last executing test programs: 12m47.109664003s ago: executing program 2 (id=1814): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r4, &(0x7f0000000280)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r7 = socket(0x2c, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000240021000000000000000000000000006fbd1aa3a99926996e913dc7da4a74490600043715000000dede58c660927ada2978dd5bb0e2f58fdf58cfae42ce4632d9811e67ad39eae82677ee7e6d93331249ce760cb47119946f4427452b972aeef69f65dbdb9cc17c641cd444bc8951047778a7cfe5ef722282f8c7c1a5ea527e974ac5c40e557f6032bd78c9baa7f9327caef36eb2ed8a1173ebd7d65342280dab3477db836e418f92"], 0x1c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0xff, 0x0, r6}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp=r7}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, 0x0, 0x0) syz_emit_ethernet(0x80, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x5}, &(0x7f0000000180)=0x18) bind$alg(r9, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) 12m45.551263789s ago: executing program 2 (id=1820): socket$inet6_sctp(0xa, 0x801, 0x84) syz_usb_connect(0x5, 0x300, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x7a, 0x5c, 0x93, 0x20, 0x257a, 0x3606, 0xd50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ee, 0x1, 0x1, 0x1, 0x180, 0x4, "", [{{0x9, 0x4, 0x8e, 0x40, 0xa, 0xbb, 0x8f, 0x44, 0x5, [@generic={0xa5, 0x6, "65a9a7d4538dd7f94d2bbb94bca856fde5d87ea41de0436a3ee7444dfce39644d7db5a5949a406a7ef028f63277aa07fc941173f72b2e234f48ea59749abe347b53c6e5e78399d6aafef4fb7387d98adbd95271dd3a271482026201a4fc378b2e89ead63b1e53941449f21fa4a9dad0736e48709c03869ddb5644497da975dfa06d60597ae8fef122f88dac6125f09b33e6e05b80feb76e991b8cb08c705977221be14"}, @uac_control={{0xa, 0x24, 0x1, 0xe, 0x12}, [@selector_unit={0x8, 0x24, 0x5, 0x5, 0x8, "df815d"}]}], [{{0x9, 0x5, 0x3, 0x4, 0x400, 0x3, 0x3, 0x8}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x9, 0x9, 0x81, [@generic={0x95, 0x23, "f64c6c9c4da5b5a0e92807ccc20e0ef1db1eb611fc952f686149c0ba38259804a6ead27ddb2352f1d92b76ca6d285f36b662bf648e0ed0984739a9e446d57e60499557765ff4617564cf2458391c745034f436b7894cceb29cff0127002e4b2c677c4339d39e47c0f6e6d966558e822ccd4939e346357686e3f9a7ce6ca9ef1aa2df0f4702f877a8288129f38f2c561cbbff56"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x81}]}}, {{0x9, 0x5, 0x1, 0x4, 0x68, 0x69, 0xf9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x6e90}]}}, {{0x9, 0x5, 0x0, 0x10, 0x60, 0x9, 0x6, 0x9, [@generic={0xf7, 0x21, "d618293ac9a138585d6fca795a740b39613ed63db4d697b4865053986393297bc1fcd196f70bb935ab0fa483b34555a966ea2af290ddaf8b36d80ec4710ff7f5283678b4d682078d2daa1ae87ea01afe3e883c1115399e92b01d9ae49ffadce691346fdec9884aae75b5a2461d0db1952ed423ea94dee00fb1491114ec7cbd4f38ddfeb2e9b992d044909bb39696b34bbda21f93e5f5373474f066be4a37b3c7d7a97759f9e38a406bd826f6283c4e696eabdaf82d3c12aff25f8992dc81915da4ca75813b08f68566173f7a76fb8c581455a64adc3d2adb0d10e8419c779f3295f92ed1a28e811ed9071e1e6427340975e0c3c561"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x6, 0xf7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x81}]}}, {{0x9, 0x5, 0x80, 0xc, 0x38, 0x4f, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0xd, 0xa, 0x1}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0xa, 0xfd, 0x5}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x43, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0xf5, 0x2, 0xf7}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0x0, 0x5, 0xe, 0xff, 0x3}, 0x11, &(0x7f00000006c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xa0, 0x0, 0xff, 0x8, 0x76}]}, 0x7, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc1a}}, {0x83, &(0x7f00000007c0)=@string={0x83, 0x3, "9bd604b5645805e729621750decf20595f7e432f054c5e8856815357339fa5831a85f7dddd699c867e7668e67d0eaece65dec37de1a1b15803e023b1810b5905b121eee55f73bc67d4ffdcb03cffdbb376366ad484126efb90a37001cb32f682cdc492f89d77e7821c90dc0a6e39d479a1bd909224c5e3cda9a465e9255d77230a"}}, {0x4a, &(0x7f0000000880)=@string={0x4a, 0x3, "f66591f48ce6ef60a760e30ee53dcb7d53cc3dc539d0e66b529f38f064854a74f1911bf007a95ef885338c3699ad0234920cbea55f43b2f626d79d129407cd4deccb1d563b4401fc"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x424}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) cachestat(r0, &(0x7f00000000c0)={0xff7fffffffffffff, 0x4}, &(0x7f0000000280), 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002540)=@delsa={0x28, 0x11, 0x1, 0x709d2c, 0x25dfdbff, {@in6=@rand_addr=' \x01\x00', 0x4d3, 0x2, 0x32}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x44050) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 12m42.154278873s ago: executing program 2 (id=1834): r0 = socket(0x2, 0x80805, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500, 0x0, 0xe2}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) getdents(r2, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001180)={0xa0, 0x2, 0x0, 0x4, 0xc21, 0xffffffff, 0xfc1f, 0x3ff}, 0x20) 12m39.970762947s ago: executing program 2 (id=1847): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)="91", 0x1}], 0x1, 0x0, 0x0, 0x40004}}], 0x1, 0x2400c044) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)="91", 0x1}], 0x1, 0x0, 0x0, 0x40004}}], 0x1, 0x2400c044) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000700000004"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000700000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000300)={@multicast1, 0x1, 0x0, 0x80, 0x0, [{@loopback}, {@multicast2}, {@loopback}, {@multicast2}, {@loopback}, {@private}, {@remote}, {@local}]}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000100000b70800000000002fe4a4ecfea0000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000870000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 12m39.528232128s ago: executing program 2 (id=1850): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x111080, 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) renameat(r1, &(0x7f0000000400)='./file1\x00', r2, &(0x7f00000004c0)='./file1\x00') r3 = syz_open_dev$rtc(0x0, 0x800000ffc0000001, 0x1b1203) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000300)={@local, @local, @void, {@llc={0x4, {@snap={0x0, 0x0, "af", "66185a"}}}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="d1ce7aab1d4229a0f809033dbd7000fedbdf0018000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008084) r7 = socket$kcm(0x23, 0x5, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0xf8) fanotify_init(0xf00, 0x1) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(r7, 0x800) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mincore(&(0x7f000001c000/0x3000)=nil, 0x3000, &(0x7f00000002c0)=""/50) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080)=0x8, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006e00000095"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0xf9, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) 12m38.455368419s ago: executing program 2 (id=1862): socket(0x400000000010, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0xb9, 0x10001, 0xc519, 0x1}, 0x50) close(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f0000000040)}, 0x20) 12m36.669704822s ago: executing program 32 (id=1862): socket(0x400000000010, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0xb9, 0x10001, 0xc519, 0x1}, 0x50) close(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f0000000040)}, 0x20) 2m45.227615358s ago: executing program 3 (id=3937): syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e100090583", @ANYBLOB="50ba6bfe25d6ec277db6066f6c7109f3ae664c48dfd36ca4b55b166ad1d833d365b4f6b02487cf019a111ce7b5d6c7e5ddeeb41b91b8dec0606c988afcd7b4a746e7d4f3aa4c433dc48496"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='fusectl\x00', 0x800412, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, 0x0) socket$netlink(0x10, 0x3, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 2m43.494472589s ago: executing program 3 (id=3943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2720, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) (async) getrlimit(0xd, &(0x7f0000000040)) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r5) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r6, 0x1, 0x20000040, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) (async) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m42.444088588s ago: executing program 3 (id=3945): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) unshare(0x26020480) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0xa, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x4, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m39.165391954s ago: executing program 3 (id=3953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) syz_usb_connect$uac2(0x5, 0x9e, &(0x7f0000001580)=ANY=[@ANYBLOB="12010102000000208c0d0c0040000102030109028c000301008008080b0101010c20060904000000010120000924010300042c000408240a05004000030c24030207030503050300010f240603050600010002ed08000400090401"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) tkill(r1, 0x14) 2m37.529071755s ago: executing program 3 (id=3957): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000300)={'\x00', 0x3, 0x5, 0xb7, 0x1, 0x20c, "00000000020000000300002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000007000003000000ff7f00"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x8, 0x53, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "5a060040", "0725eade", "e4eecc1a", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) socket$inet6(0xa, 0x80001, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7fec}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 2m37.183979505s ago: executing program 3 (id=3961): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10018, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd243a432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)="6da8234fdc8e79be", 0x8}], 0x1) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x18, 0x0, 0x6, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m21.046856079s ago: executing program 33 (id=3961): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10018, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd243a432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)="6da8234fdc8e79be", 0x8}], 0x1) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x18, 0x0, 0x6, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.599991935s ago: executing program 0 (id=4985): r0 = landlock_create_ruleset(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020400) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x125) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r0, 0x852ac000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000a1401f3"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) 15.533654405s ago: executing program 0 (id=4986): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0xfffffffd, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20045854}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373091de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x2}]}}}}}}}, 0x0) 15.452588104s ago: executing program 0 (id=4987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cecb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c", 0x98}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x44, 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.420319561s ago: executing program 0 (id=4988): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 15.224671594s ago: executing program 0 (id=4989): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, 0x0, 0x8000) 15.052374114s ago: executing program 0 (id=4992): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000500)="3821507f139c", 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0x8040800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 12.038626643s ago: executing program 1 (id=5005): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) fcntl$setstatus(r0, 0x4, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) r7 = syz_socket_connect_nvme_tcp() ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000440)=r3) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0xfffffffffffffffe, r6, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) unshare(0x26020480) poll(0x0, 0x0, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1, 0x6, 0xe044, 0x0, 'syz0\x00', 0xfffffff2}, 0x6000003, 0x0, 0xfff, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 8.172774932s ago: executing program 4 (id=5014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty=0x300}, 0x10) 7.903163615s ago: executing program 1 (id=5016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x18) 7.191872092s ago: executing program 6 (id=5017): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x40, 0x1, 0xb, "4da4269aaf83b6907af336"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@private=0xa010100, 0x1, 0x0, 0x70, 0x0, [{@broadcast}, {@remote}, {@remote}, {@private}, {@private}, {@multicast2}, {@local}]}}) 6.582267034s ago: executing program 1 (id=5018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff19, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x7, 0x0, &(0x7f00000003c0)="6f11ba816056a1", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 6.500343898s ago: executing program 6 (id=5019): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="08001f"], 0x7c}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0), &(0x7f0000000000)) unshare(0x2040400) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r4, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000008000000730a00ff000000002e0000000000000095000000000000007b100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x161, &(0x7f0000000180)=""/149, 0x0, 0x284, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd84, 0x10, 0x0, 0x1e}, 0x2d) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) 6.3276724s ago: executing program 1 (id=5020): r0 = landlock_create_ruleset(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020400) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x125) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r0, 0x852ac000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r1]) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000a1401f3"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) 5.81758246s ago: executing program 4 (id=5021): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459", 0xec}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224", 0x1b}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getgroups(0x0, &(0x7f0000001080)) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') 4.2411427s ago: executing program 6 (id=5022): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.962149311s ago: executing program 1 (id=5023): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f00000004c0)="1a4f5e314c4d70814e63db500e0113115075de8f522cf3e02b85853f1d338a12c1633003e5a7cf6e39", 0x29}], 0x1) 3.904319186s ago: executing program 5 (id=5024): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.752112666s ago: executing program 5 (id=5025): syz_emit_ethernet(0x2b3, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x279, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c03fbf2c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f022"}]}}}}}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x2, 0x48000020, r0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x2002) 3.648204979s ago: executing program 5 (id=5026): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) ioctl$TIOCSTI(r0, 0x5412, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) 3.636068938s ago: executing program 5 (id=5027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040481) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080)=0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0xd, 0x14, 0x3, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @broadcast}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, r7, 0x0, 0x0, 0x1}}, 0x20) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, 0x0) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x40, 0x1, 0xb, "4da4269aaf83b6907af336"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.310089582s ago: executing program 4 (id=5028): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100), 0x10) (async) bind$xdp(r0, &(0x7f0000000100), 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000140)="8f7785dbf2fc9f1351628c957655e11f463a1e6270ccc7f8ef1e2e87d538287603d329e2d36b19459bca06af7cb70c33523b8dfe54dd2377fd3e5fc9afb33ced5ecdcf65a876f8fa1d466f", 0x4b}, {&(0x7f0000000200)="5e520e3541721c74a4300e1ae0c81bd95a07eb685e14d94563cb50ab9f098ec7cf8ab63c400c241230feba5b440c8c2c3c16767c2e3b0eac45ef6f20f13ea9bf60490b98206a602d6d6967bbae7bdc4d78d60eed0efcbe5921dbe7a8e12872dee645bfbddd3b21547bafb2bca86b013aa2af562d3b0ea66293e40e6f0125f38a4800", 0x82}, {&(0x7f0000000380)="469ff2bce111b2bf2ceffd959abeee825d58f30fa4ff19e6c4aa3bb018e0c1a0b6ef34b49a6e332937bb2bb289b24c57641f6d1200c2beb76aedeae7b4f653d459d505bd2a16010d5b5a2e498c3ff1ff1aea9b8da4eb2bf6f874a970ec36e7176fa9ffeca3dfb90cef7c581ad014b6ba4f623503f20fa2346bf9ab89d6aed7", 