last executing test programs: 16.916094276s ago: executing program 1 (id=346): syz_usb_connect(0x2, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x93, 0xe0, 0xd9, 0x20, 0x103d, 0x101, 0x5bc8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0x3, 0x40, 0x4, [{{0x9, 0x4, 0x9c, 0x76, 0x0, 0xef, 0x96, 0x2c, 0x40}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0xfffffffffffffffe}) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x8, 0x3, 0x394, 0x0, 0x11, 0x148, 0x0, 0x0, 0x300, 0x2a8, 0x2a8, 0x300, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0xa1, 0x1, 0x3a}, 0x0, 0x210, 0x270, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x5, 0x7, 0x2, 0xffffd5ee, 0x5, 0x1, 0xb, 0x18, 0x18}, {0x8}}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x3, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x5, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3f0) 14.754014565s ago: executing program 1 (id=352): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000010040)=[{{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="5cdef63ccc043d6ff89e00ef785a9bdf69f3908f7451843145ddc8ccb3cf8bb06ea542ccc903882391b74625972f813b4468fc44e1fb", 0x36}], 0x1, 0x0, 0x0, 0x4004804}}, {{&(0x7f0000002600)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="210ee3af91aea6365d4a07be80a37ded366b8169a9757baedbb9b43e", 0x1c}, {&(0x7f0000002680)="84b39bedbbe876ab35ca6306428c7f67051346994c6c0d53fce4d67161778324579f55489ec7d6ad81c3530d412aee9b33412f48237af720d76808b27eae87972428780d3ecf74fdaa13710c76c52a3338db1f2b4569b877c72fb67c1f63040a6744133a56a43f38daf8a85c38ce7f67f45448229f774e14b0b32b6f14f268637d0ba25fbe7c4b1af243f995af913788eb28e62ce14af7ac2fee4718971e43d0f65d628365cf8c0ef3a90e84", 0xac}, {&(0x7f0000002740)="8566ba4b7db94aaf5ca1470510191f71db89f950b658077ce67e0c98c2806f030c90c3609d6862788bea86d8db531b9dce31d3d4a1a15838c5f0e41fb2867e5d5a2e2ec4c9da4971a385e5a877fc7b0705c75b1849e7f57dc2039f559a1113c201db91b942820c5b4543329289eaa334bb0cd946bc60c0a7bfe7d950ec22", 0x7e}, {&(0x7f00000027c0)="3dc2f1d269d598bb93fcf1578abe7217eeb1b480c452911b42ee48b3a7c22e7a53d8404265723687c7e1cfbe5442cbd33a0328bddf109fe88eb8355b1f5f9164d38b1583bf6a8ae3a6a0a4028c7e25e498277f7155cfa81abd2d4e3b224a633912ba3f4a98bec2fe", 0x68}], 0x4, &(0x7f0000004880)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="203ea04f0001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0], 0x64}}, {{&(0x7f0000006200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000e400)=[{&(0x7f000000e280)="e58d360bf793b092a7395ba8f629348ecde839e5798f12b973c23302ed26101253ae51e27e1f8a926f82671608b879e30677", 0x32}, {&(0x7f000000e2c0)="2ad392c3321858795cda9f41d3cca0d425d79c72740a07136bd6b60aef", 0x1d}, {&(0x7f000000e300)="318f843c40ed33382e3ea6ca66d05a6738a3c8b47f75d6acb1f42f6c19fa04e27c2e67baef0d766c9edea0e422437d8da6e7722466d384a04da71d04e04550440cf0104bd7662e9d32b8a571fc1cface8d00927b094edfc76ac137936701277a8d885b2b8d83429944b049262a58f153e067f2143fe9177c7ab0f5eebe104c96e0353983e7260965006a9eb659f1c3d6daa233f830a7e61628356e26b3bc69c8cda6685b7aa778fae2ff5be0d1123bd847e9d09d617da29e5c9a41fa89bf46890de6b83d4bb994c09747bbc32dcbea1e21adc123385c8e19bd3af4513244a780", 0xe0}], 0x3, &(0x7f000000e4c0)=ANY=[@ANYBLOB="100000000100000001000000", @ANYRES32, @ANYBLOB="2c0000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000000000002100040", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x6c, 0x40040c0}}, {{0x0, 0x0, &(0x7f000000e6c0)=[{&(0x7f000000e540)="474754e47604e3f2c54ab5aa058022776ed73a32f6e074093a78fc962aafa957b7a335731abdf7d0e3e21a00180c8b3323b4dc8220e10d", 0x37}, {&(0x7f000000e580)="a11386bafe98e2622b144a919e1cd749bf07ef5a9fbf4f9f3d14d255c407628b10951ff180bacb84e7d6948ffef1f1852940334d07c468401f", 0x2a}, {&(0x7f000000e5c0)="fe387402c2e7eeb6966101c70d1b571ba488938a4d0a5cd5ee69bf45bc16b59d5c35b26e3214f227bb9a22d6dff17b24c762c95a2809b1c1a274b6b86f6bb5510688d0726a67604261948ebebb5bbf797bdddf2f6c571ca7d3a6e13f3775b8c5605a3dae5cbd4c4ef4a287917a7c3154b71073416753d4c73036b79d63e1", 0x7e}, {&(0x7f000000e640)="dda473f7c941504ab480dcc1d59cfac096a7fd54975ad4486084ef6458c4bc5527ffb65b00826bafc0aa267dac2f12da43973a0b78a0798f70c279dac9db1ce4715e6c3d458d9b4e2577d3fe02ac79d261eb5d2bb6526fd27a1292581ad35bdd34fc0d8343ee1663", 0x68}], 0x4, &(0x7f000000e900)=[@rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x90, 0x4000140}}, {{&(0x7f000000e9c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000010000)=[{&(0x7f0000002940)="db459cc1f819d4f600319ce49b05671cb6e23ce16214d80c395b0e6e9b250241dd66d69ef020d54200427a37fa47a535dcf8b5599a3e570f7b9054c1815a2df227abea0cead9fffec91ff682eb60ab053e21bf69129ff73992617b285e711c07cf7589a35d05c380cfe86c9f6b0a536527e8d7a04863dec4662fe8292fbae74fe16d8f985efa7ccb7f1b9d4e2a70bda4dde69ed2d11b2c7282bf36ff85fff4dbe32db9e02ca45b1e9d5614243be776b87ea6a4388ba487cd91f6f202a79f1714844a02cabce7919ab6", 0xbf}, {&(0x7f000000eb00)="33dec52160ad98b1536bfbea3954ce3b38a6a1bf1bce991c8bc9dae911a015cbdb06590045b846a6f903cc4f22296c74dd9586bd53b9eaace1495d3184e842bd3ad8c7976c461ef18fd7bec015e4f8696c7b54aa307eb779f28746d8d008686587bc0309917b9fa12545760336a1d41b12cebdcc01d3a86517616c92f19e4fe26f17b9559508003d5b5bcea60adbf212f5cdb0a70e66c5a9fbcacccc130884511014d3722620d66395ff94ffb8b3ec978c0a4caf0b0d4fe5cc370be5620851623664bc01a8b980be8dfbae8d0b8f478dc723b84506ba4e57124ccd3280d1d0c2c064a4c1a649246352063b1e9f457054c7490111e18e43a68702", 0xfa}, {&(0x7f000000ec00)="481e6ed595d6e3b8189c3572514df82d7ef41693a684bcc3da90f057a8d8da24441d4bf8c4de692a13c8452fb7521eb1897c9ef16d3a6c976b3b162d2b8a9f16e059da26846d2b4042c66d403a45bc053f894e2cacbc83f712c21769d5353eb410e0857602881bff2409e6b826cddb74d7ee7fda52a67a1c934392bdb30b33f97cd4449d20271c7821887b644bed9c3e7cf55ff855253b17a051d013251f2a65e5208ed3eee7859d0f97618d96cf33e9c9ebc1337328ac7e607ce4d1312597419619c2357c2a21f10b4fc91dc67eb01a3f0106bcd1a213102449d5800e56db7f333b", 0xe2}, {&(0x7f000000ed00)="fcb744cfd944d9fdad7837bff3902cd3049cfa39aaa08cb17757256ebbf9f7254ec591b176b046f20c1aa60a31f60f1ef9b4a71f47845fa20b35470eec83aff1a1018743f62e3e8218957f012bbb1ded9fc297e3f3f4ea8ad5f074c6aeb8866825b9123ba3c7bab4f81c9509e200793d99f276430c8254d1d5fc3a9139bc2df1cd1c3190c3158265c06e93824c192b18c2a3ea994094b0920fdf7c89a2c9853453eb3262393d9689032d5c65f0b2da23dd", 0xb1}, {&(0x7f000000edc0)="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", 0x1000}, {&(0x7f000000fdc0)="21dd214a79e3cb2fe2c64ead8da39ee7f17125d573fffc17e7b91031f5b71d443f65545f9c7009be5c3218d1c83227d9bf4ebefc6317c2a42810b42d0b1641dd588968e3b1f2c7024b9293d9f8c187de187327681fb1e62685df3a6c3f18feec91240dc23a471f917045e6e6f241576134ce0c5d35923283eb3a7712ed8d8bd3115f9f4a2231d4cc265546db8b359aac84fe4d8e6cfc382f96de831da297625cc99eed8ee721aa9d1fee9d9f41e9f40b027f48846f28c8ae7834eca7f260554aa7c99a1f11b380ee0a", 0xc9}, {&(0x7f000000fec0)="ee3c12d991df68e62a1832e8ff97ea3e10902ee0f5d7d69af256b251c38b433893a46fcea136b5af73e9574dc61686d9da76193cd6302fba7a496150713b03f7dbd5c097ffdf18a3944f12d7a9799cfef72be53212197a6ec8524d79115a25e63e1d5e", 0x63}, {&(0x7f000000ff40)="d8093b5a14c71345cc066abd0c8c2b43419b0a7a0202f1bcc0b54648c3505abfaed6c6a8c2ae963de35d3f50c20250c095d95d494c149ac616529b870ed0205835cf889af645604a57fe359e68db196d17925582142eb4498fc6382a0ff1d32a63da5b8d23284ad175a6b3712e39aa3de8d992f134170a688049c6a6daa4edc19bad86093c65f72532", 0x89}], 0x8, 0x0, 0x0, 0x40}}], 0x5, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x1d, 0x5, 0x6) r5 = syz_open_dev$video(&(0x7f0000000000), 0x20000485, 0x100) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x7, {0x5d3, 0x4, 0xb, 0x40008001}}) r6 = open(0x0, 0x345842, 0x389b0d52417bb201) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r10, 0x3, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xe, r8, &(0x7f0000000500)="6d45b8b2a5a239aaca9b71ecfb19222095595c98ff926b4717924f919a60c33477495b9bc2ebec8e811d8b08e3ad6c369abbffe5bfe9f11b3ac8e3eb97d0e35dd75d7390ab0b3e4167fde7c518a6a20246ec60b40e085d441bca99381d1ae95722cb622efbe2f1fa6e", 0x69, 0x81, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x7, r4, 0x0, 0x0, 0x4, 0x0, 0x1, r6}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x57f8ad59d87e25cd, 0x4, r9, &(0x7f0000000100)="12", 0x1, 0x7fff}]) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r11, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r11, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r11, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r11, 0x40045565, 0xee) r12 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x123180, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r12, 0x40045109, &(0x7f00000000c0)=0x7a9c7d23) ioctl$UI_DEV_CREATE(r11, 0x5501) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r13, 0x4080aebf, &(0x7f0000000580)={{0x0, 0x0, 0x80, {0x4, 0x3000, 0x1}}, "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", "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"}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) 13.590151626s ago: executing program 1 (id=355): socket(0x2, 0x3, 0xff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_usb_connect$hid(0x1, 0xffffffffffffff5f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x18, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x80, {0x9, 0x21, 0x180, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x12}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000200)={0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="00311f0000001f32f0662c67fb994889c3a1a236a2952d52db728ec9a89b4d939495efa68d753dc3059edcbfc66ac190b962aaae7948d818fe2681f9ba08196e6c0a07fea91376b9969aa733a2bd8d730b061713ea67d025bab480ca7a33326325809e40336c4c9571da82dbaee34599300c36b9f7a8ae69b12d97c9e45c8aae6e520eff46978c8c4b0f6c40aa27dd63288d43912018ef61ecb5cffb34669308eed71707000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r5, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c40)=@newtaction={0x3f0, 0x30, 0x10, 0x1, 0x0, {}, [{0x3dc, 0x1, [@m_vlan={0xd8, 0x17, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x95a}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffb, 0xee, 0x10000000, 0xfffffffc, 0x3ff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x4, 0xd, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x265}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1ba}]}, {0x39, 0x6, "abaa270553d49fb7efad5095a6fb0d53f4d816284f4edfd1518b929bad6225526fcac68a3bb89b55de6aa7547275d47af630faa2ae"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x9c, 0x3f, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1866, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc06, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xee, 0x3, 0xffffffffffffffff, 0x49f0c242, 0x99cd}}]}, {0x3e, 0x6, "69506379d95477246c3e722ddb78572bc6c75ff833294e7748ce25d0bfd6c1a8f1e78edb5b75192b38615a188ab6daccb5476ce04e076cd0922d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x144, 0x1c, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7ff}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5d}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x7, 0x0, 0x5, 0xffffffff, 0xf68f}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0xab, 0x6, "48d80696462419500d4a097be51b9cab2cc20083d0cc00317070b246f27c3bcca1a93c14e58d2b99efd27f93e0006aec34eded54d59d6e5ce8044fd2b452ee87b2c0da073c5b4196d049599f45f78811dd229b58730df7c77bad7576381bd0e1e5851ed4f998de273bb052a56178bc0849b08ad3f66df70610af9e568cbbed6cf4e79bcd271b8cf6f96c069a9495806041ec8cf1f5b6fc3bbcd5be5be79897207023ddab11e821"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x120, 0x1e, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x8, 0x10000000, 0x40, 0x1a}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0xcd, 0x6, "30345c35d8b1b0ecc1724673cd0638c32bae66309b30c1a205264f189bf611e9cf89acb731d6e9fc13beb09a13033dde63dc2a5488cf14098498b99c33b43e59a09d272a9b51e39169f0238e9d70171335069de863e50ad9e078d4815ca4eaf789a8a3e91634fc8c9b2ce7ebf10f804bc7fbf6db170c2cb15af7a65e37ff46016f041b65ab79c76f0ed78c07b3ebea29e04bb305a3e32ba66e59c8610b6c876d5d3aa50798bb93c8c555514ce81e2dc008e8b771414958954ba1225a4987e96178766d9276e6df80c4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x10c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe9}, {0x6, 0x11, 0x657}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8000}, {0x8, 0x13, 0x3}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20004801}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080) openat$qrtrtun(0xffffff9c, &(0x7f0000000100), 0x34b040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 11.57505464s ago: executing program 4 (id=362): r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x40, r3, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xa000, 0x6, 0x81, 0xffff, 0x4, 0x8005, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r7, 0x80045010, &(0x7f0000000000)) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r8, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24008015}, 0x2000c844) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000500)={0x0, 0xb390}, &(0x7f0000000540)=0x8) syz_open_procfs(0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, 0x0) pread64(r9, 0x0, 0x0, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r10, 0x0, 0x0, 0x0) 10.592961173s ago: executing program 4 (id=369): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x80, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x6, 0x1aa0, 0x2a, 0x0, 0x0, 0x3, 0x8}}, {0x14, 0x2, [0x2, 0x8, 0x7fff, 0xff, 0x400, 0x7f, 0x8, 0x5]}}, {{0x1c, 0x1, {0x2, 0x5, 0x9, 0x2, 0x1, 0x92, 0x2835, 0x3}}, {0xa, 0x2, [0x2, 0x2c01, 0x4]}}]}]}, 0x80}}, 0x8850) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000200)=[{r7, 0x6600}], 0x1, 0x0, 0x0, 0x0) connect$unix(r7, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 10.398656872s ago: executing program 1 (id=370): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x1}, 0x0) r4 = gettid() ptrace$getregset(0x4204, r4, 0x201, &(0x7f00000002c0)={&(0x7f0000000380)=""/199, 0xc7}) sched_getattr(r4, &(0x7f0000000240)={0x38}, 0x38, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03200009"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000000)=[{0x0}, {&(0x7f0000019080)='\x00\x00', 0x2}], 0x50) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x10, 0x10, 0x4ce, 0x400000000000000}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r8, 0x400}, 0x8) r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000040)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003a, [0x8000, 0xc95a, 0xf, 0x401, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff, 0x6, 0x5, 0x7, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x400006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x80, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0x2, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0xd, 0x1, 0xfe000000, 0x8, 0xfffff274, 0x4, 0x9, 0x3, 0x3, 0x80000000, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x10002, 0x8001ef, 0x5, 0x8, 0x82, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0xb, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x4, 0xfffffffd, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807fb, 0x2006, 0x80a2ed, 0x4, 0x40000025], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xd, 0x4183, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x10, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x4, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x1fe, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe5) 9.840015319s ago: executing program 3 (id=372): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x288, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe7}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x258, 0x2, {{0x6, [0x1, 0xc, 0x9, 0xd, 0xb, 0x2, 0x7, 0x1, 0x5, 0x1, 0xa, 0xb, 0x6, 0xc, 0x9, 0x6], 0x0, [0x3, 0x8, 0x7, 0x8, 0x1, 0x8001, 0x7, 0xc, 0x6, 0x3, 0x1f, 0x8, 0xffc, 0xf, 0xfffd, 0x40], [0x401, 0x8, 0x48a5, 0xd, 0x1, 0x7, 0x8, 0x5, 0x949, 0x3, 0x0, 0x40, 0x9, 0x0, 0x7, 0x4]}, [@TCA_MQPRIO_MAX_RATE64={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x9}, {0xc, 0x4, 0x20}, {0xc, 0x4, 0x100}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x7ff}, {0xc, 0x4, 0x5}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x94, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0xe}, {0xc, 0x4, 0x8000000000000001}, {0xc, 0x4, 0x494}, {0xc, 0x4, 0xfffffffffffeffff}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0xa15}, {0xc, 0x4, 0xfffffffffffffffa}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x56}]}, @TCA_MQPRIO_MIN_RATE64={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xe0000}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x10001}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0xf}, {0xc, 0x3, 0x80000001}, {0xc, 0x3, 0x9}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x40, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x100000000}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x80}, {0xc, 0x4, 0xa}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}]}, 0x288}, 0x1, 0x0, 0x0, 0x40044004}, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x1) fsmount(r7, 0x1, 0x2) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) add_key(0x0, 0x0, &(0x7f0000000080)="305c061ce1821f7051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64174d46de00a5a09fa80393d502b0cd490635d54cdf5bd046cc030000000000005e000000808ce41d86b9b949004fd8fe45b9", 0x53, 0xfffffffffffffffe) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x8) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r9, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x13800, 0x8}) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 9.682870222s ago: executing program 2 (id=373): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) (fail_nth: 21) 9.6151345s ago: executing program 4 (id=374): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) r2 = io_uring_setup(0x1e02, &(0x7f0000000040)={0x0, 0x18f6, 0x2, 0x3, 0x21d}) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x700, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1, 0x400000000000000}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000c80)={0x3a0, 0x80, 0x2000, 0x480, 0xc46c941, 0x9, 0xf, 0x1, {0x84c, 0x6}, {0x4, 0x4}, {0xa}, {0x4, 0x2}, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x7fffffff, 0x1000, 0x0, 0x8, 0x4, 0x7ff, 0x1ff, 0x2e, 0x5bf1064bdc778fc, 0x0, 0x7}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x2, 0x3b5226e561a29688, 0x0, @sint={0x2f, 