, @void, 0x7}, {{}, @device_a, 0x1, @void, 0x1c}, {{}, @device_a, 0x5, @void, 0x11}, {{0x0, 0x1}, @device_a, 0xfffffff8, @value=@broadcast, 0xc}, {{}, @broadcast, 0xfffffffc, @void, 0x22}, {{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x2a}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x28}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x35}, {{}, @device_a, 0x7fffffff, @void, 0x2f}, {{}, @device_a, 0x0, @void, 0x17}, {{}, @device_b, 0x5, @void, 0x5}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x2b}, {{}, @device_b, 0x80, @void, 0x4}, {{0x0, 0x1}, @device_b, 0xff, @value=@broadcast, 0x3a}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x33}, {{}, @device_a, 0x5, @void, 0x41}, {{}, @device_a, 0x9, @void, 0x7}]}}, @channel_switch={0x25, 0x3, {0x0, 0x7c, 0x9}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x24, 0x84, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4008807}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2c0, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2ac, 0x1, [@m_xt={0x16c, 0xa, 0x0, 0x0, {{0x7}, {0x10c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x4d, 0x6, {0xb, 'security\x00', 0xfb, 0xf, "db32b67415a858318ca81432b4dc5d5526738147f0b08da046db93b204b3955fb990fa"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x4d, 0x6, {0x2fe, 'nat\x00', 0x7, 0x1000, "32191f502c659f78524cedcb63159b9970fd761bd5a7356aa2eb78ed001acbeda2a4ab"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}, @TCA_IPT_TARG={0x3d, 0x6, {0x22, 'mangle\x00', 0x8, 0x9, "e72647848090e95915f0df84f6bd63debef6ae"}}]}, {0x39, 0x6, "60d8256d6e17304151fd4e116cd17e9a9916f46a1108fe35c2253eb9e0a39371696c312986c3e3f087692e934a942246981749736d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xc8, 0x34, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}]}, {0x7d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x74, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x45, 0x6, "1f10cb857564b5de5e15fd763f721d3cb07c7f501ff96d4baf222454b982d3dab282917f5b7e1d1c31e301b39e5de046b00c43be855ae539f0d332c8a977b12992"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00590214000000002f1eafbcf706e105000000894f000f1102ee1680ca8286cee844000000000019b0fb0bba00"/65, 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe73}], 0x4}, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) close(r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r5) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060065580000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 2.769365272s ago: executing program 0 (id=2747): r0 = syz_open_procfs(0x0, &(0x7f0000001080)='net/icmp\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x1fe, 0x12) 2.706331462s ago: executing program 0 (id=2748): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xffd, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0xfffffffd, 0xb}, {0x4, 0x489aa92e}, {0x5, 0x1}, {0xff, 0x7}], 0x1, 0x4c, 0x2, 0x0, 0x3}}, 0xfffffffd}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9) r3 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f00000001c0)={0xd, @output}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="050f00000000000000006b00000008000300", @ANYRES32=r6, @ANYBLOB="77b8e13beae7746898545cbb1a9265500da5c1b02ba459d9e0d4bfa555857b1d0c604d4d4f43c361ec49b1b2ec226690ead4010a2a3e4f643850b870366c62708fed0e09b2e16adedf2b681431b1f7a062a0effdeaa97a5fd01ef4e66537860439008d266e0ecccb7aea89"], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x400004}}, 0x0, 0x0, 0xfffffffe, 0x0, 0x32, 0x0, 0x4}, 0x9c) 2.694180127s ago: executing program 2 (id=2749): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02070000070000000000000020d78400030006000000000002000100e000000900000000000000000200010000"], 0x38}}, 0x0) 1.64520478s ago: executing program 2 (id=2750): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd6700000100303afffe8000000000000000000000000000aaff02000000050000000000000000000102009078000000036d50a2a800052c01fe8100000000000000000000000000aa00000000000000000000ffffac1e0001b122928943054cea"], 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xa}) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r6, 0x80927000) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r6, 0xffffe000) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4000800) getpeername$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001f00010026bd7000fcdbdf25fe880000000000000000000000000001000004d2"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x10) 842.078679ms ago: executing program 0 (id=2751): mmap(&(0x7f0000aee000/0x4000)=nil, 0x4000, 0x8, 0x11, 0xffffffffffffffff, 0x15c0a000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f00000005c0)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, r0], &(0x7f0000000580)=[0x2], 0xffffffff, 0x6}) syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0xa, 0x1, 0x6f, 0x40, 0x2a39, 0x3f8c, 0x9424, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x34, 0x0, 0xff, 0x12, 0x1a}}]}}]}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x100002) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x6, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r4 = syz_open_pts(r3, 0x0) r5 = dup(r4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0xfffffff8) ioctl$TCFLSH(r4, 0x540b, 0x2) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8], 0x4c}}, 0x4800) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r9, 0x0) ioctl$KVM_SET_FPU(r9, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0xfffe, 0x10000, 0x2, '\x00', 0xc94}) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f00000000c0)=0x2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x2a, 0x0) r10 = add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180), &(0x7f00000001c0)="07b88edf866133d4992b3540b916005f000000000000e6993cb06d8cc2dda56c9e664a3eb6031b835c87fc0e8b06bb498c2b2ea304db10d19b9d66f1be41e7d1ea771b000000000000", 0x49, 0xfffffffffffffffe) keyctl$clear(0x7, r10) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 421.344895ms ago: executing program 5 (id=2752): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x17, 0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x80003, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x8001) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setresuid(r4, r4, r4) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, r4, &(0x7f0000000180)={0x1800000, 0x800, 0x7, 0x23, 0x7f, 0x8, 0x5, 0xf, 0x7}) 9.301423ms ago: executing program 5 (id=2753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000e000040000000030a89e10000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d61746368000000240002800c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a300000000014000000110001"], 0xe8}}, 0x0) 0s ago: executing program 5 (id=2754): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f0000000000)='./file0\x00', 0x41) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000484000/0x6000)=nil, 0x6000, 0x1000, 0x0, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000d92000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x40) inotify_rm_watch(0xffffffffffffffff, r3) madvise(&(0x7f0000586000/0x3000)=nil, 0x3000, 0x12) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) kernel console output (not intermixed with test programs): umber=3 [ 812.824429][ T5959] usb 1-1: Product: syz [ 812.831205][T15197] syzkaller1: entered promiscuous mode [ 812.838499][T15197] syzkaller1: entered allmulticast mode [ 812.854955][ T5959] usb 1-1: Manufacturer: syz [ 812.861800][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'. [ 812.864110][ T5959] usb 1-1: SerialNumber: syz [ 813.282669][T15190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.391265][T15190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.711355][T15215] IPv6: addrconf: prefix option has invalid lifetime [ 813.909763][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2338'. [ 814.186042][T15217] netlink: 'syz.5.2338': attribute type 4 has an invalid length. [ 814.687105][T15226] input: syz0 as /devices/virtual/input/input65 [ 816.280634][T11203] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 816.457754][ T5959] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 816.592658][T15239] fuse: Bad value for 'group_id' [ 816.666118][T15239] fuse: Bad value for 'group_id' [ 816.673082][ T5959] usb 1-1: USB disconnect, device number 11 [ 816.950823][ T9] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 817.081065][ T5959] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 817.141210][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 817.157214][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 817.189165][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 817.208814][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 817.227447][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 817.239752][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 817.251753][ T5959] usb 1-1: Invalid ep0 maxpacket: 64 [ 817.341129][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 817.391134][ T5959] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 817.410426][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 817.581690][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 817.596528][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 817.639685][ T5959] usb 1-1: Invalid ep0 maxpacket: 64 [ 817.640524][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.647176][ T5959] usb usb1-port1: attempt power cycle [ 817.805317][ T9] usb 2-1: Product: syz [ 817.809626][ T9] usb 2-1: Manufacturer: syz [ 817.818202][ T24] usb 6-1: config 0 has no interfaces? [ 817.846239][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 817.882623][ T9] usb 2-1: SerialNumber: syz [ 817.892098][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.954762][ T24] usb 6-1: Product: syz [ 817.989188][ T24] usb 6-1: Manufacturer: syz [ 817.990424][ T9] usb 2-1: config 0 descriptor?? [ 818.005258][ T24] usb 6-1: SerialNumber: syz [ 818.098852][ T5959] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 818.132433][ T5959] usb 1-1: Invalid ep0 maxpacket: 64 [ 818.201191][ T24] usb 6-1: config 0 descriptor?? [ 818.342085][ T5959] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 818.354371][T15291] syzkaller1: entered promiscuous mode [ 818.380895][T15291] syzkaller1: entered allmulticast mode [ 818.381301][ T5959] usb 1-1: Invalid ep0 maxpacket: 64 [ 818.418904][ T5959] usb usb1-port1: unable to enumerate USB device [ 818.482195][ T5944] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 818.620678][ T5944] usb 3-1: device descriptor read/64, error -71 [ 818.760724][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 818.860600][ T5944] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 818.880237][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 818.924549][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.942670][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 818.959001][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.988536][ T24] usb 4-1: config 0 descriptor?? [ 818.993941][ T5944] usb 3-1: device descriptor read/64, error -71 [ 819.014449][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 819.079227][ T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 819.110932][ T5944] usb usb3-port1: attempt power cycle [ 819.181127][ T9] usb 2-1: USB disconnect, device number 125 [ 819.239549][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 819.435536][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 819.461544][ T5944] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 819.474026][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 819.519354][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 819.527519][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 819.535169][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 819.544771][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 819.556043][ T5944] usb 3-1: device descriptor read/8, error -71 [ 819.568780][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 819.779958][T15291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.797664][T15291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.810654][ T5944] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 819.855963][ T5944] usb 3-1: device descriptor read/8, error -71 [ 819.984506][ T5944] usb usb3-port1: unable to enumerate USB device [ 820.276835][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 820.299222][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 820.355163][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 820.438082][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 820.449096][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 820.463718][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 820.477575][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 820.540801][ T24] pwc: Registered as video103. [ 820.558562][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input66 [ 820.604013][ T24] usb 4-1: USB disconnect, device number 6 [ 820.732766][ T5235] Dev loop6: unable to read RDB block 1 [ 820.738398][ T5235] loop6: unable to read partition table [ 820.767333][ T5235] loop6: partition table beyond EOD, truncated [ 820.789834][ T9] usb 6-1: USB disconnect, device number 8 [ 821.018011][T15302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.030649][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'. [ 821.252033][T15307] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2357'. [ 821.252508][T15309] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 821.541479][ T6003] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 821.720968][ T6003] usb 4-1: Using ep0 maxpacket: 16 [ 821.739866][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.772980][T15311] syzkaller0: entered promiscuous mode [ 821.782789][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.793007][T15311] syzkaller0: entered allmulticast mode [ 821.820840][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 821.828615][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 821.900719][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 821.920155][ T6003] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 821.939826][ T6003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.972747][ T6003] usb 4-1: config 0 descriptor?? [ 822.003559][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.025070][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.061975][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 822.071662][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.089006][ T9] usb 6-1: Product: syz [ 822.103753][ T9] usb 6-1: Manufacturer: syz [ 822.117072][ T9] usb 6-1: SerialNumber: syz [ 822.153290][ T9] cdc_mbim 6-1:1.0: MBIM functional descriptor missing [ 822.169887][ T9] cdc_mbim 6-1:1.0: bind() failure [ 822.345021][T15329] fuse: Unknown parameter '' [ 822.412530][T11511] usb 6-1: USB disconnect, device number 9 [ 823.201083][T11511] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 823.469900][T11511] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 823.478467][T11511] usb 3-1: config 0 has no interface number 0 [ 823.521350][T11511] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 823.543308][T11511] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 823.618683][T11511] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 823.620738][ T5944] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 823.676504][T11511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.736086][T11511] usb 3-1: config 0 descriptor?? [ 823.756098][T15344] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 823.816861][T11511] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 823.839970][ T5944] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.875599][ T5944] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 823.929150][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.003212][T11511] usb 3-1: USB disconnect, device number 120 [ 824.009372][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 824.221051][T15344] FAULT_INJECTION: forcing a failure. [ 824.221051][T15344] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 