0x7f}, {&(0x7f00000008c0)="22e63019a878b0095ee47ca49b051ad97760de83fc5ddd23c2275572a272a9fa9c147758c070988a4e1b6cfea0a0836435300e1cb15ef1ed5f3b5f48c1dfa1b2168a10d2bbd87ca1158802c5755ad984a6c939abe56306db2ac5a74d0263ed314cc77af470119207904c7d616f30dafbb333cf71f358265fba1c31afebbe462e921888b63ef89d801b920fdbc90ec48a20b385c4de9859d566a907c1cc51ad201a8018bd349b615f1e8a9d481855bc91fe17487ede1843171297797af9f6e3ec1dcd8dc1346247bb118e5eda05f1f46a93cdfdd2a7237daceff8b5113d3164e30b40d9419d54b32507b54f1bac61f404092d2108f41a6e51ee6e64a6a179dd17be55c6246c6cde4cc7f6184e34b3edcb08363792a53eef06eb7e2bb7c2fe76e7a06f4ffcb28433154c382b289c84461413e1af415f6fec4f96816ea88c9ff56088ad2d4c7b7b0ea5294d9a2c17278817aa10a8574229dfff0067963807e7764d29d7d8538cae7ee03532b010ac173d3294181826937a9f5ad71a02b9a17b54ed2cb2ee2bb6ffe4529cd093aede27ccf3738287a8a87ca25ce0659ea8fc336ef2f78a1b41725975a74e3db8f5d0c90f0742f667c09f5d0e3f4663495b265376100dadca052749197dbac2eda7b6079d467f02dbfcc25955d10412d67b594b91e72774deaf91d4127a428ab6a3949b8a57f3af40f32762feeed61f9510bc625028b9a49b54322cd599037821b1fd06984a2abe1785dbd659c9347bec6b238d88f388324c39a001981e4f78bd1db6dde81174455b7af3aaf9dc85386e12400c2e4501b7c1684e4eec456a67962463db012a647abccf81e674b92e00fb7228e590abfddb2951cff3333de37c0c323d22c1eeae085ad4b069d241088ba552835511d9460b70d8962b04ed754419a35a25e0891d3bcfa089a7ec448efc18548d7fd9e27e84554381241eb7e5e32b1302d6b815bc313600a47934a06cf58aba59bdfa5ccebdead8d131659e8bc3c4b98b004f2a44dd1fbd5d4da9d39aeb71d965fd362f5e07b819f560da716413ee9f8a1dd5b19aad39bd48ebaa7924494b82f542bca5d80b6d748e88c11c787468ad6678f44f4002237a6d7543e8307cf31aa7e1f2b617b87f4be723926b589355f15d18f81bc08605f45c1eae88160589fb4f1ac0f4514d86f9cfa6d00091d4541a743411387323bfb682bda0dab3cf0d379d40f2bf7f2b9f283b60333baf464f2f2515b099e1356dcf8fbff91ebb0f33ce30b309625dfd040d59e47f1e7933b341d7c96924bbf54dd048837b9b6fe4eca5424f8569374a884b1b984c169128282f7b169783f226db976d60231e1e7b1c32fb7924e1ec9484c2ae235a6ad21d0636d196ef8e74e7e37e52718c3db88e7c6635dfee7bdd3308d5bd42a046a42d9a4f0031f0a9b2e6b0609597bcbbd602bbead3f810cd3bb5eeab16be93f8b6dd3f1c4c0449ff9b3fcc0cd29cc80780c2cf8e00dd8802fd0a074ac486f2feaa1e24a922452772b8f3b442a53df4967d2f0fae3ceeff20909f3697c86f99f013cca81d96da72b4a39140ae5bcd94a72027e5117dc45dcadc0e78f1e35856a352d4800a3d368a1d7e97b07aff952a68b79cb272bdad0939cc2d6e0ed128dd4996792ce9ab19c57da7b878f8b752c00557e845f34e060f6bdc7d5e9b1e34c8e50205084f80437aeae3f31a09328f517a178c9a51150cc1945e1c77ab8ba09e079a2bae5a55bc67d2e94769352c816462f57770898be270359ae5bf7aaa575e0181d131d68b16690bb6acd3927caa862e42bc8227cfd9146e2e072a3185b44fa19f0116bec18b0eccfe71b693254b5effee419798d9466018bc86179e3e383a54ca447c5b8f5007cddf1cc864986d5a8dea1cf789a65875867a700caaa27fae59aa6bcf99cc12a09acec95c7f8372e8be3a5f4f9d60537f4abf1006cf361ce90d1c88d54b8972149eccff88e5672741872045ef28eb30eca2d5fee2979d910182fb0d8d0f8ab6c9c9bfd122cb2c7fb1f34f1f747b046c0d16cb2eb1479e885352d9ab03b9285f3e828e9b34e159bf0f7cb40f3da68f7303fa15831c566965cb00c166bcbf67c6a5a2caccec076a85be5a16cef9df0e5e1ec5cfee54c219ac9fde95a9b94853f5072b2be7b507fd25f2cee56e777425117fa0563ef8ee2ac9c118566bebfe3e665d0795099f9792a8d26e1dbc341138e56dfb61833465b67fb6311df477682ec8d5d5ffa0046a0fca75f3e347abb23a7dcbe500e8f185a638b4feba846cf7bb9702276d2bd1a2415f3b855c6656a392dde0dc50bc75733e166b9f9b797b9ba2a9521b898c1dd86bff2469d0eb17d628127411a9d3494d6b5a25eba644ef116d13a2a4968a4087d492287eb20bbccafe89d75969f668ea3ac56fc4c0f73d0b557620b1a80cdd0c15332f7379bfbd807e862a1b90068d1739b062615135197bdc1a908191c5fd1ceb93ce839c73d87a6d70ff71d038dabd2f47ce55d342b8a5f8d3dcc67d48e60c15dab1f6c6da9c084e6261e3a98983d43cc60af4d4eebdf7b7a0fb639471472a7e7b43d8a5f0bc010afffbbb240db42a3730af6d99cc1689cea0b75642cbb961e61ae1aba88d7e034b9ffe6fbbbe1aafc16eccf6c5141e37c8a3898192d37a6e2f2d66f6ba3cac3bd1cf05302e985c56579100db877225172ea0aadf4e07509abe9c1659e0321154e203c10ea2a12a5b10a653efae4d46a62630df532d7138e2bac6e70f089dce9669e29a1d15a334e30783ebd2ea82a489dd9e24a523c675ec5d2384a9230f959d5ed5c1e0c2aedb1429ff404bfb4e0b46f39324f61a19ebf43e7a3783a7405d05acc8bd657f735d9badec16ca902a8363313639bf43f203073de03a1d7448bdbc1206e9a7f52e908594682c8ba2ca94c5678de5ef7fdd6adc934b42bf0311944d6aba9a11e6b1c7b1904a7c043f62b023c7b0a1c58810141eaff68bc53c93ab24e8ec658745978dd20d86f9765462d6d1f953ca295670c618d4b33db2643c8843484743e0c08ac2a437f045bd61a63beaa22ed69b39ce30efff29ff1e97bb845dfc9c9b0b63826c061a74ce334d589b401db7d8c1afa60c3a26869a36365aff8124f116e03b1ff6df1a6fc4a1937495892d6b0a0748e74676424208483840253666bd7a74629939b302c9c21f229fab3847b1f04b6ddf8747134d6811371324345967a4cdca6466574f6366dec89751cb184f6d53f0c0fa312ed56bc8d54df581ec0890a3b6acdd3eccaca5fb15b253133333b891b3d23ba5b8c4dba54a5f4b134b92a876f60df4a48cf6ad93f41d8d7068fa3b2bd6e4cdb3445ecd197818dc1d93c72272fd62ce44667e4b5f08f439a4f7c4b3e2d02ba4a2adbf7dbf51f16a24345a3674b2da4502dedfa711a0223440e344aad85107b441207bc9ebad1da845e99deafaa9edf86720ae9799eaad4552fdb4f2ded61ce45321fc2076c1cb5be6df1b26937fc955cda9f27c604b5491c724ae72a8b4b68d260c80657fde3faf6758339b39a0a53d9d07431e8fba5d5854d6109dc87bb233f8501822a35234f38d3b09bf92ec973b98ee673c175e7eb94a6539bbd23f0246211e36726e7b962dbaaeb26c82f724a302b51aa8564b79d6d22011adb4692c983b615155c90aab50b2e8f4147a408fe664a4f90fd7f456a63ea66f88c390e101321ec47a54d4522239392560bb9f33807ba05a295e44fb7b0d54cd87656501690b25a19cc0a7c6b14babe16ca81160b0380bd94a2089e6b6d2b2194ab6511cb7d94d219fab2335709efa7e56918919b8448b9d80084d5e416ff68b63720bbd0ca85eab74d32c95d22d3f623b377664eff2d91a7275d8979d5539aa447d0446e22a81e6a4e19dd498da0f688e3332775bc517523dc726192952952fcfd507d0943cc70761b54b3ebb55f0721c004be8b84e6d1e4b6ffbed74104514ca6f39f8d2611e899d73725dffde3b7b19f6f136e16091e3d806e311205b26b8bab4693d9ae644bd62e19670b03d909b850f4da3df9a0424707868b6e49763d93f815ac7d6fab20d0a47ea188affa54b3d5228f639509685a342ec251d3b88a679517c9965ae500c23feab397c6816e5703d11433f36b8cb9cb273fbd9e57f63731f7b4c0568fde67f9580d4fa01645b8f40c346c044cffab593c9b0a6d89936a92d7556cdfda359b7f820297cd43718fd61d5d9027327aa0a7dc86539caf1f2450b631a079cb157dac46643bbd1af701ef7584948c00928f74503d1147c1fba40e03ae7b87b40e03debe4ce5f12ef802978c30038b5eb5ea04c639090b809e351f31c303cda4a8d950c3b56d4542c6ca84a388fc67b549be9e9c70325248cae24cdad7f5ceee1f662b6459378798ec2f25a59a7daa229624d1c3eefc5874e2d6401c2819b30b326c7c2ad5b4420a0236c2c19955fc561ee2468c5a463ef39601d7d546e18578709f41ed91ae0cbeef5287075209b1ac8f9626e78820b9d79c399d969a97ea1870e94a75ec3adc2da93ddb3af62b1a9620cbe73eb2612a071ec1e1f22c578df094a4f89e6eceadffefaf24860f5d16d58ccb8fbf39b37d1a1bf7d62623fe52814c46ab2437ab1e4ac5d9b576b13531275fb7763ab1d156eebf92670140f2296e2a8d41b7b74700ffa754bcaf9f32b4419c0e98b4a263e559e52f33436cfa996616032cce135bdcf1b451ac7580c2215f4bd036ea4d8ab0eff71eaad901ab94762f87c87be60dd348d1ae15644084574411fbd89d06fe50ea85d97f92aeee3a1a98a18985bf944b5f96a2eb0e97bcf084fff96c2b0226c89356a92a525ecf67e4eff6197c5c5829f6b52570fb336cfa93b5f0fd730f9750784a8a992ad1006e0d82bdaf9df28bf9b38fed3e67d494483c6f886fc5d435a109b1a14377b865c63b66c53a88c7626b8ecae3f46165c160f65ac8c3caf03277385784b6ee2c6a422797bca643470034db612fd8fa5a2769df3b077ddad1c5f30481f7d17a4717c50f9f490f738a51f79c97a3ae9b6d553f291973c9dcc214c0946a4a2c020c6f0ce9ed0b909b4c6fa766e9bb3c90e3842d0406cddfa321b00afc261507ee25fa8d36dcf816ab160aa5b7f1e6842f7d9dbc3705a3e8058d2dcfdeecefb1c3dfd8486547f0ba2583081d48ed1d55afa63a3cf0049d77b29ecb24d984b5e4ae025551996e50cd219847699f5deb4cb35ec684a1937e8299aeaea0e4e8f20048e1024b1a09d16546ba87204c97603033988b22f43254719e8a4af0dc99d009568187af7aa8ebb3358a163fb3407472ecddb4bbe52dbd4194def665f18092b94b52fb49d185acb665690ce1668ade9c18e7ee16c1bdcea43e6400d7d1150ec67382443feac8857d5a15ade3ac326d32d79551ade5db7687c1e4b469066e89a5cae2fb45d3ce120228ab6004a0338ec03b6f234489b56ccaca5ec989c35ebfe1608f4615795ab1e2074e300ac0d5eb8bc9235721ecee4322c87c7ce9555a58e7c52196fbe6c4575b9f4c9e2d6723998f40f69419d463d0a55c897861f2782060b2aa3f9042f3216b9b1e7bcce92b312b657023b4ad69953b0abc593760ae08b45e6ef33ca4395bfa689781f772930e6650cd48465d15e27e6c350b61b6260702ef11d295cba5cbea3132d59a978f74dea113721c9f641506b56c52b9965c6ad6c1ac35999bdb4729adecf8fd1b26f18dfca85d9effc2732fb60cb9753bf114096d1945fb997f6d5ca6ba6dc467ce53769b07da70af63384b519fb6b7a54d85e4fb3d5b9d14bb160f4f24403323ea52eb1", 0x1000}, {&(0x7f00000018c0)="1a09c91dd025b22985c34fa6cfc95a15aec465ba011ca93a4eae327aa4b87e9255070c88cb3dd41349cc8b755c2d0f866b135fdb6bd2a64098108f8f4451", 0x3e}, {&(0x7f0000001900)='U', 0x1}, {&(0x7f0000001940)="da41d2287a15fab9bb0038e06e0047bf1cc30df4bbdb4b15446d743a700c2d48d5b1967f30e331f41600d5a81958030510552012947322821ec1b3a42582161879", 0x41}], 0x7, &(0x7f0000001a40)=[@assoc={0x18, 0x117, 0x4, 0xf6e}], 0x18}, 0x44000) (async) sendmsg$alg(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000140)="8f7785dbf2fc9f1351628c957655e11f463a1e6270ccc7f8ef1e2e87d538287603d329e2d36b19459bca06af7cb70c33523b8dfe54dd2377fd3e5fc9afb33ced5ecdcf65a876f8fa1d466f", 0x4b}, {&(0x7f0000000200)="5e520e3541721c74a4300e1ae0c81bd95a07eb685e14d94563cb50ab9f098ec7cf8ab63c400c241230feba5b440c8c2c3c16767c2e3b0eac45ef6f20f13ea9bf60490b98206a602d6d6967bbae7bdc4d78d60eed0efcbe5921dbe7a8e12872dee645bfbddd3b21547bafb2bca86b013aa2af562d3b0ea66293e40e6f0125f38a4800", 0x82}, {&(0x7f0000000380)="469ff2bce111b2bf2ceffd959abeee825d58f30fa4ff19e6c4aa3bb018e0c1a0b6ef34b49a6e332937bb2bb289b24c57641f6d1200c2beb76aedeae7b4f653d459d505bd2a16010d5b5a2e498c3ff1ff1aea9b8da4eb2bf6f874a970ec36e7176fa9ffeca3dfb90cef7c581ad014b6ba4f623503f20fa2346bf9ab89d6aed7", 0x7f}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="1a09c91dd025b22985c34fa6cfc95a15aec465ba011ca93a4eae327aa4b87e9255070c88cb3dd41349cc8b755c2d0f866b135fdb6bd2a64098108f8f4451", 0x3e}, {&(0x7f0000001900)='U', 0x1}, {&(0x7f0000001940)="da41d2287a15fab9bb0038e06e0047bf1cc30df4bbdb4b15446d743a700c2d48d5b1967f30e331f41600d5a81958030510552012947322821ec1b3a42582161879", 0x41}], 0x7, &(0x7f0000001a40)=[@assoc={0x18, 0x117, 0x4, 0xf6e}], 0x18}, 0x44000) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x401, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x401, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2.205986458s ago: executing program 6 (id=5029): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xfa, 0xe6, 0x88, 0x10, 0x17cc, 0x1969, 0x3415, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x30, 0x31, "", [{{0x9, 0x4, 0x0, 0x1, 0x0, 0xc1, 0x79, 0xf5, 0x81}}]}}]}}, 0x0) 1.68403551s ago: executing program 4 (id=5030): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') read$FUSE(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @enum64={0x7, 0x0, 0x0, 0x13, 0x0, 0xf}, @float={0x2}, @enum={0x7}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x5f, 0x0, 0x5f]}}, &(0x7f0000000180)=""/145, 0x5d, 0x91, 0x0, 0x0, 0x10000}, 0x28) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x456}}) r2 = getpid() syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000fc0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x110, 0xd, 0x4, 0x4e, 0x10, 0xf8}, 0x5, &(0x7f0000000d40)={0x5, 0xf, 0x5}, 0x3, [{0xea, &(0x7f0000000d80)=@string={0xea, 0x3, "65350897391ea5118d01111c81e7c4f59e7b114ac1dbc076a51d30dc26bdb0163ef6c70878a74267602dc8bd5d2d0f3e4185eba0b0ea85624cc95fc5fb338d4f2d8bcdbfe162eeb65ba8d45da1a7c943350c1df8dc7b04f5e03b7ea473f941d1f50e4e296b7561b4b9d246130f7a4daeacbc86f533ccd395ce2168341124d5c0289ead9f033541a1fa1f9067e472d0e9922c27cedb460e609891c1fcfafdb7becf175e42b3ad83e60f9c102193d9393c51fcb2980c2c1af97be1210285127e2c6371ed25efb866cd860d90e0fdc2456ea875c12b063e91864ef576b41d4a8629bd3f028f82daaeea"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x140a}}, {0xce, &(0x7f0000000ec0)=@string={0xce, 0x3, "a781308c2aea4325e99ef2bcf93ba14a8e257efb1e575b4924f2bcd9dae119ad404ba892bbdca5d4e131a6b690d557b7cf4250537c43a8a0dc8bc10c102e56260ef1a56256304b6418d3efad61db7e38ffd52c2bd463df3cda318fd6ee683a160962699ead8c0ff6feb53b409f8b2d359e091614e6205a08b5be52d5790febab349ee4506d6f564da55eb0475e204f9c842c1a4f8c4833587ca31426d96f059094719426454b1a3b93ceb79c66d6778993fad1ab2894ca006d7af88024c2706888623e506bc829cc770f7d81"}}]}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) write$cgroup_pid(r1, &(0x7f00000002c0)=r2, 0x12) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.388019359s ago: executing program 6 (id=5031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) openat$cgroup_ro(r4, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) syz_socket_connect_nvme_tcp() r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 955.4836ms ago: executing program 1 (id=5032): r0 = landlock_create_ruleset(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020400) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x125) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r0, 0x852ac000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r1]) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000a1401f3"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) 860.198218ms ago: executing program 4 (id=5033): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) 751.509391ms ago: executing program 4 (id=5034): r0 = syz_usb_connect_ath9k(0x3, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b62011"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) 273.1404ms ago: executing program 6 (id=5035): syz_80211_inject_frame(&(0x7f00000057c0)=@broadcast, &(0x7f0000005800)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @random="e568d6a25d3a", {0x6, 0x3}, @value=@ver_80211n={0x0, 0x1, 0x2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x30, @val={0x8c, 0x10, {0x3, "c69f92d44505", @short="100592e1c8f6deef"}}}, 0x30) 140.128327ms ago: executing program 5 (id=5036): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) ioctl$TIOCSTI(r0, 0x5412, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) 0s ago: executing program 5 (id=5037): syz_80211_inject_frame(&(0x7f00000057c0)=@broadcast, &(0x7f0000005800)=ANY=[], 0x30) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000020000000000000001000000850000001300000085000000a000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000200)='!se\xf7ih,\x17i\xeb-\xed\xacP\xe6lNn\x00xseqinux\x10', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000040)="b80002c74b98000500000000946b", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) accept4(r3, 0x0, &(0x7f00000000c0), 0x800) kernel console output (not intermixed with test programs): value: 6 [ 1210.845141][ T36] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1210.845168][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.845187][ T36] usb 1-1: Product: syz [ 1210.845198][ T36] usb 1-1: Manufacturer: syz [ 1210.845206][ T36] usb 1-1: SerialNumber: syz [ 1210.868594][ T36] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1210.989339][ T5876] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1211.246234][ T1568] usb 1-1: USB disconnect, device number 71 [ 1211.705534][ T5799] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 1212.109746][ T5876] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1212.110295][ T5876] ath9k_htc: Failed to initialize the device [ 1212.134783][ T1568] usb 1-1: ath9k_htc: USB layer deinitialized [ 1212.494643][ T1568] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1212.669014][ T1568] usb 1-1: Using ep0 maxpacket: 32 [ 1212.683978][ T1568] usb 1-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 1212.684038][ T1568] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 1212.730062][ T1568] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 1212.730097][ T1568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.730120][ T1568] usb 1-1: Product: syz [ 1212.730136][ T1568] usb 1-1: Manufacturer: syz [ 1212.730152][ T1568] usb 1-1: SerialNumber: syz [ 1212.786701][ T1568] ldusb 1-1:1.0: Interrupt out endpoint not found (using control endpoint instead) [ 1212.795812][T10397] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1212.811983][ T1568] ldusb 1-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 1212.998577][T10397] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1212.998612][T10397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.998634][T10397] usb 2-1: Product: syz [ 1212.998650][T10397] usb 2-1: Manufacturer: syz [ 1212.998665][T10397] usb 2-1: SerialNumber: syz [ 1213.089594][T10397] usb 2-1: config 0 descriptor?? [ 1213.112531][ T5876] usb 1-1: USB disconnect, device number 72 [ 1213.228864][ T5876] ldusb 1-1:1.0: LD USB Device #0 now disconnected [ 1213.644645][T10397] usb 2-1: USB disconnect, device number 122 [ 1214.554855][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4040'. [ 1214.554893][T17983] netlink: 'syz.1.4040': attribute type 12 has an invalid length. [ 1214.554909][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'. [ 1214.736507][T14324] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1214.737513][T14324] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1214.737562][T14324] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1214.737602][T14324] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1214.737856][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4040'. [ 1214.737887][T17983] netlink: 'syz.1.4040': attribute type 12 has an invalid length. [ 1214.737902][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'. [ 1214.888432][T17987] FAT-fs (nullb0): bogus number of reserved sectors [ 1214.888459][T17987] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1215.199688][T10397] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1215.364796][T10397] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1215.364850][T10397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.364878][T10397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.364988][T10397] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1215.367806][T10397] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1215.367834][T10397] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1215.367856][T10397] usb 2-1: Manufacturer: syz [ 1215.387365][T10397] usb 2-1: config 0 descriptor?? [ 1215.892243][T10397] appleir 0003:05AC:8243.002B: unknown main item tag 0x0 [ 1215.930833][T10397] appleir 0003:05AC:8243.002B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1216.545042][T10397] usb 2-1: USB disconnect, device number 123 [ 1220.372962][ T5919] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1220.534894][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 1220.538797][ T5919] usb 5-1: config 1 has an invalid interface number: 142 but max is 0 [ 1220.538829][ T5919] usb 5-1: config 1 has no interface number 0 [ 1220.538878][ T5919] usb 5-1: config 1 interface 142 altsetting 64 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1220.538908][ T5919] usb 5-1: config 1 interface 142 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1220.538934][ T5919] usb 5-1: config 1 interface 142 altsetting 64 endpoint 0x1 has invalid maxpacket 104, setting to 64 [ 1220.538960][ T5919] usb 5-1: config 1 interface 142 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 1220.538983][ T5919] usb 5-1: config 1 interface 142 altsetting 64 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1220.539008][ T5919] usb 5-1: config 1 interface 142 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 1220.539031][ T5919] usb 5-1: config 1 interface 142 altsetting 64 has a duplicate endpoint with address 0xA, skipping [ 1220.539056][ T5919] usb 5-1: config 1 interface 142 altsetting 64 has a duplicate endpoint with address 0x4, skipping [ 1220.539080][ T5919] usb 5-1: config 1 interface 142 has no altsetting 0 [ 1220.543027][ T5919] usb 5-1: New USB device found, idVendor=257a, idProduct=3606, bcdDevice= d.50 [ 1220.543057][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.543080][ T5919] usb 5-1: Product: 횛딄塤戩倗쿞夠繟⽃䰅衞腖坓鼳莥蔚槝蚜百๽캮緃ꇡ墱넣஁ՙ↱獟枼ￔ냜＼돛㙶푪ኄﭮꎐŰ㋋苶쓍瞝苧逜૜㥮秔붡銐씤췣꒩崥⍷ [ 1220.543107][ T5919] usb 5-1: Manufacturer: చ [ 1220.543123][ T5919] usb 5-1: SerialNumber: 时惯悧໣㷥緋챓씽퀹毦齒蕤瑊釱꤇㎅㚌궙㐂ಒꖾ䍟휦ኝޔ䷍쯬嘝䐻ﰁ [ 1220.615950][T18149] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1220.616427][T18149] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1220.967534][ T5919] option 5-1:1.142: GSM modem (1-port) converter detected [ 1220.998324][ T5919] usb 5-1: USB disconnect, device number 88 [ 1221.058630][ T5919] option 5-1:1.142: device disconnected [ 1221.332379][T15308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1221.368192][T15308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1221.369988][T15308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1221.380845][T15308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1221.383696][T15308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1222.035996][T18191] chnl_net:caif_netlink_parms(): no params data found [ 1222.050965][ T36] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1222.228562][ T36] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.228592][ T36] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1222.262766][ T36] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1222.262801][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.262822][ T36] usb 5-1: Product: syz [ 1222.262838][ T36] usb 5-1: Manufacturer: syz [ 1222.262855][ T36] usb 5-1: SerialNumber: syz [ 1222.494553][T18191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.494922][T18191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.495252][T18191] bridge_slave_0: entered allmulticast mode [ 1222.498347][T18191] bridge_slave_0: entered promiscuous mode [ 1222.557181][T18191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.563241][T18191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.563563][T18191] bridge_slave_1: entered allmulticast mode [ 1222.588472][T18191] bridge_slave_1: entered promiscuous mode [ 1222.610170][ T5919] usb 5-1: USB disconnect, device number 89 [ 1222.806388][T18191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.833410][T18191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.941211][T18191] team0: Port device team_slave_0 added [ 1222.955404][T18191] team0: Port device team_slave_1 added [ 1223.667386][ T5799] Bluetooth: hci2: command tx timeout [ 1223.680540][T18191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.680558][T18191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.680581][T18191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.693481][T18191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.693499][T18191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.693523][T18191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.846822][ T5919] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1224.014610][ T5919] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1224.014644][ T5919] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1224.014666][ T5919] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1224.014733][ T5919] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1224.014761][ T5919] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1224.025400][ T5919] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1224.025429][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1224.025448][ T5919] usb 5-1: Product: syz [ 1224.025462][ T5919] usb 5-1: Manufacturer: syz [ 1224.030290][T18191] hsr_slave_0: entered promiscuous mode [ 1224.051768][T18191] hsr_slave_1: entered promiscuous mode [ 1224.052918][T18191] debugfs: 'hsr0' already exists in 'hsr' [ 1224.052943][T18191] Cannot create hsr debugfs directory [ 1224.111824][ T5919] cdc_wdm 5-1:1.0: skipping garbage [ 1224.111844][ T5919] cdc_wdm 5-1:1.0: skipping garbage [ 1224.122762][ T5919] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1224.122795][ T5919] cdc_wdm 5-1:1.0: Unknown control protocol [ 1224.618739][ T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1224.776893][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1224.790270][ T9] usb 2-1: config 1 has an invalid interface number: 142 but max is 0 [ 1224.790302][ T9] usb 2-1: config 1 has no interface number 0 [ 1224.790354][ T9] usb 2-1: config 1 interface 142 altsetting 64 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1224.790776][ T9] usb 2-1: config 1 interface 142 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1224.790804][ T9] usb 2-1: config 1 interface 142 altsetting 64 endpoint 0x1 has invalid maxpacket 104, setting to 64 [ 1224.790828][ T9] usb 2-1: config 1 interface 142 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 1224.790849][ T9] usb 2-1: config 1 interface 142 altsetting 64 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1224.790871][ T9] usb 2-1: config 1 interface 142 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 1224.791453][ T9] usb 2-1: config 1 interface 142 altsetting 64 has a duplicate endpoint with address 0xA, skipping [ 1224.791477][ T9] usb 2-1: config 1 interface 142 altsetting 64 has a duplicate endpoint with address 0x4, skipping [ 1224.791499][ T9] usb 2-1: config 1 interface 142 has no altsetting 0 [ 1224.808218][ T9] usb 2-1: New USB device found, idVendor=257a, idProduct=3606, bcdDevice= d.50 [ 1224.808248][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.808267][ T9] usb 2-1: Product: 횛딄塤戩倗쿞夠繟⽃䰅衞腖坓鼳莥蔚槝蚜百๽캮緃ꇡ墱넣஁ՙ↱獟枼ￔ냜＼돛㙶푪ኄﭮꎐŰ㋋苶쓍瞝苧逜૜㥮秔붡銐씤췣꒩崥⍷ [ 1224.808290][ T9] usb 2-1: Manufacturer: చ [ 1224.808304][ T9] usb 2-1: SerialNumber: 时惯悧໣㷥緋챓씽퀹毦齒蕤瑊釱꤇㎅㚌궙㐂ಒꖾ䍟휦ኝޔ䷍쯬嘝䐻ﰁ [ 1224.898963][T18282] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1224.903060][T18282] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1225.275058][ T9] option 2-1:1.142: GSM modem (1-port) converter detected [ 1225.518898][ T9] usb 2-1: USB disconnect, device number 124 [ 1225.651800][ T9] option 2-1:1.142: device disconnected [ 1225.878014][ T5799] Bluetooth: hci2: command tx timeout [ 1226.910052][ T5876] usb 5-1: USB disconnect, device number 90 [ 1227.043506][ T9] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1227.149558][T18191] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1227.208621][ T9] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 1227.208655][ T9] usb 2-1: config 160 has no interface number 0 [ 1227.208707][ T9] usb 2-1: config 160 interface 200 has no altsetting 0 [ 1227.213415][ T9] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1227.213446][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.213477][ T9] usb 2-1: Product: syz [ 1227.213493][ T9] usb 2-1: Manufacturer: syz [ 1227.213509][ T9] usb 2-1: SerialNumber: syz [ 1227.293781][T18191] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1227.330224][T18191] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1227.397104][T18191] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1227.562874][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1227.562950][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 1227.905422][ T9] usb 2-1: USB disconnect, device number 125 [ 1228.101249][ T5799] Bluetooth: hci2: command tx timeout [ 1228.129538][T16752] udevd[16752]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1228.238411][T18191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.351783][T18191] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.446604][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.461985][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.505165][ T7473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.538615][ T7473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.388991][ T5799] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 1229.835368][T18191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.329320][ T5799] Bluetooth: hci2: command tx timeout [ 1231.610313][T18191] veth0_vlan: entered promiscuous mode [ 1232.000628][T18191] veth1_vlan: entered promiscuous mode [ 1233.515754][T18191] veth0_macvtap: entered promiscuous mode [ 1233.544951][T18191] veth1_macvtap: entered promiscuous mode [ 1233.699546][T18191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.763998][T18191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.822849][ T7473] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.824959][ T7473] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.825398][ T7473] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.825440][ T7473] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.488110][T14325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.488133][T14325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.680569][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.680592][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.805838][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4242'. [ 1235.402484][T18473] fuse: Bad value for 'fd' [ 1235.530399][ T1568] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1235.701419][ T1568] usb 5-1: Using ep0 maxpacket: 8 [ 1235.708118][ T1568] usb 5-1: config 0 has no interfaces? [ 1235.738591][ T1568] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1235.738623][ T1568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.738644][ T1568] usb 5-1: Product: syz [ 1235.738659][ T1568] usb 5-1: Manufacturer: syz [ 1235.738683][ T1568] usb 5-1: SerialNumber: syz [ 1235.808880][ T1568] usb 5-1: config 0 descriptor?? [ 1236.094670][T16190] usb 5-1: USB disconnect, device number 91 [ 1236.171763][ T1568] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 1236.321554][ T1568] usb 7-1: device descriptor read/64, error -71 [ 1236.578048][ T1568] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 1236.717012][ T1568] usb 7-1: device descriptor read/64, error -71 [ 1236.842202][ T1568] usb usb7-port1: attempt power cycle [ 1237.208693][ T1568] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 1237.231075][ T1568] usb 7-1: device descriptor read/8, error -71 [ 1237.646947][ T1568] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 1237.675490][ T1568] usb 7-1: device descriptor read/8, error -71 [ 1237.786373][ T1568] usb usb7-port1: unable to enumerate USB device [ 1238.124956][ T5799] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1238.935818][T18540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1241.099952][ T1568] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1241.262523][ T1568] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1241.262591][ T1568] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1241.267299][ T1568] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1241.267329][ T1568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.267351][ T1568] usb 5-1: Product: syz [ 1241.267374][ T1568] usb 5-1: Manufacturer: syz [ 1241.267389][ T1568] usb 5-1: SerialNumber: syz [ 1241.371279][ T1568] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1241.476104][T16190] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1241.801016][ T36] usb 5-1: USB disconnect, device number 92 [ 1243.359939][T16190] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1243.360164][T16190] ath9k_htc: Failed to initialize the device [ 1243.382159][ T36] usb 5-1: ath9k_htc: USB layer deinitialized [ 1243.765801][ T36] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1243.925812][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 1243.928336][ T36] usb 5-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 1243.928435][ T36] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 1243.933989][ T36] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 1243.934016][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.934036][ T36] usb 5-1: Product: syz [ 1243.934049][ T36] usb 5-1: Manufacturer: syz [ 1243.934063][ T36] usb 5-1: SerialNumber: syz [ 1243.983707][ T36] ldusb 5-1:1.0: Interrupt out endpoint not found (using control endpoint instead) [ 1244.013172][ T36] ldusb 5-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 1244.190599][ T36] usb 5-1: USB disconnect, device number 93 [ 1244.309351][ T36] ldusb 5-1:1.0: LD USB Device #0 now disconnected [ 1244.314878][ T5799] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1245.686097][ T5876] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1245.846276][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 1245.849730][ T5876] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1245.851418][ T5876] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1245.851447][ T5876] usb 5-1: config 0 has no interface number 0 [ 1245.851502][ T5876] usb 5-1: config 0 interface 251 has no altsetting 0 [ 1245.854605][ T5876] usb 5-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2 [ 1245.854636][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.854659][ T5876] usb 5-1: Product: syz [ 1245.854675][ T5876] usb 5-1: Manufacturer: syz [ 1245.854691][ T5876] usb 5-1: SerialNumber: syz [ 1246.015763][ T5876] usb 5-1: config 0 descriptor?? [ 1248.571682][ T5876] usb 5-1: USB disconnect, device number 94 [ 1250.495784][ T5919] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1250.666746][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 1250.676814][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1250.699474][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.699504][ T5919] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1250.708167][ T5919] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1250.708201][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.708221][ T5919] usb 2-1: Product: syz [ 1250.708236][ T5919] usb 2-1: Manufacturer: syz [ 1250.708251][ T5919] usb 2-1: SerialNumber: syz [ 1251.420031][ T5919] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1251.420068][ T5919] usb 2-1: applying playback min mute quirk [ 1251.421242][ T5919] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 1251.422255][ T5919] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3) [ 1251.425217][ T5919] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 1251.594246][ T5919] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 1251.623025][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1251.623270][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1251.836844][ T5919] usb 2-1: USB disconnect, device number 126 [ 1252.377696][T18435] udevd[18435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1254.108723][T10568] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1254.271578][T10568] usb 2-1: Using ep0 maxpacket: 32 [ 1254.277801][T10568] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1254.277833][T10568] usb 2-1: config 0 has no interface number 0 [ 1254.315880][T10568] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1254.315912][T10568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.315936][T10568] usb 2-1: Product: syz [ 1254.315952][T10568] usb 2-1: Manufacturer: syz [ 1254.315968][T10568] usb 2-1: SerialNumber: syz [ 1254.374859][T10568] usb 2-1: config 0 descriptor?? [ 1254.417861][T10568] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1254.896499][T18807] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1255.211050][T10568] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1255.547561][T18792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4367'. [ 1256.135965][ T37] audit: type=1326 audit(1775510870.147:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18790 comm="syz.1.4367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b7ac819 code=0x0 [ 1256.222357][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1256.272254][T10568] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1256.359083][T10568] usb 2-1: USB disconnect, device number 127 [ 1256.489413][T10568] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1256.626231][T10568] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1256.627336][T10568] quatech2 2-1:0.51: device disconnected [ 1259.566089][T18882] overlayfs: failed to clone upperpath [ 1261.913154][ T808] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1262.128747][ T808] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.128767][ T808] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1262.132564][ T808] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1262.132585][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.132597][ T808] usb 7-1: Product: syz [ 1262.132605][ T808] usb 7-1: Manufacturer: syz [ 1262.132615][ T808] usb 7-1: SerialNumber: syz [ 1262.362552][ T5876] usb 7-1: USB disconnect, device number 6 [ 1262.372097][ T36] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1262.552577][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 1262.554949][ T36] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1262.554974][ T36] usb 2-1: config 0 has no interface number 0 [ 1262.560381][ T36] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1262.560407][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.560426][ T36] usb 2-1: Product: syz [ 1262.560439][ T36] usb 2-1: Manufacturer: syz [ 1262.560453][ T36] usb 2-1: SerialNumber: syz [ 1262.586726][ T36] usb 2-1: config 0 descriptor?? [ 1262.596231][ T808] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1262.609159][ T36] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1262.767274][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 1262.773356][ T808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1262.777194][ T808] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1262.777231][ T808] usb 5-1: config 0 has no interface number 0 [ 1262.777284][ T808] usb 5-1: config 0 interface 251 has no altsetting 0 [ 1262.826789][ T808] usb 5-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2 [ 1262.829296][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.829323][ T808] usb 5-1: Product: syz [ 1262.829339][ T808] usb 5-1: Manufacturer: syz [ 1262.829355][ T808] usb 5-1: SerialNumber: syz [ 1262.999565][ T36] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1263.041571][ T808] usb 5-1: config 0 descriptor?? [ 1263.115927][ T36] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1264.378257][T18918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4421'. [ 1264.750298][ T808] usb 5-1: USB disconnect, device number 95 [ 1264.791885][ T37] audit: type=1326 audit(1775510878.286:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18916 comm="syz.1.4421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b7ac819 code=0x0 [ 1266.054660][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1266.059209][ T808] usb 2-1: USB disconnect, device number 2 [ 1266.208318][ T808] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1266.350384][ T808] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1266.351615][ T808] quatech2 2-1:0.51: device disconnected [ 1266.743733][ T5876] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1266.904028][ T5876] usb 7-1: Using ep0 maxpacket: 16 [ 1266.906585][ T5876] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 1266.906613][ T5876] usb 7-1: config 252 has no interface number 0 [ 1266.906660][ T5876] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1266.910308][ T5876] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1266.910339][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.910361][ T5876] usb 7-1: Product: syz [ 1266.910376][ T5876] usb 7-1: Manufacturer: syz [ 1266.910392][ T5876] usb 7-1: SerialNumber: syz [ 1266.962627][ T5876] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1267.184087][T18966] netlink: 'syz.6.4443': attribute type 83 has an invalid length. [ 1267.196345][ T7474] usb 7-1: Failed to submit usb control message: -71 [ 1267.196383][ T7474] usb 7-1: unable to send the bmi data to the device: -71 [ 1267.196401][ T7474] usb 7-1: unable to get target info from device [ 1267.196415][ T7474] usb 7-1: could not get target info (-71) [ 1267.196433][ T7474] usb 7-1: could not probe fw (-71) [ 1267.197521][ T5876] usb 7-1: USB disconnect, device number 7 [ 1267.344998][T18983] FAULT_INJECTION: forcing a failure. [ 1267.344998][T18983] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.345035][T18983] CPU: 0 UID: 0 PID: 18983 Comm: syz.4.4435 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1267.345059][T18983] Tainted: [L]=SOFTLOCKUP [ 1267.345066][T18983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1267.345077][T18983] Call Trace: [ 1267.345085][T18983] [ 