0xffffffff}}]}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r11, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) read$FUSE(r7, &(0x7f0000002600)={0x2020}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r7, 0x407, 0xc000) dup(r6) 8.821148942s ago: executing program 2 (id=376): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r5, 0x0, &(0x7f0000000140)) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfdbf, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000300)="1744493947f3f194d945da4a5105056f0f665ecfbb449db768cb01290f9eaaf57ab4fd1b986e", 0x26}, {&(0x7f0000000440)="ec2795a51677975067161cd21531c57f6a1506eee2bfed36334025c28b0e2dd4ac6da428b42e6ec6930863de5c136e2902a53b730b2cb4b4a6f2053817b24a6db33afb4989a62e", 0x47}, {&(0x7f0000000340)="c8250af5859494ca246324a514b1f51f227767a5c28efeaa5b89fee2445002474fa6eff7cc7e3e577b4c4ce3b553972ad9b89278a2be6408a3f524f554c0d8882f", 0x41}, {&(0x7f0000000500)="7f0545478791604f5c2acabcf0c6c2700a63ff39", 0x14}], 0x5, &(0x7f0000000800)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x1}}], 0x10}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="81ef5108ef6a32b31a034a00935e753631576ba5273e4c5f21f9e092a7e94eeee2cb1c6da251f55c4476ec39ba572f3b9b7d47c1dfb073b6905a68bdd1cd5d6a996b5ed5eed836acdcdb5c36c2dd93f6641201ab3959d8eda706f2bde95d7507858c6aa16c1759ff8ca42f8313ef2e9704d8d1b5f24b141156ac9ee0ccf09fd24d63ef2ba3f7163784b1117acc11645cb5fe62f7beecf560a4efdd4295a1ac501faa1cb7b6ca02ffaf4c004990dc7f862e67aea6d22fa985bf5d2f93b4ad1df4134cc84ad370114a5074715f81dd66f533216ef00bca961536a3934059e7ba651ca471", 0xe3}, {&(0x7f0000000940)="cffbe8b77c07517094ff595ce2e6fc7df39bb1cd2b7b54ceb65f93f33461c79e4beeb23b829ecd342ea42deea38c0339f3d9e13ba7fce45912512546f2711e635111a891667849bd71ff049977a124893473e6e79a4af60dd1", 0x59}, {&(0x7f00000009c0)="7f", 0x1}], 0x3, &(0x7f0000000a40)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @remote}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@noop, @rr={0x7, 0x23, 0xd, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @remote, @broadcast]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x99a}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r7, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x88}}], 0x2, 0x8080) sendfile(r2, r3, 0x0, 0x20000023896) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x40000094}]}) 6.4028388s ago: executing program 2 (id=379): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001680)={0x11, 0x1, 0x2, "a90037e7f30f000080df4832c305f70000c00000004840080000000000008300", 0x50313459}) 6.259109185s ago: executing program 4 (id=381): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind(r1, &(0x7f00000002c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) getdents64(r7, &(0x7f0000000940)=""/4096, 0x1000) lseek(r7, 0x24, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x3, 0x5, 0x4, 0x100000, 0x10, {0x0, 0xea60}, {0x2, 0xc, 0x6, 0x8, 0x9, 0x1, "fb4ccd8f"}, 0x6, 0x2, {&(0x7f00000001c0)=[{0x4, 0x7, {0x0}, 0x2e26}, {0x7, 0x7, {0x0}, 0x7c}]}, 0xd96}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @empty}, &(0x7f0000000140)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) 5.967773069s ago: executing program 2 (id=383): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r1, r0, 0x0, 0x7ffffffd) 5.514683715s ago: executing program 2 (id=384): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700080000008e"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 4.844966075s ago: executing program 0 (id=385): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r8, 0x29, 0x35, 0x0, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800edff0f00037f41a22ae3760cdb699de3ab372eaadca5d0391e00000000400000000000000000009b37cac4b5ad14ac1ac03a9caca536be1c17065e31e5457cb5f4f1418978635951b490170e655f9b9f958fb552079b8181dbc7655ce96b0b13e313bf5c6ea8ada0420c355ace6d1d5196c96e5bd29b1a80f160198e335463a83587aa16e9ade41b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030004000000"], 0x48}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4.844018575s ago: executing program 1 (id=386): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000180)=@multiplanar_userptr={0x5, 0x8, 0x4, 0x10, 0xa, {}, {0x1, 0x1, 0xab, 0xa, 0x1, 0x10, "761a98fc"}, 0x0, 0x2, {0x0}}) r4 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, r5}) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48702, 0x0) 4.678492478s ago: executing program 3 (id=387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)="93432224dd859ec9b7dbd6e3aac445879d4e04c8597d3202736a105f536f9169073c64682f53656b88e7f79f40e24da9c7e3e615ed03e0bdbf2695808e6a4c964065d8eae13a2a635f9b7238feaba0e1d15f2b6814d82e56cda484676e2f6922dafe9a8a559f7c7e522a94abc3cdc10910ed3f4f50cf9e6ee6a2aea26606f7d562ad0f881859b35c19f534acb1887db0fb520d4487fff6c2b8ff806f4dc52e1ef5", 0xa1}, {&(0x7f00000002c0)="d238577f92411fbb7e1b375e170c6776baea17aa460c46faff7e7e19852bbb784647f77b5449421bf7043d6fd555de986c9c8b65b14b", 0x36}, {&(0x7f0000000380)}, {&(0x7f0000000900)="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", 0xfc0}, {&(0x7f0000001b00)="fbaa5ccdf7e888b102b5dbc3e588f400066fc19c24cd43a481d8bd7dd15943edfe8ef6138c0656d6bda9e4d4544600c117970e65f2313c26a23e10ce210f605cde6560a61421b0a7e352175f62c72bd820440ecca59fc79c839b2b08885a9d953e2514d671affd1f", 0x68}], 0x6, &(0x7f0000000740)}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000001900)}], 0x1, 0x0, 0x20, 0x4048080}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00010000000200007100"/20, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x404}}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="11000000520001000400000000000000"], 0x28}}, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x100, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000038000b63d25a80648c251bfd07b5e9d1", 0x14}], 0x1}, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r7, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x63, 0x0, 0x0) timerfd_create(0x0, 0x0) 3.176424119s ago: executing program 3 (id=388): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x6d8, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x668, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x584, 0x9, 0x0, 0x1, [@m_xt={0x88, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x7, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x5, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0x1, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x80, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x53, 0x6, "96986d955fa653444a3d601379169839058212418f8681f2327b9b105bd5e31418412b10ab51efbf536d6faa7284fcdcbb6732089908467917f254c5f0de058b4c6d1dda345d1da5e7e1ac23a4576a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r8) syz_io_uring_setup(0x397b, &(0x7f00000003c0)={0x0, 0xc1c2, 0x8, 0x3, 0x360, 0x0, r8}, &(0x7f00000001c0), &(0x7f0000000340)) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.117139133s ago: executing program 4 (id=389): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x28000600) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(r1, &(0x7f00000001c0)='./cgroup\x00', 0x8901) move_mount(r1, 0x0, r2, 0x0, 0x46) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, &(0x7f0000000200)="dc9790366ade4aa419ca89fcd1eb57d4b261756688a256885b50c7f4573f36cb1d0d6c1e807b661d74fdea419bf36802f82ea415d1c62d4da7ac26154e66e677292d", &(0x7f0000000400)=""/196}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}]}}}, @IFLA_MTU={0x8, 0x4, 0x4243}]}, 0x40}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000004", 0x3, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @local, @local, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 3.112736068s ago: executing program 0 (id=390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x8035, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.8275559s ago: executing program 2 (id=391): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x7c4c, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x2000) 2.418684349s ago: executing program 0 (id=392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x20054804) 2.103628529s ago: executing program 0 (id=393): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) (async) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) (async) pipe2(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_INIT(r5, &(0x7f0000000100)={0x78}, 0xfeb1) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000001300), r4) write$UHID_INPUT(r5, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) (async) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x344, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x198, 0x1b8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf4}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3a0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x97) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) sendmsg$key(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="021609072900000025bd7000fddbdf25070019000000000002004e227f00000100000000000000000a004e21fffffffcfe880000000000000000000000000101e42000000000000005000500ff0000000a004e2400000fff2001000000000000000000000000000203000000000000000b00090060021000784526a14c230075d2888930b231aed29f4ae4ade9a90bdf25ae6b4eb75438b9d6ccf51b7c8cf5ea2d3017c1416497bf4e9e43cf7dc205ba06cd3ca54a058b6df5e9b9550cbc462e1a1ac1d5c8ab5fd50000000008001900000000000a004e21c0000000fe8000000000000000000000000000aa020000000a004e2180000001fc02ecffffffffffffff000000000000080000000800120002000300b86b6e000000ffff06006c00080700000800000000000000fc0100000000000000000000000000010a0101000000000000000000"], 0x148}}, 0x20000000) (async) r8 = mq_open(&(0x7f0000000000)='$\\\'\x00', 0x40, 0x188, &(0x7f0000000080)={0x3, 0x1, 0x1, 0x9}) fcntl$lock(r8, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000) 1.805100796s ago: executing program 4 (id=394): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xe9a3, 0x400, 0x0, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x400}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x9}, 0x8) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r8, 0x0}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000006, 0x2], [0x4, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 942.352241ms ago: executing program 3 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x90, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) r2 = signalfd4(r0, &(0x7f00000000c0)={[0x2, 0x4]}, 0x8, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @dev}, &(0x7f00000003c0)=0xc) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0xffffffcf}}, './file0\x00'}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x1b, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffeffff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x9, 0xd4, &(0x7f0000000280)=""/212, 0x40f00, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000440)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r5, r6, r7], &(0x7f0000000600)=[{0x1, 0x3, 0x0, 0x6}, {0x1, 0x3, 0x5, 0x5}, {0x3, 0x3, 0x9, 0xb}], 0x10, 0x1}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000050002000000000020000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 733.635887ms ago: executing program 3 (id=396): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) 416.765167ms ago: executing program 0 (id=397): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x2, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x6, 0x5, 0x5, 0x3ff}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000001c08000340000000b9080001400000000a08000240200000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4cbccb6438193f07a83324daedc91c59"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 164.756832ms ago: executing program 1 (id=398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)="93432224dd859ec9b7dbd6e3aac445879d4e04c8597d3202736a105f536f9169073c64682f53656b88e7f79f40e24da9c7e3e615ed03e0bdbf2695808e6a4c964065d8eae13a2a635f9b7238feaba0e1d15f2b6814d82e56cda484676e2f6922dafe9a8a559f7c7e522a94abc3cdc10910ed3f4f50cf9e6ee6a2aea26606f7d562ad0f881859b35c19f534acb1887db0fb520d4487fff6c2b8ff806f4dc52e1ef5", 0xa1}, {&(0x7f00000002c0)="d238577f92411fbb7e1b375e170c6776baea17aa460c46faff7e7e19852bbb784647f77b5449421bf7043d6fd555", 0x2e}, {&(0x7f0000000380)}, {&(0x7f0000000900)="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", 0xfc0}, {&(0x7f0000001b00)="fbaa5ccdf7e888b102b5dbc3e588f400066fc19c24cd43a481d8bd7dd15943edfe8ef6138c0656d6bda9e4d4544600c117970e65f2313c26a23e10ce210f605cde6560a61421b0a7e352175f62c72bd820440ecca59fc79c839b2b08885a9d953e2514d671affd1f", 0x68}], 0x6, &(0x7f0000000740)}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000001900)}], 0x1, 0x0, 0x20, 0x4048080}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00010000000200007100"/20, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x404}}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="11000000520001000400000000000000"], 0x28}}, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x100, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000038000b63d25a80648c251bfd07b5e9d1", 0x14}], 0x1}, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r7, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x63, 0x0, 0x0) timerfd_create(0x0, 0x0) 71.031216ms ago: executing program 3 (id=399): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @mpls={[], @ipv4=@gre={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x11, 0x0, 0x21, 0x0, @dev, @multicast2, {[@lsrr={0x83, 0x3, 0x74}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "50726483718ba3e6d08f7571cc59e627d3ed353e879da15784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd38791b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7ea039eb558ebb06336662367e15363058de9b806035d5c980832248d1fc96c6b2fb2a4dffa91026dd0228974f70bea2a8e3fe0c9aae345d6e19f2"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {}, {}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfce) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xe8, 0x30, 0x7, 0x2, 0x4, 0x5, 0x7, 0x28, 0xa, 0x5, 0x2, 0x52, 0x2, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x14, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) shutdown(r3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r8 = openat$ptp0(0xffffff9c, &(0x7f0000000300), 0x4002, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, &(0x7f0000000340)={{0x8001, 0x7}, {0x9, 0x8}, 0x69e3, 0x1}) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r9, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x11) 0s ago: executing program 0 (id=400): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x30, 0xf5, 0x53, 0xfffff01c}]}, 0x10) r1 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000380)={[0x1, 0xeeee8000, 0xeeef0000, 0x8000000], 0x7ff, 0xc81675ab98b5563b}) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r7, r7, r7}, &(0x7f00000006c0)=""/66, 0x42, &(0x7f0000000200)={&(0x7f00000000c0)={'sha1\x00'}}) io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_opts(r11, 0x0, 0x2, 0x0, &(0x7f0000000080)) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r12, 0xc004743e, 0x110e22fff6) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000100)=0x82) close(r13) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) kernel console output (not intermixed with test programs): urb status -71 [ 107.829153][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 107.836115][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 107.843099][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 107.850051][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 107.858332][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 107.865121][ C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 107.881867][ T6088] usb 5-1: USB disconnect, device number 9 [ 107.926748][ T184] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.109131][ T184] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 108.118656][ T184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.128076][ T184] usb 1-1: Product: syz [ 108.135986][ T184] usb 1-1: Manufacturer: syz [ 108.142488][ T184] usb 1-1: SerialNumber: syz [ 108.475663][ T6350] ªªªªªª: renamed from wg2 (while UP) [ 108.506693][ T6088] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 108.576579][ T184] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 108.637295][ T5885] usb 4-1: USB disconnect, device number 11 [ 108.649993][ T5885] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 108.668803][ T184] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 108.720195][ T6088] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.730726][ T6088] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.788490][ T6088] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.800870][ T6088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.811645][ T6088] usb 2-1: SerialNumber: syz [ 108.853977][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 108.899583][ T6360] hub 9-0:1.0: USB hub found [ 108.904726][ T6360] hub 9-0:1.0: 1 port detected [ 109.293410][ T6339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.324236][ T6339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.353033][ T6382] netlink: 'syz.3.120': attribute type 4 has an invalid length. [ 110.360973][ T6382] netlink: 17 bytes leftover after parsing attributes in process `syz.3.120'. [ 110.676639][ T5885] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 110.987312][ T5885] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 111.002362][ T5885] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.042704][ T5885] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.063697][ T5885] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.090932][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.169111][ T5885] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.201783][ T5885] usb 4-1: invalid MIDI out EP 0 [ 111.339891][ T184] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 111.388825][ T184] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 111.456590][ T5885] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 111.466642][ T6088] usb 2-1: 0:2 : does not exist [ 111.471562][ T6088] usb 2-1: unit 5: unexpected type 0x0c [ 111.510820][ T184] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 111.574604][ T6395] delete_channel: no stack [ 111.783533][ T5885] usb 4-1: USB disconnect, device number 12 [ 111.822460][ T184] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 111.831700][ T6088] usb 2-1: USB disconnect, device number 13 [ 111.934688][ T184] usb 1-1: USB disconnect, device number 4 [ 111.937778][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.070036][ T6400] tipc: Started in network mode [ 112.074912][ T6400] tipc: Node identity ac1414aa, cluster identity 4711 [ 112.226979][ T6400] tipc: New replicast peer: 172.20.20.63 [ 112.235704][ T6400] tipc: Enabled bearer , priority 10 [ 112.242071][ T6421] wg1: entered promiscuous mode [ 112.251681][ T6421] wg1: entered allmulticast mode [ 112.436670][ T129] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.596953][ T129] usb 5-1: Using ep0 maxpacket: 8 [ 112.609739][ T129] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 112.618434][ T129] usb 5-1: can't read configurations, error -61 [ 112.716764][ T184] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.724774][ T6088] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 112.758070][ T129] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 112.861697][ T6432] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.902272][ T184] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.916744][ T129] usb 5-1: Using ep0 maxpacket: 8 [ 112.922872][ T6088] usb 3-1: config index 0 descriptor too short (expected 1042, got 18) [ 112.933376][ T129] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 112.941052][ T129] usb 5-1: can't read configurations, error -61 [ 112.951541][ T129] usb usb5-port1: attempt power cycle [ 112.958697][ T6088] usb 3-1: config 81 has too many interfaces: 142, using maximum allowed: 32 [ 112.967626][ T184] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 112.987117][ T6088] usb 3-1: config 81 has an invalid descriptor of length 49, skipping remainder of the config [ 113.006729][ T6088] usb 3-1: config 81 has 0 interfaces, different from the descriptor's value: 142 [ 113.026021][ T184] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.036192][ T6088] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 113.053954][ T184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.062690][ T6088] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.071656][ T184] usb 1-1: Product: syz [ 113.076012][ T6088] usb 3-1: Product: syz [ 113.084752][ T184] usb 1-1: Manufacturer: syz [ 113.095152][ T6088] usb 3-1: Manufacturer: syz [ 113.103345][ T184] usb 1-1: SerialNumber: syz [ 113.117948][ T6088] usb 3-1: SerialNumber: syz [ 113.150188][ T184] cdc_mbim 1-1:1.0: skipping garbage [ 113.336730][ T129] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 113.361240][ T6088] usb 3-1: USB disconnect, device number 11 [ 113.364925][ T129] usb 5-1: Using ep0 maxpacket: 8 [ 113.372389][ T5885] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 113.374332][ T129] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 113.380404][ T6426] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 113.416742][ T129] usb 5-1: can't read configurations, error -61 [ 113.418350][ T10] tipc: Node number set to 2886997162 [ 113.567267][ T129] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 113.587276][ T129] usb 5-1: Using ep0 maxpacket: 8 [ 113.596654][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 113.604643][ T129] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 113.606168][ T5885] usb 4-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.632678][ T5885] usb 4-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.632728][ T129] usb 5-1: can't read configurations, error -61 [ 113.646915][ T5885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.660103][ T5885] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 113.672799][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.696480][ T129] usb usb5-port1: unable to enumerate USB device [ 113.697652][ T5885] usb 4-1: config 0 descriptor?? [ 113.855706][ T6436] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 113.864149][ T6436] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 114.009703][ T6440] FAULT_INJECTION: forcing a failure. [ 114.009703][ T6440] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 114.023437][ T6440] CPU: 1 UID: 0 PID: 6440 Comm: syz.1.136 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.023465][ T6440] Tainted: [L]=SOFTLOCKUP [ 114.023471][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.023482][ T6440] Call Trace: [ 114.023489][ T6440] [ 114.023498][ T6440] dump_stack_lvl+0x189/0x250 [ 114.023523][ T6440] ? __pfx____ratelimit+0x10/0x10 [ 114.023547][ T6440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.023567][ T6440] ? __pfx__printk+0x10/0x10 [ 114.023593][ T6440] ? fs_reclaim_acquire+0x7d/0x100 [ 114.023621][ T6440] should_fail_ex+0x414/0x560 [ 114.023649][ T6440] prepare_alloc_pages+0x22b/0x650 [ 114.023676][ T6440] __alloc_frozen_pages_noprof+0x123/0x370 [ 114.023699][ T6440] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 114.023722][ T6440] ? __pfx__copy_from_iter+0x10/0x10 [ 114.023746][ T6440] ? policy_nodemask+0x27c/0x720 [ 114.023765][ T6440] ? aa_file_perm+0x44c/0x1530 [ 114.023788][ T6440] alloc_pages_mpol+0x232/0x4a0 [ 114.023814][ T6440] alloc_pages_noprof+0xa9/0x190 [ 114.023836][ T6440] anon_pipe_write+0xbf0/0x1460 [ 114.023857][ T6440] ? __pfx_aa_file_perm+0x10/0x10 [ 114.023898][ T6440] ? __pfx_anon_pipe_write+0x10/0x10 [ 114.023915][ T6440] ? common_file_perm+0x1b5/0x220 [ 114.023938][ T6440] ? bpf_lsm_file_permission+0x9/0x20 [ 114.023955][ T6440] ? security_file_permission+0x75/0x290 [ 114.023989][ T6440] ? rw_verify_area+0x255/0x4d0 [ 114.024004][ T6440] ? import_ubuf+0xfb/0x1d0 [ 114.024024][ T6440] aio_write+0x535/0x7a0 [ 114.024048][ T6440] ? __pfx_aio_write+0x10/0x10 [ 114.024079][ T6440] ? __might_fault+0xb0/0x130 [ 114.024121][ T6440] io_submit_one+0x775/0x1430 [ 114.024154][ T6440] ? __pfx_io_submit_one+0x10/0x10 [ 114.024172][ T6440] ? __might_fault+0xb0/0x130 [ 114.024207][ T6440] ? __might_fault+0xb0/0x130 [ 114.024234][ T6440] __ia32_compat_sys_io_submit+0x1c7/0x360 [ 114.024261][ T6440] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 114.024283][ T6440] ? ksys_write+0x22a/0x250 [ 114.024310][ T6440] ? __do_fast_syscall_32+0xbe/0x570 [ 114.024331][ T6440] __do_fast_syscall_32+0x1f7/0x570 [ 114.024349][ T6440] ? rcu_is_watching+0x15/0xb0 [ 114.024367][ T6440] ? do_fast_syscall_32+0x34/0x80 [ 114.024388][ T6440] do_fast_syscall_32+0x34/0x80 [ 114.024404][ T6440] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.024423][ T6440] RIP: 0023:0xf703d539 [ 114.024439][ T6440] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 114.024453][ T6440] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 114.024472][ T6440] RAX: ffffffffffffffda RBX: 00000000f53fc000 RCX: 000000000000f000 [ 114.024484][ T6440] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.024495][ T6440] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.024505][ T6440] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.024515][ T6440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.024544][ T6440] [ 114.329410][ T6426] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 114.337297][ T184] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 114.344848][ T184] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 114.587229][ T5885] aquacomputer_d5next 0003:0C70:F0B6.0003: unknown main item tag 0x0 [ 114.595796][ T5885] aquacomputer_d5next 0003:0C70:F0B6.0003: unknown main item tag 0x0 [ 114.687990][ T5885] aquacomputer_d5next 0003:0C70:F0B6.0003: unknown main item tag 0x0 [ 114.712826][ T5885] aquacomputer_d5next 0003:0C70:F0B6.0003: unknown main item tag 0x0 [ 114.728009][ T5885] aquacomputer_d5next 0003:0C70:F0B6.0003: unknown main item tag 0x0 [ 114.748655][ T5885] aquacomputer_d5next 0003:0C70:F0B6.0003: hidraw0: USB HID v0.05 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 114.811418][ T184] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 114.822423][ T184] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 114.868850][ T184] wwan wwan0: port wwan0mbim0 attached [ 114.894916][ T184] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 82:c8:1f:80:4c:cc [ 115.045863][ T184] usb 1-1: USB disconnect, device number 5 [ 115.069161][ T184] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 115.109188][ T5924] usb 4-1: USB disconnect, device number 13 [ 115.390621][ T184] wwan wwan0: port wwan0mbim0 disconnected [ 115.419433][ T6459] openvswitch: netlink: Actions may not be safe on all matching packets [ 115.517016][ T5892] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 115.551874][ T6463] netlink: 36 bytes leftover after parsing attributes in process `syz.2.141'. [ 115.563708][ T6463] tipc: Started in network mode [ 115.581315][ T6463] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 115.591583][ T6463] tipc: Enabled bearer , priority 10 [ 115.696617][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 115.718732][ T5892] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 115.728565][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.741625][ T5892] usb 2-1: Product: syz [ 115.748536][ T5892] usb 2-1: Manufacturer: syz [ 115.753301][ T5892] usb 2-1: SerialNumber: syz [ 115.758064][ T184] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.768785][ T5892] usb 2-1: config 0 descriptor?? [ 115.778787][ T5892] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 115.896644][ T5885] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 115.949432][ T184] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 115.959621][ T184] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 115.981863][ T184] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 116.019675][ T184] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 116.050043][ T184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.067171][ T184] usb 1-1: Product: syz [ 116.072387][ T5885] usb 5-1: config index 0 descriptor too short (expected 11300, got 36) [ 116.081460][ T5885] usb 5-1: config 111 has too many interfaces: 114, using maximum allowed: 32 [ 116.100305][ T184] usb 1-1: Manufacturer: syz [ 116.109467][ T184] usb 1-1: SerialNumber: syz [ 116.114166][ T5885] usb 5-1: config 111 has an invalid descriptor of length 111, skipping remainder of the config [ 116.127406][ T184] usb 1-1: config 0 descriptor?? [ 116.132976][ T6461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 116.143602][ T6461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 116.155141][ T5885] usb 5-1: config 111 has 0 interfaces, different from the descriptor's value: 114 [ 116.168039][ T184] usb 1-1: ucan: probing device on interface #0 [ 116.174905][ T5885] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.184815][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.194296][ T5892] gspca_sunplus: reg_w_riv err -71 [ 116.214580][ T5892] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 116.245436][ T5892] usb 2-1: USB disconnect, device number 14 [ 116.373693][ T184] usb 1-1: ucan: could not read protocol version, ret=-71 [ 116.387542][ T184] usb 1-1: ucan: probe failed; try to update the device firmware [ 116.403777][ T184] usb 1-1: USB disconnect, device number 6 [ 116.432252][ T6474] binder: 6472:6474 ioctl 40044591 0 returned -22 [ 116.441462][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.450869][ T6474] binder: 6472:6474 ioctl c0306201 80000640 returned -22 [ 116.451851][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.730490][ T184] tipc: Node number set to 10070698 [ 116.744593][ T6186] usb 5-1: USB disconnect, device number 14 [ 116.906996][ T5924] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 117.009283][ T6482] netlink: 220 bytes leftover after parsing attributes in process `syz.1.148'. [ 117.051585][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 117.061237][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.079564][ T5924] usb 3-1: config index 0 descriptor too short (expected 1042, got 18) [ 117.098107][ T5924] usb 3-1: config 81 has too many interfaces: 142, using maximum allowed: 32 [ 117.111991][ T5924] usb 3-1: config 81 has an invalid descriptor of length 49, skipping remainder of the config [ 117.128783][ T5924] usb 3-1: config 81 has 0 interfaces, different from the descriptor's value: 142 [ 117.142751][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.152999][ T5924] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 117.166501][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.186463][ T5924] usb 3-1: Product: syz [ 117.197582][ T5924] usb 3-1: Manufacturer: syz [ 117.202224][ T5924] usb 3-1: SerialNumber: syz [ 117.412073][ T30] audit: type=1326 audit(1765473109.119:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 117.440998][ T5924] usb 3-1: USB disconnect, device number 12 [ 117.476962][ T30] audit: type=1326 audit(1765473109.139:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 117.566156][ T30] audit: type=1326 audit(1765473109.139:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 117.572944][ T6489] FAULT_INJECTION: forcing a failure. [ 117.572944][ T6489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.615069][ T30] audit: type=1326 audit(1765473109.149:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 117.677894][ T6489] CPU: 0 UID: 0 PID: 6489 Comm: syz.0.151 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.677922][ T6489] Tainted: [L]=SOFTLOCKUP [ 117.677929][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.677939][ T6489] Call Trace: [ 117.677946][ T6489] [ 117.677954][ T6489] dump_stack_lvl+0x189/0x250 [ 117.677980][ T6489] ? __pfx____ratelimit+0x10/0x10 [ 117.678003][ T6489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.678023][ T6489] ? __pfx__printk+0x10/0x10 [ 117.678047][ T6489] ? __might_fault+0xb0/0x130 [ 117.678081][ T6489] should_fail_ex+0x414/0x560 [ 117.678109][ T6489] _copy_from_user+0x2d/0xb0 [ 117.678128][ T6489] do_ipt_set_ctl+0x6de/0xcd0 [ 117.678155][ T6489] ? rcu_is_watching+0x15/0xb0 [ 117.678177][ T6489] ? trace_contention_end+0x39/0x100 [ 117.678197][ T6489] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 117.678224][ T6489] ? nf_setsockopt+0x221/0x290 [ 117.678248][ T6489] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 117.678291][ T6489] ? __pfx_aa_sk_perm+0x10/0x10 [ 117.678315][ T6489] nf_setsockopt+0x26f/0x290 [ 117.678339][ T6489] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 117.678363][ T6489] do_sock_setsockopt+0x17c/0x1b0 [ 117.678386][ T6489] __ia32_sys_setsockopt+0x13f/0x1b0 [ 117.678408][ T6489] __do_fast_syscall_32+0x1f7/0x570 [ 117.678426][ T6489] ? rcu_is_watching+0x15/0xb0 [ 117.678444][ T6489] ? do_fast_syscall_32+0x34/0x80 [ 117.678466][ T6489] do_fast_syscall_32+0x34/0x80 [ 117.678483][ T6489] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.678503][ T6489] RIP: 0023:0xf7f77539 [ 117.678518][ T6489] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 117.678532][ T6489] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 117.678551][ T6489] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 117.678563][ T6489] RDX: 0000000000000040 RSI: 0000000080000a00 RDI: 00000000000003c0 [ 117.678582][ T6489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.678592][ T6489] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 117.678602][ T6489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.678629][ T6489] [ 117.706678][ T30] audit: type=1326 audit(1765473109.149:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 117.940859][ T5892] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 117.967114][ T6497] FAULT_INJECTION: forcing a failure. [ 117.967114][ T6497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.980489][ T6497] CPU: 1 UID: 0 PID: 6497 Comm: syz.0.153 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.980515][ T6497] Tainted: [L]=SOFTLOCKUP [ 117.980521][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.980533][ T6497] Call Trace: [ 117.980540][ T6497] [ 117.980547][ T6497] dump_stack_lvl+0x189/0x250 [ 117.980581][ T6497] ? __pfx____ratelimit+0x10/0x10 [ 117.980603][ T6497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.980622][ T6497] ? __pfx__printk+0x10/0x10 [ 117.980655][ T6497] should_fail_ex+0x414/0x560 [ 117.980682][ T6497] _copy_to_user+0x31/0xb0 [ 117.980700][ T6497] simple_read_from_buffer+0xe1/0x170 [ 117.980723][ T6497] proc_fail_nth_read+0x1b3/0x220 [ 117.980743][ T6497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.980764][ T6497] ? rw_verify_area+0x2a6/0x4d0 [ 117.980778][ T6497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.980803][ T6497] vfs_read+0x200/0xa30 [ 117.980819][ T6497] ? fdget_pos+0x247/0x320 [ 117.980843][ T6497] ? __pfx___mutex_lock+0x10/0x10 [ 117.980858][ T6497] ? __pfx_vfs_read+0x10/0x10 [ 117.980875][ T6497] ? __fget_files+0x2a/0x420 [ 117.980898][ T6497] ? __fget_files+0x3a0/0x420 [ 117.980916][ T6497] ? __fget_files+0x2a/0x420 [ 117.980943][ T6497] ksys_read+0x145/0x250 [ 117.980962][ T6497] ? __pfx_ksys_read+0x10/0x10 [ 117.980981][ T6497] ? __do_fast_syscall_32+0xbe/0x570 [ 117.981000][ T6497] __do_fast_syscall_32+0x1f7/0x570 [ 117.981016][ T6497] ? rcu_is_watching+0x15/0xb0 [ 117.981033][ T6497] ? do_fast_syscall_32+0x34/0x80 [ 117.981051][ T6497] do_fast_syscall_32+0x34/0x80 [ 117.981066][ T6497] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.981086][ T6497] RIP: 0023:0xf7f77539 [ 117.981109][ T6497] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 117.981121][ T6497] RSP: 002b:00000000f5466590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 117.981142][ T6497] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5466620 [ 117.981153][ T6497] RDX: 000000000000000f RSI: 00000000f7406ff4 RDI: 0000000000000000 [ 117.981162][ T6497] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 117.981171][ T6497] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 117.981180][ T6497] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.981208][ T6497] [ 118.555753][ T30] audit: type=1326 audit(1765473109.149:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 118.587027][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 118.600236][ T30] audit: type=1326 audit(1765473109.149:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 118.624267][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 118.833165][ T5892] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 118.859012][ T30] audit: type=1326 audit(1765473109.149:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 118.881270][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.889605][ T5892] usb 4-1: Product: syz [ 118.894214][ T5892] usb 4-1: Manufacturer: syz [ 118.899134][ T5892] usb 4-1: SerialNumber: syz [ 118.908408][ T5892] usb 4-1: config 0 descriptor?? [ 