824.232308][ T5944] usb 1-1: config 0 descriptor?? [ 824.246806][ T6003] usbhid 4-1:0.0: can't add hid device: -71 [ 824.275207][ T6003] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 824.295931][T15344] CPU: 1 UID: 0 PID: 15344 Comm: syz.2.2363 Not tainted syzkaller #0 PREEMPT(full) [ 824.295963][T15344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 824.295982][T15344] Call Trace: [ 824.295991][T15344] [ 824.296001][T15344] dump_stack_lvl+0x189/0x250 [ 824.296034][T15344] ? __pfx____ratelimit+0x10/0x10 [ 824.296058][T15344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.296084][T15344] ? __pfx__printk+0x10/0x10 [ 824.296117][T15344] ? fs_reclaim_acquire+0x7d/0x100 [ 824.296149][T15344] should_fail_ex+0x414/0x560 [ 824.296196][T15344] prepare_alloc_pages+0x213/0x610 [ 824.296227][T15344] __alloc_frozen_pages_noprof+0x123/0x370 [ 824.296256][T15344] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 824.296277][T15344] ? do_raw_spin_lock+0x121/0x290 [ 824.296308][T15344] ? __lock_acquire+0xab9/0xd20 [ 824.296339][T15344] ? policy_nodemask+0x27c/0x720 [ 824.296374][T15344] alloc_pages_mpol+0x232/0x4a0 [ 824.296411][T15344] alloc_pages_noprof+0xa9/0x190 [ 824.296444][T15344] get_free_pages_noprof+0xf/0x80 [ 824.296467][T15344] __pollwait+0x27b/0x460 [ 824.296499][T15344] ? __pfx___pollwait+0x10/0x10 [ 824.296528][T15344] pipe_poll+0x16f/0x470 [ 824.296561][T15344] ? __pfx_pipe_poll+0x10/0x10 [ 824.296592][T15344] do_sys_poll+0x8c9/0x1070 [ 824.296629][T15344] ? do_sys_poll+0x431/0x1070 [ 824.296669][T15344] ? __pfx_do_sys_poll+0x10/0x10 [ 824.296710][T15344] ? __pfx___pollwait+0x10/0x10 [ 824.296744][T15344] ? __pfx_pollwake+0x10/0x10 [ 824.296779][T15344] ? __pfx_pollwake+0x10/0x10 [ 824.296813][T15344] ? __pfx_pollwake+0x10/0x10 [ 824.296849][T15344] ? __pfx_pollwake+0x10/0x10 [ 824.296883][T15344] ? __pfx_pollwake+0x10/0x10 [ 824.296916][T15344] ? __pfx_pollwake+0x10/0x10 [ 824.296950][T15344] ? __pfx_pollwake+0x10/0x10 [ 824.296985][T15344] ? __pfx_pollwake+0x10/0x10 [ 824.297019][T15344] ? __pfx_pollwake+0x10/0x10 [ 824.297051][T15344] ? rcu_read_lock_any_held+0xb3/0x120 [ 824.297075][T15344] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 824.297103][T15344] ? vfs_write+0x956/0xb30 [ 824.297161][T15344] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 824.297195][T15344] ? set_user_sigmask+0xc7/0x1b0 [ 824.297235][T15344] ? __pfx_set_user_sigmask+0x10/0x10 [ 824.297259][T15344] ? __fget_files+0x3a0/0x420 [ 824.297288][T15344] __se_sys_ppoll+0x1ff/0x260 [ 824.297322][T15344] ? __pfx___se_sys_ppoll+0x10/0x10 [ 824.297354][T15344] ? __pfx_ksys_write+0x10/0x10 [ 824.297388][T15344] ? do_syscall_64+0xbe/0x3b0 [ 824.297411][T15344] ? __x64_sys_ppoll+0x20/0xc0 [ 824.297444][T15344] do_syscall_64+0xfa/0x3b0 [ 824.297469][T15344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.297489][T15344] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 824.297509][T15344] ? clear_bhb_loop+0x60/0xb0 [ 824.297535][T15344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.297556][T15344] RIP: 0033:0x7f81e1f8eba9 [ 824.297576][T15344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.297596][T15344] RSP: 002b:00007f81e2d4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 824.297620][T15344] RAX: ffffffffffffffda RBX: 00007f81e21d5fa0 RCX: 00007f81e1f8eba9 [ 824.297637][T15344] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 824.297652][T15344] RBP: 00007f81e2d4b090 R08: 0000000000000000 R09: 0000000000000000 [ 824.297666][T15344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.297679][T15344] R13: 00007f81e21d6038 R14: 00007f81e21d5fa0 R15: 00007f81e22ffa28 [ 824.297721][T15344] [ 824.674446][ T6003] usb 4-1: USB disconnect, device number 7 [ 825.093995][ T5944] pwc: Askey VC010 type 2 USB webcam detected. [ 825.582581][ T5944] pwc: recv_control_msg error -32 req 02 val 2b00 [ 825.592590][ T5944] pwc: recv_control_msg error -32 req 02 val 2700 [ 825.623255][ T5944] pwc: recv_control_msg error -32 req 02 val 2c00 [ 825.632967][ T5944] pwc: recv_control_msg error -32 req 04 val 1000 [ 825.642451][ T5944] pwc: recv_control_msg error -32 req 04 val 1300 [ 825.650987][ T5944] pwc: recv_control_msg error -32 req 04 val 1400 [ 825.672797][ T5944] pwc: recv_control_msg error -32 req 02 val 2000 [ 825.881647][ T5944] pwc: recv_control_msg error -71 req 04 val 1500 [ 825.934935][ T5944] pwc: recv_control_msg error -71 req 02 val 2500 [ 825.991059][ T5944] pwc: recv_control_msg error -71 req 02 val 2400 [ 826.028349][ T5944] pwc: recv_control_msg error -71 req 02 val 2600 [ 826.048645][ T5944] pwc: recv_control_msg error -71 req 02 val 2900 [ 826.070981][ T5944] pwc: recv_control_msg error -71 req 02 val 2800 [ 826.101214][ T5944] pwc: recv_control_msg error -71 req 04 val 1100 [ 826.121142][ T5944] pwc: recv_control_msg error -71 req 04 val 1200 [ 826.140770][ T6003] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 826.168819][ T5944] pwc: Registered as video103. [ 826.219091][ T5944] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input67 [ 826.313682][ T5944] usb 1-1: USB disconnect, device number 16 [ 826.314289][ T6003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.360794][ T6003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.414379][ T6003] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 826.489891][ T6003] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 826.527174][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.572137][ T6003] usb 3-1: config 0 descriptor?? [ 826.617127][ T6003] hub 3-1:0.0: USB hub found [ 826.643043][T15372] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 826.817248][ T6003] hub 3-1:0.0: 14 ports detected [ 826.833005][ T6003] hub 3-1:0.0: insufficient power available to use all downstream ports [ 826.982762][T15376] syzkaller0: entered promiscuous mode [ 826.988314][T15376] syzkaller0: entered allmulticast mode [ 827.221090][T15367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.232109][T15367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.284020][ T6003] usb 3-1: USB disconnect, device number 121 [ 827.950569][ T24] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 828.134282][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 828.161239][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 828.180979][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 828.191710][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 828.202845][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 828.270013][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 828.287389][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.490667][ T5944] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 828.517932][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 828.530569][ T24] usbtmc 2-1:16.0: can't read capabilities [ 828.640961][ T6003] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 828.662705][ T5944] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 828.670932][ T5944] usb 4-1: config 0 has no interface number 0 [ 828.679100][ T5944] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 828.699358][ T5944] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 828.711782][ T5944] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 828.721210][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.777805][ T5944] usb 4-1: config 0 descriptor?? [ 828.797669][ T6003] usb 6-1: config 0 has an invalid interface number: 229 but max is 0 [ 828.797856][T15399] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 828.813770][ T6003] usb 6-1: config 0 has no interface number 0 [ 828.822899][ T6003] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 828.832726][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.847647][ T6003] usb 6-1: config 0 descriptor?? [ 828.880930][ T5944] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 828.896018][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 828.950472][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 828.959642][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 828.968884][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 828.977986][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 828.987142][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 828.996205][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.014037][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.023189][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.032300][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.067819][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.076992][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.115401][ T5944] usb 6-1: USB disconnect, device number 10 [ 829.146681][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.157357][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.163894][ T24] usb 4-1: USB disconnect, device number 8 [ 829.166466][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.181558][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.206795][T15410] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 829.233490][T11511] usb 2-1: USB disconnect, device number 126 [ 829.330896][T15413] netlink: 146924 bytes leftover after parsing attributes in process `syz.2.2383'. [ 829.347138][T15415] syzkaller0: entered promiscuous mode [ 829.353767][T15415] syzkaller0: entered allmulticast mode [ 829.373914][T15399] FAULT_INJECTION: forcing a failure. [ 829.373914][T15399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.402252][T15399] CPU: 1 UID: 0 PID: 15399 Comm: syz.3.2379 Not tainted syzkaller #0 PREEMPT(full) [ 829.402282][T15399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 829.402295][T15399] Call Trace: [ 829.402304][T15399] [ 829.402314][T15399] dump_stack_lvl+0x189/0x250 [ 829.402347][T15399] ? __pfx____ratelimit+0x10/0x10 [ 829.402370][T15399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 829.402395][T15399] ? __pfx__printk+0x10/0x10 [ 829.402437][T15399] should_fail_ex+0x414/0x560 [ 829.402473][T15399] _copy_to_user+0x31/0xb0 [ 829.402504][T15399] simple_read_from_buffer+0xe1/0x170 [ 829.402539][T15399] proc_fail_nth_read+0x1b3/0x220 [ 829.402568][T15399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 829.402595][T15399] ? rw_verify_area+0x2a6/0x4d0 [ 829.402622][T15399] ? __lock_acquire+0xab9/0xd20 [ 829.402649][T15399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 829.402674][T15399] vfs_read+0x200/0xa30 [ 829.402698][T15399] ? fdget_pos+0x247/0x320 [ 829.402723][T15399] ? __pfx___mutex_lock+0x10/0x10 [ 829.402746][T15399] ? __pfx_vfs_read+0x10/0x10 [ 829.402775][T15399] ? __fget_files+0x2a/0x420 [ 829.402799][T15399] ? __fget_files+0x3a0/0x420 [ 829.402817][T15399] ? __fget_files+0x2a/0x420 [ 829.402846][T15399] ksys_read+0x145/0x250 [ 829.402877][T15399] ? __pfx_ksys_read+0x10/0x10 [ 829.402900][T15399] ? rcu_is_watching+0x15/0xb0 [ 829.402927][T15399] ? do_syscall_64+0xbe/0x3b0 [ 829.402964][T15399] do_syscall_64+0xfa/0x3b0 [ 829.402985][T15399] ? lockdep_hardirqs_on+0x9c/0x150 [ 829.403004][T15399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.403025][T15399] ? clear_bhb_loop+0x60/0xb0 [ 829.403050][T15399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.403071][T15399] RIP: 0033:0x7f3b9778d5bc [ 829.403091][T15399] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 829.403109][T15399] RSP: 002b:00007f3b986fd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 829.403131][T15399] RAX: ffffffffffffffda RBX: 00007f3b979d5fa0 RCX: 00007f3b9778d5bc [ 829.403146][T15399] RDX: 000000000000000f RSI: 00007f3b986fd0a0 RDI: 0000000000000003 [ 829.403159][T15399] RBP: 00007f3b986fd090 R08: 0000000000000000 R09: 0000000000000000 [ 829.403172][T15399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.403184][T15399] R13: 00007f3b979d6038 R14: 00007f3b979d5fa0 R15: 00007f3b97affa28 [ 829.403218][T15399] [ 829.940717][T15429] geneve3: entered allmulticast mode [ 830.085905][T15436] fuse: Unknown parameter 'D21QIM&OE97}-HGl.'@ڭE9?C rejected, failed to enable media [ 831.181610][T15444] syzkaller0: entered promiscuous mode [ 831.208473][T15444] syzkaller0: entered allmulticast mode [ 831.259377][ T5944] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 831.399942][ T5944] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 831.446069][ T5944] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 831.509613][ T5944] usb 1-1: USB disconnect, device number 17 [ 831.556408][T15449] sg_write: data in/out 768/195 bytes for SCSI command 0x0-- guessing data in; [ 831.556408][T15449] program syz.0.2391 not setting count and/or reply_len properly [ 831.584220][ T5944] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 831.614143][ T5944] ftdi_sio 1-1:0.0: device disconnected [ 831.883072][T15459] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 832.180672][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 832.364584][T15468] tipc: Trying to set illegal importance in message [ 832.403236][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.432212][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 832.485441][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 832.518418][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 832.665478][ T24] usb 4-1: SerialNumber: syz [ 832.716460][T15473] syzkaller0: entered promiscuous mode [ 832.722293][T15473] syzkaller0: entered allmulticast mode [ 832.811328][T11511] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 832.984916][T11511] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 833.027000][T11511] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 833.047264][T11511] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 833.114864][ T30] audit: type=1326 audit(1757868848.742:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c17f8eba9 code=0x7ffc0000 [ 833.248994][T11511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 833.299678][T11511] usb 1-1: SerialNumber: syz [ 833.322505][ T30] audit: type=1326 audit(1757868848.742:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c17f8eba9 code=0x7ffc0000 [ 833.459188][ T5944] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 833.539702][ T30] audit: type=1326 audit(1757868848.772:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f8c17f8eba9 code=0x7ffc0000 [ 833.585774][ T30] audit: type=1326 audit(1757868848.772:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c17f8eba9 code=0x7ffc0000 [ 833.670591][ T5944] usb 6-1: device descriptor read/64, error -71 [ 833.691005][ T5960] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 833.705872][ T30] audit: type=1326 audit(1757868848.772:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c17f8eba9 code=0x7ffc0000 [ 833.861322][ T30] audit: type=1326 audit(1757868848.782:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c17f8eba9 code=0x7ffc0000 [ 833.915305][ T5960] usb 3-1: config 0 interface 0 has no altsetting 0 [ 833.926138][ T5960] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24 [ 833.971104][ T5944] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 833.996399][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.009076][ T5960] usb 3-1: Product: syz [ 834.017577][ T5960] usb 3-1: Manufacturer: syz [ 834.028482][ T30] audit: type=1326 audit(1757868848.782:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c17f8eba9 code=0x7ffc0000 [ 834.056149][ T5960] usb 3-1: SerialNumber: syz [ 834.104796][ T30] audit: type=1326 audit(1757868848.782:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c17f8eba9 code=0x7ffc0000 [ 834.127638][ T5944] usb 6-1: device descriptor read/64, error -71 [ 834.167724][ T30] audit: type=1326 audit(1757868848.782:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c17f8eba9 code=0x7ffc0000 [ 834.170964][ T5960] usb 3-1: config 0 descriptor?? [ 834.246458][ T5944] usb usb6-port1: attempt power cycle [ 834.295844][ T30] audit: type=1326 audit(1757868848.782:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c17f8eba9 code=0x7ffc0000 [ 834.601102][ T5944] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 834.632559][ T5944] usb 6-1: device descriptor read/8, error -71 [ 