1267.345093][T18983] dump_stack_lvl+0xe8/0x150 [ 1267.345125][T18983] should_fail_ex+0x46b/0x600 [ 1267.345154][T18983] should_failslab+0xa8/0x100 [ 1267.345175][T18983] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1267.345201][T18983] ? __alloc_skb+0x1d0/0x7d0 [ 1267.345216][T18983] ? lockdep_hardirqs_on+0x7a/0x110 [ 1267.345241][T18983] __alloc_skb+0x1d0/0x7d0 [ 1267.345262][T18983] netlink_sendmsg+0x5d4/0xb40 [ 1267.345296][T18983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1267.345322][T18983] ? unwind_get_return_address+0x4d/0x90 [ 1267.345344][T18983] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1267.345372][T18983] ____sys_sendmsg+0x94c/0x9c0 [ 1267.345398][T18983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1267.345427][T18983] ? import_iovec+0x73/0xa0 [ 1267.345456][T18983] ___sys_sendmsg+0x2a5/0x360 [ 1267.345483][T18983] ? __pfx____sys_sendmsg+0x10/0x10 [ 1267.345537][T18983] ? __fget_files+0x2a/0x420 [ 1267.345558][T18983] ? __fget_files+0x3a6/0x420 [ 1267.345590][T18983] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1267.345612][T18983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1267.345642][T18983] ? __pfx_ksys_write+0x10/0x10 [ 1267.345677][T18983] do_syscall_64+0x14d/0xf80 [ 1267.345696][T18983] ? trace_irq_disable+0x3b/0x150 [ 1267.345715][T18983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.345734][T18983] ? clear_bhb_loop+0x40/0x90 [ 1267.345755][T18983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.345771][T18983] RIP: 0033:0x7f13aa2bc819 [ 1267.345789][T18983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.345804][T18983] RSP: 002b:00007f13a850e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1267.345824][T18983] RAX: ffffffffffffffda RBX: 00007f13aa535fa0 RCX: 00007f13aa2bc819 [ 1267.345837][T18983] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 1267.345848][T18983] RBP: 00007f13a850e090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.345860][T18983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.345871][T18983] R13: 00007f13aa536038 R14: 00007f13aa535fa0 R15: 00007ffe7d0576e8 [ 1267.345900][T18983] [ 1268.563812][T19028] FAULT_INJECTION: forcing a failure. [ 1268.563812][T19028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.563851][T19028] CPU: 1 UID: 0 PID: 19028 Comm: syz.4.4466 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1268.563879][T19028] Tainted: [L]=SOFTLOCKUP [ 1268.563887][T19028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1268.563899][T19028] Call Trace: [ 1268.563908][T19028] [ 1268.563917][T19028] dump_stack_lvl+0xe8/0x150 [ 1268.563953][T19028] should_fail_ex+0x46b/0x600 [ 1268.563986][T19028] _copy_to_user+0x31/0xb0 [ 1268.564010][T19028] simple_read_from_buffer+0xe1/0x170 [ 1268.564041][T19028] proc_fail_nth_read+0x1be/0x230 [ 1268.564069][T19028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1268.564097][T19028] ? rw_verify_area+0x2ac/0x4e0 [ 1268.564124][T19028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1268.564152][T19028] vfs_read+0x212/0xa80 [ 1268.564200][T19028] ? __pfx_vfs_read+0x10/0x10 [ 1268.564239][T19028] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1268.564264][T19028] ? lockdep_hardirqs_on+0x7a/0x110 [ 1268.564285][T19028] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1268.564312][T19028] ? mutex_lock_nested+0x152/0x1d0 [ 1268.564339][T19028] ? fdget_pos+0x252/0x320 [ 1268.564383][T19028] ksys_read+0x156/0x270 [ 1268.564414][T19028] ? __pfx_ksys_read+0x10/0x10 [ 1268.564446][T19028] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1268.564485][T19028] do_syscall_64+0x14d/0xf80 [ 1268.564513][T19028] ? trace_irq_disable+0x3b/0x150 [ 1268.564540][T19028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.564564][T19028] ? clear_bhb_loop+0x40/0x90 [ 1268.564590][T19028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.564611][T19028] RIP: 0033:0x7f13aa27d04e [ 1268.564632][T19028] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1268.564649][T19028] RSP: 002b:00007f13a850dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1268.564673][T19028] RAX: ffffffffffffffda RBX: 00007f13a850e6c0 RCX: 00007f13aa27d04e [ 1268.564688][T19028] RDX: 000000000000000f RSI: 00007f13a850e0a0 RDI: 0000000000000004 [ 1268.564702][T19028] RBP: 00007f13a850e090 R08: 0000000000000000 R09: 0000000000000000 [ 1268.564716][T19028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.564729][T19028] R13: 00007f13aa536038 R14: 00007f13aa535fa0 R15: 00007ffe7d0576e8 [ 1268.564761][T19028] [ 1268.570481][T19013] kvm: kvm [19011]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 1269.106043][ T5919] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1269.249655][ T5919] usb 5-1: device descriptor read/64, error -71 [ 1269.380439][T19061] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1269.407941][T19061] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4480'. [ 1269.501649][ T5919] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1269.640600][ T5919] usb 5-1: device descriptor read/64, error -71 [ 1269.726098][ T5876] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1269.758668][ T5919] usb usb5-port1: attempt power cycle [ 1269.890853][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1269.893065][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1269.893101][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1269.893130][ T5876] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1269.893156][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1269.894887][ T5876] usb 2-1: language id specifier not provided by device, defaulting to English [ 1269.899508][ T5876] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1269.899536][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.899556][ T5876] usb 2-1: Product: syz [ 1269.899569][ T5876] usb 2-1: Manufacturer: syz [ 1269.899582][ T5876] usb 2-1: SerialNumber: syz [ 1270.121615][ T5919] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1270.143717][ T5919] usb 5-1: device descriptor read/8, error -71 [ 1270.214007][T19091] FAULT_INJECTION: forcing a failure. [ 1270.214007][T19091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1270.214046][T19091] CPU: 0 UID: 0 PID: 19091 Comm: syz.0.4496 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1270.214077][T19091] Tainted: [L]=SOFTLOCKUP [ 1270.214085][T19091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1270.214098][T19091] Call Trace: [ 1270.214107][T19091] [ 1270.214117][T19091] dump_stack_lvl+0xe8/0x150 [ 1270.214155][T19091] should_fail_ex+0x46b/0x600 [ 1270.214199][T19091] _copy_from_user+0x2d/0xb0 [ 1270.214222][T19091] ___sys_recvmsg+0x175/0x590 [ 1270.214256][T19091] ? __pfx____sys_recvmsg+0x10/0x10 [ 1270.214307][T19091] ? __fget_files+0x3a6/0x420 [ 1270.214345][T19091] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1270.214371][T19091] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1270.214407][T19091] ? __pfx_ksys_write+0x10/0x10 [ 1270.214445][T19091] do_syscall_64+0x14d/0xf80 [ 1270.214464][T19091] ? trace_irq_disable+0x3b/0x150 [ 1270.214485][T19091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.214503][T19091] ? clear_bhb_loop+0x40/0x90 [ 1270.214523][T19091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.214543][T19091] RIP: 0033:0x7fd88086c819 [ 1270.214565][T19091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.214583][T19091] RSP: 002b:00007fd87eac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1270.214604][T19091] RAX: ffffffffffffffda RBX: 00007fd880ae5fa0 RCX: 00007fd88086c819 [ 1270.214617][T19091] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1270.214629][T19091] RBP: 00007fd87eac6090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.214640][T19091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1270.214652][T19091] R13: 00007fd880ae6038 R14: 00007fd880ae5fa0 R15: 00007ffdc06cbfa8 [ 1270.214682][T19091] [ 1270.273837][ T5876] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1270.273908][ T5876] usb 2-1: MIDIStreaming interface descriptor not found [ 1270.406174][ T5876] usb 2-1: USB disconnect, device number 3 [ 1270.420876][T10568] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1270.538435][ T5919] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1270.560538][ T5919] usb 5-1: device descriptor read/8, error -71 [ 1270.592022][T10568] usb 7-1: device descriptor read/64, error -71 [ 1270.646096][T18771] udevd[18771]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1270.677886][ T5919] usb usb5-port1: unable to enumerate USB device [ 1270.848444][T10568] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1270.987460][T10568] usb 7-1: device descriptor read/64, error -71 [ 1271.105423][T10568] usb usb7-port1: attempt power cycle [ 1271.168745][T19117] fuse: Unknown parameter 'grou00000000000000000000' [ 1271.468488][T10568] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1271.493938][T10568] usb 7-1: device descriptor read/8, error -71 [ 1271.746428][T10568] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1271.768874][T10568] usb 7-1: device descriptor read/8, error -71 [ 1271.886460][T10568] usb usb7-port1: unable to enumerate USB device [ 1273.126759][T19154] fuse: Unknown parameter 'use00000000000000000000' [ 1275.455638][ T5876] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1275.636350][ T5876] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1275.646154][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1275.646192][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1275.646220][ T5876] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1275.646246][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1275.647723][ T5876] usb 5-1: language id specifier not provided by device, defaulting to English [ 1275.721270][ T5876] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1275.721303][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.721325][ T5876] usb 5-1: Product: syz [ 1275.721341][ T5876] usb 5-1: Manufacturer: syz [ 1275.721357][ T5876] usb 5-1: SerialNumber: syz [ 1276.073644][ T5876] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1276.073731][ T5876] usb 5-1: MIDIStreaming interface descriptor not found [ 1276.179503][T19201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4529'. [ 1276.212504][ T5876] usb 5-1: USB disconnect, device number 100 [ 1276.278803][T10568] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1276.400841][T18771] udevd[18771]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1276.438996][T10568] usb 7-1: device descriptor read/64, error -71 [ 1276.706636][T10568] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1276.856021][T10568] usb 7-1: device descriptor read/64, error -71 [ 1276.973932][T10568] usb usb7-port1: attempt power cycle [ 1277.005661][ T5919] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1277.176741][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 1277.194809][ T5919] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.194833][ T5919] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.194858][ T5919] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1277.194873][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.337028][T10568] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1277.359321][T10568] usb 7-1: device descriptor read/8, error -71 [ 1277.625679][T10568] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1277.647817][T10568] usb 7-1: device descriptor read/8, error -71 [ 1277.688774][ T5919] mcp2221 0003:04D8:00DD.002C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1277.776738][T10568] usb usb7-port1: unable to enumerate USB device [ 1278.662721][T19238] fuse: Unknown parameter 'user_i00000000000000000000' [ 1280.202835][T19259] FAULT_INJECTION: forcing a failure. [ 1280.202835][T19259] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.202876][T19259] CPU: 0 UID: 0 PID: 19259 Comm: syz.0.4571 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1280.202907][T19259] Tainted: [L]=SOFTLOCKUP [ 1280.202915][T19259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1280.202927][T19259] Call Trace: [ 1280.202936][T19259] [ 1280.202946][T19259] dump_stack_lvl+0xe8/0x150 [ 1280.202983][T19259] should_fail_ex+0x46b/0x600 [ 1280.203021][T19259] should_failslab+0xa8/0x100 [ 1280.203045][T19259] __kmalloc_cache_noprof+0x84/0x690 [ 1280.203068][T19259] ? snd_pcm_oss_change_params_locked+0x175/0x3e00 [ 1280.203120][T19259] snd_pcm_oss_change_params_locked+0x175/0x3e00 [ 1280.203180][T19259] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1280.203226][T19259] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1280.203252][T19259] ? lockdep_hardirqs_on+0x7a/0x110 [ 1280.203277][T19259] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1280.203302][T19259] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 1280.203334][T19259] ? snd_pcm_oss_set_trigger+0x300/0xdc0 [ 1280.203360][T19259] snd_pcm_oss_set_trigger+0x517/0xdc0 [ 1280.203391][T19259] snd_pcm_oss_ioctl+0xbb6/0xe00 [ 1280.203425][T19259] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1280.203458][T19259] __se_sys_ioctl+0xff/0x170 [ 1280.203485][T19259] do_syscall_64+0x14d/0xf80 [ 1280.203508][T19259] ? trace_irq_disable+0x3b/0x150 [ 1280.203534][T19259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.203558][T19259] ? clear_bhb_loop+0x40/0x90 [ 1280.203586][T19259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.203608][T19259] RIP: 0033:0x7fd88086c819 [ 1280.203630][T19259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.203648][T19259] RSP: 002b:00007fd87eac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.203673][T19259] RAX: ffffffffffffffda RBX: 00007fd880ae5fa0 RCX: 00007fd88086c819 [ 1280.203689][T19259] RDX: 0000200000000240 RSI: 0000000040045010 RDI: 0000000000000003 [ 1280.203703][T19259] RBP: 00007fd87eac6090 R08: 0000000000000000 R09: 0000000000000000 [ 1280.203717][T19259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.203730][T19259] R13: 00007fd880ae6038 R14: 00007fd880ae5fa0 R15: 00007ffdc06cbfa8 [ 1280.203767][T19259] [ 1280.293408][ T5919] usb 2-1: USB disconnect, device number 4 [ 1281.197119][T19272] fuse: Unknown parameter 'user_i00000000000000000000' [ 1282.985119][T19288] FAULT_INJECTION: forcing a failure. [ 1282.985119][T19288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1282.985188][T19288] CPU: 1 UID: 0 PID: 19288 Comm: syz.1.4580 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1282.985219][T19288] Tainted: [L]=SOFTLOCKUP [ 1282.985228][T19288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1282.985241][T19288] Call Trace: [ 1282.985250][T19288] [ 1282.985260][T19288] dump_stack_lvl+0xe8/0x150 [ 1282.985298][T19288] should_fail_ex+0x46b/0x600 [ 1282.985334][T19288] _copy_from_user+0x2d/0xb0 [ 1282.985356][T19288] ___sys_sendmsg+0x1c6/0x360 [ 1282.985389][T19288] ? __pfx____sys_sendmsg+0x10/0x10 [ 1282.985453][T19288] ? __fget_files+0x2a/0x420 [ 1282.985481][T19288] ? __fget_files+0x3a6/0x420 [ 1282.985519][T19288] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1282.985548][T19288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1282.985584][T19288] ? __pfx_ksys_write+0x10/0x10 [ 1282.985629][T19288] do_syscall_64+0x14d/0xf80 [ 1282.985654][T19288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.985677][T19288] ? clear_bhb_loop+0x40/0x90 [ 1282.985704][T19288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.985725][T19288] RIP: 0033:0x7f1c9b7ac819 [ 1282.985741][T19288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.985755][T19288] RSP: 002b:00007f1c999bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1282.985773][T19288] RAX: ffffffffffffffda RBX: 00007f1c9ba26180 RCX: 00007f1c9b7ac819 [ 1282.985785][T19288] RDX: 000000002400c800 RSI: 0000200000002a00 RDI: 0000000000000005 [ 1282.985796][T19288] RBP: 00007f1c999bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.985806][T19288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.985816][T19288] R13: 00007f1c9ba26218 R14: 00007f1c9ba26180 R15: 00007ffc75868278 [ 1282.985841][T19288] [ 1283.631418][T19287] overlayfs: failed to resolve './file0': -2 [ 1284.569654][ T1568] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1284.714960][ T1568] usb 2-1: device descriptor read/64, error -71 [ 1284.969323][ T1568] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1285.118973][ T1568] usb 2-1: device descriptor read/64, error -71 [ 1285.236980][ T1568] usb usb2-port1: attempt power cycle [ 1285.632028][ T1568] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1285.654896][ T1568] usb 2-1: device descriptor read/8, error -71 [ 1285.910040][ T1568] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1285.933218][ T1568] usb 2-1: device descriptor read/8, error -71 [ 1286.049328][ T1568] usb usb2-port1: unable to enumerate USB device [ 1286.572762][ T1568] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1286.745570][ T1568] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1286.747265][ T1568] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1286.747301][ T1568] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1286.747340][ T1568] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1286.747365][ T1568] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1286.748152][ T1568] usb 5-1: language id specifier not provided by device, defaulting to English [ 1286.750864][ T1568] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1286.750894][ T1568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.750916][ T1568] usb 5-1: Product: syz [ 1286.750930][ T1568] usb 5-1: Manufacturer: syz [ 1286.750946][ T1568] usb 5-1: SerialNumber: syz [ 1287.094562][ T1568] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1287.094627][ T1568] usb 5-1: MIDIStreaming interface descriptor not found [ 1287.301735][ T1568] usb 5-1: USB disconnect, device number 101 [ 1287.576152][T18677] udevd[18677]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.151292][T19362] fuse: Unknown parameter 'user_id00000000000000000000' [ 1289.369795][T19369] FAULT_INJECTION: forcing a failure. [ 1289.369795][T19369] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.369834][T19369] CPU: 1 UID: 0 PID: 19369 Comm: syz.4.4613 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1289.369862][T19369] Tainted: [L]=SOFTLOCKUP [ 1289.369869][T19369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1289.369882][T19369] Call Trace: [ 1289.369890][T19369] [ 1289.369899][T19369] dump_stack_lvl+0xe8/0x150 [ 1289.369953][T19369] should_fail_ex+0x46b/0x600 [ 1289.369985][T19369] should_failslab+0xa8/0x100 [ 1289.370009][T19369] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1289.370040][T19369] ? __alloc_skb+0x1d0/0x7d0 [ 1289.370058][T19369] ? __pfx_tcp_current_mss+0x10/0x10 [ 1289.370094][T19369] __alloc_skb+0x1d0/0x7d0 [ 1289.370120][T19369] tcp_stream_alloc_skb+0x3f/0x5c0 [ 1289.370149][T19369] tcp_sendmsg_locked+0x137b/0x5490 [ 1289.370173][T19369] ? __lock_acquire+0x6b5/0x2cf0 [ 1289.370220][T19369] ? __lock_acquire+0x6b5/0x2cf0 [ 1289.370272][T19369] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1289.370306][T19369] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1289.370336][T19369] ? lockdep_hardirqs_on+0x7a/0x110 [ 1289.370372][T19369] ? __pfx_inet_sendmsg+0x10/0x10 [ 1289.370397][T19369] tcp_sendmsg+0x2f/0x50 [ 1289.370421][T19369] __sys_sendto+0x5f1/0x710 [ 1289.370451][T19369] ? __pfx___sys_sendto+0x10/0x10 [ 1289.370503][T19369] ? ksys_write+0x248/0x270 [ 1289.370538][T19369] ? __pfx_ksys_write+0x10/0x10 [ 1289.370578][T19369] __x64_sys_sendto+0xde/0x100 [ 1289.370605][T19369] do_syscall_64+0x14d/0xf80 [ 1289.370628][T19369] ? trace_irq_disable+0x3b/0x150 [ 1289.370654][T19369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.370676][T19369] ? clear_bhb_loop+0x40/0x90 [ 1289.370705][T19369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.370726][T19369] RIP: 0033:0x7f13aa2bc819 [ 1289.370747][T19369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.370770][T19369] RSP: 002b:00007f13a850e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1289.370793][T19369] RAX: ffffffffffffffda RBX: 00007f13aa535fa0 RCX: 00007f13aa2bc819 [ 1289.370810][T19369] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003 [ 1289.370824][T19369] RBP: 00007f13a850e090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.370838][T19369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.370851][T19369] R13: 00007f13aa536038 R14: 00007f13aa535fa0 R15: 00007ffe7d0576e8 [ 1289.370886][T19369] [ 1290.210549][T10397] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1290.350524][T10397] usb 2-1: device descriptor read/64, error -71 [ 1290.613452][T10397] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1290.752327][T10397] usb 2-1: device descriptor read/64, error -71 [ 1290.870358][T10397] usb usb2-port1: attempt power cycle [ 1291.243993][T10397] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1291.266358][T10397] usb 2-1: device descriptor read/8, error -71 [ 1291.523566][T10397] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1291.545788][T10397] usb 2-1: device descriptor read/8, error -71 [ 1291.987856][T10397] usb usb2-port1: unable to enumerate USB device [ 1292.162813][T19419] FAULT_INJECTION: forcing a failure. [ 1292.162813][T19419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1292.162855][T19419] CPU: 1 UID: 0 PID: 19419 Comm: syz.0.4634 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1292.162885][T19419] Tainted: [L]=SOFTLOCKUP [ 1292.162893][T19419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1292.162904][T19419] Call Trace: [ 1292.162912][T19419] [ 1292.162921][T19419] dump_stack_lvl+0xe8/0x150 [ 1292.162958][T19419] should_fail_ex+0x46b/0x600 [ 1292.162992][T19419] _copy_from_user+0x2d/0xb0 [ 1292.163014][T19419] ___sys_sendmsg+0x1c6/0x360 [ 1292.163044][T19419] ? __pfx____sys_sendmsg+0x10/0x10 [ 1292.163109][T19419] ? __fget_files+0x2a/0x420 [ 1292.163135][T19419] ? __fget_files+0x3a6/0x420 [ 1292.163171][T19419] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1292.163198][T19419] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1292.163231][T19419] ? __pfx_ksys_write+0x10/0x10 [ 1292.163295][T19419] do_syscall_64+0x14d/0xf80 [ 1292.163318][T19419] ? trace_irq_disable+0x3b/0x150 [ 1292.163341][T19419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.163362][T19419] ? clear_bhb_loop+0x40/0x90 [ 1292.163387][T19419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.163408][T19419] RIP: 0033:0x7fd88086c819 [ 1292.163427][T19419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.163446][T19419] RSP: 002b:00007fd87eac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1292.163469][T19419] RAX: ffffffffffffffda RBX: 00007fd880ae5fa0 RCX: 00007fd88086c819 [ 1292.163485][T19419] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 1292.163499][T19419] RBP: 00007fd87eac6090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.163512][T19419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.163524][T19419] R13: 00007fd880ae6038 R14: 00007fd880ae5fa0 R15: 00007ffdc06cbfa8 [ 1292.163559][T19419] [ 1292.463812][ T9] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1292.631596][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1292.632920][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1292.632956][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1292.632984][ T9] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1292.633020][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1292.645331][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 1292.649104][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1292.649130][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.649149][ T9] usb 5-1: Product: syz [ 1292.649163][ T9] usb 5-1: Manufacturer: syz [ 1292.649176][ T9] usb 5-1: SerialNumber: syz [ 1293.620056][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1293.620121][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 1293.889876][ T9] usb 5-1: USB disconnect, device number 102 [ 1293.910402][T19442] FAULT_INJECTION: forcing a failure. [ 1293.910402][T19442] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.910441][T19442] CPU: 1 UID: 0 PID: 19442 Comm: syz.0.4645 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1293.910471][T19442] Tainted: [L]=SOFTLOCKUP [ 1293.910479][T19442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1293.910492][T19442] Call Trace: [ 1293.910501][T19442] [ 1293.910511][T19442] dump_stack_lvl+0xe8/0x150 [ 1293.910549][T19442] should_fail_ex+0x46b/0x600 [ 1293.910581][T19442] should_failslab+0xa8/0x100 [ 1293.910607][T19442] __kmalloc_noprof+0xdf/0x7b0 [ 1293.910628][T19442] ? tomoyo_encode+0x28b/0x550 [ 1293.910660][T19442] tomoyo_encode+0x28b/0x550 [ 1293.910693][T19442] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1293.910730][T19442] ? tomoyo_path_number_perm+0x219/0x630 [ 1293.910753][T19442] tomoyo_path_number_perm+0x246/0x630 [ 1293.910780][T19442] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1293.910806][T19442] ? __lock_acquire+0x6b5/0x2cf0 [ 1293.910868][T19442] ? __fget_files+0x2a/0x420 [ 1293.910899][T19442] ? __fget_files+0x2a/0x420 [ 1293.910925][T19442] ? __fget_files+0x3a6/0x420 [ 1293.910951][T19442] ? __fget_files+0x2a/0x420 [ 1293.910983][T19442] security_file_ioctl+0xc3/0x2a0 [ 1293.911010][T19442] __se_sys_ioctl+0x47/0x170 [ 1293.911035][T19442] do_syscall_64+0x14d/0xf80 [ 1293.911069][T19442] ? trace_irq_disable+0x3b/0x150 [ 1293.911095][T19442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.911117][T19442] ? clear_bhb_loop+0x40/0x90 [ 1293.911145][T19442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.911167][T19442] RIP: 0033:0x7fd88086c819 [ 1293.911187][T19442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.911206][T19442] RSP: 002b:00007fd87eac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1293.911229][T19442] RAX: ffffffffffffffda RBX: 00007fd880ae5fa0 RCX: 00007fd88086c819 [ 1293.911246][T19442] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 1293.911261][T19442] RBP: 00007fd87eac6090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.911274][T19442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.911288][T19442] R13: 00007fd880ae6038 R14: 00007fd880ae5fa0 R15: 00007ffdc06cbfa8 [ 1293.911323][T19442] [ 1293.911346][T19442] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1294.107395][T18771] udevd[18771]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1294.249950][T19445] fuse: Bad value for 'user_id' [ 1294.249974][T19445] fuse: Bad value for 'user_id' [ 1294.489035][ T37] audit: type=1326 audit(1775510906.061:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19453 comm="syz.1.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b7ac819 code=0x7ffc0000 [ 1294.489167][ T37] audit: type=1326 audit(1775510906.061:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19453 comm="syz.1.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b7ac819 code=0x7ffc0000 [ 1294.489395][ T37] audit: type=1326 audit(1775510906.061:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19453 comm="syz.1.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c9b7ac819 code=0x7ffc0000 [ 1294.490240][ T37] audit: type=1326 audit(1775510906.061:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19453 comm="syz.1.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b7ac819 code=0x7ffc0000 [ 1294.538150][ T37] audit: type=1326 audit(1775510906.117:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19453 comm="syz.1.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c9b76d04e code=0x7ffc0000 [ 1294.544965][ T37] audit: type=1326 audit(1775510906.117:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19453 comm="syz.1.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1c9b76d04e code=0x7ffc0000 [ 1294.545461][T19455] FAULT_INJECTION: forcing a failure. [ 1294.545461][T19455] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.545491][T19455] CPU: 1 UID: 0 PID: 19455 Comm: syz.1.4650 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1294.545517][T19455] Tainted: [L]=SOFTLOCKUP [ 1294.545524][T19455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1294.545535][T19455] Call Trace: [ 1294.545543][T19455] [ 1294.545551][T19455] dump_stack_lvl+0xe8/0x150 [ 1294.545583][T19455] should_fail_ex+0x46b/0x600 [ 1294.545613][T19455] should_failslab+0xa8/0x100 [ 1294.545635][T19455] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1294.545661][T19455] ? __alloc_skb+0x1d0/0x7d0 [ 1294.545678][T19455] ? lockdep_hardirqs_on+0x7a/0x110 [ 1294.545705][T19455] __alloc_skb+0x1d0/0x7d0 [ 1294.545728][T19455] audit_log_start+0x419/0xa40 [ 1294.545754][T19455] ? __pfx_audit_log_start+0x10/0x10 [ 1294.545775][T19455] ? __lock_acquire+0x6b5/0x2cf0 [ 1294.545807][T19455] audit_seccomp+0x63/0x190 [ 1294.545839][T19455] __seccomp_filter+0xd48/0x1ef0 [ 1294.545882][T19455] ? __pfx___seccomp_filter+0x10/0x10 [ 1294.545908][T19455] ? lockdep_hardirqs_on+0x7a/0x110 [ 1294.545927][T19455] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1294.545949][T19455] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1294.545974][T19455] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1294.546016][T19455] ? fput+0xa0/0xd0 [ 1294.546053][T19455] ? __secure_computing+0xe1/0x2a0 [ 1294.546082][T19455] do_syscall_64+0xf4/0xf80 [ 1294.546102][T19455] ? trace_irq_disable+0x3b/0x150 [ 1294.546122][T19455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.546142][T19455] ? clear_bhb_loop+0x40/0x90 [ 1294.546165][T19455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.546183][T19455] RIP: 0033:0x7f1c9b7ac819 [ 1294.546202][T19455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.546218][T19455] RSP: 002b:00007f1c999fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000115 [ 1294.546240][T19455] RAX: ffffffffffffffda RBX: 00007f1c9ba25fa0 RCX: 00007f1c9b7ac819 [ 1294.546254][T19455] RDX: 0000000000000000 RSI: fffffffffffff55e RDI: ffffffffffffffff [ 1294.546267][T19455] RBP: 00007f1c999fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.546279][T19455] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1294.546291][T19455] R13: 00007f1c9ba26038 R14: 00007f1c9ba25fa0 R15: 00007ffc75868278 [ 1294.546322][T19455] [ 1294.546425][T19455] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1294.546440][T19455] audit: out of memory in audit_log_start [ 1294.546646][ T37] audit: type=1326 audit(1775510906.117:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19453 comm="syz.1.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1c9b76d04e code=0x7ffc0000 [ 1294.547143][ T37] audit: type=1326 audit(1775510906.117:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19453 comm="syz.1.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1c9b76d04e code=0x7ffc0000 [ 1294.559177][T19454] 9p: Bad value for 'wfdno' [ 1295.963365][ T808] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1296.131721][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 1296.136629][ T808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1296.139221][ T808] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1296.139249][ T808] usb 5-1: config 0 has no interface number 0 [ 1296.139301][ T808] usb 5-1: config 0 interface 251 has no altsetting 0 [ 1296.219477][ T808] usb 5-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2 [ 1296.219512][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.219534][ T808] usb 5-1: Product: syz [ 1296.219550][ T808] usb 5-1: Manufacturer: syz [ 1296.219566][ T808] usb 5-1: SerialNumber: syz [ 1297.036683][ T808] usb 5-1: config 0 descriptor?? [ 1299.218422][T10568] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1299.378883][T10568] usb 2-1: Using ep0 maxpacket: 32 [ 1299.385131][T10568] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1299.385160][T10568] usb 2-1: config 0 has no interface number 0 [ 1299.385209][T10568] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1299.385248][T10568] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1299.399045][T10568] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1299.399076][T10568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.399096][T10568] usb 2-1: Product: syz [ 1299.399109][T10568] usb 2-1: Manufacturer: syz [ 1299.399122][T10568] usb 2-1: SerialNumber: syz [ 1299.447282][T10568] usb 2-1: config 0 descriptor?? [ 1300.166054][T10568] appletouch 2-1:0.85: Geyser mode initialized. [ 1300.192539][ T808] usb 5-1: USB disconnect, device number 103 [ 1300.218017][T10568] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input31 [ 1300.452725][ T5799] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1300.452946][ T5799] Bluetooth: hci5: Injecting HCI hardware error event [ 1300.456514][ T5799] Bluetooth: hci5: hardware error 0x00 [ 1300.565255][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 1300.621284][T10568] usb 2-1: USB disconnect, device number 13 [ 1301.084078][T10568] appletouch 2-1:0.85: input: appletouch disconnected [ 1301.421188][T19569] FAULT_INJECTION: forcing a failure. [ 1301.421188][T19569] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.421227][T19569] CPU: 0 UID: 0 PID: 19569 Comm: syz.0.4687 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1301.421256][T19569] Tainted: [L]=SOFTLOCKUP [ 1301.421275][T19569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1301.421288][T19569] Call Trace: [ 1301.421297][T19569] [ 1301.421306][T19569] dump_stack_lvl+0xe8/0x150 [ 1301.421345][T19569] should_fail_ex+0x46b/0x600 [ 1301.421381][T19569] should_failslab+0xa8/0x100 [ 1301.421406][T19569] __kmalloc_noprof+0xdf/0x7b0 [ 1301.421428][T19569] ? tomoyo_encode+0x28b/0x550 [ 1301.421463][T19569] tomoyo_encode+0x28b/0x550 [ 1301.421497][T19569] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1301.421543][T19569] tomoyo_mount_permission+0x3e8/0x9d0 [ 1301.421574][T19569] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 1301.421599][T19569] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1301.421688][T19569] security_sb_mount+0xe4/0x320 [ 1301.421723][T19569] path_mount+0xbc/0x10e0 [ 1301.421748][T19569] ? user_path_at+0xd4/0x160 [ 1301.421785][T19569] ? user_path_at+0xd4/0x160 [ 1301.421818][T19569] __se_sys_mount+0x31d/0x420 [ 1301.421853][T19569] ? __pfx___se_sys_mount+0x10/0x10 [ 1301.421889][T19569] ? __x64_sys_mount+0x20/0xc0 [ 1301.421919][T19569] do_syscall_64+0x14d/0xf80 [ 1301.421945][T19569] ? trace_irq_disable+0x3b/0x150 [ 1301.421971][T19569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.421993][T19569] ? clear_bhb_loop+0x40/0x90 [ 1301.422018][T19569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.422041][T19569] RIP: 0033:0x7fd88086c819 [ 1301.422062][T19569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.422081][T19569] RSP: 002b:00007fd87eac6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1301.422105][T19569] RAX: ffffffffffffffda RBX: 00007fd880ae5fa0 RCX: 00007fd88086c819 [ 1301.422121][T19569] RDX: 00002000000020c0 RSI: 0000200000002080 RDI: 0000000000000000 [ 1301.422135][T19569] RBP: 00007fd87eac6090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.422149][T19569] R10: 0000000000000413 R11: 0000000000000246 R12: 0000000000000001 [ 1301.422162][T19569] R13: 00007fd880ae6038 R14: 00007fd880ae5fa0 R15: 00007ffdc06cbfa8 [ 1301.422199][T19569] [ 1301.422221][T19569] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1302.307825][T15308] Bluetooth: hci5: unexpected event for opcode 0x0005 [ 1302.799304][ T1568] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 1302.949630][T19598] IPv6: NLM_F_CREATE should be specified when creating new route [ 1302.969105][ T1568] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1302.969135][ T1568] usb 2-1: config 0 has no interface number 0 [ 1302.969185][ T1568] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1302.969220][ T1568] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1302.969249][ T1568] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1302.969276][ T1568] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1302.969304][ T1568] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1302.969326][ T1568] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1302.969372][ T1568] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1302.969397][ T1568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.975958][ T1568] usb 2-1: config 0 descriptor?? [ 1302.976857][T19589] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1303.005060][ T1568] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1303.210090][T19589] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1303.222676][ T1568] usb 2-1: USB disconnect, device number 14 [ 1303.243144][ T1568] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1303.355171][ T5799] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1303.720408][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4707'. [ 1305.811420][T19652] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4718'. [ 1305.811450][T19652] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4718'. [ 1306.305517][ T808] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 1306.502694][ T808] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1306.502726][ T808] usb 2-1: config 0 has no interface number 0 [ 1306.502775][ T808] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1306.502799][ T808] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1306.502827][ T808] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1306.502853][ T808] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1306.502882][ T808] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1306.502905][ T808] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1306.502951][ T808] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1306.502976][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.618549][ T808] usb 2-1: config 0 descriptor?? [ 1306.619738][T19660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1306.649488][ T808] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1306.850328][T19660] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1306.882727][ T5919] usb 2-1: USB disconnect, device number 15 [ 1306.902531][ T5919] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1306.936630][ T1568] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1306.967385][ T5799] Bluetooth: hci1: unexpected event for opcode 0x0005 [ 1307.111600][ T1568] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1307.111651][ T1568] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1307.111677][ T1568] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.124775][ T1568] usb 7-1: config 0 descriptor?? [ 1308.230210][ T1568] ath6kl: Failed to submit usb control message: -110 [ 1308.230280][ T1568] ath6kl: unable to send the bmi data to the device: -110 [ 1308.230297][ T1568] ath6kl: Unable to send get target info: -110 [ 1308.232841][ T1568] ath6kl: Failed to init ath6kl core: -110 [ 1308.233463][ T1568] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1309.316368][T19743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4757'. [ 1309.388877][T19743] syz_tun: entered promiscuous mode [ 1309.402488][T19743] macvtap1: entered promiscuous mode [ 1309.402761][T19743] macvtap1: entered allmulticast mode [ 1309.402778][T19743] syz_tun: entered allmulticast mode [ 1309.713224][T19758] openvswitch: netlink: Flow actions attr not present in new flow. [ 1309.713253][T19758] FAULT_INJECTION: forcing a failure. [ 1309.713253][T19758] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.713273][T19758] CPU: 1 UID: 0 PID: 19758 Comm: syz.0.4764 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1309.713291][T19758] Tainted: [L]=SOFTLOCKUP [ 1309.713296][T19758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1309.713303][T19758] Call Trace: [ 1309.713308][T19758] [ 1309.713314][T19758] dump_stack_lvl+0xe8/0x150 [ 1309.713338][T19758] should_fail_ex+0x46b/0x600 [ 1309.713369][T19758] should_failslab+0xa8/0x100 [ 1309.713393][T19758] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1309.713423][T19758] ? __alloc_skb+0x1d0/0x7d0 [ 1309.713443][T19758] ? lockdep_hardirqs_on+0x7a/0x110 [ 1309.713473][T19758] __alloc_skb+0x1d0/0x7d0 [ 1309.713494][T19758] ? netlink_ack_tlv_len+0x6c/0x210 [ 1309.713522][T19758] netlink_ack+0x146/0xa50 [ 1309.713537][T19758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1309.713555][T19758] ? __pfx_ref_tracker_free+0x10/0x10 [ 1309.713577][T19758] netlink_rcv_skb+0x2b6/0x4b0 [ 1309.713594][T19758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1309.713609][T19758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1309.713634][T19758] ? netlink_deliver_tap+0x2e/0x1b0 [ 1309.713651][T19758] ? netlink_deliver_tap+0x2e/0x1b0 [ 1309.713671][T19758] genl_rcv+0x28/0x40 [ 1309.713683][T19758] netlink_unicast+0x831/0x9f0 [ 1309.713704][T19758] ? __pfx_netlink_unicast+0x10/0x10 [ 1309.713721][T19758] ? netlink_sendmsg+0x650/0xb40 [ 1309.713737][T19758] ? skb_put+0x11b/0x210 [ 1309.713751][T19758] netlink_sendmsg+0x813/0xb40 [ 1309.713774][T19758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1309.713793][T19758] ? unwind_get_return_address+0x4d/0x90 [ 1309.713818][T19758] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1309.713854][T19758] ____sys_sendmsg+0x94c/0x9c0 [ 1309.713885][T19758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1309.713920][T19758] ? import_iovec+0x73/0xa0 [ 1309.713946][T19758] ___sys_sendmsg+0x2a5/0x360 [ 1309.713976][T19758] ? __pfx____sys_sendmsg+0x10/0x10 [ 1309.714052][T19758] ? __fget_files+0x2a/0x420 [ 1309.714081][T19758] ? __fget_files+0x3a6/0x420 [ 1309.714121][T19758] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1309.714151][T19758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1309.714190][T19758] ? __pfx_ksys_write+0x10/0x10 [ 1309.714236][T19758] do_syscall_64+0x14d/0xf80 [ 1309.714259][T19758] ? trace_irq_disable+0x3b/0x150 [ 1309.714285][T19758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.714308][T19758] ? clear_bhb_loop+0x40/0x90 [ 1309.714336][T19758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.714358][T19758] RIP: 0033:0x7fd88086c819 [ 1309.714380][T19758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1309.714399][T19758] RSP: 002b:00007fd87eac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1309.714423][T19758] RAX: ffffffffffffffda RBX: 00007fd880ae5fa0 RCX: 00007fd88086c819 [ 1309.714439][T19758] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 1309.714453][T19758] RBP: 00007fd87eac6090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.714467][T19758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1309.714481][T19758] R13: 00007fd880ae6038 R14: 00007fd880ae5fa0 R15: 00007ffdc06cbfa8 [ 1309.714518][T19758] [ 1310.094928][ T1568] usb 7-1: USB disconnect, device number 16 [ 1310.570599][ T1568] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1310.741675][ T1568] usb 7-1: Using ep0 maxpacket: 16 [ 1310.744011][ T1568] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.744057][ T1568] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1310.744085][ T1568] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1310.744099][ T1568] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.814967][ T1568] usb 7-1: config 0 descriptor?? [ 1310.857794][ T1568] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1313.671437][T10397] usb 7-1: USB disconnect, device number 17 [ 1315.562969][ T808] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1315.756375][ T808] usb 2-1: device descriptor read/64, error -71 [ 1316.124061][ T808] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1316.268235][ T808] usb 2-1: device descriptor read/64, error -71 [ 1316.386002][ T808] usb usb2-port1: attempt power cycle [ 1316.442433][T19835] FAULT_INJECTION: forcing a failure. [ 1316.442433][T19835] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.442475][T19835] CPU: 0 UID: 0 PID: 19835 Comm: syz.6.4796 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1316.442505][T19835] Tainted: [L]=SOFTLOCKUP [ 1316.442513][T19835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1316.442526][T19835] Call Trace: [ 1316.442536][T19835] [ 1316.442545][T19835] dump_stack_lvl+0xe8/0x150 [ 1316.442583][T19835] should_fail_ex+0x46b/0x600 [ 1316.442620][T19835] should_failslab+0xa8/0x100 [ 1316.442646][T19835] __kmalloc_noprof+0xdf/0x7b0 [ 1316.442669][T19835] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1316.442706][T19835] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1316.442742][T19835] genl_family_rcv_msg_doit+0xd9/0x330 [ 1316.442776][T19835] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1316.442808][T19835] ? __pfx_genl_get_cmd+0x10/0x10 [ 1316.442831][T19835] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1316.442859][T19835] ? lockdep_hardirqs_on+0x7a/0x110 [ 1316.442884][T19835] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1316.442919][T19835] genl_rcv_msg+0x61c/0x7a0 [ 1316.442951][T19835] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1316.442976][T19835] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1316.443005][T19835] ? __pfx_ref_tracker_free+0x10/0x10 [ 1316.443034][T19835] ? __skb_clone+0x63/0x7a0 [ 1316.443067][T19835] netlink_rcv_skb+0x232/0x4b0 [ 1316.443100][T19835] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1316.443127][T19835] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1316.443186][T19835] ? netlink_deliver_tap+0x2e/0x1b0 [ 1316.443218][T19835] ? netlink_deliver_tap+0x2e/0x1b0 [ 1316.443254][T19835] genl_rcv+0x28/0x40 [ 1316.443277][T19835] netlink_unicast+0x831/0x9f0 [ 1316.443318][T19835] ? __pfx_netlink_unicast+0x10/0x10 [ 1316.443350][T19835] ? netlink_sendmsg+0x650/0xb40 [ 1316.443380][T19835] ? skb_put+0x11b/0x210 [ 1316.443408][T19835] netlink_sendmsg+0x813/0xb40 [ 1316.443452][T19835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1316.443487][T19835] ? unwind_get_return_address+0x4d/0x90 [ 1316.443515][T19835] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1316.443551][T19835] ____sys_sendmsg+0x94c/0x9c0 [ 1316.443584][T19835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1316.443621][T19835] ? import_iovec+0x73/0xa0 [ 1316.443648][T19835] ___sys_sendmsg+0x2a5/0x360 [ 1316.443680][T19835] ? __pfx____sys_sendmsg+0x10/0x10 [ 1316.443748][T19835] ? __fget_files+0x2a/0x420 [ 1316.443776][T19835] ? __fget_files+0x3a6/0x420 [ 1316.443816][T19835] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1316.443845][T19835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1316.443883][T19835] ? __pfx_ksys_write+0x10/0x10 [ 1316.443929][T19835] do_syscall_64+0x14d/0xf80 [ 1316.443952][T19835] ? trace_irq_disable+0x3b/0x150 [ 1316.443978][T19835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.444001][T19835] ? clear_bhb_loop+0x40/0x90 [ 1316.444029][T19835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.444051][T19835] RIP: 0033:0x7f06c79bc819 [ 1316.444072][T19835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.444091][T19835] RSP: 002b:00007f06c5c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1316.444115][T19835] RAX: ffffffffffffffda RBX: 00007f06c7c35fa0 RCX: 00007f06c79bc819 [ 1316.444132][T19835] RDX: 0000000000004040 RSI: 0000200000000140 RDI: 0000000000000003 [ 1316.444147][T19835] RBP: 00007f06c5c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.444161][T19835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.444174][T19835] R13: 00007f06c7c36038 R14: 00007f06c7c35fa0 R15: 00007ffd6de63578 [ 1316.444219][T19835] [ 1316.866868][ T808] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1316.889000][ T808] usb 2-1: device descriptor read/8, error -71 [ 1317.144808][ T808] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1317.178540][ T808] usb 2-1: device descriptor read/8, error -71 [ 1317.296886][ T808] usb usb2-port1: unable to enumerate USB device [ 1317.303020][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1317.303141][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1318.468514][T10397] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1318.651973][T10397] usb 5-1: Using ep0 maxpacket: 16 [ 1318.659207][T10397] usb 5-1: config 8 has an invalid interface number: 156 but max is 2 [ 1318.659239][T10397] usb 5-1: config 8 has an invalid interface number: 117 but max is 2 [ 1318.659263][T10397] usb 5-1: config 8 has an invalid interface number: 148 but max is 2 [ 1318.659286][T10397] usb 5-1: config 8 has an invalid interface number: 243 but max is 2 [ 1318.659307][T10397] usb 5-1: config 8 has 4 interfaces, different from the descriptor's value: 3 [ 1318.659331][T10397] usb 5-1: config 8 has no interface number 0 [ 1318.659349][T10397] usb 5-1: config 8 has no interface number 1 [ 1318.659367][T10397] usb 5-1: config 8 has no interface number 2 [ 1318.659383][T10397] usb 5-1: config 8 has no interface number 3 [ 1318.659476][T10397] usb 5-1: config 8 interface 156 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1318.659500][T10397] usb 5-1: config 8 interface 156 altsetting 7 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1318.659529][T10397] usb 5-1: config 8 interface 156 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1318.659571][T10397] usb 5-1: config 8 interface 117 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 1318.659595][T10397] usb 5-1: config 8 interface 117 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 1318.659621][T10397] usb 5-1: config 8 interface 117 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 1318.659647][T10397] usb 5-1: config 8 interface 117 altsetting 7 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1318.659673][T10397] usb 5-1: config 8 interface 117 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 1318.659697][T10397] usb 5-1: config 8 interface 117 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 1318.659721][T10397] usb 5-1: config 8 interface 117 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1318.659742][T10397] usb 5-1: config 8 interface 117 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1318.659764][T10397] usb 5-1: config 8 interface 117 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1318.659787][T10397] usb 5-1: config 8 interface 117 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1318.659810][T10397] usb 5-1: config 8 interface 117 altsetting 7 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1318.659838][T10397] usb 5-1: config 8 interface 117 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 1318.659871][T10397] usb 5-1: config 8 interface 117 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 1318.659894][T10397] usb 5-1: config 8 interface 117 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1318.659917][T10397] usb 5-1: config 8 interface 117 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1318.659959][T10397] usb 5-1: config 8 interface 148 altsetting 20 has a duplicate endpoint with address 0x9, skipping [ 1318.659984][T10397] usb 5-1: config 8 interface 148 altsetting 20 has a duplicate endpoint with address 0xE, skipping [ 1318.660007][T10397] usb 5-1: config 8 interface 148 altsetting 20 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 1318.660035][T10397] usb 5-1: too many endpoints for config 8 interface 243 altsetting 182: 140, using maximum allowed: 30 [ 1318.660083][T10397] usb 5-1: config 8 interface 243 altsetting 182 has a duplicate endpoint with address 0xA, skipping [ 1318.660105][T10397] usb 5-1: config 8 interface 243 altsetting 182 has a duplicate endpoint with address 0x2, skipping [ 1318.660132][T10397] usb 5-1: config 8 interface 243 altsetting 182 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1318.660163][T10397] usb 5-1: config 8 interface 243 altsetting 182 endpoint 0xF has an invalid bInterval 141, changing to 11 [ 1318.660191][T10397] usb 5-1: config 8 interface 243 altsetting 182 has a duplicate endpoint with address 0x3, skipping [ 1318.660218][T10397] usb 5-1: config 8 interface 243 altsetting 182 has a duplicate endpoint with address 0x3, skipping [ 1318.660243][T10397] usb 5-1: config 8 interface 243 altsetting 182 has a duplicate endpoint with address 0x1, skipping [ 1318.660268][T10397] usb 5-1: config 8 interface 243 altsetting 182 has an endpoint descriptor with address 0x1B, changing to 0xB [ 1318.660293][T10397] usb 5-1: config 8 interface 243 altsetting 182 has a duplicate endpoint with address 0xB, skipping [ 1318.660334][T10397] usb 5-1: config 8 interface 243 altsetting 182 has a duplicate endpoint with address 0x85, skipping [ 1318.660360][T10397] usb 5-1: config 8 interface 243 altsetting 182 has 12 endpoint descriptors, different from the interface descriptor's value: 140 [ 1318.664209][T10397] usb 5-1: config 8 interface 156 has no altsetting 0 [ 1318.664236][T10397] usb 5-1: config 8 interface 117 has no altsetting 0 [ 1318.664256][T10397] usb 5-1: config 8 interface 148 has no altsetting 0 [ 1318.664275][T10397] usb 5-1: config 8 interface 243 has no altsetting 0 [ 1319.671546][T10397] usb 5-1: Dual-Role OTG device on HNP port [ 1319.671919][T10397] usb 5-1: New USB device found, idVendor=0403, idProduct=ff3b, bcdDevice=47.f5 [ 1319.671947][T10397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.671969][T10397] usb 5-1: Product: ᝣ떇勇℥匯⺗쿷诶帪썮㒔茳鄚မ纊껖瑅䌥셑ۺⶓ爮蹅䷥咲뎐뙴奜겪㔋 [ 1319.671990][T10397] usb 5-1: Manufacturer: ᠉ [ 1319.672007][T10397] usb 5-1: SerialNumber: Ⰱ [ 1320.165769][T19882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4815'. [ 1320.383845][T10397] ftdi_sio 5-1:8.156: FTDI USB Serial Device converter detected [ 1320.385980][T10397] ftdi_sio ttyUSB0: unknown device type: 0x47f5 [ 1320.437268][T10397] ftdi_sio 5-1:8.117: FTDI USB Serial Device converter detected [ 1320.439579][T10397] ftdi_sio ttyUSB1: unknown device type: 0x47f5 [ 1320.468138][T10397] ftdi_sio 5-1:8.148: FTDI USB Serial Device converter detected [ 1320.484764][T10397] ftdi_sio ttyUSB2: unknown device type: 0x47f5 [ 1320.498124][T10397] ftdi_sio 5-1:8.243: FTDI USB Serial Device converter detected [ 1320.500919][T10397] ftdi_sio ttyUSB3: unknown device type: 0x47f5 [ 1320.549733][T10397] usb 5-1: USB disconnect, device number 104 [ 1321.690731][T10397] ftdi_sio 5-1:8.156: device disconnected [ 1321.715702][T10397] ftdi_sio 5-1:8.117: device disconnected [ 1321.718954][T10397] ftdi_sio 5-1:8.148: device disconnected [ 1321.764213][T10397] ftdi_sio 5-1:8.243: device disconnected [ 1322.105794][T19904] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4822'. [ 1322.127876][T19904] netlink: 'syz.1.4822': attribute type 1 has an invalid length. [ 1322.425323][ T5919] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 1322.594898][ T5919] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1322.594931][ T5919] usb 5-1: config 0 has no interface number 0 [ 1322.594982][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1322.595006][ T5919] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1322.595035][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1322.595062][ T5919] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1322.595087][ T5919] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1322.595114][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1322.595160][ T5919] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1322.595184][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.651360][ T5919] usb 5-1: config 0 descriptor?? [ 1322.670847][T19907] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1322.672318][T19907] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1322.803593][ T5919] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1322.912623][ T808] usb 5-1: USB disconnect, device number 105 [ 1322.943216][ T808] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1324.177388][ T808] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1324.369647][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1324.392912][ T808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.392943][ T808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1324.400951][ T808] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1324.400983][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.401004][ T808] usb 1-1: Product: syz [ 1324.401020][ T808] usb 1-1: Manufacturer: syz [ 1324.401035][ T808] usb 1-1: SerialNumber: syz [ 1324.506559][ T808] usb 1-1: selecting invalid altsetting 1 [ 1324.509240][ T808] usb 1-1: unit 6 not found! [ 1324.761035][T19943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.851853][T19943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.852718][ T808] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1324.896732][ T808] usb 1-1: USB disconnect, device number 73 [ 1324.976318][T10568] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1324.979582][T19973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4838'. [ 1325.052710][T18435] udevd[18435]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1325.073264][T19973] syz_tun: entered promiscuous mode [ 