118.986610][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 118.995563][ T5827] Bluetooth: Frame is too long (len 18, expected len 4) [ 119.005469][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.028861][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 119.029264][ T30] audit: type=1326 audit(1765473109.159:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 119.098927][ T6500] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 119.121250][ T5892] IPVS: starting estimator thread 0... [ 119.132383][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 54240, setting to 1024 [ 119.144669][ T30] audit: type=1326 audit(1765473109.159:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 119.171560][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 119.216684][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.246733][ T6506] IPVS: using max 27 ests per chain, 64800 per kthread [ 119.300592][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 119.300620][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.300639][ T10] usb 5-1: Product: syz [ 119.300653][ T10] usb 5-1: Manufacturer: syz [ 119.300667][ T10] usb 5-1: SerialNumber: syz [ 119.305292][ T6494] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.305955][ T6494] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.309644][ T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 119.310568][ T10] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 119.310647][ T10] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 119.630886][ T5907] usb 4-1: USB disconnect, device number 14 [ 119.830458][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.150'. [ 120.091779][ T6519] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 120.092006][ T6519] kvm: requested 45257 ns i8254 timer period limited to 200000 ns [ 120.092260][ T6519] kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 120.092483][ T6519] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 120.099559][ T6519] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 120.100861][ T6519] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 120.101036][ T6519] kvm: requested 52800 ns i8254 timer period limited to 200000 ns [ 120.136855][ T6519] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 120.137436][ T6519] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 121.259267][ T6186] usb 5-1: USB disconnect, device number 15 [ 121.597554][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'. [ 122.127906][ T6547] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 122.135747][ T6547] macsec1: entered promiscuous mode [ 122.155776][ T6547] macsec1: entered allmulticast mode [ 122.206702][ T6547] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 122.220928][ T6547] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 122.268301][ T6547] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 122.306706][ T5892] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 122.619192][ T5892] usb 3-1: config index 0 descriptor too short (expected 1042, got 18) [ 122.628327][ T5892] usb 3-1: config 81 has too many interfaces: 142, using maximum allowed: 32 [ 122.638421][ T5892] usb 3-1: config 81 has an invalid descriptor of length 49, skipping remainder of the config [ 122.683884][ T5892] usb 3-1: config 81 has 0 interfaces, different from the descriptor's value: 142 [ 122.741824][ T5892] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 122.761449][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.787250][ T5892] usb 3-1: Product: syz [ 122.797331][ T5892] usb 3-1: Manufacturer: syz [ 122.820529][ T5892] usb 3-1: SerialNumber: syz [ 123.153538][ T5892] usb 3-1: USB disconnect, device number 13 [ 123.471583][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 123.624886][ T6573] xt_CT: No such helper "pptp" [ 123.635147][ T6578] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 123.883989][ T6588] netlink: 108 bytes leftover after parsing attributes in process `syz.0.179'. [ 123.893351][ T6588] netlink: 440 bytes leftover after parsing attributes in process `syz.0.179'. [ 123.924994][ T6589] netlink: 108 bytes leftover after parsing attributes in process `syz.0.179'. [ 123.956502][ T6589] netlink: 440 bytes leftover after parsing attributes in process `syz.0.179'. [ 124.108098][ T6594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 124.759656][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 124.846735][ T6186] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 124.928555][ T6614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.994859][ T6614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.041919][ T6186] usb 3-1: config index 0 descriptor too short (expected 1042, got 18) [ 125.065544][ T6186] usb 3-1: config 81 has too many interfaces: 142, using maximum allowed: 32 [ 125.077253][ T6186] usb 3-1: config 81 has an invalid descriptor of length 49, skipping remainder of the config [ 125.089090][ T6186] usb 3-1: config 81 has 0 interfaces, different from the descriptor's value: 142 [ 125.107621][ T5907] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 125.184291][ T6186] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 125.197203][ T6186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.205858][ T6186] usb 3-1: Product: syz [ 125.211821][ T6186] usb 3-1: Manufacturer: syz [ 125.283969][ T6186] usb 3-1: SerialNumber: syz [ 125.327254][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 125.336086][ T5907] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 125.344759][ T5907] usb 1-1: config 179 has no interface number 0 [ 125.353236][ T5907] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 125.376667][ T5907] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 125.393004][ T5907] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.407714][ T5907] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 125.422301][ T5907] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 125.457040][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.529942][ T6186] usb 3-1: USB disconnect, device number 14 [ 125.563954][ T6634] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 125.804085][ T6648] Cannot find del_set index 3 as target [ 125.857468][ T6186] usb 1-1: USB disconnect, device number 7 [ 125.863408][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 125.863439][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 126.464960][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.196'. [ 126.548561][ T6186] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 126.761058][ T6186] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 126.806223][ T6186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.831075][ T6186] usb 3-1: config 0 descriptor?? [ 126.882451][ T6682] FAULT_INJECTION: forcing a failure. [ 126.882451][ T6682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.967195][ T6682] CPU: 1 UID: 0 PID: 6682 Comm: syz.4.199 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.967223][ T6682] Tainted: [L]=SOFTLOCKUP [ 126.967229][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.967239][ T6682] Call Trace: [ 126.967246][ T6682] [ 126.967254][ T6682] dump_stack_lvl+0x189/0x250 [ 126.967280][ T6682] ? __pfx____ratelimit+0x10/0x10 [ 126.967303][ T6682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.967323][ T6682] ? __pfx__printk+0x10/0x10 [ 126.967345][ T6682] ? __might_fault+0xb0/0x130 [ 126.967377][ T6682] should_fail_ex+0x414/0x560 [ 126.967405][ T6682] _copy_from_user+0x2d/0xb0 [ 126.967424][ T6682] rawv6_setsockopt+0x1f3/0x5b0 [ 126.967449][ T6682] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 126.967483][ T6682] ? aa_sock_opt_perm+0xff/0x1a0 [ 126.967505][ T6682] ? sock_common_setsockopt+0x36/0xc0 [ 126.967527][ T6682] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 126.967551][ T6682] do_sock_setsockopt+0x17c/0x1b0 [ 126.967573][ T6682] __ia32_sys_setsockopt+0x13f/0x1b0 [ 126.967595][ T6682] __do_fast_syscall_32+0x1f7/0x570 [ 126.967612][ T6682] ? rcu_is_watching+0x15/0xb0 [ 126.967631][ T6682] ? do_fast_syscall_32+0x34/0x80 [ 126.967652][ T6682] do_fast_syscall_32+0x34/0x80 [ 126.967669][ T6682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.967688][ T6682] RIP: 0023:0xf70cd539 [ 126.967703][ T6682] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 126.967717][ T6682] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 126.967736][ T6682] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 126.967748][ T6682] RDX: 0000000000000024 RSI: 0000000080000000 RDI: 0000000000000004 [ 126.967758][ T6682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.967768][ T6682] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 126.967778][ T6682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.967805][ T6682] [ 127.456929][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 127.489997][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 127.548633][ T6686] Cannot find del_set index 3 as target [ 127.593285][ T6697] netlink: 'syz.0.204': attribute type 4 has an invalid length. [ 127.776670][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 127.906855][ T5907] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.931473][ T10] usb 5-1: config index 0 descriptor too short (expected 1042, got 18) [ 127.942085][ T10] usb 5-1: config 81 has too many interfaces: 142, using maximum allowed: 32 [ 127.952247][ T5885] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 127.960105][ T10] usb 5-1: config 81 has an invalid descriptor of length 49, skipping remainder of the config [ 127.971013][ T10] usb 5-1: config 81 has 0 interfaces, different from the descriptor's value: 142 [ 127.982566][ T10] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 127.991736][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.999924][ T10] usb 5-1: Product: syz [ 128.004309][ T10] usb 5-1: Manufacturer: syz [ 128.009242][ T10] usb 5-1: SerialNumber: syz [ 128.036706][ T5907] usb 1-1: device descriptor read/64, error -71 [ 128.149330][ T6186] pegasus 3-1:0.0: probe with driver pegasus failed with error -121 [ 128.151970][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.207295][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 128.223853][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.235083][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 128.260081][ T10] usb 5-1: USB disconnect, device number 16 [ 128.269893][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 128.285003][ T5885] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 128.297689][ T5885] usb 4-1: Manufacturer: syz [ 128.303842][ T5907] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 128.317393][ T5885] usb 4-1: config 0 descriptor?? [ 128.356353][ T6186] usb 3-1: USB disconnect, device number 15 [ 128.476977][ T5907] usb 1-1: device descriptor read/64, error -71 [ 128.533355][ T6725] netlink: 'syz.1.208': attribute type 11 has an invalid length. [ 128.597774][ T6725] bond1: (slave bond_slave_1): Device is not our slave [ 128.604965][ T6725] bond1: option active_slave: invalid value (bond_slave_1) [ 128.614198][ T5907] usb usb1-port1: attempt power cycle [ 128.619761][ T5885] rc_core: IR keymap rc-hauppauge not found [ 128.628613][ T6725] bond1 (unregistering): Released all slaves [ 128.639122][ T5885] Registered IR keymap rc-empty [ 128.644410][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.679496][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.708654][ T5885] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 128.725237][ T5885] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 128.726515][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.755698][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.765891][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.787775][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.806778][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.826775][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.846676][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.906885][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.926925][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.946868][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 128.968519][ T5907] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.989911][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 129.017327][ T5907] usb 1-1: device descriptor read/8, error -71 [ 129.034711][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 129.070876][ T5885] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 129.192938][ T5885] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 129.207092][ T6747] hub 9-0:1.0: USB hub found [ 129.213018][ T6747] hub 9-0:1.0: 1 port detected [ 129.232126][ T6747] netlink: 96 bytes leftover after parsing attributes in process `syz.1.210'. [ 129.281408][ T5885] usb 4-1: USB disconnect, device number 15 [ 129.296890][ T5907] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 129.316751][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 129.328392][ T5907] usb 1-1: device descriptor read/8, error -71 [ 129.486418][ T5907] usb usb1-port1: unable to enumerate USB device [ 129.501956][ T24] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 129.524373][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.555354][ T24] usb 5-1: Product: syz [ 129.559869][ T24] usb 5-1: Manufacturer: syz [ 129.564534][ T24] usb 5-1: SerialNumber: syz [ 129.582227][ T24] usb 5-1: config 0 descriptor?? [ 130.017727][ T24] usb 5-1: Firmware: major: 192, minor: 178, hardware type: UNKNOWN (61) [ 130.212297][ T24] usb 5-1: no permanent extended address found, random address set [ 130.243660][ T24] usb 5-1: atusb_probe: initialization failed, error = -524 [ 130.271842][ T24] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 130.386331][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 130.386348][ T30] audit: type=1326 audit(1765473122.089:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 130.472445][ T6790] netlink: 36 bytes leftover after parsing attributes in process `syz.3.213'. [ 130.490356][ T30] audit: type=1326 audit(1765473122.099:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 130.545760][ T6738] xt_CT: No such helper "snmp" [ 130.555703][ T24] usb 5-1: USB disconnect, device number 17 [ 130.574324][ T30] audit: type=1326 audit(1765473122.099:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 130.677047][ T30] audit: type=1326 audit(1765473122.099:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 130.720634][ T30] audit: type=1326 audit(1765473122.099:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 130.792494][ T30] audit: type=1326 audit(1765473122.099:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 130.883371][ T30] audit: type=1326 audit(1765473122.099:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=178 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 130.915364][ T30] audit: type=1326 audit(1765473122.099:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 130.996609][ T30] audit: type=1326 audit(1765473122.099:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f17567 code=0x7ffc0000 [ 131.424567][ T10] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 131.518419][ T30] audit: type=1326 audit(1765473122.099:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 131.612372][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 131.656388][ T10] usb 3-1: config 0 has no interface number 0 [ 131.666337][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.679075][ T6821] FAULT_INJECTION: forcing a failure. [ 131.679075][ T6821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.712901][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 131.726345][ T6821] CPU: 0 UID: 0 PID: 6821 Comm: syz.3.220 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.726363][ T6821] Tainted: [L]=SOFTLOCKUP [ 131.726367][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.726373][ T6821] Call Trace: [ 131.726377][ T6821] [ 131.726382][ T6821] dump_stack_lvl+0x189/0x250 [ 131.726400][ T6821] ? __pfx____ratelimit+0x10/0x10 [ 131.726414][ T6821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.726425][ T6821] ? __pfx__printk+0x10/0x10 [ 131.726439][ T6821] ? __might_fault+0xb0/0x130 [ 131.726459][ T6821] should_fail_ex+0x414/0x560 [ 131.726475][ T6821] _copy_from_iter+0x1cd/0x1630 [ 131.726491][ T6821] ? __build_skb_around+0x22d/0x3c0 [ 131.726508][ T6821] ? __pfx__copy_from_iter+0x10/0x10 [ 131.726525][ T6821] ? __alloc_skb+0x2f1/0x430 [ 131.726549][ T6821] ? __pfx___alloc_skb+0x10/0x10 [ 131.726573][ T6821] ? netlink_sendmsg+0x642/0xb30 [ 131.726589][ T6821] ? skb_put+0x11b/0x210 [ 131.726607][ T6821] netlink_sendmsg+0x6b2/0xb30 [ 131.726633][ T6821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.726648][ T6821] ? __import_iovec+0x5d4/0x7f0 [ 131.726657][ T6821] ? aa_sock_msg_perm+0xf1/0x1b0 [ 131.726669][ T6821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 131.726678][ T6821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.726689][ T6821] __sock_sendmsg+0x21c/0x270 [ 131.726703][ T6821] ____sys_sendmsg+0x505/0x820 [ 131.726716][ T6821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.726728][ T6821] ? kstrtouint+0x6e/0xe0 [ 131.726744][ T6821] ___sys_sendmsg+0x21f/0x2a0 [ 131.726755][ T6821] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.726768][ T6821] ? rcu_read_lock_any_held+0xb3/0x120 [ 131.726794][ T6821] ? __fget_files+0x2a/0x420 [ 131.726805][ T6821] ? __fget_files+0x3a0/0x420 [ 131.726822][ T6821] __sys_sendmsg+0x164/0x220 [ 131.726832][ T6821] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.726846][ T6821] ? __pfx_ksys_write+0x10/0x10 [ 131.726858][ T6821] ? __do_fast_syscall_32+0xbe/0x570 [ 131.726869][ T6821] __do_fast_syscall_32+0x1f7/0x570 [ 131.726878][ T6821] ? rcu_is_watching+0x15/0xb0 [ 131.726889][ T6821] ? do_fast_syscall_32+0x34/0x80 [ 131.726900][ T6821] do_fast_syscall_32+0x34/0x80 [ 131.726909][ T6821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.726921][ T6821] RIP: 0023:0xf7f17539 [ 131.726930][ T6821] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 131.726938][ T6821] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 131.726949][ T6821] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 131.726956][ T6821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.726961][ T6821] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.726967][ T6821] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 