834.844812][T15481] trusted_key: encrypted_key: insufficient parameters specified [ 834.870871][ T5944] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 834.929042][ T5944] usb 6-1: device descriptor read/8, error -71 [ 835.071090][ T5944] usb usb6-port1: unable to enumerate USB device [ 835.328939][ T5960] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 835.400155][ T5960] usb 3-1: USB disconnect, device number 122 [ 835.502258][ T6152] udevd[6152]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.802495][ T24] usb 4-1: skipping empty audio interface (v1) [ 835.956774][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 835.995100][ T24] usb 4-1: USB disconnect, device number 9 [ 836.009038][T11511] usb 1-1: skipping empty audio interface (v1) [ 836.106311][T15488] tipc: Enabling of bearer rejected, failed to enable media [ 836.128663][T15490] xt_l2tp: v2 sid > 0xffff: 1114112 [ 836.163725][T15496] syzkaller0: entered promiscuous mode [ 836.175401][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.201539][T15496] syzkaller0: entered allmulticast mode [ 836.295916][T11511] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 836.328643][T15493] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 836.334054][T11511] usb 1-1: USB disconnect, device number 18 [ 836.437567][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.489853][T15507] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 512, id = 0 [ 836.670664][ T24] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 836.680284][T15513] netlink: 'syz.5.2410': attribute type 3 has an invalid length. [ 836.846791][T15515] netlink: 'syz.0.2408': attribute type 21 has an invalid length. [ 836.854892][T15515] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2408'. [ 836.880810][T15515] netlink: 'syz.0.2408': attribute type 5 has an invalid length. [ 836.890413][ T24] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 836.966903][ T24] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 1 [ 836.981467][T15515] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2408'. [ 837.019898][ T24] usb 2-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.11 [ 837.037979][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.080411][ T24] usb 2-1: Product: syz [ 837.118788][ T24] usb 2-1: Manufacturer: syz [ 837.130805][ T24] usb 2-1: SerialNumber: syz [ 837.399130][ T24] usb 2-1: USB disconnect, device number 127 [ 838.235160][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 838.235181][ T30] audit: type=1326 audit(1757868853.862:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15520 comm="syz.1.2411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd3f38eba9 code=0x0 [ 838.379360][T15522] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2411'. [ 838.906162][T15535] vivid-001: disconnect [ 839.280621][ T24] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 839.390985][ T5944] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 839.430696][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 839.444017][T15533] vivid-001: reconnect [ 839.466916][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 839.485391][ T24] usb 3-1: config 0 has no interface number 0 [ 839.506102][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 839.530643][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 839.563571][ T5944] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.583560][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 839.605650][ T5944] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 839.640365][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 839.661583][ T5944] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 839.684991][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 839.703607][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 839.713704][ T5944] usb 1-1: SerialNumber: syz [ 839.746616][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.774090][ T24] usb 3-1: config 0 descriptor?? [ 839.796000][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 842.062500][ T5959] usb 3-1: USB disconnect, device number 123 [ 842.062650][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 842.091617][ T5959] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 842.629071][T15557] netlink: 'syz.3.2422': attribute type 13 has an invalid length. [ 842.630410][ T5944] usb 1-1: 0:2 : does not exist [ 842.679081][T15557] netlink: 'syz.3.2422': attribute type 27 has an invalid length. [ 842.836982][ T5944] usb 1-1: USB disconnect, device number 19 [ 842.909015][T15560] tipc: Enabling of bearer rejected, failed to enable media [ 842.927603][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.961593][T15560] syzkaller0: entered promiscuous mode [ 842.987625][T15560] syzkaller0: entered allmulticast mode [ 843.600097][T15568] geneve3: entered promiscuous mode [ 843.605764][T15568] geneve3: entered allmulticast mode [ 843.715730][T11997] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 843.729097][T11997] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 843.749678][T15581] input: syz0 as /devices/virtual/input/input68 [ 843.799542][T11997] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 843.857224][T11997] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 843.933950][T11997] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 843.950627][T11997] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 843.975155][T11997] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 844.037352][T11997] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 846.020768][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 846.100785][ T5959] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 846.309621][ T5959] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.327187][ T9] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 846.336210][ T9] usb 6-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 846.351396][ T9] usb 6-1: config 0 has no interface number 0 [ 846.363295][ T9] usb 6-1: config 0 interface 105 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 846.378227][T15624] fuse: Bad value for 'fd' [ 846.385301][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=30.df [ 846.394821][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.403085][ T9] usb 6-1: Product: syz [ 846.410382][ T9] usb 6-1: Manufacturer: syz [ 846.411083][ T5959] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 846.424371][ T9] usb 6-1: SerialNumber: syz [ 846.583220][ T9] usb 6-1: config 0 descriptor?? [ 846.603770][ T9] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.105/input/input69 [ 846.670235][ T5959] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 846.687815][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 846.794709][ T5220] bcm5974 6-1:0.105: could not read from device [ 846.803843][ T5959] usb 4-1: SerialNumber: syz [ 846.832302][ T9] usb 6-1: USB disconnect, device number 15 [ 847.980787][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 848.101744][T15644] IPVS: set_ctl: invalid protocol: 50 172.20.20.47:20000 [ 848.150555][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 848.207533][ T9] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 848.286786][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.312987][ T9] usb 2-1: Product: syz [ 848.326454][ T9] usb 2-1: Manufacturer: syz [ 848.371893][ T9] usb 2-1: SerialNumber: syz [ 848.406615][ T9] usb 2-1: config 0 descriptor?? [ 848.446030][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 848.531785][T15646] netlink: 'syz.0.2443': attribute type 2 has an invalid length. [ 848.908017][T15641] loop2: detected capacity change from 0 to 7 [ 848.916302][T15641] Dev loop2: unable to read RDB block 7 [ 848.922445][T15641] loop2: unable to read partition table [ 848.950929][T15641] loop2: partition table beyond EOD, truncated [ 848.980721][T15641] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 849.025625][ T9] gspca_se401: Wrong descriptor type [ 849.212179][ T5235] Dev loop2: unable to read RDB block 7 [ 849.218890][ T5235] loop2: unable to read partition table [ 849.226858][ T5235] loop2: partition table beyond EOD, truncated [ 849.456671][T15661] netlink: 'syz.2.2446': attribute type 1 has an invalid length. [ 849.469460][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2446'. [ 849.557009][ T5959] usb 4-1: 0:2 : does not exist [ 849.923101][ T5959] usb 4-1: USB disconnect, device number 10 [ 850.759480][ T5959] usb 2-1: USB disconnect, device number 2 [ 851.940637][ T5959] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 852.106264][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 852.140233][ T5959] usb 1-1: config 0 has an invalid interface number: 53 but max is 0 [ 852.180573][ T5959] usb 1-1: config 0 has no interface number 0 [ 852.211541][ T5959] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 852.234680][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.273907][ T5959] usb 1-1: Product: syz [ 852.303554][ T5959] usb 1-1: Manufacturer: syz [ 852.329149][ T5959] usb 1-1: SerialNumber: syz [ 852.350274][ T5959] usb 1-1: config 0 descriptor?? [ 852.583589][ T9] usb 1-1: USB disconnect, device number 20 [ 852.880855][ T5960] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 852.930589][T11511] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 853.020549][ T5960] usb 4-1: device descriptor read/64, error -71 [ 853.090560][T11511] usb 2-1: Using ep0 maxpacket: 32 [ 853.099565][T11511] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 853.109089][T11511] usb 2-1: can't read configurations, error -61 [ 853.199649][T15715] netlink: 'syz.0.2457': attribute type 1 has an invalid length. [ 853.240633][T11511] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 853.266415][ T5960] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 853.319371][T15715] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 853.374159][T15720] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2458'. [ 853.393246][T15720] netlink: 'syz.5.2458': attribute type 9 has an invalid length. [ 853.403374][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2458'. [ 853.410748][ T5960] usb 4-1: device descriptor read/64, error -71 [ 853.418778][T11511] usb 2-1: Using ep0 maxpacket: 32 [ 853.433515][T11511] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 853.442235][T11511] usb 2-1: can't read configurations, error -61 [ 853.450666][T11511] usb usb2-port1: attempt power cycle [ 853.531393][ T5960] usb usb4-port1: attempt power cycle [ 853.693129][T15724] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2459'. [ 853.810596][T11511] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 853.851614][T11511] usb 2-1: Using ep0 maxpacket: 32 [ 853.859466][T11511] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 853.884597][T11511] usb 2-1: can't read configurations, error -61 [ 853.899882][ T5960] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 853.942759][ T5960] usb 4-1: device descriptor read/8, error -71 [ 853.977034][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 854.050769][T11511] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 854.091956][T11511] usb 2-1: Using ep0 maxpacket: 32 [ 854.107413][T11511] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 854.138472][T11511] usb 2-1: can't read configurations, error -61 [ 854.159776][T11511] usb usb2-port1: unable to enumerate USB device [ 854.173226][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 854.183522][ T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 854.203983][ T9] usb 6-1: config 0 has no interface number 0 [ 854.220601][ T5960] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 854.228301][ T9] usb 6-1: config 0 interface 184 has no altsetting 0 [ 854.262969][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 854.275360][ T5960] usb 4-1: device descriptor read/8, error -71 [ 854.292865][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.317187][ T9] usb 6-1: Product: syz [ 854.328783][ T9] usb 6-1: Manufacturer: syz [ 854.365250][ T9] usb 6-1: SerialNumber: syz [ 854.405162][ T9] usb 6-1: config 0 descriptor?? [ 854.413528][ T5960] usb usb4-port1: unable to enumerate USB device [ 854.443920][ T9] smsc75xx v1.0.0 [ 854.449040][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 854.468110][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 854.656748][T15723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.696517][T15723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.723634][T15723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.732435][T15723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.818761][T15738] hub 9-0:1.0: USB hub found [ 854.829784][T15738] hub 9-0:1.0: 1 port detected [ 855.461456][T15744] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2464'. [ 856.430673][ T5960] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 856.612901][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 856.678417][ T5960] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 856.711820][ T5960] usb 4-1: config 0 has no interface number 0 [ 856.730083][ T5960] usb 4-1: config 0 interface 161 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 856.749664][ T5960] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=9a.fd [ 856.779635][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.823620][T11511] usb 6-1: USB disconnect, device number 16 [ 856.837593][ T5960] usb 4-1: Product: syz [ 856.853510][ T5960] usb 4-1: Manufacturer: syz [ 856.868104][ T5960] usb 4-1: SerialNumber: syz [ 856.908837][ T5960] usb 4-1: config 0 descriptor?? [ 856.914730][T15761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 856.961450][ T5960] kvaser_usb 4-1:0.161: error -ENODEV: Cannot get usb endpoint(s) [ 857.181224][T11511] usb 4-1: USB disconnect, device number 15 [ 857.294161][ T5960] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 857.431703][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 857.472640][ T5960] usb 3-1: unable to get BOS descriptor or descriptor too short [ 857.545592][ T5960] usb 3-1: not running at top speed; connect to a high speed hub [ 857.570281][ T5960] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.625077][ T5960] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 857.667626][ T5960] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 857.698442][T15789] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2477'. [ 857.744673][ T5960] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 857.788058][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.826001][ T5960] usb 3-1: Product: syz [ 857.848532][T15791] fuse: Bad value for 'user_id' [ 857.853921][T15791] fuse: Bad value for 'user_id' [ 857.856715][ T5960] usb 3-1: Manufacturer: syz [ 857.880563][ T5960] usb 3-1: SerialNumber: syz [ 858.109524][T15776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.118874][T15776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.145238][ T5960] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 858.153584][ T5960] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 858.163691][ T5960] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 858.198083][ T5960] usb 3-1: USB disconnect, device number 124 [ 858.316280][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 858.492353][ T5959] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 858.706163][ T5959] usb 6-1: config 0 has no interfaces? [ 858.719830][T15811] netlink: 'syz.3.2484': attribute type 6 has an invalid length. [ 858.810629][T11511] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 858.823674][ T5959] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 858.900202][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.914487][ T5959] usb 6-1: config 0 descriptor?? [ 858.973131][T11511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.069502][T11511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.133393][T11511] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 859.164395][T11511] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 859.179146][T11511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.310160][T11511] usb 1-1: config 0 descriptor?? [ 