1325.073396][T19973] macvtap1: entered promiscuous mode [ 1325.073513][T19973] macvtap1: entered allmulticast mode [ 1325.073522][T19973] syz_tun: entered allmulticast mode [ 1325.121323][T19976] macvtap1: left promiscuous mode [ 1325.121578][T19976] macvtap1: left allmulticast mode [ 1325.121593][T19976] syz_tun: left allmulticast mode [ 1325.140349][T10568] usb 2-1: Using ep0 maxpacket: 32 [ 1325.144064][T10568] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1325.146911][T10568] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1325.146936][T10568] usb 2-1: config 0 has no interface number 0 [ 1325.146981][T10568] usb 2-1: config 0 interface 251 has no altsetting 0 [ 1325.197011][T10568] usb 2-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2 [ 1325.197033][T10568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.197046][T10568] usb 2-1: Product: syz [ 1325.197064][T10568] usb 2-1: Manufacturer: syz [ 1325.197073][T10568] usb 2-1: SerialNumber: syz [ 1325.242043][T10568] usb 2-1: config 0 descriptor?? [ 1327.512019][T20005] netlink: 'syz.4.4851': attribute type 2 has an invalid length. [ 1327.512592][T20005] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4851'. [ 1327.805674][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4852'. [ 1327.808181][T20013] netlink: 'syz.1.4852': attribute type 2 has an invalid length. [ 1327.808220][T20013] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4852'. [ 1328.272392][ T36] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 1328.445718][ T36] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1328.445744][ T36] usb 5-1: config 0 has no interface number 0 [ 1328.445791][ T36] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1328.445817][ T36] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1328.445844][ T36] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1328.445869][ T36] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1328.445894][ T36] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1328.445917][ T36] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1328.445944][ T36] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1328.445964][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.565125][ T36] usb 5-1: config 0 descriptor?? [ 1328.579456][T20017] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1328.579684][T20017] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1328.653690][ T36] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1328.839878][T20028] fuse: Bad value for 'fd' [ 1329.282378][ T9] usb 5-1: USB disconnect, device number 106 [ 1329.334124][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1330.390684][ T36] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1330.519851][T20061] fuse: Bad value for 'fd' [ 1330.576033][ T36] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 1330.576065][ T36] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.576085][ T36] usb 5-1: config 6 has no interface number 0 [ 1330.576133][ T36] usb 5-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1330.601616][ T36] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1330.601652][ T36] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 1330.601675][ T36] usb 5-1: Product: syz [ 1330.601691][ T36] usb 5-1: Manufacturer: syz [ 1330.601706][ T36] usb 5-1: SerialNumber: syz [ 1330.725919][ T36] hso 5-1:6.2: Failed to find INT IN ep [ 1331.120086][T20050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.120547][T20050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.936271][ T36] usb 5-1: USB disconnect, device number 107 [ 1332.405350][T20085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.406031][T20085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.735411][T20096] fuse: Unknown parameter '0x0000000000000004' [ 1333.078859][T20110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4892'. [ 1333.079276][T20110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4892'. [ 1333.328576][T16190] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1333.491429][T16190] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.491486][T16190] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1333.491504][T16190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1333.491520][T16190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1333.491533][T16190] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1333.494001][T16190] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1333.494021][T16190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1333.494033][T16190] usb 5-1: Product: syz [ 1333.494041][T16190] usb 5-1: Manufacturer: syz [ 1333.494050][T16190] usb 5-1: SerialNumber: syz [ 1333.525950][T16190] usb 5-1: config 0 descriptor?? [ 1334.000362][T16190] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1334.000792][T16190] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1334.038073][T20131] FAULT_INJECTION: forcing a failure. [ 1334.038073][T20131] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.038115][T20131] CPU: 1 UID: 0 PID: 20131 Comm: syz.1.4903 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1334.038144][T20131] Tainted: [L]=SOFTLOCKUP [ 1334.038153][T20131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1334.038166][T20131] Call Trace: [ 1334.038176][T20131] [ 1334.038186][T20131] dump_stack_lvl+0xe8/0x150 [ 1334.038223][T20131] should_fail_ex+0x46b/0x600 [ 1334.038257][T20131] should_failslab+0xa8/0x100 [ 1334.038282][T20131] __kmalloc_noprof+0xdf/0x7b0 [ 1334.038304][T20131] ? sk_prot_alloc+0xe7/0x210 [ 1334.038332][T20131] sk_prot_alloc+0xe7/0x210 [ 1334.038352][T20131] ? sk_alloc+0x27/0x390 [ 1334.038376][T20131] sk_alloc+0x3a/0x390 [ 1334.038404][T20131] bt_sock_alloc+0x3b/0x310 [ 1334.038431][T20131] l2cap_sock_create+0x147/0x330 [ 1334.038467][T20131] bt_sock_create+0x163/0x240 [ 1334.038498][T20131] __sock_create+0x4b2/0x9d0 [ 1334.038541][T20131] rfcomm_dlc_open+0x364/0x1210 [ 1334.038568][T20131] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1334.038608][T20131] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 1334.038644][T20131] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1334.038674][T20131] ? lockdep_hardirqs_on+0x7a/0x110 [ 1334.038706][T20131] rfcomm_sock_connect+0x2f7/0x640 [ 1334.038746][T20131] __sys_connect+0x315/0x450 [ 1334.038772][T20131] ? __pfx___sys_connect+0x10/0x10 [ 1334.038818][T20131] ? __pfx_ksys_write+0x10/0x10 [ 1334.038861][T20131] __x64_sys_connect+0x7a/0x90 [ 1334.038885][T20131] do_syscall_64+0x14d/0xf80 [ 1334.038909][T20131] ? trace_irq_disable+0x3b/0x150 [ 1334.038934][T20131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.038957][T20131] ? clear_bhb_loop+0x40/0x90 [ 1334.038985][T20131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.039007][T20131] RIP: 0033:0x7f1c9b7ac819 [ 1334.039029][T20131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.039048][T20131] RSP: 002b:00007f1c999dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1334.039078][T20131] RAX: ffffffffffffffda RBX: 00007f1c9ba26090 RCX: 00007f1c9b7ac819 [ 1334.039094][T20131] RDX: 0000000000000014 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1334.039109][T20131] RBP: 00007f1c999dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.039122][T20131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1334.039136][T20131] R13: 00007f1c9ba26128 R14: 00007f1c9ba26090 R15: 00007ffc75868278 [ 1334.039174][T20131] [ 1334.171455][T16190] usb 5-1: USB disconnect, device number 108 [ 1334.829813][T20150] fuse: Unknown parameter '0x0000000000000004' [ 1335.550553][T20169] FAULT_INJECTION: forcing a failure. [ 1335.550553][T20169] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.550596][T20169] CPU: 1 UID: 0 PID: 20169 Comm: syz.4.4920 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1335.550629][T20169] Tainted: [L]=SOFTLOCKUP [ 1335.550637][T20169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1335.550651][T20169] Call Trace: [ 1335.550660][T20169] [ 1335.550670][T20169] dump_stack_lvl+0xe8/0x150 [ 1335.550710][T20169] should_fail_ex+0x46b/0x600 [ 1335.550747][T20169] should_failslab+0xa8/0x100 [ 1335.550772][T20169] __kmalloc_cache_noprof+0x84/0x690 [ 1335.550795][T20169] ? call_usermodehelper_setup+0x8e/0x270 [ 1335.550832][T20169] call_usermodehelper_setup+0x8e/0x270 [ 1335.550870][T20169] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1335.550899][T20169] __request_module+0x3ba/0x660 [ 1335.550930][T20169] ? __pfx___request_module+0x10/0x10 [ 1335.550959][T20169] ? kasan_quarantine_put+0xbb/0x1f0 [ 1335.550997][T20169] ? kfree+0x1c1/0x6c0 [ 1335.551026][T20169] ? nvmf_dev_write+0x1cd1/0x2d90 [ 1335.551062][T20169] nvmf_dev_write+0x1ed9/0x2d90 [ 1335.551087][T20169] ? __lock_acquire+0x6b5/0x2cf0 [ 1335.551146][T20169] ? __pfx_nvmf_dev_write+0x10/0x10 [ 1335.551186][T20169] ? kstrtouint+0x6e/0xe0 [ 1335.551253][T20169] ? rw_verify_area+0x25b/0x4e0 [ 1335.551286][T20169] ? __pfx_nvmf_dev_write+0x10/0x10 [ 1335.551317][T20169] vfs_write+0x2a3/0xba0 [ 1335.551360][T20169] ? __pfx_vfs_write+0x10/0x10 [ 1335.551394][T20169] ? __fget_files+0x2a/0x420 [ 1335.551427][T20169] ? __fget_files+0x2a/0x420 [ 1335.551453][T20169] ? __fget_files+0x3a6/0x420 [ 1335.551480][T20169] ? __fget_files+0x2a/0x420 [ 1335.551518][T20169] ksys_write+0x156/0x270 [ 1335.551553][T20169] ? __pfx_ksys_write+0x10/0x10 [ 1335.551598][T20169] do_syscall_64+0x14d/0xf80 [ 1335.551623][T20169] ? trace_irq_disable+0x3b/0x150 [ 1335.551655][T20169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.551677][T20169] ? clear_bhb_loop+0x40/0x90 [ 1335.551704][T20169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.551724][T20169] RIP: 0033:0x7f13aa2bc819 [ 1335.551747][T20169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.551764][T20169] RSP: 002b:00007f13a850e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1335.551788][T20169] RAX: ffffffffffffffda RBX: 00007f13aa535fa0 RCX: 00007f13aa2bc819 [ 1335.551804][T20169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1335.551818][T20169] RBP: 00007f13a850e090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.551832][T20169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.551854][T20169] R13: 00007f13aa536038 R14: 00007f13aa535fa0 R15: 00007ffe7d0576e8 [ 1335.551891][T20169] [ 1335.605724][T20169] nvme_fabrics: missing parameter 'transport=%s' [ 1335.605741][T20169] nvme_fabrics: missing parameter 'nqn=%s' [ 1335.627283][T20172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4922'. [ 1335.697341][T20173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4921'. [ 1337.084687][T10568] usb 2-1: USB disconnect, device number 20 [ 1337.411982][ T5919] usb 5-1: new low-speed USB device number 109 using dummy_hcd [ 1337.568489][T20217] FAULT_INJECTION: forcing a failure. [ 1337.568489][T20217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1337.568530][T20217] CPU: 1 UID: 0 PID: 20217 Comm: syz.0.4939 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1337.568558][T20217] Tainted: [L]=SOFTLOCKUP [ 1337.568565][T20217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1337.568576][T20217] Call Trace: [ 1337.568585][T20217] [ 1337.568595][T20217] dump_stack_lvl+0xe8/0x150 [ 1337.568632][T20217] should_fail_ex+0x46b/0x600 [ 1337.568666][T20217] _copy_from_iter+0x1d3/0x1670 [ 1337.568705][T20217] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1337.568736][T20217] ? __alloc_skb+0x27d/0x7d0 [ 1337.568756][T20217] ? __pfx__copy_from_iter+0x10/0x10 [ 1337.568793][T20217] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1337.568823][T20217] ? __alloc_skb+0x27d/0x7d0 [ 1337.568849][T20217] ? netlink_sendmsg+0x650/0xb40 [ 1337.568879][T20217] ? skb_put+0x11b/0x210 [ 1337.568905][T20217] netlink_sendmsg+0x6c0/0xb40 [ 1337.568946][T20217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1337.568979][T20217] ? unwind_get_return_address+0x4d/0x90 [ 1337.569005][T20217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1337.569039][T20217] ____sys_sendmsg+0x94c/0x9c0 [ 1337.569070][T20217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1337.569105][T20217] ? import_iovec+0x73/0xa0 [ 1337.569130][T20217] ___sys_sendmsg+0x2a5/0x360 [ 1337.569161][T20217] ? __pfx____sys_sendmsg+0x10/0x10 [ 1337.569224][T20217] ? __fget_files+0x2a/0x420 [ 1337.569251][T20217] ? __fget_files+0x3a6/0x420 [ 1337.569287][T20217] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1337.569316][T20217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1337.569351][T20217] ? __pfx_ksys_write+0x10/0x10 [ 1337.569394][T20217] do_syscall_64+0x14d/0xf80 [ 1337.569417][T20217] ? trace_irq_disable+0x3b/0x150 [ 1337.569441][T20217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.569464][T20217] ? clear_bhb_loop+0x40/0x90 [ 1337.569490][T20217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.569511][T20217] RIP: 0033:0x7fd88086c819 [ 1337.569532][T20217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.569551][T20217] RSP: 002b:00007fd87eac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1337.569575][T20217] RAX: ffffffffffffffda RBX: 00007fd880ae5fa0 RCX: 00007fd88086c819 [ 1337.569591][T20217] RDX: 0000000000044054 RSI: 0000200000000000 RDI: 0000000000000004 [ 1337.569605][T20217] RBP: 00007fd87eac6090 R08: 0000000000000000 R09: 0000000000000000 [ 1337.569618][T20217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1337.569632][T20217] R13: 00007fd880ae6038 R14: 00007fd880ae5fa0 R15: 00007ffdc06cbfa8 [ 1337.569667][T20217] [ 1337.685482][ T5919] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1337.685511][ T5919] usb 5-1: config 0 has no interface number 0 [ 1337.685559][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1337.685582][ T5919] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1337.685606][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1337.685629][ T5919] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1337.685653][ T5919] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1337.685678][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1337.685717][ T5919] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1337.685739][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.750417][ T5919] usb 5-1: config 0 descriptor?? [ 1338.810759][T20200] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1338.811134][T20200] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1338.909919][ T5919] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1339.149819][ T36] usb 5-1: USB disconnect, device number 109 [ 1339.182346][ T36] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1339.949301][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1339.949315][ T37] audit: type=1326 audit(1775510948.589:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20233 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b7ac819 code=0x7ffc0000 [ 1339.949345][ T37] audit: type=1326 audit(1775510948.589:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20233 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b7ac819 code=0x7ffc0000 [ 1339.949569][ T37] audit: type=1326 audit(1775510948.589:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20233 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b7ac819 code=0x7ffc0000 [ 1339.949600][ T37] audit: type=1326 audit(1775510948.589:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20233 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b7ac819 code=0x7ffc0000 [ 1339.949881][ T37] audit: type=1326 audit(1775510948.589:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20233 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c9b7ac819 code=0x7ffc0000 [ 1339.949908][ T37] audit: type=1326 audit(1775510948.589:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20233 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b7ac819 code=0x7ffc0000 [ 1339.949932][ T37] audit: type=1326 audit(1775510948.589:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20233 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b7ac819 code=0x7ffc0000 [ 1339.952090][ T37] audit: type=1326 audit(1775510948.589:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20233 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b7ac819 code=0x7ffc0000 [ 1339.952143][ T37] audit: type=1326 audit(1775510948.589:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20233 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f1c9b768c6c code=0x7ffc0000 [ 1339.952191][ T37] audit: type=1326 audit(1775510948.589:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20233 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1c9b768cce code=0x7ffc0000 [ 1341.781837][T20256] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 1343.212090][T20290] misc userio: No port type given on /dev/userio [ 1343.259369][ T5799] Bluetooth: hci3: connection err: -111 [ 1345.301420][T20304] netlink: 'syz.5.4970': attribute type 1 has an invalid length. [ 1345.301444][T20304] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4970'. [ 1345.301457][T20304] netlink: 658 bytes leftover after parsing attributes in process `syz.5.4970'. [ 1345.301467][T20304] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4970'. [ 1346.359025][T10397] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 1346.428086][T20330] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.4982' sets config #2 [ 1346.535541][T10397] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1346.535562][T10397] usb 2-1: config 0 has no interface number 0 [ 1346.535621][T10397] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1346.535645][T10397] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1346.535683][T10397] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1346.535710][T10397] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1346.535736][T10397] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1346.535762][T10397] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1346.535807][T10397] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1346.535830][T10397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.567297][T10397] usb 2-1: config 0 descriptor?? [ 1346.571489][T20320] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1346.572005][T20320] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1346.675395][T10397] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1346.850852][T10397] usb 2-1: USB disconnect, device number 21 [ 1346.868606][T10397] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1347.823687][T20353] fuse: Bad value for 'fd' [ 1348.847119][T20369] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4999'. [ 1348.866527][ T5799] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1348.897801][ T5799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1348.901097][ T5799] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1348.902737][ T5799] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1348.905244][ T5799] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1349.376303][T20373] block nbd1: server does not support multiple connections per