131.726972][ T6821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.727002][ T6821] [ 132.020574][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 132.038318][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 132.049557][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 132.060458][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.073830][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 132.082981][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.094896][ T10] usb 3-1: config 0 descriptor?? [ 132.117278][ T6813] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.124848][ T6813] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.170368][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 132.185330][ T5885] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 132.338510][ T5885] usb 2-1: config index 0 descriptor too short (expected 1042, got 18) [ 132.347756][ T5885] usb 2-1: config 81 has too many interfaces: 142, using maximum allowed: 32 [ 132.449707][ T6834] fuse: Bad value for 'fd' [ 132.489104][ T5885] usb 2-1: config 81 has an invalid descriptor of length 49, skipping remainder of the config [ 132.529282][ T5885] usb 2-1: config 81 has 0 interfaces, different from the descriptor's value: 142 [ 132.640532][ T6837] FAULT_INJECTION: forcing a failure. [ 132.640532][ T6837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.766864][ T6811] ldusb 3-1:0.55: Write buffer overflow, 1685414111 bytes dropped [ 132.799749][ T5885] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 132.800466][ T6837] CPU: 1 UID: 0 PID: 6837 Comm: syz.3.225 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.800492][ T6837] Tainted: [L]=SOFTLOCKUP [ 132.800498][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.800508][ T6837] Call Trace: [ 132.800515][ T6837] [ 132.800523][ T6837] dump_stack_lvl+0x189/0x250 [ 132.800547][ T6837] ? __pfx____ratelimit+0x10/0x10 [ 132.800570][ T6837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.800589][ T6837] ? __pfx__printk+0x10/0x10 [ 132.800612][ T6837] ? __might_fault+0xb0/0x130 [ 132.800646][ T6837] should_fail_ex+0x414/0x560 [ 132.800672][ T6837] _copy_from_user+0x2d/0xb0 [ 132.800691][ T6837] do_vfs_ioctl+0x2d0/0x1430 [ 132.800711][ T6837] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 132.800761][ T6837] ? sb_end_write+0xe9/0x1c0 [ 132.800782][ T6837] ? vfs_write+0x956/0xb30 [ 132.800804][ T6837] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 132.800827][ T6837] __ia32_compat_sys_ioctl+0x4bd/0x840 [ 132.800847][ T6837] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 132.800876][ T6837] ? ksys_write+0x1e1/0x250 [ 132.800891][ T6837] ? exc_page_fault+0x82/0x100 [ 132.800917][ T6837] ? __pfx_ksys_write+0x10/0x10 [ 132.800937][ T6837] ? __do_fast_syscall_32+0xbe/0x570 [ 132.800957][ T6837] __do_fast_syscall_32+0x1f7/0x570 [ 132.800973][ T6837] ? rcu_is_watching+0x15/0xb0 [ 132.800992][ T6837] ? do_fast_syscall_32+0x34/0x80 [ 132.801012][ T6837] do_fast_syscall_32+0x34/0x80 [ 132.801028][ T6837] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.801047][ T6837] RIP: 0023:0xf7f17539 [ 132.801062][ T6837] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 132.801075][ T6837] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 132.801099][ T6837] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004020940d [ 132.801111][ T6837] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.801121][ T6837] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.801131][ T6837] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 132.801140][ T6837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.801166][ T6837] [ 132.945804][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.947785][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.951923][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.958166][ T5885] usb 2-1: Product: syz [ 133.059093][ T5885] usb 2-1: Manufacturer: syz [ 133.063851][ T5885] usb 2-1: SerialNumber: syz [ 133.329905][ T5885] usb 2-1: USB disconnect, device number 15 [ 133.706495][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 133.885227][ T6844] netlink: 64 bytes leftover after parsing attributes in process `syz.4.224'. [ 133.916659][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 133.927899][ T10] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 133.995623][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.026700][ T10] usb 4-1: Product: syz [ 134.046886][ T10] usb 4-1: Manufacturer: syz [ 134.067697][ T10] usb 4-1: SerialNumber: syz [ 134.118972][ T10] usb 4-1: config 0 descriptor?? [ 134.166095][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 134.900033][ T6857] IPv6: Can't replace route, no match found [ 134.907321][ T24] usb 3-1: USB disconnect, device number 16 [ 134.917417][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 135.434789][ T6866] netlink: 'syz.4.234': attribute type 10 has an invalid length. [ 135.523425][ T6866] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 135.609280][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 135.651325][ T10] gspca_ov534_9: sccb_write failed [ 135.673497][ T6870] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 135.723422][ T6878] netlink: 'syz.0.237': attribute type 10 has an invalid length. [ 135.825981][ T6878] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 135.837328][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 135.854531][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.226'. [ 135.866279][ T6842] QAT: Device 6 not found [ 135.894654][ T10] gspca_ov534_9: reg_w failed -71 [ 136.018654][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.035290][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.058086][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.071460][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.079811][ T24] usb 5-1: SerialNumber: syz [ 136.106707][ T5885] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 136.136858][ T10] gspca_ov534_9: Unknown sensor 0000 [ 136.136952][ T10] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 136.157218][ T5905] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 136.165564][ T10] usb 4-1: USB disconnect, device number 16 [ 136.268210][ T5885] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.278404][ T5885] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.288530][ T5885] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.297865][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.305997][ T5885] usb 1-1: SerialNumber: syz [ 136.333546][ T5905] usb 3-1: config index 0 descriptor too short (expected 1042, got 18) [ 136.343014][ T5905] usb 3-1: config 81 has too many interfaces: 142, using maximum allowed: 32 [ 136.352049][ T5905] usb 3-1: config 81 has an invalid descriptor of length 49, skipping remainder of the config [ 136.363128][ T5905] usb 3-1: config 81 has 0 interfaces, different from the descriptor's value: 142 [ 136.375038][ T5905] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 136.384710][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.395636][ T24] usb 5-1: 0:2 : does not exist [ 136.400746][ T5905] usb 3-1: Product: syz [ 136.404913][ T5905] usb 3-1: Manufacturer: syz [ 136.418748][ T5905] usb 3-1: SerialNumber: syz [ 136.427267][ T24] usb 5-1: USB disconnect, device number 18 [ 136.545688][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.656887][ T5905] usb 3-1: USB disconnect, device number 17 [ 136.675469][ T5885] usb 1-1: 0:2 : does not exist [ 136.736485][ T5885] usb 1-1: USB disconnect, device number 12 [ 136.798683][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.952186][ T6892] syzkaller0: entered promiscuous mode [ 136.967259][ T6892] syzkaller0: entered allmulticast mode [ 136.981117][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 137.298974][ T6904] FAULT_INJECTION: forcing a failure. [ 137.298974][ T6904] name failslab, interval 1, probability 0, space 0, times 0 [ 137.316671][ T6904] CPU: 1 UID: 0 PID: 6904 Comm: syz.2.246 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.316697][ T6904] Tainted: [L]=SOFTLOCKUP [ 137.316703][ T6904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.316713][ T6904] Call Trace: [ 137.316719][ T6904] [ 137.316727][ T6904] dump_stack_lvl+0x189/0x250 [ 137.316752][ T6904] ? __pfx____ratelimit+0x10/0x10 [ 137.316774][ T6904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.316793][ T6904] ? __pfx__printk+0x10/0x10 [ 137.316820][ T6904] ? __pfx___might_resched+0x10/0x10 [ 137.316838][ T6904] ? fs_reclaim_acquire+0x7d/0x100 [ 137.316861][ T6904] should_fail_ex+0x414/0x560 [ 137.316885][ T6904] should_failslab+0xa8/0x100 [ 137.316904][ T6904] __kvmalloc_node_noprof+0x175/0x920 [ 137.316923][ T6904] ? file_tty_write+0x2e7/0xa20 [ 137.316951][ T6904] file_tty_write+0x2e7/0xa20 [ 137.316980][ T6904] vfs_write+0x5c9/0xb30 [ 137.317001][ T6904] ? __pfx_tty_write+0x10/0x10 [ 137.317020][ T6904] ? __pfx_vfs_write+0x10/0x10 [ 137.317047][ T6904] ? __fget_files+0x2a/0x420 [ 137.317076][ T6904] ksys_write+0x145/0x250 [ 137.317096][ T6904] ? __pfx_ksys_write+0x10/0x10 [ 137.317117][ T6904] ? __do_fast_syscall_32+0xbe/0x570 [ 137.317137][ T6904] __do_fast_syscall_32+0x1f7/0x570 [ 137.317154][ T6904] ? rcu_is_watching+0x15/0xb0 [ 137.317172][ T6904] ? do_fast_syscall_32+0x34/0x80 [ 137.317192][ T6904] do_fast_syscall_32+0x34/0x80 [ 137.317209][ T6904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.317227][ T6904] RIP: 0023:0xf7fa2539 [ 137.317241][ T6904] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 137.317254][ T6904] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 137.317271][ T6904] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800009c0 [ 137.317282][ T6904] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.317292][ T6904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.317302][ T6904] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 137.317311][ T6904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.317338][ T6904] [ 137.628753][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 137.654544][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 137.826606][ T5885] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 138.546847][ T5885] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 138.554987][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.603081][ T5885] usb 5-1: config 0 has no interface number 0 [ 138.619439][ T5885] usb 5-1: config 0 interface 55 has no altsetting 0 [ 138.626147][ T5885] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 138.660034][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.672535][ T5885] usb 5-1: config 0 descriptor?? [ 138.682549][ T5885] ldusb 5-1:0.55: Interrupt in endpoint not found [ 138.704460][ T6926] fuse: Invalid uid '0x0000000000000003' [ 138.786640][ T5892] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 138.956617][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 139.030489][ T5885] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 139.072132][ T5892] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 139.101856][ T5892] usb 1-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=85.bd [ 139.113507][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=254 [ 139.177148][ T5892] usb 1-1: Product: syz [ 139.183014][ T5892] usb 1-1: Manufacturer: syz [ 139.187863][ T5892] usb 1-1: SerialNumber: syz [ 139.197936][ T5892] usb 1-1: config 0 descriptor?? [ 139.271015][ T5885] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 139.332521][ T5885] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 139.342815][ T5885] usb 3-1: can't read configurations, error -61 [ 139.443763][ T6088] usb 1-1: USB disconnect, device number 13 [ 139.536686][ T5885] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 139.728160][ T5885] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 139.755876][ T5885] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 139.776054][ T5885] usb 3-1: can't read configurations, error -61 [ 139.794764][ T5885] usb usb3-port1: attempt power cycle [ 139.856140][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 140.058694][ T24] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 140.068127][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.089852][ T24] usb 4-1: config 0 descriptor?? [ 140.136669][ T5885] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 140.172196][ T5885] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 140.180138][ T10] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 140.191321][ T5885] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 140.201365][ T5885] usb 3-1: can't read configurations, error -61 [ 140.336693][ T5885] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 140.357392][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 140.366996][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.387419][ T6186] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.403101][ T5885] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 140.414597][ T10] usb 2-1: config 0 has no interface number 0 [ 140.427118][ T5885] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 140.435043][ T5885] usb 3-1: can't read configurations, error -61 [ 140.441471][ T10] usb 2-1: config 0 interface 55 has no altsetting 0 [ 140.456757][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 140.468993][ T5885] usb usb3-port1: unable to enumerate USB device [ 140.482126][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.501961][ T10] usb 2-1: config 0 descriptor?? [ 140.532876][ T10] ldusb 2-1:0.55: Interrupt in endpoint not found [ 140.550776][ T6186] usb 1-1: config index 0 descriptor too short (expected 1042, got 18) [ 140.562029][ T6186] usb 1-1: config 81 has too many interfaces: 142, using maximum allowed: 32 [ 140.581707][ T6186] usb 1-1: config 81 has an invalid descriptor of length 49, skipping remainder of the config [ 140.608004][ T6186] usb 1-1: config 81 has 0 interfaces, different from the descriptor's value: 142 [ 140.635684][ T6186] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 140.645390][ T6186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.676134][ T6186] usb 1-1: Product: syz [ 140.706087][ T6186] usb 1-1: Manufacturer: syz [ 140.736334][ T6186] usb 1-1: SerialNumber: syz [ 140.758026][ T5885] usb 5-1: USB disconnect, device number 19 [ 140.924524][ T6940] nfs: Unknown parameter ' ' [ 141.045731][ T6931] x_tables: duplicate underflow at hook 3 [ 141.158072][ T6186] usb 1-1: USB disconnect, device number 14 [ 141.283664][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.258'. [ 141.460169][ T24] pegasus 4-1:0.0: can't reset MAC [ 141.465592][ T24] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 141.481219][ T24] usb 4-1: USB disconnect, device number 17 [ 141.841517][ T6949] netlink: 'syz.2.260': attribute type 10 has an invalid length. [ 141.872541][ T6949] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 142.146035][ T6949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'. [ 142.276628][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 142.407621][ T5905] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 142.418473][ T6959] netlink: 'syz.4.263': attribute type 1 has an invalid length. [ 142.431853][ T24] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 142.441254][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.454856][ T24] usb 1-1: Product: syz [ 142.463683][ T24] usb 1-1: Manufacturer: syz [ 142.472957][ T24] usb 1-1: SerialNumber: syz [ 142.482641][ T6961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.263'. [ 142.492263][ T6959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.502282][ T24] usb 1-1: config 0 descriptor?? [ 142.512438][ T6961] bond1: entered promiscuous mode [ 142.518704][ T6961] bond1: entered allmulticast mode [ 142.540247][ T6959] bond1: (slave dummy0): making interface the new active one [ 142.547940][ T6959] dummy0: entered promiscuous mode [ 142.553335][ T6959] dummy0: entered allmulticast mode [ 142.560235][ T6959] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 142.579075][ T5905] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.595894][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.622158][ T5905] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.640618][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.662895][ T5905] usb 3-1: SerialNumber: syz [ 142.728492][ T24] usb-storage 1-1:0.0: USB Mass Storage device detected [ 142.854748][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 142.854787][ T30] audit: type=1326 audit(1765473134.559:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.264" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x0 [ 142.960287][ T5905] usb 3-1: 0:2 : does not exist [ 143.009073][ T5905] usb 3-1: USB disconnect, device number 22 [ 143.289343][ T24] usb 2-1: USB disconnect, device number 16 [ 143.692845][ T6976] netlink: 'syz.4.268': attribute type 10 has an invalid length. [ 143.705814][ T6976] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 143.890349][ T6974] delete_channel: no stack [ 144.046931][ T5885] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 144.218576][ T5885] usb 5-1: config index 0 descriptor too short (expected 1042, got 18) [ 144.227683][ T5885] usb 5-1: config 81 has too many interfaces: 142, using maximum allowed: 32 [ 144.236489][ T5885] usb 5-1: config 81 has an invalid descriptor of length 49, skipping remainder of the config [ 144.248215][ T5885] usb 5-1: config 81 has 0 interfaces, different from the descriptor's value: 142 [ 144.259830][ T5885] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 144.269839][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.277922][ T5885] usb 5-1: Product: syz [ 144.282086][ T5885] usb 5-1: Manufacturer: syz [ 144.286706][ T5885] usb 5-1: SerialNumber: syz [ 144.416724][ T6186] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 144.507070][ T5885] usb 5-1: USB disconnect, device number 20 [ 144.566338][ T6991] FAULT_INJECTION: forcing a failure. [ 144.566338][ T6991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.581182][ T6186] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.582185][ T6991] CPU: 0 UID: 0 PID: 6991 Comm: syz.2.275 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.582212][ T6991] Tainted: [L]=SOFTLOCKUP [ 144.582219][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.582228][ T6991] Call Trace: [ 144.582235][ T6991] [ 144.582243][ T6991] dump_stack_lvl+0x189/0x250 [ 144.582268][ T6991] ? __pfx____ratelimit+0x10/0x10 [ 144.582292][ T6991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.582312][ T6991] ? __pfx__printk+0x10/0x10 [ 144.582334][ T6991] ? __might_fault+0xb0/0x130 [ 144.582368][ T6991] should_fail_ex+0x414/0x560 [ 144.582394][ T6991] _copy_from_user+0x2d/0xb0 [ 144.582413][ T6991] __sys_sendto+0x25c/0x520 [ 144.582440][ T6991] ? __pfx___sys_sendto+0x10/0x10 [ 144.582475][ T6991] ? __might_fault+0xb0/0x130 [ 144.582517][ T6991] __ia32_compat_sys_socketcall+0x71c/0x9d0 [ 144.582538][ T6991] ? __fget_files+0x3a0/0x420 [ 144.582562][ T6991] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 144.582582][ T6991] ? fput+0xa0/0xd0 [ 144.582603][ T6991] ? ksys_write+0x22a/0x250 [ 144.582618][ T6991] ? exc_page_fault+0x82/0x100 [ 144.582641][ T6991] ? __pfx_ksys_write+0x10/0x10 [ 144.582661][ T6991] ? __do_fast_syscall_32+0xbe/0x570 [ 144.582681][ T6991] __do_fast_syscall_32+0x1f7/0x570 [ 144.582697][ T6991] ? rcu_is_watching+0x15/0xb0 [ 144.582716][ T6991] ? do_fast_syscall_32+0x34/0x80 [ 144.582736][ T6991] do_fast_syscall_32+0x34/0x80 [ 144.582753][ T6991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.582772][ T6991] RIP: 0023:0xf7fa2539 [ 144.582787][ T6991] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 144.582801][ T6991] RSP: 002b:00000000f5495430 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 144.582819][ T6991] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5495444 [ 144.582832][ T6991] RDX: 0000000000000000 RSI: 00000000f5495560 RDI: 00000000f7436ff4 [ 144.582845][ T6991] RBP: 00000000f5495560 R08: 0000000000000000 R09: 0000000000000000 [ 144.582857][ T6991] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 144.582874][ T6991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.582903][ T6991] [ 144.855779][ T6186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.872261][ T6186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 144.884119][ T6186] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.886462][ T5892] usb 1-1: USB disconnect, device number 15 [ 144.897248][ T6186] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.897275][ T6186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.945348][ T6186] usb 2-1: config 0 descriptor?? [ 145.044767][ T30] audit: type=1326 audit(1765473136.749:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 145.072372][ T30] audit: type=1326 audit(1765473136.779:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 145.211446][ T30] audit: type=1326 audit(1765473136.779:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 145.268808][ T30] audit: type=1326 audit(1765473136.779:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 145.439357][ T6186] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 145.513390][ T6186] plantronics 0003:047F:FFFF.0004: item fetching failed at offset 13/15 [ 145.530389][ T30] audit: type=1326 audit(1765473136.779:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 145.553725][ T6186] plantronics 0003:047F:FFFF.0004: parse failed [ 145.572574][ T7004] FAULT_INJECTION: forcing a failure. [ 145.572574][ T7004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.573364][ T6186] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 145.637147][ T30] audit: type=1326 audit(1765473136.779:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 145.644096][ T6982] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 145.671045][ T7004] CPU: 1 UID: 0 PID: 7004 Comm: syz.3.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.671075][ T7004] Tainted: [L]=SOFTLOCKUP [ 145.671082][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.671092][ T7004] Call Trace: [ 145.671100][ T7004] [ 145.671109][ T7004] dump_stack_lvl+0x189/0x250 [ 145.671134][ T7004] ? __pfx____ratelimit+0x10/0x10 [ 145.671157][ T7004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.671177][ T7004] ? __pfx__printk+0x10/0x10 [ 145.671212][ T7004] should_fail_ex+0x414/0x560 [ 145.671240][ T7004] _copy_to_user+0x31/0xb0 [ 145.671261][ T7004] simple_read_from_buffer+0xe1/0x170 [ 145.671286][ T7004] proc_fail_nth_read+0x1b3/0x220 [ 145.671308][ T7004] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.671329][ T7004] ? rw_verify_area+0x2a6/0x4d0 [ 145.671346][ T7004] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.671365][ T7004] vfs_read+0x200/0xa30 [ 145.671382][ T7004] ? fdget_pos+0x247/0x320 [ 145.671406][ T7004] ? __pfx___mutex_lock+0x10/0x10 [ 145.671422][ T7004] ? __pfx_vfs_read+0x10/0x10 [ 145.671441][ T7004] ? __fget_files+0x2a/0x420 [ 145.671466][ T7004] ? __fget_files+0x3a0/0x420 [ 145.671486][ T7004] ? __fget_files+0x2a/0x420 [ 145.671514][ T7004] ksys_read+0x145/0x250 [ 145.671534][ T7004] ? __pfx_ksys_read+0x10/0x10 [ 145.671556][ T7004] ? __do_fast_syscall_32+0xbe/0x570 [ 145.671576][ T7004] __do_fast_syscall_32+0x1f7/0x570 [ 145.671594][ T7004] ? rcu_is_watching+0x15/0xb0 [ 145.671612][ T7004] ? do_fast_syscall_32+0x34/0x80 [ 145.671635][ T7004] do_fast_syscall_32+0x34/0x80 [ 145.671652][ T7004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.671672][ T7004] RIP: 0023:0xf7f17539 [ 145.671688][ T7004] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 145.671703][ T7004] RSP: 002b:00000000f5406590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 145.671729][ T7004] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5406620 [ 145.671741][ T7004] RDX: 000000000000000f RSI: 00000000f73a6ff4 RDI: 0000000000000000 [ 145.671752][ T7004] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 145.671762][ T7004] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 145.671773][ T7004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.671801][ T7004] [ 145.916998][ T5892] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 145.967136][ T30] audit: type=1326 audit(1765473136.779:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 145.999141][ T30] audit: type=1326 audit(1765473136.779:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 146.032921][ T30] audit: type=1326 audit(1765473136.779:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 146.168644][ T5892] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 146.227566][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.277536][ T5892] usb 1-1: config 0 has no interface number 0 [ 146.295581][ T6982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.302336][ T5892] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.337503][ T5892] usb 1-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.411881][ T5892] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 146.439447][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.449621][ T5920] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 146.472085][ T5892] usb 1-1: config 0 descriptor?? [ 146.496983][ T7017] tap0: tun_chr_ioctl cmd 2147767521 [ 146.510531][ T5892] ldusb 1-1:0.55: Interrupt in endpoint not found [ 146.604328][ T6186] usb 2-1: USB disconnect, device number 17 [ 146.637249][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 146.644413][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 146.665631][ T5920] usb 5-1: config 6 has an invalid interface number: 70 but max is 0 [ 146.685329][ T5920] usb 5-1: config 6 has no interface number 0 [ 146.705677][ T5920] usb 5-1: config 6 interface 70 has no altsetting 0 [ 146.728279][ T5920] usb 5-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=63.7b [ 146.758849][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.801494][ T5920] usb 5-1: Product: syz [ 146.805685][ T5920] usb 5-1: Manufacturer: syz [ 146.828458][ T5920] usb 5-1: SerialNumber: syz [ 147.173828][ T5920] HFC-S_USB 5-1:6.70: probe with driver HFC-S_USB failed with error -5 [ 147.204961][ T5920] usb 5-1: USB disconnect, device number 21 [ 147.959847][ T7032] netlink: 'syz.2.287': attribute type 20 has an invalid length. [ 148.138152][ T7037] FAULT_INJECTION: forcing a failure. [ 148.138152][ T7037] name failslab, interval 1, probability 0, space 0, times 0 [ 148.153649][ T7037] CPU: 1 UID: 0 PID: 7037 Comm: syz.2.290 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.153678][ T7037] Tainted: [L]=SOFTLOCKUP [ 148.153684][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.153695][ T7037] Call Trace: [ 148.153702][ T7037] [ 148.153710][ T7037] dump_stack_lvl+0x189/0x250 [ 148.153735][ T7037] ? __pfx____ratelimit+0x10/0x10 [ 148.153758][ T7037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.153777][ T7037] ? __pfx__printk+0x10/0x10 [ 148.153806][ T7037] ? __pfx___might_resched+0x10/0x10 [ 148.153828][ T7037] should_fail_ex+0x414/0x560 [ 148.153855][ T7037] should_failslab+0xa8/0x100 [ 148.153877][ T7037] __kmalloc_noprof+0xdf/0x800 [ 148.153893][ T7037] ? kfree+0x4d/0x660 [ 148.153912][ T7037] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 148.153936][ T7037] tomoyo_realpath_from_path+0xe3/0x5d0 [ 148.153956][ T7037] ? tomoyo_domain+0xd8/0x130 [ 148.153981][ T7037] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 148.154005][ T7037] tomoyo_path_number_perm+0x1e8/0x5a0 [ 148.154031][ T7037] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 148.154055][ T7037] ? __lock_acquire+0x6b6/0x2cf0 [ 148.154106][ T7037] ? __fget_files+0x2a/0x420 [ 148.154131][ T7037] ? __fget_files+0x3a0/0x420 [ 148.154150][ T7037] ? __fget_files+0x2a/0x420 [ 148.154173][ T7037] security_file_ioctl_compat+0xcb/0x2d0 [ 148.154200][ T7037] __ia32_compat_sys_ioctl+0x128/0x840 [ 148.154220][ T7037] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 148.154236][ T7037] ? __fget_files+0x3a0/0x420 [ 148.154262][ T7037] ? fput+0xa0/0xd0 [ 148.154284][ T7037] ? ksys_write+0x22a/0x250 [ 148.154300][ T7037] ? exc_page_fault+0x82/0x100 [ 148.154323][ T7037] ? __pfx_ksys_write+0x10/0x10 [ 148.154344][ T7037] ? __do_fast_syscall_32+0xbe/0x570 [ 148.154365][ T7037] __do_fast_syscall_32+0x1f7/0x570 [ 148.154382][ T7037] ? rcu_is_watching+0x15/0xb0 [ 148.154400][ T7037] ? do_fast_syscall_32+0x34/0x80 [ 148.154421][ T7037] do_fast_syscall_32+0x34/0x80 [ 148.154437][ T7037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.154457][ T7037] RIP: 0023:0xf7fa2539 [ 148.154480][ T7037] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 148.154498][ T7037] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 148.154518][ T7037] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 148.154531][ T7037] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.154541][ T7037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.154551][ T7037] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 148.154561][ T7037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.154584][ T7037] [ 148.154743][ T7037] ERROR: Out of memory at tomoyo_realpath_from_path. [ 148.456648][ T5892] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 148.637997][ T7048] netlink: 'syz.2.293': attribute type 1 has an invalid length. [ 148.668241][ T5892] usb 5-1: config index 0 descriptor too short (expected 1042, got 18) [ 148.685092][ T7048] bond1: (slave bridge1): making interface the new active one [ 148.693420][ T7048] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 148.762568][ T5892] usb 5-1: config 81 has too many interfaces: 142, using maximum allowed: 32 [ 148.880571][ T5892] usb 5-1: config 81 has an invalid descriptor of length 49, skipping remainder of the config [ 148.934233][ T5920] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 148.964707][ T5892] usb 5-1: config 81 has 0 interfaces, different from the descriptor's value: 142 [ 148.976895][ T5892] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 148.986132][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.994763][ T5892] usb 5-1: Product: syz [ 149.000910][ T5892] usb 5-1: Manufacturer: syz [ 149.023161][ T5892] usb 5-1: SerialNumber: syz [ 149.113273][ T5920] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 149.121797][ T5920] usb 2-1: config 0 has no interface number 0 [ 149.133232][ T5920] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.237763][ T5920] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 149.275955][ T5920] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 149.341669][ T5892] usb 5-1: USB disconnect, device number 22 [ 149.369102][ T5920] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 149.440355][ T5920] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 149.831094][ T5920] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.867807][ T6186] usb 1-1: USB disconnect, device number 16 [ 149.886573][ T5920] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 149.987485][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.025322][ T5920] usb 2-1: config 0 descriptor?? [ 150.092471][ T7051] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 150.099878][ T7051] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 150.198853][ T5920] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 150.654429][ T7045] ldusb 2-1:0.55: Write buffer overflow, 1685414111 bytes dropped [ 150.835595][ T5920] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 151.149560][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.169242][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.214486][ T5920] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 151.223772][ T5920] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 151.235548][ T5920] usb 4-1: Manufacturer: syz [ 151.298354][ T5920] usb 4-1: config 0 descriptor?? [ 151.336723][ T5907] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 151.591833][ T5907] usb 3-1: config 0 has no interfaces? [ 151.655627][ T5907] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 151.676601][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.697291][ T5907] usb 3-1: Product: syz [ 151.708931][ T5907] usb 3-1: Manufacturer: syz [ 151.724547][ T5907] usb 3-1: SerialNumber: syz [ 151.757130][ T5907] usb 3-1: config 0 descriptor?? [ 151.821648][ T5907] usb 2-1: USB disconnect, device number 18 [ 151.866365][ T5907] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 152.181937][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.191115][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.215333][ T5920] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 152.412426][ T5907] usb 4-1: USB disconnect, device number 18 [ 152.934224][ T7089] netlink: 'syz.1.304': attribute type 10 has an invalid length. [ 152.955007][ T7089] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 152.978520][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.304'. [ 153.246721][ T5907] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 153.286674][ T5920] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 153.398191][ T5907] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.408611][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.418568][ T5907] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 153.429200][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.437275][ T5907] usb 2-1: SerialNumber: syz [ 153.466823][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 153.474739][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.486656][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.496590][ T5920] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 153.506320][ T5920] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.522061][ T5920] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 153.531443][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.539474][ T5920] usb 4-1: Product: syz [ 153.543871][ T5920] usb 4-1: Manufacturer: syz [ 153.548539][ T5920] usb 4-1: SerialNumber: syz [ 153.559846][ T5920] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 153.569136][ T5920] usbtest 4-1:1.0: Linux user mode ISO test driver [ 153.575653][ T5920] usbtest 4-1:1.0: high-speed {control bulk-out iso-in} tests (+alt) [ 153.694428][ T6186] usb 3-1: USB disconnect, device number 23 [ 153.733520][ T5907] usb 2-1: 0:2 : does not exist [ 153.778506][ T5907] usb 2-1: USB disconnect, device number 19 [ 153.810917][ T5920] usb 4-1: USB disconnect, device number 19 [ 153.863019][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.984725][ T5827] Bluetooth: hci4: hardware error 0x00 [ 154.122197][ T7106] program syz.4.