861.139917][T15844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2490'. [ 861.281588][T15847] netlink: 'syz.3.2490': attribute type 1 has an invalid length. [ 862.498311][ T5872] usb 6-1: USB disconnect, device number 17 [ 862.864751][T11511] usbhid 1-1:0.0: can't add hid device: -71 [ 862.871615][T11511] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 862.935076][T11511] usb 1-1: USB disconnect, device number 21 [ 863.392132][T11511] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 863.399919][ T5872] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 863.577002][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 863.590281][T11511] usb 1-1: Using ep0 maxpacket: 16 [ 863.613365][ T5872] usb 6-1: config index 0 descriptor too short (expected 1563, got 27) [ 863.633302][T11511] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 863.659219][ T5872] usb 6-1: config 0 has an invalid interface number: 119 but max is -1 [ 863.668191][T11511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.687921][ T5872] usb 6-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 863.701080][T11511] usb 1-1: Product: syz [ 863.729658][T11511] usb 1-1: Manufacturer: syz [ 863.739205][ T5872] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 863.748372][T11511] usb 1-1: SerialNumber: syz [ 863.773875][T11511] r8152-cfgselector 1-1: Unknown version 0x0000 [ 863.787012][ T5872] usb 6-1: config 0 has no interface number 0 [ 863.802817][T11511] r8152-cfgselector 1-1: config 0 descriptor?? [ 863.819401][ T5872] usb 6-1: config 0 interface 119 altsetting 65 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 863.847249][ T5872] usb 6-1: config 0 interface 119 has no altsetting 0 [ 863.864274][ T5872] usb 6-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 863.881653][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.896641][ T5872] usb 6-1: Product: syz [ 863.903858][ T5872] usb 6-1: Manufacturer: syz [ 863.908544][ T5872] usb 6-1: SerialNumber: syz [ 863.999828][ T5872] usb 6-1: config 0 descriptor?? [ 864.034187][T15881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2498'. [ 864.239284][T15865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.248342][T15865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.269792][ T5872] usb 6-1: USB disconnect, device number 18 [ 864.586332][T15891] netlink: 'syz.2.2500': attribute type 4 has an invalid length. [ 864.603384][T15891] netlink: 'syz.2.2500': attribute type 4 has an invalid length. [ 864.615418][T15892] netlink: 'syz.2.2500': attribute type 4 has an invalid length. [ 864.696961][T15891] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2500'. [ 864.846563][T15896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2502'. [ 866.143882][ T5959] r8152-cfgselector 1-1: USB disconnect, device number 22 [ 866.361284][T15920] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 866.368050][T15920] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 866.413817][T15920] vhci_hcd vhci_hcd.0: Device attached [ 866.435160][T15922] vhci_hcd: connection closed [ 866.465137][T12530] vhci_hcd: stop threads [ 866.505327][T12530] vhci_hcd: release socket [ 866.521205][T12530] vhci_hcd: disconnect device [ 866.590738][T11511] vhci_hcd: vhci_device speed not set [ 866.922123][T15930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2510'. [ 867.569778][T15941] netlink: 'syz.0.2514': attribute type 13 has an invalid length. [ 867.649334][T15942] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2514'. [ 867.943699][T15941] gretap0: left promiscuous mode [ 867.962411][T15941] gretap0: refused to change device tx_queue_len [ 867.969342][T15941] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 868.010578][ T5959] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 868.183754][ T5959] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.195610][ T5959] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 868.213593][ T5959] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 868.285108][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.322069][ T5959] usb 2-1: Product: syz [ 868.335033][ T5959] usb 2-1: Manufacturer: syz [ 868.371485][ T5959] usb 2-1: SerialNumber: syz [ 868.612314][ T5959] usb 2-1: 0:2 : does not exist [ 868.716826][ T5959] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 868.779803][ T5959] usb 2-1: USB disconnect, device number 7 [ 868.934808][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.085840][ T30] audit: type=1804 audit(1757868884.712:379): pid=15953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2518" name="/newroot/95/file0" dev="tmpfs" ino=502 res=1 errno=0 [ 869.190618][ T30] audit: type=1800 audit(1757868884.742:380): pid=15953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2518" name="file0" dev="tmpfs" ino=502 res=0 errno=0 [ 869.240615][ T5944] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 869.450661][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 869.462718][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.485692][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.510712][ T5944] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 869.529244][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.556235][ T5944] usb 1-1: config 0 descriptor?? [ 869.583126][ T5959] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 869.612376][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 869.751117][ T5959] usb 6-1: Using ep0 maxpacket: 32 [ 869.761756][ T5959] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.772424][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 869.784116][ T24] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 869.793137][ T5959] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 869.814025][ T24] usb 2-1: config 0 has no interface number 0 [ 869.820369][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 869.835350][ T5959] usb 6-1: config 0 interface 0 has no altsetting 0 [ 869.888924][ T5959] usb 6-1: New USB device found, idVendor=5f1d, idProduct=0021, bcdDevice= 0.00 [ 869.914364][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 869.969447][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.987451][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 870.028473][ T5944] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 870.088670][ T24] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 870.153679][ T5959] usb 6-1: config 0 descriptor?? [ 870.273805][T15951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.331622][T15951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.336687][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.345858][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.379182][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 870.409672][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.449516][T15957] binder: 15956:15957 ioctl c0306201 0 returned -14 [ 870.479813][T15951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.490635][ T24] usb 2-1: config 0 descriptor?? [ 870.520599][ T5959] usbhid 6-1:0.0: can't add hid device: -71 [ 870.522219][T15951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.536537][ T5959] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 870.544802][ T24] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 870.585055][ T5959] usb 6-1: USB disconnect, device number 19 [ 870.589911][T11511] usb 1-1: USB disconnect, device number 23 [ 870.748332][T15969] fuse: Unknown parameter '' [ 871.062894][T15975] netlink: 'syz.2.2524': attribute type 4 has an invalid length. [ 871.090784][T15973] netlink: 'syz.2.2524': attribute type 4 has an invalid length. [ 871.572847][T11511] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 871.770497][T11511] usb 6-1: Using ep0 maxpacket: 16 [ 871.781646][ T24] usb 2-1: USB disconnect, device number 8 [ 871.783290][T11511] usb 6-1: config 0 has an invalid interface number: 63 but max is 0 [ 871.798209][T15981] dvmrp0: entered allmulticast mode [ 871.805352][ T24] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 871.812382][T11511] usb 6-1: config 0 has no interface number 0 [ 871.859285][T11511] usb 6-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.917740][T11511] usb 6-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.954352][T11511] usb 6-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.010499][T11511] usb 6-1: config 0 interface 63 has no altsetting 0 [ 872.039126][T11511] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 872.100543][T11511] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.126715][T11511] usb 6-1: config 0 descriptor?? [ 872.274907][T15989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2529'. [ 872.370738][T15977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.400048][T15977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.258204][T11511] usbhid 6-1:0.63: can't add hid device: -71 [ 873.289571][T11511] usbhid 6-1:0.63: probe with driver usbhid failed with error -71 [ 874.031460][T11511] usb 6-1: USB disconnect, device number 20 [ 875.378921][T16026] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 875.431367][T16026] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 875.656733][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2541'. [ 875.771040][T16040] syzkaller0: entered promiscuous mode [ 875.820566][T11511] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 875.883083][T16040] syzkaller0: entered allmulticast mode [ 875.895058][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 876.274771][ T9] usb 4-1: device descriptor read/64, error -71 [ 876.385446][T11511] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 876.414557][T11511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.432145][T11511] usb 3-1: config 0 descriptor?? [ 876.446600][T11511] cp210x 3-1:0.0: cp210x converter detected [ 876.543328][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 876.571794][ T24] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 876.794185][ T9] usb 4-1: device descriptor read/64, error -71 [ 877.029584][ T9] usb usb4-port1: attempt power cycle [ 877.096371][T11511] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 877.340161][T11511] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 877.350178][T11511] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 877.401086][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 877.451640][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 877.451825][ T9] usb 4-1: device descriptor read/8, error -71 [ 877.506944][T11511] usb 3-1: cp210x converter now attached to ttyUSB0 [ 877.530750][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 877.537754][T11511] usb 3-1: USB disconnect, device number 125 [ 877.566306][T11511] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 877.686154][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 877.697717][T11511] cp210x 3-1:0.0: device disconnected [ 877.727679][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 877.757198][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 877.771228][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 877.804326][ T9] usb 4-1: device descriptor read/8, error -71 [ 877.839896][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 877.889628][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 877.920940][ T9] usb usb4-port1: unable to enumerate USB device [ 877.939582][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 877.970876][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 877.983512][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 878.105419][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 878.105483][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 878.105514][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 878.105542][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 878.105572][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 878.170561][ T24] usb 6-1: string descriptor 0 read error: -22 [ 878.170661][ T24] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 878.170677][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.232291][ T24] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 878.814917][T16072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.815173][T16072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.680735][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 879.855050][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 879.906712][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 879.951301][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 879.987354][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 880.038742][ T9] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 880.049102][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.166035][ T9] usb 2-1: Product: syz [ 880.450030][ T9] usb 2-1: Manufacturer: syz [ 880.458321][T11511] usb 6-1: USB disconnect, device number 21 [ 880.489157][ T9] usb 2-1: SerialNumber: syz [ 880.509282][ T9] usb 2-1: config 0 descriptor?? [ 880.521637][T16098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2555'. [ 880.529066][ T9] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 880.601013][ T5959] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 880.763315][ T5959] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.808671][ T5959] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 880.831169][ T9] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 880.888749][ T5959] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 880.915584][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 880.940583][ T5959] usb 4-1: SerialNumber: syz [ 880.981157][ T9] usb 2-1: USB disconnect, device number 9 [ 881.361197][ T5944] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 881.510579][ T5944] usb 1-1: Using ep0 maxpacket: 16 [ 881.518213][ T5944] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 881.527583][ T5944] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.538709][ T5944] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 881.551040][ T9] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 881.552200][ T5944] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 881.570662][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.590627][ T5944] usb 1-1: Product: syz [ 881.601856][ T5944] usb 1-1: Manufacturer: syz [ 881.607099][ T5944] usb 1-1: SerialNumber: syz [ 881.744194][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 881.755569][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.770781][ T9] usb 3-1: Product: syz [ 881.776546][ T9] usb 3-1: Manufacturer: syz [ 881.792893][ T9] usb 3-1: SerialNumber: syz [ 881.829937][ T9] usb 3-1: config 0 descriptor?? [ 881.865010][ T9] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 882.061647][ T5944] usb 1-1: 0:2 : does not exist [ 882.068417][T16110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.078709][T16110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.093028][T16110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.174769][T16110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.215028][T16110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.233987][T16110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.249819][T16110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.270721][ T5872] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 882.336954][T16110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.359939][T16110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.379379][T16110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.401716][ T9] sonixb 3-1:0.0: Error reading register 00: -110 [ 882.530769][ T5872] usb 6-1: device descriptor read/64, error -71 [ 882.557831][ T24] usb 3-1: USB disconnect, device number 126 [ 882.780900][ T5872] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 883.035530][ T5872] usb 6-1: device descriptor read/64, error -71 [ 883.076625][ T30] audit: type=1326 audit(1757868898.552:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 883.120333][ T30] audit: type=1326 audit(1757868898.552:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 883.151323][ T30] audit: type=1326 audit(1757868898.562:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 883.173783][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.321126][ T5872] usb usb6-port1: attempt power cycle [ 883.399114][ T30] audit: type=1326 audit(1757868898.562:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 883.421789][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.457921][ T30] audit: type=1326 audit(1757868898.562:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 883.487658][ T30] audit: type=1326 audit(1757868898.562:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 883.577087][ T30] audit: type=1326 audit(1757868898.562:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 883.632380][ T30] audit: type=1326 audit(1757868898.562:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 883.654848][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.704298][ T30] audit: type=1326 audit(1757868898.562:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 883.731642][ T5872] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 883.761554][ T5872] usb 6-1: device descriptor read/8, error -71 [ 883.770844][ T30] audit: type=1326 audit(1757868898.562:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 884.042122][ T5872] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 884.125915][ T5872] usb 6-1: device descriptor read/8, error -71 [ 884.139911][ T5944] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 884.177069][ T5959] usb 4-1: 0:2 : does not exist [ 884.196935][ T5944] usb 1-1: USB disconnect, device number 24 [ 884.254100][ T5959] usb 4-1: USB disconnect, device number 20 [ 884.281083][ T5872] usb usb6-port1: unable to enumerate USB device [ 884.673270][ T5959] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 884.681052][ T24] usb 3-1: new low-speed USB device number 127 using dummy_hcd [ 884.842574][ T5959] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 884.871693][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.883165][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 884.900662][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 884.929776][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 884.971263][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.024791][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 885.041201][T16153] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 885.058322][ T5959] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 885.122643][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 885.203563][ T5959] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 885.246601][ T5959] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 885.258991][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 885.307426][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 885.318688][ T5959] usb 4-1: Manufacturer: syz [ 885.333454][ T5959] usb 4-1: config 0 descriptor?? [ 885.339431][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 885.395938][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 885.419811][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 885.564142][T16164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2574'. [ 885.598257][ T5959] usbhid 4-1:0.0: can't add hid device: -71 [ 885.608210][ T5959] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 885.640562][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 885.677337][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 885.762580][T16164] block device autoloading is deprecated and will be removed. [ 885.790854][ T5959] usb 4-1: USB disconnect, device number 21 [ 885.808900][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 885.851059][T16164] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 885.864622][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 886.280499][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 886.565174][ T24] usb 3-1: string descriptor 0 read error: -22 [ 886.572210][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 886.581931][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.627132][ T24] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 887.001888][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 887.300642][T16169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.531372][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 887.551330][ T24] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 887.578948][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.601936][T16169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.324903][ T24] usb 4-1: config 0 descriptor?? [ 888.499464][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 889.708398][ T24] gspca_nw80x: reg_w err -71 [ 889.715175][ T24] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 889.731485][ T24] usb 4-1: USB disconnect, device number 22 [ 889.749403][T16113] usb 3-1: USB disconnect, device number 127 [ 890.277830][T16194] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 890.351033][ T5872] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 890.392348][T16113] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 890.504810][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 890.540683][ T5872] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 890.558206][T16203] IPv6: addrconf: prefix option has invalid lifetime [ 890.567511][ T5872] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 890.591051][T16113] usb 3-1: config 0 has no interfaces? [ 890.596686][T16113] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 890.606382][ T5872] usb 2-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 890.639044][ T5872] usb 2-1: config 168 interface 0 has no altsetting 0 [ 890.659077][T16113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.684744][ T5872] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 890.694978][T16113] usb 3-1: config 0 descriptor?? [ 890.705646][ T5872] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 890.750310][ T5872] usb 2-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 890.765037][ T5872] usb 2-1: config 168 interface 0 has no altsetting 0 [ 890.774097][ T5872] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 890.789490][ T5872] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 890.801520][ T5872] usb 2-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 890.868135][ T5872] usb 2-1: config 168 interface 0 has no altsetting 0 [ 890.986737][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 891.019732][ T5872] usb 2-1: string descriptor 0 read error: -22 [ 891.026485][ T5872] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 891.067613][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.157895][ T5872] adutux 2-1:168.0: interrupt endpoints not found [ 891.202320][ T24] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 891.220006][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.241595][ T24] usb 1-1: config 0 descriptor?? [ 891.357634][T16217] netlink: 'syz.2.2583': attribute type 10 has an invalid length. [ 891.369885][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2583'. [ 891.391149][ T9] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 891.461507][ T24] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 891.648949][T11511] usb 2-1: USB disconnect, device number 10 [ 891.682666][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 891.690318][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 891.706905][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.706948][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 891.750669][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 891.794057][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 891.824332][ T24] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 891.831267][ T24] [drm] Initialized udl on minor 2 [ 891.844894][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 891.887242][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 891.895440][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 891.914517][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.931836][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 891.946636][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 891.947866][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 891.970249][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 891.983369][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 892.064423][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 892.086143][ T5959] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 892.108328][ T24] usb 1-1: USB disconnect, device number 25 [ 892.119505][ T5959] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 892.137047][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 892.215309][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 892.388754][ T9] usb 6-1: string descriptor 0 read error: -22 [ 892.402624][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 892.427694][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.484505][ T9] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 892.640609][ T5959] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 893.223527][T16227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.232888][T16227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.245175][T16228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2592'. [ 893.307905][ T5959] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 893.318364][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.334591][ T5959] usb 2-1: Product: syz [ 893.371889][ T5959] usb 2-1: Manufacturer: syz [ 893.417032][ T9] usb 3-1: USB disconnect, device number 2 [ 893.434768][ T5959] usb 2-1: SerialNumber: syz [ 893.936093][T16239] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 894.595287][T16237] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 894.626697][ T5959] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 894.668834][T16237] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 894.684522][ T5959] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 894.727386][ T5959] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 894.755865][T16113] usb 6-1: USB disconnect, device number 26 [ 894.765872][ T5959] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 894.804292][ T5959] usb 2-1: USB disconnect, device number 11 [ 894.839287][T16237] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 894.848386][T16237] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 894.860978][ T24] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 894.905825][T16237] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 894.912589][T16237] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 894.925386][T16237] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 894.935765][T16237] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 894.947390][T16237] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 894.953748][T16237] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 895.053804][ T24] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 895.106534][ T24] usb 3-1: can't read configurations, error -22 [ 895.270778][ T24] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 895.300798][T16113] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 895.423245][ T24] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 895.491418][T16113] usb 6-1: Using ep0 maxpacket: 8 [ 895.501004][T16113] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 895.556534][T16113] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 895.576832][ T24] usb 3-1: can't read configurations, error -22 [ 895.591479][ T24] usb usb3-port1: attempt power cycle [ 895.597143][T16113] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 895.618506][T16113] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 895.632284][T16113] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 895.641849][T16113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.865093][T16113] usb 6-1: GET_CAPABILITIES returned 0 [ 895.871660][T16113] usbtmc 6-1:16.0: can't read capabilities [ 895.962062][ T24] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 896.114185][ T24] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 896.125545][T16251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.134166][ T24] usb 3-1: can't read configurations, error -22 [ 896.143322][T16251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.270578][ T24] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 896.293689][ T24] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 896.301801][ T24] usb 3-1: can't read configurations, error -22 [ 896.317175][ T24] usb usb3-port1: unable to enumerate USB device [ 896.356634][T16251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.370216][T16251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.385264][T16251] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -71 [ 896.407047][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 896.417102][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 896.513005][ T5960] usb 6-1: USB disconnect, device number 27 [ 896.902695][T16263] IPv6: addrconf: prefix option has invalid lifetime [ 897.710828][ T6003] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 897.872544][ T6003] usb 6-1: config 0 has no interfaces? [ 897.878109][ T6003] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 897.900584][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.919392][T16280] kvm: user requested TSC rate below hardware speed [ 897.940819][ T6003] usb 6-1: config 0 descriptor?? [ 898.169034][T16288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2608'. [ 898.247094][T16288] block device autoloading is deprecated and will be removed. [ 898.256949][T16288] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 898.506527][T16294] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2605'. [ 898.518243][T16294] netlink: 'syz.5.2605': attribute type 10 has an invalid length. [ 898.526576][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2605'. [ 898.700592][ T5960] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 898.852187][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.862260][ T5960] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 898.872273][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.913416][ T5960] usb 3-1: config 0 descriptor?? [ 899.159099][ T5960] usbhid 3-1:0.0: can't add hid device: -71 [ 899.194370][ T5960] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 899.217153][ T5960] usb 3-1: USB disconnect, device number 7 [ 899.672579][T16303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 900.453045][ T5960] usb 6-1: USB disconnect, device number 28 [ 900.557288][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 900.557318][ T30] audit: type=1326 audit(1757868916.182:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.2.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 900.619212][ T30] audit: type=1326 audit(1757868916.182:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.2.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 900.642666][ T30] audit: type=1326 audit(1757868916.182:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.2.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 900.666322][ T30] audit: type=1326 audit(1757868916.182:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.2.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 900.789164][ T30] audit: type=1326 audit(1757868916.182:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.2.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 900.846675][ T30] audit: type=1326 audit(1757868916.182:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.2.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 900.941713][ T30] audit: type=1326 audit(1757868916.182:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.2.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 900.964574][ C0] vkms_vblank_simulate: vblank timer overrun [ 900.985905][ T30] audit: type=1326 audit(1757868916.182:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.2.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 901.011103][ T30] audit: type=1326 audit(1757868916.232:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.2.