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.151379][ T5834] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 154.166602][ T5834] Bluetooth: hci3: Injecting HCI hardware error event [ 154.174087][ T5834] Bluetooth: hci3: hardware error 0x00 [ 154.236638][ T5907] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 154.349223][ T7111] FAULT_INJECTION: forcing a failure. [ 154.349223][ T7111] name failslab, interval 1, probability 0, space 0, times 0 [ 154.387619][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 154.400281][ T7111] CPU: 0 UID: 0 PID: 7111 Comm: syz.0.314 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.400308][ T7111] Tainted: [L]=SOFTLOCKUP [ 154.400315][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.400325][ T7111] Call Trace: [ 154.400332][ T7111] [ 154.400340][ T7111] dump_stack_lvl+0x189/0x250 [ 154.400364][ T7111] ? __pfx____ratelimit+0x10/0x10 [ 154.400387][ T7111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.400406][ T7111] ? __pfx__printk+0x10/0x10 [ 154.400435][ T7111] ? __pfx___might_resched+0x10/0x10 [ 154.400453][ T7111] ? fs_reclaim_acquire+0x7d/0x100 [ 154.400475][ T7111] should_fail_ex+0x414/0x560 [ 154.400501][ T7111] should_failslab+0xa8/0x100 [ 154.400523][ T7111] __kmalloc_noprof+0xdf/0x800 [ 154.400540][ T7111] ? ethnl_default_set_doit+0x13a/0x8f0 [ 154.400565][ T7111] ethnl_default_set_doit+0x13a/0x8f0 [ 154.400584][ T7111] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 154.400607][ T7111] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 154.400636][ T7111] genl_family_rcv_msg_doit+0x215/0x300 [ 154.400665][ T7111] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 154.400700][ T7111] ? bpf_lsm_capable+0x9/0x20 [ 154.400719][ T7111] ? security_capable+0x7e/0x2e0 [ 154.400744][ T7111] genl_rcv_msg+0x60e/0x790 [ 154.400773][ T7111] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.400793][ T7111] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 154.400828][ T7111] netlink_rcv_skb+0x208/0x470 [ 154.400847][ T7111] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.400870][ T7111] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.400906][ T7111] ? down_read+0x274/0x2e0 [ 154.400921][ T7111] ? genl_rcv+0xd/0x40 [ 154.400944][ T7111] genl_rcv+0x28/0x40 [ 154.400964][ T7111] netlink_unicast+0x82f/0x9e0 [ 154.400990][ T7111] ? __pfx_netlink_unicast+0x10/0x10 [ 154.401012][ T7111] ? netlink_sendmsg+0x642/0xb30 [ 154.401029][ T7111] ? skb_put+0x11b/0x210 [ 154.401050][ T7111] netlink_sendmsg+0x805/0xb30 [ 154.401078][ T7111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.401106][ T7111] ? __import_iovec+0x5d4/0x7f0 [ 154.401123][ T7111] ? aa_sock_msg_perm+0xf1/0x1b0 [ 154.401143][ T7111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.401160][ T7111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.401180][ T7111] __sock_sendmsg+0x21c/0x270 [ 154.401205][ T7111] ____sys_sendmsg+0x505/0x820 [ 154.401229][ T7111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.401252][ T7111] ? kstrtouint+0x6e/0xe0 [ 154.401288][ T7111] ___sys_sendmsg+0x21f/0x2a0 [ 154.401309][ T7111] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.401333][ T7111] ? rcu_read_lock_any_held+0xb3/0x120 [ 154.401382][ T7111] ? __fget_files+0x2a/0x420 [ 154.401402][ T7111] ? __fget_files+0x3a0/0x420 [ 154.401434][ T7111] __sys_sendmsg+0x164/0x220 [ 154.401454][ T7111] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.401481][ T7111] ? __pfx_ksys_write+0x10/0x10 [ 154.401502][ T7111] ? __do_fast_syscall_32+0xbe/0x570 [ 154.401524][ T7111] __do_fast_syscall_32+0x1f7/0x570 [ 154.401541][ T7111] ? rcu_is_watching+0x15/0xb0 [ 154.401559][ T7111] ? do_fast_syscall_32+0x34/0x80 [ 154.401581][ T7111] do_fast_syscall_32+0x34/0x80 [ 154.401598][ T7111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.401617][ T7111] RIP: 0023:0xf7f77539 [ 154.401632][ T7111] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 154.401647][ T7111] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 154.401666][ T7111] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 154.401679][ T7111] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.401690][ T7111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.401700][ T7111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 154.401710][ T7111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.401737][ T7111] [ 154.403072][ T5907] usb 3-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.508288][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 154.540684][ T5907] usb 3-1: config 1 interface 0 has no altsetting 0 [ 154.602992][ T7119] QAT: failed to copy from user cfg_data. [ 154.608283][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.856657][ T5920] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 154.880661][ T5907] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.40 [ 154.880691][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.880710][ T5907] usb 3-1: Product: syz [ 154.880724][ T5907] usb 3-1: Manufacturer: syz [ 154.880738][ T5907] usb 3-1: SerialNumber: syz [ 154.972668][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.016669][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 155.025068][ T5920] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 155.036083][ T5920] usb 2-1: config 0 has no interface number 0 [ 155.043250][ T5920] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 155.069123][ T5920] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 155.079622][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.096214][ T5920] usb 2-1: Product: syz [ 155.119460][ T5920] usb 2-1: Manufacturer: syz [ 155.133816][ T5920] usb 2-1: SerialNumber: syz [ 155.280797][ T5920] usb 2-1: config 0 descriptor?? [ 155.440411][ T7117] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.538695][ T5907] usbhid 3-1:1.0: can't add hid device: -71 [ 155.544800][ T5907] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 155.601850][ T5907] usb 3-1: USB disconnect, device number 24 [ 155.624750][ T7133] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 155.647431][ T7133] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 155.666408][ T7117] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.825893][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 156.046602][ T5907] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 156.068698][ T5827] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 156.217118][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 156.223731][ T5907] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 156.232691][ T5907] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.240220][ T5834] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 156.248776][ T5907] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.248804][ T5907] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.248827][ T5907] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.248868][ T5907] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.290621][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.344053][ T7155] program syz.2.327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.436714][ T6088] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 156.447160][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 156.447174][ T30] audit: type=1326 audit(1765473148.159:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 156.482687][ T30] audit: type=1326 audit(1765473148.159:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 156.511891][ T30] audit: type=1326 audit(1765473148.159:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 156.604514][ T30] audit: type=1326 audit(1765473148.159:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 156.631074][ T5907] usb 4-1: usb_control_msg returned -32 [ 156.638357][ T5907] usbtmc 4-1:16.0: can't read capabilities [ 156.645192][ T6088] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.662800][ T30] audit: type=1326 audit(1765473148.159:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 156.684894][ T6088] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 156.695785][ T30] audit: type=1326 audit(1765473148.159:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 156.770162][ T5907] usb 4-1: USB disconnect, device number 20 [ 156.776718][ T6088] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.797955][ T6088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.809433][ T6088] usb 1-1: Product: syz [ 156.813758][ T6088] usb 1-1: Manufacturer: syz [ 156.818562][ T30] audit: type=1326 audit(1765473148.159:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 156.841741][ T6088] usb 1-1: SerialNumber: syz [ 156.863838][ T6088] cdc_mbim 1-1:1.0: skipping garbage [ 156.874071][ T30] audit: type=1326 audit(1765473148.159:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 156.898290][ T30] audit: type=1326 audit(1765473148.159:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 156.916657][ T5828] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 156.921563][ T30] audit: type=1326 audit(1765473148.159:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 157.071994][ T7153] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 157.123205][ T5828] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 157.131457][ T5828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.141950][ T5828] usb 3-1: config 0 has no interface number 0 [ 157.148555][ T5828] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.170054][ T5828] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 157.193900][ T5828] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 157.209585][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.225183][ T5828] usb 3-1: config 0 descriptor?? [ 157.233935][ T7159] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 157.245948][ T5828] ldusb 3-1:0.55: Interrupt in endpoint not found [ 157.326276][ T5920] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 157.342933][ T5920] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 157.368750][ T5920] asix 2-1:0.188: probe with driver asix failed with error -71 [ 157.424020][ T5920] usb 2-1: USB disconnect, device number 20 [ 157.591379][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.332'. [ 157.746623][ T5885] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 157.754829][ T7153] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 157.762930][ T6088] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 157.770162][ T6088] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 157.782013][ T6088] wwan wwan0: port wwan0mbim0 attached [ 157.834710][ T6088] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, da:f9:51:02:12:dd [ 157.897705][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 157.952339][ T5885] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 157.973713][ T5885] usb 4-1: config 0 has no interface number 0 [ 157.995472][ T5885] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 158.011808][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.042962][ T5885] usb 4-1: Product: syz [ 158.055350][ T5885] usb 4-1: Manufacturer: syz [ 158.075870][ T5885] usb 4-1: SerialNumber: syz [ 158.097142][ T5885] usb 4-1: config 0 descriptor?? [ 158.316677][ T5885] radio-si470x 4-1:0.35: this is not a si470x device. [ 158.347435][ T5885] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 158.527875][ T7195] binder: BC_ATTEMPT_ACQUIRE not supported [ 158.533788][ T7195] binder: 7185:7195 ioctl c0306201 80000540 returned -22 [ 158.652805][ T6088] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 158.664510][ T5885] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 158.809194][ T5920] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 158.854004][ T6088] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 158.868221][ T6088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.892616][ T6088] usb 5-1: config 0 descriptor?? [ 159.000348][ T5920] usb 2-1: device descriptor read/64, error -71 [ 159.040762][ T7204] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 159.047546][ T7204] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.093103][ T7204] vhci_hcd vhci_hcd.0: Device attached [ 159.101007][ T7207] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 159.107620][ T7207] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.123452][ T7207] vhci_hcd vhci_hcd.0: Device attached [ 159.146160][ T7204] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 159.152786][ T7204] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 159.173197][ T5492] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 159.238962][ T7207] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 159.245604][ T7207] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.266669][ T5920] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 159.281674][ T7216] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 159.288300][ T7216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.305770][ T7219] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[7219] [ 159.322189][ T7204] vhci_hcd vhci_hcd.0: Device attached [ 159.336641][ T5924] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 159.351953][ T7216] vhci_hcd vhci_hcd.0: Device attached [ 159.381004][ T7207] vhci_hcd vhci_hcd.0: Device attached [ 159.383411][ T7220] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(24) [ 159.393070][ T7220] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 159.411700][ T7204] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 159.473206][ T5920] usb 2-1: device descriptor read/64, error -71 [ 159.494912][ T7220] vhci_hcd vhci_hcd.0: Device attached [ 159.586883][ T5920] usb usb2-port1: attempt power cycle [ 159.597627][ T5907] usb 3-1: USB disconnect, device number 25 [ 159.716701][ T7204] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(20) [ 159.723348][ T7204] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.782363][ T7216] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 159.823526][ T7204] vhci_hcd vhci_hcd.0: Device attached [ 159.839408][ T7207] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 159.867256][ T7204] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(33) [ 159.873886][ T7204] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 159.919806][ T7204] vhci_hcd vhci_hcd.0: Device attached [ 159.960143][ T7205] vhci_hcd: connection reset by peer [ 159.969567][ T7214] vhci_hcd: connection closed [ 159.971224][ T7217] vhci_hcd: connection closed [ 159.977292][ T5920] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 159.985822][ T5938] vhci_hcd vhci_hcd.0: stop threads [ 159.997253][ T7208] vhci_hcd: connection closed [ 159.997256][ T7226] vhci_hcd: connection closed [ 159.997480][ T7221] vhci_hcd: connection closed [ 160.002121][ T7210] vhci_hcd: connection closed [ 160.020377][ T5938] vhci_hcd vhci_hcd.0: release socket [ 160.050240][ T5938] vhci_hcd vhci_hcd.0: disconnect device [ 160.061220][ T5938] vhci_hcd vhci_hcd.0: stop threads [ 160.075163][ T5938] vhci_hcd vhci_hcd.0: release socket [ 160.088538][ T5920] usb 2-1: device descriptor read/8, error -71 [ 160.092036][ T5938] vhci_hcd vhci_hcd.0: disconnect device [ 160.112627][ T5938] vhci_hcd vhci_hcd.0: stop threads [ 160.304990][ T5938] vhci_hcd vhci_hcd.0: release socket [ 160.362782][ T5938] vhci_hcd vhci_hcd.0: disconnect device [ 160.440482][ T5938] vhci_hcd vhci_hcd.0: stop threads [ 160.453467][ T5938] vhci_hcd vhci_hcd.0: release socket [ 160.466712][ T5920] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 160.468302][ T5938] vhci_hcd vhci_hcd.0: disconnect device [ 160.488607][ T5920] usb 2-1: device descriptor read/8, error -71 [ 160.503845][ T5938] vhci_hcd vhci_hcd.0: stop threads [ 160.517620][ T5938] vhci_hcd vhci_hcd.0: release socket [ 160.535473][ T5938] vhci_hcd vhci_hcd.0: disconnect device [ 160.577811][ T5938] vhci_hcd vhci_hcd.0: stop threads [ 160.588630][ T7231] vhci_hcd: connection closed [ 160.596626][ T5938] vhci_hcd vhci_hcd.0: release socket [ 160.596851][ T5920] usb usb2-port1: unable to enumerate USB device [ 160.633928][ T5938] vhci_hcd vhci_hcd.0: disconnect device [ 160.663335][ T5920] usb 4-1: USB disconnect, device number 21 [ 160.680795][ T5920] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 160.707952][ T5938] vhci_hcd vhci_hcd.0: stop threads [ 160.726778][ T5938] vhci_hcd vhci_hcd.0: release socket [ 160.745456][ T6088] pegasus 5-1:0.0: setup Pegasus II specific registers [ 160.762495][ T5938] vhci_hcd vhci_hcd.0: disconnect device [ 160.787208][ T5938] vhci_hcd vhci_hcd.0: stop threads [ 160.822876][ T5938] vhci_hcd vhci_hcd.0: release socket [ 160.836068][ T5938] vhci_hcd vhci_hcd.0: disconnect device [ 161.045158][ T6088] pegasus 5-1:0.0: can't locate MII phy, using default [ 161.203119][ T6088] pegasus 5-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, b6:95:87:ce:9d:86 [ 161.231316][ T6088] usb 5-1: USB disconnect, device number 23 [ 161.496665][ T5920] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 161.572932][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 161.657403][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 161.664627][ T5920] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 161.689208][ T5920] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.713102][ T7265] xt_hashlimit: size too large, truncated to 1048576 [ 161.728854][ T5920] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.757596][ T5920] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.792650][ T5920] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.838141][ T5920] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.845740][ T7265] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 161.872739][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.977000][ T6088] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 161.984827][ T5892] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 162.199277][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.208771][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.216842][ T6088] usb 5-1: Using ep0 maxpacket: 32 [ 162.226697][ T5920] usb 4-1: usb_control_msg returned -32 [ 162.241142][ T5920] usbtmc 4-1:16.0: can't read capabilities [ 162.248461][ T6088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.258804][ T6088] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 162.271187][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.289084][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 162.295957][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 162.302372][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 162.309081][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 162.315493][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 162.322221][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 162.328585][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 162.335274][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 162.341685][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 162.348368][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 162.354813][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 162.361524][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 162.368405][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 162.375103][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 162.382016][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 162.388706][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 162.395046][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 162.401735][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 162.408065][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 162.414729][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 162.425155][ T5920] usb 4-1: USB disconnect, device number 22 [ 162.440564][ T6088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.448836][ T5892] usb 2-1: not running at top speed; connect to a high speed hub [ 162.459183][ T6088] usb 5-1: config 0 descriptor?? [ 162.465717][ T5892] usb 2-1: config 251 has an invalid interface number: 156 but max is 0 [ 162.567016][ T5892] usb 2-1: config 251 has no interface number 0 [ 162.573365][ T5892] usb 2-1: config 251 interface 156 has no altsetting 0 [ 162.612448][ T5892] usb 2-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 162.624525][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.635921][ T5892] usb 2-1: Product: syz [ 162.643524][ T5892] usb 2-1: Manufacturer: syz [ 162.651370][ T5892] usb 2-1: SerialNumber: syz [ 163.084123][ T5892] usb 2-1: unknown interface protocol 0x2c, assuming v1 [ 163.091569][ T6088] magicmouse 0003:05AC:0265.0006: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 163.146668][ T5892] usb 2-1: cannot find UAC_HEADER [ 