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 901.033401][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.040619][ T30] audit: type=1326 audit(1757868916.232:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.2.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e1f8eba9 code=0x7ffc0000 [ 901.063251][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.130816][ T6003] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 902.293529][T16331] dvmrp0: left allmulticast mode [ 902.314162][ T6003] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.370584][ T6003] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 902.400151][ T6003] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 902.418911][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 902.440888][ T6003] usb 6-1: SerialNumber: syz [ 904.335893][T16339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2621'. [ 904.733230][ T6003] usb 6-1: 0:2 : does not exist [ 904.785555][ T6003] usb 6-1: USB disconnect, device number 29 [ 904.821003][ T24] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 904.876713][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.994744][ T24] usb 3-1: config 0 has no interfaces? [ 905.001836][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 905.011447][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.022788][ T24] usb 3-1: config 0 descriptor?? [ 905.263362][ T6003] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 905.430631][ T6003] usb 6-1: Using ep0 maxpacket: 32 [ 905.455040][ T6003] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 905.467696][ T6003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.479283][ T6003] usb 6-1: Product: syz [ 905.483580][ T6003] usb 6-1: Manufacturer: syz [ 905.488201][ T6003] usb 6-1: SerialNumber: syz [ 905.511238][ T6003] usb 6-1: config 0 descriptor?? [ 905.524136][ T6003] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 905.588823][T16352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2623'. [ 905.605233][T16352] netlink: 'syz.2.2623': attribute type 10 has an invalid length. [ 905.614911][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2623'. [ 905.771137][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 905.920585][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 905.928318][T16347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.928531][ T24] usb 1-1: config 12 has an invalid interface number: 212 but max is 0 [ 905.937962][T16347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.952288][ T24] usb 1-1: config 12 has no interface number 0 [ 905.964578][ T24] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 905.974166][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.982941][ T24] usb 1-1: Product: syz [ 905.987160][ T24] usb 1-1: Manufacturer: syz [ 905.992130][ T24] usb 1-1: SerialNumber: syz [ 906.014142][ T24] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 906.023939][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 906.033902][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 906.044257][ T24] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 906.054352][ T24] usb 1-1: media controller created [ 906.080164][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.105015][ T24] cxusb: set interface failed [ 906.109819][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 906.118617][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 906.124612][ T24] usb 1-1: bluebird_gpio_write failed. [ 906.140686][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 906.146515][ T24] usb 1-1: bluebird_gpio_write failed. [ 906.196191][ T24] DVB: Unable to find symbol dib7000p_attach() [ 906.202492][ T24] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 906.219180][T16351] dvb-usb: bulk message failed: -22 (4/0) [ 906.229934][T16351] cxusb: i2c read failed [ 906.300620][ T24] rc_core: IR keymap rc-dvico-mce not found [ 906.306725][ T24] Registered IR keymap rc-empty [ 906.313739][ T24] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 906.332791][ T24] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input70 [ 906.347605][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 906.354840][ T24] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 906.369903][ T24] usb 1-1: USB disconnect, device number 26 [ 906.461397][ T24] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 906.979038][ T6003] gspca_topro: Sensor cx0342 [ 907.195726][ T24] usb 6-1: USB disconnect, device number 30 [ 907.773110][T11511] usb 3-1: USB disconnect, device number 8 [ 908.571028][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 908.808092][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.836960][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 908.922189][ T24] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 908.966488][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 909.003169][ T24] usb 6-1: SerialNumber: syz [ 909.373896][T16385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2638'. [ 909.523001][T16386] netlink: 'syz.0.2638': attribute type 3 has an invalid length. [ 911.408993][ T24] usb 6-1: 0:2 : does not exist [ 911.421939][ T24] usb 6-1: USB disconnect, device number 31 [ 911.454170][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.990652][ T5960] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 912.177400][ T5960] usb 6-1: config 0 has no interfaces? [ 912.183310][ T5960] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 912.194870][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.224185][ T5960] usb 6-1: config 0 descriptor?? [ 912.798643][T16409] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2642'. [ 912.817023][T16409] netlink: 'syz.5.2642': attribute type 10 has an invalid length. [ 912.828672][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2642'. [ 914.428425][T16413] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 914.467996][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 914.759450][ T24] usb 6-1: USB disconnect, device number 32 [ 915.710717][ T5959] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 915.925268][ T5959] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 915.946338][ T5959] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 916.105766][ T5959] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 916.131152][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 916.139289][ T5959] usb 6-1: SerialNumber: syz [ 918.218843][ T5959] usb 6-1: 0:2 : does not exist [ 918.333017][ T5959] usb 6-1: USB disconnect, device number 33 [ 918.417426][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.062103][ T5960] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 920.247798][ T5960] usb 6-1: config 0 has no interfaces? [ 920.284178][ T5960] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 920.295783][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.304203][ T5960] usb 6-1: Product: syz [ 920.308374][ T5960] usb 6-1: Manufacturer: syz [ 920.316109][ T5960] usb 6-1: SerialNumber: syz [ 920.366980][ T5960] usb 6-1: config 0 descriptor?? [ 920.930623][ T24] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 921.126954][ T24] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 921.135367][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 921.158290][ T24] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 921.169588][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.177831][ T24] usb 3-1: Product: syz [ 921.183811][ T24] usb 3-1: Manufacturer: syz [ 921.190217][ T24] usb 3-1: SerialNumber: syz [ 921.243691][ T24] usb 3-1: config 0 descriptor?? [ 921.281619][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 921.287749][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 921.299484][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input71 [ 921.355619][ T24] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 921.450057][ T24] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 921.807430][ T5960] usb 6-1: USB disconnect, device number 34 [ 922.697408][ T5960] usb 3-1: USB disconnect, device number 9 [ 924.380191][T16482] syzkaller1: entered promiscuous mode [ 924.390200][T16482] syzkaller1: entered allmulticast mode [ 924.660771][ T6003] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 924.720636][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 924.750818][T16493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.813437][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 924.823045][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 924.827060][ T6003] usb 3-1: Using ep0 maxpacket: 32 [ 924.833295][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 924.839437][ T6003] usb 3-1: config 0 has an invalid interface number: 202 but max is 1 [ 924.847086][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 924.864687][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 924.869150][ T6003] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.873976][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 924.889705][ T6003] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 924.893766][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 924.893888][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 924.894003][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 924.932184][ T6003] usb 3-1: config 0 has no interface number 0 [ 924.938355][ T6003] usb 3-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 924.949677][ T6003] usb 3-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 924.979148][ T6003] usb 3-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 924.993078][ T6003] usb 3-1: config 0 interface 202 has no altsetting 0 [ 925.007045][ T6003] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 925.016498][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.045289][ T6003] usb 3-1: Product: syz [ 925.049608][ T6003] usb 3-1: Manufacturer: syz [ 925.070690][ T6003] usb 3-1: SerialNumber: syz [ 925.077320][ T6003] usb 3-1: config 0 descriptor?? [ 925.094258][ T6003] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 925.298353][T12537] usb 3-1: Failed to submit usb control message: -71 [ 925.298749][ T24] usb 3-1: USB disconnect, device number 10 [ 925.306294][T12537] usb 3-1: unable to send the bmi data to the device: -71 [ 925.320663][ T5959] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 925.330672][T12537] usb 3-1: unable to get target info from device [ 925.408439][T12537] usb 3-1: could not get target info (-71) [ 925.440773][T12537] usb 3-1: could not probe fw (-71) [ 925.542403][ T5959] usb 1-1: config 0 has no interfaces? [ 925.558245][ T5959] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 925.573133][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.644919][ T5959] usb 1-1: config 0 descriptor?? [ 926.268985][T16510] geneve3: entered allmulticast mode [ 926.394510][T16511] netlink: 'syz.0.2664': attribute type 10 has an invalid length. [ 928.028147][T16527] syzkaller1: entered promiscuous mode [ 928.033846][T16527] syzkaller1: entered allmulticast mode [ 928.189376][ T5959] usb 1-1: USB disconnect, device number 27 [ 928.809471][T16540] fuse: Unknown parameter '' [ 929.064645][ T5960] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 929.303275][ T5960] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.313854][ T5960] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 929.548563][ T5960] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 929.568207][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 929.590552][ T5960] usb 1-1: SerialNumber: syz [ 930.211766][T16547] __nla_validate_parse: 25 callbacks suppressed [ 930.211789][T16547] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2674'. [ 930.324645][T16547] block device autoloading is deprecated and will be removed. [ 930.333229][T16547] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 931.778362][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.785060][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.218327][ T5960] usb 1-1: 0:2 : does not exist [ 932.280703][ T6003] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 932.325845][ T5960] usb 1-1: USB disconnect, device number 28 [ 932.421107][ T6003] usb 3-1: device descriptor read/64, error -71 [ 932.660550][ T6003] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 932.720570][ T5960] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 932.793646][ T6003] usb 3-1: device descriptor read/64, error -71 [ 932.875156][ T5960] usb 1-1: config 0 has no interfaces? [ 932.881031][ T5960] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 932.892163][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.904576][ T5960] usb 1-1: config 0 descriptor?? [ 932.911887][ T6003] usb usb3-port1: attempt power cycle [ 933.250814][ T6003] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 933.271191][ T6003] usb 3-1: device descriptor read/8, error -71 [ 933.484905][T16566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2679'. [ 933.495415][T16566] netlink: 'syz.0.2679': attribute type 10 has an invalid length. [ 933.507111][T16566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2679'. [ 933.510625][ T6003] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 933.551371][ T6003] usb 3-1: device descriptor read/8, error -71 [ 933.660955][ T6003] usb usb3-port1: unable to enumerate USB device [ 934.321350][T16573] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2683'. [ 934.527081][T16573] block device autoloading is deprecated and will be removed. [ 934.544268][T16573] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 935.476655][ T5960] usb 1-1: USB disconnect, device number 29 [ 938.484872][T16621] fuse: Unknown parameter '' [ 939.280743][ T5959] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 939.429067][T16628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2697'. [ 939.462178][ T5959] usb 6-1: config 201 has an invalid interface number: 249 but max is 0 [ 939.477318][ T5959] usb 6-1: config 201 has no interface number 0 [ 939.489327][ T5959] usb 6-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 939.503197][ T5959] usb 6-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 939.517033][ T5959] usb 6-1: config 201 interface 249 has no altsetting 0 [ 939.530073][ T5959] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 939.540867][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.557634][ T5959] usb 6-1: Product: syz [ 939.563983][ T5959] usb 6-1: Manufacturer: syz [ 939.568671][ T5959] usb 6-1: SerialNumber: syz [ 942.229108][ T5959] ath6kl: Failed to submit usb control message: -71 [ 942.236932][ T5959] ath6kl: unable to send the bmi data to the device: -71 [ 942.273992][ T5959] ath6kl: Unable to send get target info: -71 [ 942.281711][ T5959] ath6kl: Failed to init ath6kl core: -71 [ 942.289280][ T5959] ath6kl_usb 6-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 942.391081][ T5959] usb 6-1: USB disconnect, device number 35 [ 942.423964][T16653] netlink: 'syz.5.2701': attribute type 1 has an invalid length. [ 942.441422][T16653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2701'. [ 943.280669][ T5959] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 943.436966][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 943.474021][ T5959] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.509712][ T5959] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.536131][ T5959] usb 3-1: config 0 interface 0 has no altsetting 0 [ 943.550482][ T5959] usb 3-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 943.559697][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.592561][ T5959] usb 3-1: config 0 descriptor?? [ 944.070272][ T5959] usb 3-1: USB disconnect, device number 15 [ 944.098860][ T5960] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 944.170875][ T6003] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 944.308780][ T5960] usb 6-1: Using ep0 maxpacket: 16 [ 944.345826][ T5960] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.357383][ T5960] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.379469][ T6003] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.398278][ T5960] usb 6-1: config 0 interface 0 has no altsetting 0 [ 944.406921][ T6003] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 944.416315][ T5960] usb 6-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 944.434502][ T6003] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 944.447354][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.455608][ T6003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 944.466256][ T5960] usb 6-1: config 0 descriptor?? [ 944.471395][ T6003] usb 1-1: SerialNumber: syz [ 944.838488][T16675] @: renamed from vlan0 (while UP) [ 945.062324][ T5960] usb 6-1: USB disconnect, device number 36 [ 947.006200][ T6003] usb 1-1: 0:2 : does not exist [ 947.079971][ T6003] usb 1-1: USB disconnect, device number 30 [ 947.217997][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 947.319082][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2710'. [ 949.202947][T16724] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2715'. [ 949.214322][T16726] FAULT_INJECTION: forcing a failure. [ 949.214322][T16726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.256406][T16726] CPU: 0 UID: 0 PID: 16726 Comm: syz.5.2716 Not tainted syzkaller #0 PREEMPT(full) [ 949.256435][T16726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 949.256448][T16726] Call Trace: [ 949.256458][T16726] [ 949.256467][T16726] dump_stack_lvl+0x189/0x250 [ 949.256500][T16726] ? __pfx____ratelimit+0x10/0x10 [ 949.256521][T16726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 949.256547][T16726] ? __pfx__printk+0x10/0x10 [ 949.256573][T16726] ? __might_fault+0xb0/0x130 [ 949.256613][T16726] should_fail_ex+0x414/0x560 [ 949.256649][T16726] _copy_from_iter+0x1de/0x1790 [ 949.256682][T16726] ? rcu_is_watching+0x15/0xb0 [ 949.256705][T16726] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 949.256734][T16726] ? __pfx__copy_from_iter+0x10/0x10 [ 949.256761][T16726] ? __build_skb_around+0x257/0x3e0 [ 949.256788][T16726] ? netlink_sendmsg+0x642/0xb30 [ 949.256809][T16726] ? skb_put+0x11b/0x210 [ 949.256836][T16726] netlink_sendmsg+0x6b2/0xb30 [ 949.256869][T16726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.256896][T16726] ? aa_sock_msg_perm+0xf1/0x1d0 [ 949.256919][T16726] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 949.256942][T16726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.256965][T16726] __sock_sendmsg+0x21c/0x270 [ 949.256999][T16726] ____sys_sendmsg+0x505/0x830 [ 949.257031][T16726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 949.257066][T16726] ? import_iovec+0x74/0xa0 [ 949.257096][T16726] ___sys_sendmsg+0x21f/0x2a0 [ 949.257123][T16726] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.257183][T16726] ? __fget_files+0x2a/0x420 [ 949.257203][T16726] ? __fget_files+0x3a0/0x420 [ 949.257231][T16726] __x64_sys_sendmsg+0x19b/0x260 [ 949.257259][T16726] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 949.257296][T16726] ? __pfx_ksys_write+0x10/0x10 [ 949.257321][T16726] ? rcu_is_watching+0x15/0xb0 [ 949.257349][T16726] ? do_syscall_64+0xbe/0x3b0 [ 949.257386][T16726] do_syscall_64+0xfa/0x3b0 [ 949.257408][T16726] ? lockdep_hardirqs_on+0x9c/0x150 [ 949.257430][T16726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.257452][T16726] ? clear_bhb_loop+0x60/0xb0 [ 949.257479][T16726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.257501][T16726] RIP: 0033:0x7f8c17f8eba9 [ 949.257522][T16726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.257542][T16726] RSP: 002b:00007f8c18df3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.257566][T16726] RAX: ffffffffffffffda RBX: 00007f8c181d5fa0 RCX: 00007f8c17f8eba9 [ 949.257582][T16726] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 949.257596][T16726] RBP: 00007f8c18df3090 R08: 0000000000000000 R09: 0000000000000000 [ 949.257611][T16726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.257624][T16726] R13: 00007f8c181d6038 R14: 00007f8c181d5fa0 R15: 00007f8c182ffa28 [ 949.257660][T16726] [ 949.541418][ C0] vkms_vblank_simulate: vblank timer overrun [ 949.747299][ T5959] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 949.940520][ T5959] usb 6-1: Using ep0 maxpacket: 16 [ 949.947395][ T5959] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.959610][ T5959] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.030539][ T5959] usb 6-1: config 0 interface 0 has no altsetting 0 [ 950.048320][ T5959] usb 6-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 950.135738][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.246568][ T5959] usb 6-1: config 0 descriptor?? [ 950.520641][T15016] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 950.691311][T15016] usb 1-1: Using ep0 maxpacket: 16 [ 950.700346][ T5959] usb 6-1: USB disconnect, device number 37 [ 950.716642][T15016] usb 1-1: config 1 has an invalid interface number: 208 but max is 2 [ 950.727930][T15016] usb 1-1: config 1 has an invalid interface number: 5 but max is 2 [ 950.740067][T15016] usb 1-1: config 1 has an invalid interface number: 43 but max is 2 [ 950.748788][T15016] usb 1-1: config 1 has an invalid interface number: 218 but max is 2 [ 950.759053][T15016] usb 1-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 950.785385][T15016] usb 1-1: config 1 has no interface number 0 [ 950.794993][T15016] usb 1-1: config 1 has no interface number 1 [ 950.804818][T15016] usb 1-1: config 1 has no interface number 2 [ 950.811570][T15016] usb 1-1: config 1 has no interface number 3 [ 950.818288][T15016] usb 1-1: config 1 interface 208 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 950.838001][T15016] usb 1-1: too many endpoints for config 1 interface 5 altsetting 4: 210, using maximum allowed: 30 [ 950.850279][T15016] usb 1-1: config 1 interface 5 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 950.866700][T15016] usb 1-1: config 1 interface 5 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 950.877957][T15016] usb 1-1: config 1 interface 5 altsetting 4 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 950.899248][T15016] usb 1-1: config 1 interface 5 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 210 [ 951.010890][T15016] usb 1-1: config 1 interface 43 altsetting 4 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 951.029172][T15016] usb 1-1: config 1 interface 43 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 951.108264][T15016] usb 1-1: config 1 interface 43 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 951.131211][T15016] usb 1-1: config 1 interface 43 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 951.145817][T15016] usb 1-1: config 1 interface 43 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 951.189329][T15016] usb 1-1: config 1 interface 208 has no altsetting 0 [ 951.198186][T15016] usb 1-1: config 1 interface 5 has no altsetting 0 [ 951.227161][T15016] usb 1-1: config 1 interface 43 has no altsetting 0 [ 951.251423][T15016] usb 1-1: New USB device found, idVendor=0e8d, idProduct=7129, bcdDevice=75.d4 [ 951.260842][T15016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.275430][T15016] usb 1-1: Product: syz [ 951.286580][T15016] usb 1-1: Manufacturer: 隥ᖆ䟨ᾛꇠ䶚鞖ꗇ⪞낱헳ᦃ讜霍뭔Ýᱮ呼 [ 951.315627][T15016] usb 1-1: SerialNumber: syz [ 953.301462][T16771] tipc: Started in network mode [ 953.306816][T16771] tipc: Node identity 00000000000000000000ffff640101, cluster identity 4711 [ 953.318122][T16771] tipc: Enabling of bearer rejected, failed to enable media [ 953.438523][T15016] option 1-1:1.208: GSM modem (1-port) converter detected [ 953.554102][T15016] hub 1-1:1.5: Invalid hub with more than one config or interface [ 953.566758][T15016] hub 1-1:1.5: probe with driver hub failed with error -22 [ 954.167528][T15016] usb 1-1: USB disconnect, device number 31 [ 954.176736][T15016] option 1-1:1.208: device disconnected [ 954.390959][ T6003] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 954.510607][T15016] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 954.542486][ T6003] usb 3-1: config 0 interface 0 has no altsetting 0 [ 954.552582][ T6003] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24 [ 954.562301][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.570761][ T6003] usb 3-1: Product: syz [ 954.575157][ T6003] usb 3-1: Manufacturer: syz [ 954.579905][ T6003] usb 3-1: SerialNumber: syz [ 954.592027][ T6003] usb 3-1: config 0 descriptor?? [ 954.676956][T15016] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 954.688711][T15016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.700369][T15016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.710376][T15016] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 954.727496][T15016] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 954.736983][T15016] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 954.745229][T15016] usb 1-1: Manufacturer: syz [ 954.754550][T15016] usb 1-1: config 0 descriptor?? [ 954.900783][T11511] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 954.913680][T16775] trusted_key: encrypted_key: insufficient parameters specified [ 955.024191][ T6003] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 955.040829][ T6003] usb 3-1: USB disconnect, device number 16 [ 955.051786][T11511] usb 6-1: Using ep0 maxpacket: 16 [ 955.065294][T11511] usb 6-1: config 0 has an invalid interface number: 223 but max is 0 [ 955.071763][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 955.079278][T11511] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.102711][T11511] usb 6-1: config 0 has no interface number 0 [ 955.109161][T11511] usb 6-1: config 0 interface 223 has no altsetting 0 [ 955.124663][T11511] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 955.134267][T11511] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.142651][T11511] usb 6-1: Product: syz [ 955.146855][T11511] usb 6-1: Manufacturer: syz [ 955.151877][T11511] usb 6-1: SerialNumber: syz [ 955.158741][T11511] usb 6-1: config 0 descriptor?? [ 955.179779][T15016] hid_parser_main: 6 callbacks suppressed [ 955.179798][T15016] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 955.200242][T15016] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 955.496548][T11511] usb 1-1: USB disconnect, device number 32 [ 955.586136][T16780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.600239][T16780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.631987][T16780] fuse: Bad value for 'fd' [ 955.638883][ T24] usb 6-1: USB disconnect, device number 38 [ 956.280797][T16795] block nbd0: Attempted send on invalid socket [ 956.318146][T16795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 3 [ 957.173608][T16804] program syz.2.2734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 957.445865][T16796] [U]  [ 957.450861][ T6003] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 957.600701][ T6003] usb 3-1: Using ep0 maxpacket: 32 [ 957.653103][ T6003] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 957.662671][ T6003] usb 3-1: config 1 has no interface number 1 [ 957.668791][ T6003] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 957.690935][ T6003] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 216, changing to 7 [ 957.704636][ T6003] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 957.714108][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.734244][ T6003] usb 3-1: Product: syz [ 957.740563][ T6003] usb 3-1: Manufacturer: syz [ 957.750490][ T6003] usb 3-1: SerialNumber: syz [ 958.370641][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 958.531121][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 958.545939][ T24] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24 [ 958.569542][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.624785][ T6003] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 958.649810][ T24] usb 1-1: Product: syz [ 958.661524][ T24] usb 1-1: Manufacturer: syz [ 958.672559][ T6003] usb 3-1: USB disconnect, device number 17 [ 958.680365][ T24] usb 1-1: SerialNumber: syz [ 958.723750][ T24] usb 1-1: config 0 descriptor?? [ 958.847606][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 959.186682][T16812] trusted_key: encrypted_key: insufficient parameters specified [ 959.458670][ T24] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 959.494765][ T24] usb 1-1: USB disconnect, device number 33 [ 959.539019][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 959.810921][ T6003] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 959.963735][ T6003] usb 6-1: config 0 has no interfaces? [ 959.971588][ T6003] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 959.982438][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.998771][T16837] loop9: detected capacity change from 0 to 7 [ 960.001384][ T6003] usb 6-1: config 0 descriptor?? [ 960.030328][ T5878] Dev loop9: unable to read RDB block 7 [ 960.039431][ T5878] loop9: AHDI p1 p2 p3 [ 960.079590][ T5878] loop9: partition table partially beyond EOD, truncated [ 960.094671][ T5878] loop9: p1 start 1601398130 is beyond EOD, truncated [ 960.111014][ T5878] loop9: p2 start 1702059890 is beyond EOD, truncated [ 960.209163][T16843] openvswitch: netlink: Message has 20 unknown bytes. [ 960.219285][T16843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 960.688983][T16856] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2742'. [ 960.700084][T16856] netlink: 'syz.5.2742': attribute type 10 has an invalid length. [ 960.708937][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2742'. [ 962.545234][ T6003] usb 6-1: USB disconnect, device number 39 [ 993.214788][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.221189][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1046.980685][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 1046.988204][ T31] Not tainted syzkaller #0 [ 1046.993295][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1047.002038][ T31] task:kworker/0:0 state:D stack:21112 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1047.015682][ T31] Workqueue: events rfkill_sync_work [ 1047.022201][ T31] Call Trace: [ 1047.025519][ T31] [ 1047.028487][ T31] __schedule+0x1798/0x4cc0 [ 1047.034895][ T31] ? __pfx___schedule+0x10/0x10 [ 1047.039824][ T31] ? schedule+0x91/0x360 [ 1047.047390][ T31] schedule+0x165/0x360 [ 1047.053495][ T31] schedule_preempt_disabled+0x13/0x30 [ 1047.059012][ T31] __mutex_lock+0x7e6/0x1350 [ 1047.063869][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1047.068670][ T31] ? rfkill_sync_work+0x2e/0x200 [ 1047.074252][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1047.079416][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1047.085284][ T31] rfkill_sync_work+0x2e/0x200 [ 1047.090079][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1047.096018][ T31] process_scheduled_works+0xae1/0x17b0 [ 1047.101757][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1047.107780][ T31] worker_thread+0x8a0/0xda0 [ 1047.112525][ T31] kthread+0x70e/0x8a0 [ 1047.117115][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1047.122365][ T31] ? __pfx_kthread+0x10/0x10 [ 1047.126987][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1047.132498][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1047.137724][ T31] ? __pfx_kthread+0x10/0x10 [ 1047.142577][ T31] ret_from_fork+0x436/0x7d0 [ 1047.147211][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.152470][ T31] ? __switch_to_asm+0x39/0x70 [ 1047.157274][ T31] ? __switch_to_asm+0x33/0x70 [ 1047.162132][ T31] ? __pfx_kthread+0x10/0x10 [ 1047.166835][ T31] ret_from_fork_asm+0x1a/0x30 [ 1047.171743][ T31] [ 1047.175024][ T31] INFO: task kworker/0:4:5872 blocked for more than 143 seconds. [ 1047.182914][ T31] Not tainted syzkaller #0 [ 1047.187877][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1047.196848][ T31] task:kworker/0:4 state:D stack:21816 pid:5872 tgid:5872 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 1047.209223][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1047.216385][ T31] Call Trace: [ 1047.219691][ T31] [ 1047.222792][ T31] __schedule+0x1798/0x4cc0 [ 1047.227346][ T31] ? __pfx___schedule+0x10/0x10 [ 1047.232364][ T31] ? schedule+0x91/0x360 [ 1047.236636][ T31] schedule+0x165/0x360 [ 1047.240879][ T31] schedule_preempt_disabled+0x13/0x30 [ 1047.246357][ T31] __mutex_lock+0x7e6/0x1350 [ 1047.251070][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1047.255859][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1047.262333][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1047.267414][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1047.273292][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1047.279062][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1047.285229][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1047.291174][ T31] process_scheduled_works+0xae1/0x17b0 [ 1047.296807][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1047.302971][ T31] worker_thread+0x8a0/0xda0 [ 1047.307697][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1047.314241][ T31] ? __kthread_parkme+0x7b/0x200 [ 1047.319211][ T31] kthread+0x70e/0x8a0 [ 1047.323332][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1047.328466][ T31] ? __pfx_kthread+0x10/0x10 [ 1047.333181][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1047.338409][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1047.343729][ T31] ? __pfx_kthread+0x10/0x10 [ 1047.348345][ T31] ret_from_fork+0x436/0x7d0 [ 1047.353517][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.358656][ T31] ? __switch_to_asm+0x39/0x70 [ 1047.363548][ T31] ? __switch_to_asm+0x33/0x70 [ 1047.368348][ T31] ? __pfx_kthread+0x10/0x10 [ 1047.373087][ T31] ret_from_fork_asm+0x1a/0x30 [ 1047.377887][ T31] [ 1047.381101][ T31] INFO: task syz.1.2591:16239 blocked for more than 143 seconds. [ 1047.388837][ T31] Not tainted syzkaller #0 [ 1047.393885][ T31] Blocked by coredump. [ 1047.398482][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1047.407303][ T31] task:syz.1.2591 state:D stack:25672 pid:16239 tgid:16220 ppid:5884 task_flags:0x40044c flags:0x00004002 [ 1047.419486][ T31] Call Trace: [ 1047.423106][ T31] [ 1047.426090][ T31] __schedule+0x1798/0x4cc0 [ 1047.430801][ T31] ? __pfx___schedule+0x10/0x10 [ 1047.435732][ T31] ? schedule+0x91/0x360 [ 1047.440077][ T31] schedule+0x165/0x360 [ 1047.444296][ T31] schedule_timeout+0x9a/0x270 [ 1047.449088][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1047.454721][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1047.459951][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1047.465280][ T31] ? wait_for_completion+0x267/0x5d0 [ 1047.470685][ T31] wait_for_completion+0x2bf/0x5d0 [ 1047.475850][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1047.481572][ T31] ? __flush_work+0xd2/0xbc0 [ 1047.486333][ T31] ? __flush_work+0xd2/0xbc0 [ 1047.491150][ T31] __flush_work+0x9b9/0xbc0 [ 1047.495710][ T31] ? __flush_work+0xd2/0xbc0 [ 1047.500318][ T31] ? __pfx___flush_work+0x10/0x10 [ 1047.505563][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1047.510994][ T31] ? __pfx___cancel_work+0x10/0x10 [ 1047.516136][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 1047.522039][ T31] __cancel_work_sync+0xbe/0x110 [ 1047.527014][ T31] rfkill_unregister+0x92/0x220 [ 1047.532019][ T31] nfc_unregister_device+0x96/0x2a0 [ 1047.537245][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1047.543128][ T31] virtual_ncidev_close+0x56/0x90 [ 1047.548187][ T31] __fput+0x449/0xa70 [ 1047.552384][ T31] task_work_run+0x1d1/0x260 [ 1047.557052][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1047.562436][ T31] do_exit+0x6b5/0x2300 [ 1047.566621][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1047.571778][ T31] ? __pfx_do_exit+0x10/0x10 [ 1047.576518][ T31] do_group_exit+0x21c/0x2d0 [ 1047.581299][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1047.586724][ T31] get_signal+0x1286/0x1340 [ 1047.591364][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1047.597036][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1047.603257][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1047.608748][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1047.614250][ T31] do_syscall_64+0x2bd/0x3b0 [ 1047.618882][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1047.624237][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.630331][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1047.635243][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.641215][ T31] RIP: 0033:0x7efd3f38eba9 [ 1047.645640][ T31] RSP: 002b:00007efd402ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1047.654147][ T31] RAX: fffffffffffffff4 RBX: 00007efd3f5d6090 RCX: 00007efd3f38eba9 [ 1047.662239][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1047.670258][ T31] RBP: 00007efd3f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1047.678514][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.686591][ T31] R13: 00007efd3f5d6128 R14: 00007efd3f5d6090 R15: 00007efd3f6ffa28 [ 1047.694727][ T31] [ 1047.697790][ T31] INFO: task syz.3.2594:16237 blocked for more than 144 seconds. [ 1047.705582][ T31] Not tainted syzkaller #0 [ 1047.710710][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1047.719485][ T31] task:syz.3.2594 state:D stack:24424 pid:16237 tgid:16233 ppid:5885 task_flags:0x400040 flags:0x00004006 [ 1047.731538][ T31] Call Trace: [ 1047.735009][ T31] [ 1047.737946][ T31] __schedule+0x1798/0x4cc0 [ 1047.742595][ T31] ? __pfx___schedule+0x10/0x10 [ 1047.747486][ T31] ? schedule+0x91/0x360 [ 1047.751915][ T31] schedule+0x165/0x360 [ 1047.756124][ T31] schedule_preempt_disabled+0x13/0x30 [ 1047.761818][ T31] __mutex_lock+0x7e6/0x1350 [ 1047.766548][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1047.771429][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1047.776757][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1047.782008][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1047.787662][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1047.793856][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1047.800217][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1047.806012][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1047.811326][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1047.817080][ T31] rfkill_set_block+0x1d2/0x440 [ 1047.821997][ T31] rfkill_fop_write+0x44b/0x570 [ 1047.826872][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1047.832540][ T31] ? security_file_permission+0x60/0x290 [ 1047.838215][ T31] ? rw_verify_area+0x255/0x4d0 [ 1047.843175][ T31] ? __lock_acquire+0xab9/0xd20 [ 1047.848061][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1047.853674][ T31] vfs_write+0x27b/0xb30 [ 1047.857946][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1047.862813][ T31] ? __fget_files+0x2a/0x420 [ 1047.867436][ T31] ? __fget_files+0x2a/0x420 [ 1047.872236][ T31] ? __fget_files+0x3a0/0x420 [ 1047.877031][ T31] ? __fget_files+0x2a/0x420 [ 1047.881708][ T31] ksys_write+0x145/0x250 [ 1047.886061][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1047.891107][ T31] ? rcu_is_watching+0x15/0xb0 [ 1047.895899][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1047.900667][ T31] do_syscall_64+0xfa/0x3b0 [ 1047.905192][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.911536][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1047.917188][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1047.921932][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.927851][ T31] RIP: 0033:0x7f3b9778eba9 [ 1047.932477][ T31] RSP: 002b:00007f3b986bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1047.940960][ T31] RAX: ffffffffffffffda RBX: 00007f3b979d6180 RCX: 00007f3b9778eba9 [ 1047.948947][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 1047.957563][ T31] RBP: 00007f3b97811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1047.965587][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.973679][ T31] R13: 00007f3b979d6218 R14: 00007f3b979d6180 R15: 00007f3b97affa28 [ 1047.981827][ T31] [ 1047.984916][ T31] [ 1047.984916][ T31] Showing all locks held in the system: [ 1047.992877][ T31] 3 locks held by kworker/0:0/9: [ 1047.997869][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1048.009057][ T31] #1: ffffc900000e7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1048.021611][ T31] #2: ffffffff8f813c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 1048.032059][ T31] 1 lock held by khungtaskd/31: [ 1048.037017][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1048.046959][ T31] 2 locks held by getty/5630: [ 1048.051681][ T31] #0: ffff88814d8e60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1048.061540][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1048.071878][ T31] 3 locks held by kworker/0:4/5872: [ 1048.077076][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1048.088219][ T31] #1: ffffc90004587bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1048.102083][ T31] #2: ffffffff8f813c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1048.113614][ T31] 1 lock held by syz-executor/5884: [ 1048.118864][ T31] #0: ffffffff8f813c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1048.129193][ T31] 1 lock held by syz.1.2591/16239: [ 1048.134471][ T31] #0: ffff88801dfce100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1048.144409][ T31] 2 locks held by syz.3.2594/16237: [ 1048.151209][ T31] #0: ffffffff8f813c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 1048.161914][ T31] #1: ffff88801dfce100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1048.171831][ T31] 2 locks held by syz-executor/16367: [ 1048.177221][ T31] #0: ffff888057665918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1048.187419][ T31] #1: ffffffff8f813c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1048.197486][ T31] 2 locks held by syz-executor/16379: [ 1048.202909][ T31] #0: ffff888027a9e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1048.213171][ T31] #1: ffffffff8f813c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1048.223282][ T31] 2 locks held by syz.2.2750/16874: [ 1048.228664][ T31] #0: ffffffff8e9c2488 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1048.237293][ T31] #1: ffffffff8f813c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 1048.247431][ T31] 1 lock held by syz.0.2751/16881: [ 1048.252882][ T31] #0: ffffffff8e9c2488 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1048.261535][ T31] 1 lock held by syz.5.2754/16891: [ 1048.266659][ T31] #0: ffffffff8e9c2488 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1048.275289][ T31] 1 lock held by syz.5.2754/16892: [ 1048.280669][ T31] #0: ffffffff8e9c2488 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1048.289203][ T31] [ 1048.291617][ T31] ============================================= [ 1048.291617][ T31] [ 1048.300063][ T31] NMI backtrace for cpu 1 [ 1048.300076][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1048.300091][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1048.300099][ T31] Call Trace: [ 1048.300105][ T31] [ 1048.300111][ T31] dump_stack_lvl+0x189/0x250 [ 1048.300131][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1048.300147][ T31] ? __pfx__printk+0x10/0x10 [ 1048.300170][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1048.300190][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1048.300209][ T31] ? __pfx__printk+0x10/0x10 [ 1048.300228][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1048.300249][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1048.300269][ T31] watchdog+0xf93/0xfe0 [ 1048.300289][ T31] ? watchdog+0x1de/0xfe0 [ 1048.300309][ T31] kthread+0x70e/0x8a0 [ 1048.300326][ T31] ? __pfx_watchdog+0x10/0x10 [ 1048.300348][ T31] ? __pfx_kthread+0x10/0x10 [ 1048.300372][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1048.300407][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1048.300424][ T31] ? __pfx_kthread+0x10/0x10 [ 1048.300450][ T31] ret_from_fork+0x436/0x7d0 [ 1048.300473][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1048.300500][ T31] ? __switch_to_asm+0x39/0x70 [ 1048.300525][ T31] ? __switch_to_asm+0x33/0x70 [ 1048.300549][ T31] ? __pfx_kthread+0x10/0x10 [ 1048.300574][ T31] ret_from_fork_asm+0x1a/0x30 [ 1048.300615][ T31] [ 1048.440430][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1048.445675][ C0] NMI backtrace for cpu 0 [ 1048.445693][ C0] CPU: 0 UID: 0 PID: 12537 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 1048.445721][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1048.445732][ C0] Workqueue: bat_events batadv_nc_worker [ 1048.445760][ C0] RIP: 0010:rcu_is_watching+0x70/0xb0 [ 1048.445787][ C0] Code: c3 98 df a1 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d d9 3f fa 10 74 11 83 e0 04 c1 e8 02 5b <41> 5e 41 5f c3 cc cc cc cc cc e8 e1 56 8d ff eb e8 48 c7 c7 c0 fd [ 1048.445801][ C0] RSP: 0018:ffffc9000e33fa08 EFLAGS: 00000202 [ 1048.445815][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: d3744f51c6b38f00 [ 1048.445832][ C0] RDX: ffff888051448000 RSI: ffffffff8be33e60 RDI: ffffffff8be33e20 [ 1048.445844][ C0] RBP: fffffffffffffe38 R08: 0000000000000000 R09: ffffffff8b47d212 [ 1048.445856][ C0] R10: dffffc0000000000 R11: ffffffff8b47d140 R12: dffffc0000000000 [ 1048.445867][ C0] R13: ffffffff8b47d212 R14: ffffffff8dbe1d10 R15: dffffc0000000000 [ 1048.445880][ C0] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 1048.445893][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1048.445904][ C0] CR2: 0000561ad788e660 CR3: 000000000df36000 CR4: 00000000003526f0 [ 1048.445920][ C0] Call Trace: [ 1048.445927][ C0] [ 1048.445936][ C0] batadv_nc_worker+0x208/0x610 [ 1048.445959][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1048.445977][ C0] process_scheduled_works+0xae1/0x17b0 [ 1048.446011][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1048.446034][ C0] worker_thread+0x8a0/0xda0 [ 1048.446051][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1048.446078][ C0] ? __kthread_parkme+0x7b/0x200 [ 1048.446099][ C0] kthread+0x70e/0x8a0 [ 1048.446119][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1048.446134][ C0] ? __pfx_kthread+0x10/0x10 [ 1048.446153][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1048.446174][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1048.446189][ C0] ? __pfx_kthread+0x10/0x10 [ 1048.446208][ C0] ret_from_fork+0x436/0x7d0 [ 1048.446226][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1048.446244][ C0] ? __switch_to_asm+0x39/0x70 [ 1048.446264][ C0] ? __switch_to_asm+0x33/0x70 [ 1048.446283][ C0] ? __pfx_kthread+0x10/0x10 [ 1048.446302][ C0] ret_from_fork_asm+0x1a/0x30 [ 1048.446328][ C0] [ 1048.448251][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1048.684651][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1048.693855][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1048.703925][ T31] Call Trace: [ 1048.707220][ T31] [ 1048.710160][ T31] dump_stack_lvl+0x99/0x250 [ 1048.714775][ T31] ? __asan_memcpy+0x40/0x70 [ 1048.719560][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1048.724766][ T31] ? __pfx__printk+0x10/0x10 [ 1048.729386][ T31] vpanic+0x281/0x750 [ 1048.733378][ T31] ? __pfx_vpanic+0x10/0x10 [ 1048.737890][ T31] ? preempt_schedule+0xae/0xc0 [ 1048.742745][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1048.748216][ T31] panic+0xb9/0xc0 [ 1048.751952][ T31] ? __pfx_panic+0x10/0x10 [ 1048.756374][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1048.761760][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1048.767925][ T31] watchdog+0xfd2/0xfe0 [ 1048.772178][ T31] ? watchdog+0x1de/0xfe0 [ 1048.776522][ T31] kthread+0x70e/0x8a0 [ 1048.780779][ T31] ? __pfx_watchdog+0x10/0x10 [ 1048.785462][ T31] ? __pfx_kthread+0x10/0x10 [ 1048.790060][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1048.795268][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1048.800469][ T31] ? __pfx_kthread+0x10/0x10 [ 1048.805156][ T31] ret_from_fork+0x436/0x7d0 [ 1048.809762][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1048.814881][ T31] ? __switch_to_asm+0x39/0x70 [ 1048.819650][ T31] ? __switch_to_asm+0x33/0x70 [ 1048.824419][ T31] ? __pfx_kthread+0x10/0x10 [ 1048.829120][ T31] ret_from_fork_asm+0x1a/0x30 [ 1048.834095][ T31] [ 1048.837655][ T31] Kernel Offset: disabled [ 1048.841987][ T31] Rebooting in 86400 seconds..