163.168547][ T5892] snd-usb-audio 2-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 163.182785][ T5892] usb 2-1: USB disconnect, device number 25 [ 163.215371][ T6396] udevd[6396]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.635787][ T7286] netlink: 132 bytes leftover after parsing attributes in process `syz.3.351'. [ 163.920257][ T7291] input: syz0 as /devices/virtual/input/input11 [ 164.016494][ T7292] fuse: Bad value for 'fd' [ 164.457562][ T5924] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 164.535820][ T6186] usb 5-1: USB disconnect, device number 24 [ 164.906285][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 165.006636][ T6186] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 165.161124][ T5907] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 165.172868][ T6186] usb 5-1: unable to get BOS descriptor or descriptor too short [ 165.181839][ T6186] usb 5-1: not running at top speed; connect to a high speed hub [ 165.191780][ T6186] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.202374][ T6186] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.215832][ T6186] usb 5-1: string descriptor 0 read error: -22 [ 165.224127][ T6186] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.235747][ T6186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.257414][ T6186] usb 5-1: 0:2 : does not exist [ 165.316608][ T5907] usb 2-1: Invalid ep0 maxpacket: 16 [ 165.447006][ T5907] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 165.457877][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'. [ 165.473195][ T7296] netlink: 'syz.4.354': attribute type 1 has an invalid length. [ 165.486742][ T7296] netlink: 'syz.4.354': attribute type 2 has an invalid length. [ 165.636708][ T5907] usb 2-1: Invalid ep0 maxpacket: 16 [ 165.661236][ T5907] usb usb2-port1: attempt power cycle [ 165.670643][ T7304] binder: 7303:7304 ioctl c0306201 80000640 returned -22 [ 165.726763][ T7296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.736245][ T5828] usb usb34-port1: attempt power cycle [ 165.768087][ T7296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.016822][ T5907] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 166.081808][ T5907] usb 2-1: Invalid ep0 maxpacket: 16 [ 166.154229][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 166.165019][ T7310] capability: warning: `syz.2.359' uses 32-bit capabilities (legacy support in use) [ 166.221634][ T5907] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 166.247453][ T5907] usb 2-1: Invalid ep0 maxpacket: 16 [ 166.257483][ T5907] usb usb2-port1: unable to enumerate USB device [ 166.319538][ T5828] usb usb34-port1: unable to enumerate USB device [ 166.330768][ T7315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.341064][ T7315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.344706][ T6186] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 166.363327][ T6186] usb 5-1: Warning! Unlikely big volume range (=19363), cval->res is probably wrong. [ 166.373890][ T6186] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = -3231/16132/1 [ 166.387800][ T6186] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 166.400395][ T6186] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 166.428105][ T6186] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 166.448664][ T6186] usb 5-1: USB disconnect, device number 25 [ 166.866565][ C1] cdc_mbim 1-1:1.0 wwan0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms [ 167.002294][ T7318] netlink: 'syz.0.363': attribute type 10 has an invalid length. [ 167.054091][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.363'. [ 167.084532][ T7318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.103272][ T7318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.386583][ T6186] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 167.546646][ T6186] usb 3-1: Using ep0 maxpacket: 32 [ 167.554474][ T6186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.566153][ T6186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.576024][ T6186] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 167.585167][ T6186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.597038][ T6186] usb 3-1: config 0 descriptor?? [ 168.023210][ T7343] netlink: 'syz.0.368': attribute type 4 has an invalid length. [ 168.023231][ T7343] netlink: 17 bytes leftover after parsing attributes in process `syz.0.368'. [ 168.073712][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.109190][ T6186] savu 0003:1E7D:2D5A.0007: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 168.307887][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.448722][ T7343] delete_channel: no stack [ 168.715463][ T6088] usb 3-1: USB disconnect, device number 26 [ 168.847806][ T5892] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 168.929638][ T7362] FAULT_INJECTION: forcing a failure. [ 168.929638][ T7362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.019806][ T5892] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 169.039062][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.049878][ T7362] CPU: 1 UID: 0 PID: 7362 Comm: syz.2.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.049908][ T7362] Tainted: [L]=SOFTLOCKUP [ 169.049914][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.049925][ T7362] Call Trace: [ 169.049933][ T7362] [ 169.049944][ T7362] dump_stack_lvl+0x189/0x250 [ 169.049964][ T7362] ? __pfx____ratelimit+0x10/0x10 [ 169.049978][ T7362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.049989][ T7362] ? __pfx__printk+0x10/0x10 [ 169.050003][ T7362] ? __might_fault+0xb0/0x130 [ 169.050023][ T7362] should_fail_ex+0x414/0x560 [ 169.050039][ T7362] _copy_from_user+0x2d/0xb0 [ 169.050051][ T7362] get_compat_msghdr+0xad/0x4a0 [ 169.050066][ T7362] ? __pfx_get_compat_msghdr+0x10/0x10 [ 169.050077][ T7362] ? rcu_is_watching+0x15/0xb0 [ 169.050089][ T7362] ? ___sys_sendmsg+0x22f/0x2a0 [ 169.050103][ T7362] ___sys_sendmsg+0x193/0x2a0 [ 169.050114][ T7362] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.050125][ T7362] ? kstrtoull+0x12f/0x1d0 [ 169.050153][ T7362] ? __fget_files+0x2a/0x420 [ 169.050165][ T7362] ? __fget_files+0x3a0/0x420 [ 169.050181][ T7362] __sys_sendmmsg+0x28e/0x430 [ 169.050194][ T7362] ? __pfx___sys_sendmmsg+0x10/0x10 [ 169.050208][ T7362] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.050231][ T7362] ? ksys_write+0x22a/0x250 [ 169.050240][ T7362] ? exc_page_fault+0x82/0x100 [ 169.050254][ T7362] ? __pfx_ksys_write+0x10/0x10 [ 169.050265][ T7362] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 169.050278][ T7362] __do_fast_syscall_32+0x1f7/0x570 [ 169.050288][ T7362] ? rcu_is_watching+0x15/0xb0 [ 169.050298][ T7362] ? do_fast_syscall_32+0x34/0x80 [ 169.050310][ T7362] do_fast_syscall_32+0x34/0x80 [ 169.050319][ T7362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.050331][ T7362] RIP: 0023:0xf7fa2539 [ 169.050343][ T7362] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 169.050352][ T7362] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 169.050364][ T7362] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003dc0 [ 169.050371][ T7362] RDX: 0000000000000299 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.050377][ T7362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.050382][ T7362] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 169.050388][ T7362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.050402][ T7362] [ 169.711598][ T5892] usb 2-1: config 0 has no interface number 0 [ 169.712108][ T5892] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.712132][ T5892] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 169.712169][ T5892] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 169.712191][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.758579][ T5892] usb 2-1: config 0 descriptor?? [ 169.870776][ T7352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 169.879515][ T5892] ldusb 2-1:0.55: Interrupt in endpoint not found [ 170.013899][ T7371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.025206][ T7371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.215036][ C1] wdm_int_callback: 18017 callbacks suppressed [ 170.215052][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 170.227868][ C1] wdm_int_callback: 18017 callbacks suppressed [ 170.227882][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 170.247876][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 170.254593][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 170.258043][ T7375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.376'. [ 170.261021][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 170.276285][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 170.283010][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 170.289721][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 170.296159][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 170.302905][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 170.309439][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 170.316127][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 170.322532][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 170.329227][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 170.335603][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 170.342290][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 170.349962][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 170.356633][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 170.364053][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 170.370808][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 171.906840][ C1] cdc_mbim 1-1:1.0 wwan0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 171.955707][ T7386] program syz.0.378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.714731][ T7403] netlink: 'syz.4.381': attribute type 13 has an invalid length. [ 173.048328][ T7398] bond2 (unregistering): Released all slaves [ 173.582917][ T5905] usb 2-1: USB disconnect, device number 30 [ 173.673671][ T7403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.932135][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 174.872818][ T7430] netlink: 'syz.1.386': attribute type 4 has an invalid length. [ 174.880604][ T7430] netlink: 17 bytes leftover after parsing attributes in process `syz.1.386'. [ 175.206653][ T5905] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 175.762671][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 175.833918][ T5905] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 175.856007][ T5905] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.889489][ T5905] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.934855][ T5905] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.956160][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.057635][ T5905] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.103697][ T5905] usb 2-1: invalid MIDI out EP 0 [ 176.355536][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.471210][ T5905] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 176.861418][ T5885] usb 2-1: USB disconnect, device number 31 [ 178.648915][ T7490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.716919][ T7488] usb 1-1: USB disconnect, device number 17 [ 178.725986][ T7488] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 178.736418][ T7490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.087993][ C1] ------------[ cut here ]------------ [ 179.093823][ C1] kernel BUG at lib/dynamic_queue_limits.c:99! [ 179.100041][ C1] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 179.106283][ C1] CPU: 1 UID: 0 PID: 5197 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 179.116686][ C1] Tainted: [L]=SOFTLOCKUP [ 179.120991][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.131036][ C1] RIP: 0010:dql_completed+0xbe1/0xbf0 [ 179.136400][ C1] Code: 93 61 fd e9 ae fc ff ff 89 d9 80 e1 07 fe c1 38 c1 0f 8c c2 fc ff ff 48 89 df e8 8a 92 61 fd e9 b5 fc ff ff e8 d0 40 fb fc 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 179.155992][ C1] RSP: 0018:ffffc90000a08a70 EFLAGS: 00010246 [ 179.162047][ C1] RAX: ffffffff84c66fe0 RBX: 00000000000000f1 RCX: ffff88807df58000 [ 179.170004][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 00000000000000f1 [ 179.177957][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 179.185913][ C1] R10: dffffc0000000000 R11: fffff52000141154 R12: 1ffff1100fc56520 [ 179.193867][ C1] R13: 1ffff1100fc56519 R14: ffff88807e2b2904 R15: ffff88807e2b28c0 [ 179.201910][ C1] FS: 00007fdf0904e880(0000) GS:ffff888125f3a000(0000) knlGS:0000000000000000 [ 179.210822][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.217395][ C1] CR2: 0000000080159018 CR3: 000000007e786000 CR4: 00000000003526f0 [ 179.225357][ C1] Call Trace: [ 179.228621][ C1] [ 179.231455][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.236821][ C1] ? usbnet_bh+0x6e0/0x1020 [ 179.241318][ C1] usbnet_bh+0x793/0x1020 [ 179.245638][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 179.251345][ C1] process_scheduled_works+0xad1/0x1770 [ 179.256887][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 179.262856][ C1] ? assign_work+0x3a1/0x410 [ 179.267435][ C1] bh_worker+0x2b1/0x600 [ 179.271670][ C1] tasklet_action+0xc/0x70 [ 179.276073][ C1] handle_softirqs+0x27d/0x850 [ 179.280825][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 179.285578][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 179.290851][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 179.296040][ C1] __irq_exit_rcu+0xca/0x1f0 [ 179.300702][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 179.305893][ C1] irq_exit_rcu+0x9/0x30 [ 179.310121][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 179.315757][ C1] [ 179.318750][ C1] [ 179.321678][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.327658][ C1] RIP: 0010:mas_wr_store_entry+0xe25/0x27b0 [ 179.333564][ C1] Code: 24 40 48 8b 4c 24 48 48 8d 1c c1 48 89 d8 48 c1 e8 03 42 80 3c 28 00 44 0f b6 7c 24 1c 74 08 48 89 df e8 3e 39 d5 f6 4c 89 33 <49> 8d 5c 24 48 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df [ 179.353160][ C1] RSP: 0018:ffffc90003106fe0 EFLAGS: 00000246 [ 179.359217][ C1] RAX: ffffc900031077cd RBX: 1ffff92000620ebd RCX: dffffc0000000000 [ 179.367183][ C1] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 179.375140][ C1] RBP: ffffc90003107570 R08: ffff88807df58000 R09: 000000000000000a [ 179.383098][ C1] R10: 0000000000000009 R11: 0000000000000000 R12: ffffc900031075c0 [ 179.391055][ C1] R13: dffffc0000000000 R14: ffff88807e776640 R15: 0000000000000009 [ 179.399022][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 179.403951][ C1] ? __pfx_mas_wr_store_entry+0x10/0x10 [ 179.409492][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 179.414419][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 179.419341][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 179.424276][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 179.429458][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 179.434724][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 179.439904][ C1] ? mas_wr_walk_descend+0x543/0x880 [ 179.445182][ C1] ? mas_wr_store_type+0x1115/0x19d0 [ 179.450456][ C1] ? mas_prealloc_calc+0x291/0x440 [ 179.455556][ C1] mas_insert+0x375/0x550 [ 179.459872][ C1] ? __pfx_mas_insert+0x10/0x10 [ 179.464715][ C1] mas_alloc_cyclic+0x207/0x700 [ 179.469556][ C1] mtree_alloc_cyclic+0x181/0x220 [ 179.474570][ C1] ? __pfx_mtree_alloc_cyclic+0x10/0x10 [ 179.480112][ C1] ? kfree+0x1c0/0x660 [ 179.484167][ C1] ? security_inode_init_security+0xfc/0x3d0 [ 179.490133][ C1] ? evm_inode_init_security+0x46/0x290 [ 179.495671][ C1] simple_offset_add+0xdc/0x190 [ 179.500508][ C1] ? __pfx_simple_offset_add+0x10/0x10 [ 179.505949][ C1] ? set_cached_acl+0xd2/0x180 [ 179.510696][ C1] ? simple_acl_create+0x184/0x1b0 [ 179.515812][ C1] shmem_mknod+0x232/0x360 [ 179.520216][ C1] ? __pfx_shmem_create+0x10/0x10 [ 179.525227][ C1] path_openat+0x18bb/0x3dd0 [ 179.529811][ C1] ? __pfx_path_openat+0x10/0x10 [ 179.534739][ C1] do_filp_open+0x1fa/0x410 [ 179.539225][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 179.544237][ C1] ? _raw_spin_unlock+0x28/0x50 [ 179.549076][ C1] ? alloc_fd+0x64c/0x6c0 [ 179.553395][ C1] do_sys_openat2+0x121/0x200 [ 179.558060][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.563247][ C1] ? rcu_is_watching+0x15/0xb0 [ 179.568001][ C1] __x64_sys_openat+0x138/0x170 [ 179.572845][ C1] do_syscall_64+0xfa/0xf80 [ 179.577350][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.583400][ C1] ? clear_bhb_loop+0x60/0xb0 [ 179.588063][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.593934][ C1] RIP: 0033:0x7fdf088a7407 [ 179.598332][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 179.617922][ C1] RSP: 002b:00007fff05e7f490 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 179.626316][ C1] RAX: ffffffffffffffda RBX: 00007fdf0904e880 RCX: 00007fdf088a7407 [ 179.634276][ C1] RDX: 0000000000080141 RSI: 000055fcaafb702e RDI: ffffffffffffff9c [ 179.642230][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.650180][ C1] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 179.658132][ C1] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 179.666179][ C1] [ 179.669178][ C1] Modules linked in: [ 179.673135][ C1] ---[ end trace 0000000000000000 ]--- [ 179.678632][ C1] RIP: 0010:dql_completed+0xbe1/0xbf0 [ 179.684019][ C1] Code: 93 61 fd e9 ae fc ff ff 89 d9 80 e1 07 fe c1 38 c1 0f 8c c2 fc ff ff 48 89 df e8 8a 92 61 fd e9 b5 fc ff ff e8 d0 40 fb fc 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 179.703672][ C1] RSP: 0018:ffffc90000a08a70 EFLAGS: 00010246 [ 179.709774][ C1] RAX: ffffffff84c66fe0 RBX: 00000000000000f1 RCX: ffff88807df58000 [ 179.717774][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 00000000000000f1 [ 179.725770][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 179.733766][ C1] R10: dffffc0000000000 R11: fffff52000141154 R12: 1ffff1100fc56520 [ 179.741782][ C1] R13: 1ffff1100fc56519 R14: ffff88807e2b2904 R15: ffff88807e2b28c0 [ 179.749779][ C1] FS: 00007fdf0904e880(0000) GS:ffff888125f3a000(0000) knlGS:0000000000000000 [ 179.758747][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.765343][ C1] CR2: 0000000080159018 CR3: 000000007e786000 CR4: 00000000003526f0 [ 179.773366][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 179.780708][ C1] Kernel Offset: disabled [ 179.785013][ C1] Rebooting in 86400 seconds..