device. [ 1349.377227][T20373] block nbd1: shutting down sockets [ 1349.638893][T20378] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5002'. [ 1349.723015][ T57] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.908698][T20384] FAULT_INJECTION: forcing a failure. [ 1349.908698][T20384] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.908739][T20384] CPU: 1 UID: 0 PID: 20384 Comm: syz.4.5004 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1349.908767][T20384] Tainted: [L]=SOFTLOCKUP [ 1349.908775][T20384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1349.908787][T20384] Call Trace: [ 1349.908796][T20384] [ 1349.908805][T20384] dump_stack_lvl+0xe8/0x150 [ 1349.908841][T20384] should_fail_ex+0x46b/0x600 [ 1349.908875][T20384] should_failslab+0xa8/0x100 [ 1349.908900][T20384] __kmalloc_noprof+0xdf/0x7b0 [ 1349.908921][T20384] ? video_usercopy+0x1b1/0x14b0 [ 1349.908958][T20384] video_usercopy+0x1b1/0x14b0 [ 1349.908993][T20384] ? smk_tskacc+0x311/0x3a0 [ 1349.909022][T20384] ? __pfx___video_do_ioctl+0x10/0x10 [ 1349.909053][T20384] ? __pfx_video_usercopy+0x10/0x10 [ 1349.909079][T20384] ? smack_file_ioctl+0x2c2/0x360 [ 1349.909126][T20384] ? __fget_files+0x2a/0x420 [ 1349.909150][T20384] ? __fget_files+0x3a6/0x420 [ 1349.909177][T20384] v4l2_ioctl+0x190/0x1e0 [ 1349.909204][T20384] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1349.909233][T20384] __se_sys_ioctl+0xff/0x170 [ 1349.909259][T20384] do_syscall_64+0x14d/0xf80 [ 1349.909282][T20384] ? trace_irq_disable+0x3b/0x150 [ 1349.909308][T20384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.909329][T20384] ? clear_bhb_loop+0x40/0x90 [ 1349.909356][T20384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.909377][T20384] RIP: 0033:0x7f13aa2bc819 [ 1349.909399][T20384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.909418][T20384] RSP: 002b:00007f13a850e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1349.909442][T20384] RAX: ffffffffffffffda RBX: 00007f13aa535fa0 RCX: 00007f13aa2bc819 [ 1349.909459][T20384] RDX: 00002000000001c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 1349.909473][T20384] RBP: 00007f13a850e090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.909487][T20384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.909501][T20384] R13: 00007f13aa536038 R14: 00007f13aa535fa0 R15: 00007ffe7d0576e8 [ 1349.909536][T20384] [ 1350.163156][T20390] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4996'. [ 1350.379054][ T1175] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.404407][ T1175] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.404462][ T1175] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.536458][ T5919] usb 5-1: new low-speed USB device number 110 using dummy_hcd [ 1351.162927][T15308] Bluetooth: hci6: command tx timeout [ 1351.554196][ T5919] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1351.554218][ T5919] usb 5-1: config 0 has no interface number 0 [ 1351.554248][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1351.554261][ T5919] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1351.554277][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1351.554299][ T5919] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1351.554333][ T5919] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1351.554360][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1351.554404][ T5919] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1351.554429][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.560853][ T5919] usb 5-1: config 0 descriptor?? [ 1351.562608][T20393] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1351.562925][T20393] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1351.732781][ T5919] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1351.754439][ T1111] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.906597][ T5919] usb 5-1: USB disconnect, device number 110 [ 1351.976750][ T5919] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1352.099197][T20404] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5010'. [ 1353.541231][T16657] Bluetooth: hci6: command tx timeout [ 1353.541338][T15308] Bluetooth: hci2: command 0x0406 tx timeout [ 1353.814858][ T1111] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.864583][T20419] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5013'. [ 1354.043452][ T1111] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.231095][ T1111] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.316529][T20368] chnl_net:caif_netlink_parms(): no params data found [ 1354.940786][T20368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.940976][T20368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.941743][T20368] bridge_slave_0: entered allmulticast mode [ 1354.971740][T20368] bridge_slave_0: entered promiscuous mode [ 1355.003482][T20368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.003732][T20368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.004259][T20368] bridge_slave_1: entered allmulticast mode [ 1355.037040][T20368] bridge_slave_1: entered promiscuous mode [ 1355.358699][T20368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.475654][T20368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.894948][ T5799] Bluetooth: hci6: command tx timeout [ 1355.936945][T16190] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1356.097272][T16190] usb 2-1: Using ep0 maxpacket: 32 [ 1356.100443][T16190] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1356.100472][T16190] usb 2-1: config 0 has no interface number 0 [ 1356.105277][T16190] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1356.105308][T16190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.105330][T16190] usb 2-1: Product: syz [ 1356.105345][T16190] usb 2-1: Manufacturer: syz [ 1356.105361][T16190] usb 2-1: SerialNumber: syz [ 1356.165475][T16190] usb 2-1: config 0 descriptor?? [ 1356.188400][T16190] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1356.385898][T20439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5020'. [ 1357.859692][T16190] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1357.860025][T16190] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 1357.972853][T16190] usb 2-1: USB disconnect, device number 22 [ 1358.032827][T20448] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5022'. [ 1358.090435][ T5799] Bluetooth: hci6: command tx timeout [ 1358.240642][ T1111] bond0 (unregistering): Released all slaves [ 1358.574705][T16190] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 1358.580642][T20368] team0: Port device team_slave_0 added [ 1358.599446][T20368] team0: Port device team_slave_1 added [ 1359.634931][T16190] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1359.634965][T16190] usb 2-1: config 0 has no interface number 0 [ 1359.635014][T16190] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1359.635039][T16190] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1359.635067][T16190] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1359.635094][T16190] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1359.635122][T16190] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1359.635149][T16190] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1359.646843][T16190] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1359.646874][T16190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.705311][T20368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.705333][T20368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.705363][T20368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.718921][T20368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.718939][T20368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.718969][T20368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.774003][T16190] usb 2-1: config 0 descriptor?? [ 1359.817591][T20452] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1359.817720][T20452] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1359.925709][T16190] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1360.003271][T20368] hsr_slave_0: entered promiscuous mode [ 1360.005037][T20368] hsr_slave_1: entered promiscuous mode [ 1360.006238][T20368] debugfs: 'hsr0' already exists in 'hsr' [ 1360.006266][T20368] Cannot create hsr debugfs directory [ 1360.120628][ T5877] usb 2-1: USB disconnect, device number 23 [ 1360.149680][ T5877] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1361.378623][ T5877] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1361.445716][ T36] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1361.665336][T20498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.726893][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 1361.731872][ T5877] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1361.731900][ T5877] usb 2-1: config 0 has no interface number 0 [ 1361.734896][ T5877] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1361.734922][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.734940][ T5877] usb 2-1: Product: syz [ 1361.734954][ T5877] usb 2-1: Manufacturer: syz [ 1361.734967][ T5877] usb 2-1: SerialNumber: syz [ 1361.799045][ T36] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1361.799114][ T36] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1361.817618][ T36] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1361.817649][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.817668][ T36] usb 5-1: Product: syz [ 1361.817681][ T36] usb 5-1: Manufacturer: syz [ 1361.817694][ T36] usb 5-1: SerialNumber: syz [ 1361.923357][ T5877] usb 2-1: config 0 descriptor?? [ 1361.930422][ T36] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1361.941929][ T5877] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1361.961655][T10397] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1362.041663][T20502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1378.437327][ T38] INFO: task syz.3.3961:17793 blocked for more than 149 seconds. [ 1378.437377][ T38] Tainted: G L syzkaller #0 [ 1378.437391][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1378.437402][ T38] task:syz.3.3961 state:D stack:24832 pid:17793 tgid:17793 ppid:15330 task_flags:0x400040 flags:0x00080003 [ 1378.437470][ T38] Call Trace: [ 1378.437478][ T38] [ 1378.437493][ T38] __schedule+0x1553/0x5240 [ 1378.437529][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1378.437561][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1378.437597][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1378.437632][ T38] ? __pfx___schedule+0x10/0x10 [ 1378.437668][ T38] ? schedule+0x90/0x360 [ 1378.437696][ T38] schedule+0x164/0x360 [ 1378.437722][ T38] __fuse_simple_request+0x121f/0x1c60 [ 1378.437781][ T38] ? __pfx___fuse_simple_request+0x10/0x10 [ 1378.437816][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1378.437865][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1378.437915][ T38] fuse_flush+0x673/0x8b0 [ 1378.437946][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1378.437972][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1378.438016][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1378.438232][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1378.438271][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1378.438306][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1378.438340][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1378.438372][ T38] filp_flush+0xc0/0x190 [ 1378.438405][ T38] filp_close+0x1d/0x40 [ 1378.438433][ T38] __se_sys_close_range+0x3d7/0x900 [ 1378.438475][ T38] ? __pfx___se_sys_close_range+0x10/0x10 [ 1378.438518][ T38] do_syscall_64+0x14d/0xf80 [ 1378.438543][ T38] ? trace_irq_disable+0x3b/0x150 [ 1378.438569][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.438592][ T38] ? clear_bhb_loop+0x40/0x90 [ 1378.438620][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.438643][ T38] RIP: 0033:0x7f05982dc819 [ 1378.438664][ T38] RSP: 002b:00007fff7667f7b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1378.438688][ T38] RAX: ffffffffffffffda RBX: 00007fff7667f8a0 RCX: 00007f05982dc819 [ 1378.438704][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1378.438719][ T38] RBP: 0000000000114af3 R08: 0000000000000001 R09: 0000000000000000 [ 1378.438742][ T38] R10: 0000001b31920000 R11: 0000000000000246 R12: 00007fff7667f8e0 [ 1378.438758][ T38] R13: 00007f059855609c R14: 0000000000114bd1 R15: 00007f0598556090 [ 1378.438796][ T38] [ 1378.438822][ T38] [ 1378.438822][ T38] Showing all locks held in the system: [ 1378.438834][ T38] 1 lock held by khungtaskd/38: [ 1378.438846][ T38] #0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1378.438911][ T38] 4 locks held by kworker/u8:8/1111: [ 1378.438924][ T38] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1378.438983][ T38] #1: ffffc90004cafc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1378.439040][ T38] #2: ffffffff8f14eb40 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1378.439090][ T38] #3: ffffffff8f15d2f8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0xa00 [ 1378.439153][ T38] 2 locks held by dhcpcd/5460: [ 1378.439165][ T38] #0: ffff888032552928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe4/0xe80 [ 1378.439224][ T38] #1: ffffffff8f15d2f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1378.439284][ T38] 2 locks held by getty/5556: [ 1378.439296][ T38] #0: ffff888037cc50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1378.439356][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1378.439412][ T38] 5 locks held by kworker/1:6/5877: [ 1378.439425][ T38] #0: ffff8880212c2d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1378.439482][ T38] #1: ffffc9000544fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1378.439540][ T38] #2: ffff888029ac2210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 1378.439592][ T38] #3: ffff888075774210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1378.439648][ T38] #4: ffff88802b2c41d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1378.439704][ T38] 2 locks held by kworker/0:4/5880: [ 1378.439719][ T38] 2 locks held by kworker/1:0/10397: [ 1378.439738][ T38] #0: ffff888019c07938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1378.439797][ T38] #1: ffffc9000d0bfc40 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1378.439865][ T38] 6 locks held by syz-executor/17584: [ 1378.439880][ T38] 7 locks held by syz-executor/20368: [ 1378.439893][ T38] #0: ffff888038816480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1378.439957][ T38] #1: ffff888079cbdc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1378.440018][ T38] #2: ffff888028709b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1378.440090][ T38] #3: ffffffff8e9c9fb8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1378.440143][ T38] #4: ffff88803c897160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1378.440201][ T38] #5: ffff888024d1a300 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1378.440262][ T38] #6: ffffffff8f15d2f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1378.440323][ T38] 4 locks held by udevd/20441: [ 1378.440334][ T38] #0: ffff888022334608 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 1378.440384][ T38] #1: ffff88805c739078 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1378.440437][ T38] #2: ffff88808d022b48 (kn->active#15){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1378.440489][ T38] #3: ffff888075774210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1378.440543][ T38] 3 locks held by syz.5.5037/20502: [ 1378.440555][ T38] [ 1378.440561][ T38] ============================================= [ 1378.440561][ T38] [ 1378.440571][ T38] NMI backtrace for cpu 0 [ 1378.440590][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1378.440618][ T38] Tainted: [L]=SOFTLOCKUP [ 1378.440626][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1378.440638][ T38] Call Trace: [ 1378.440647][ T38] [ 1378.440657][ T38] dump_stack_lvl+0xe8/0x150 [ 1378.440690][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1378.440721][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1378.440762][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1378.440796][ T38] sys_info+0x135/0x170 [ 1378.440823][ T38] watchdog+0xfd9/0x1030 [ 1378.440857][ T38] ? watchdog+0x21a/0x1030 [ 1378.440893][ T38] kthread+0x388/0x470 [ 1378.440917][ T38] ? __pfx_watchdog+0x10/0x10 [ 1378.440942][ T38] ? __pfx_kthread+0x10/0x10 [ 1378.440966][ T38] ret_from_fork+0x51e/0xb90 [ 1378.441001][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.441029][ T38] ? __switch_to+0xc7d/0x1450 [ 1378.441061][ T38] ? __pfx_kthread+0x10/0x10 [ 1378.441086][ T38] ret_from_fork_asm+0x1a/0x30 [ 1378.441126][ T38] [ 1378.441135][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1378.441163][ C1] NMI backtrace for cpu 1 [ 1378.441181][ C1] CPU: 1 UID: 0 PID: 17584 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1378.441206][ C1] Tainted: [L]=SOFTLOCKUP [ 1378.441212][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1378.441222][ C1] RIP: 0010:match_held_lock+0x0/0xb0 [ 1378.441244][ C1] Code: 67 48 0f b9 3a 90 31 db 48 89 d8 5b 41 5e 41 5f c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 56 53 bb 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 72 [ 1378.441259][ C1] RSP: 0018:ffffc9000ea2f1c8 EFLAGS: 00000087 [ 1378.441275][ C1] RAX: 0000000000000005 RBX: ffff88803a760c08 RCX: 0000000000000046 [ 1378.441288][ C1] RDX: 0000000000000200 RSI: ffffffff8ddcba40 RDI: ffff88803a760c08 [ 1378.441301][ C1] RBP: 00000000ffffffff R08: ffffffff8203cb04 R09: ffff8880b8933e90 [ 1378.441314][ C1] R10: dffffc0000000000 R11: fffff94000470779 R12: 0000000000000246 [ 1378.441327][ C1] R13: ffff88803a760000 R14: ffffffff8ddcba40 R15: 0000000000000002 [ 1378.441340][ C1] FS: 0000000000000000(0000) GS:ffff888126432000(0000) knlGS:0000000000000000 [ 1378.441355][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1378.441368][ C1] CR2: 00007faff6c2ac04 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 1378.441385][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1378.441396][ C1] DR3: 00000000be70000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1378.441408][ C1] Call Trace: [ 1378.441414][ C1] [ 1378.441421][ C1] lock_is_held_type+0x89/0x150 [ 1378.441443][ C1] __might_resched+0x37/0x480 [ 1378.441468][ C1] rt_spin_lock+0xc2/0x400 [ 1378.441497][ C1] ? pfn_valid+0xba/0x480 [ 1378.441514][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 1378.441540][ C1] __lru_cache_activate_folio+0x144/0x5a0 [ 1378.441561][ C1] folio_mark_accessed+0x288/0x4a0 [ 1378.441579][ C1] unmap_page_range+0x172a/0x4540 [ 1378.441619][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1378.441643][ C1] ? mas_find+0xb0e/0xd30 [ 1378.441660][ C1] ? unmap_vmas+0x1c4/0x6a0 [ 1378.441682][ C1] unmap_vmas+0x48f/0x6a0 [ 1378.441705][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1378.441736][ C1] exit_mmap+0x280/0xa10 [ 1378.441753][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1378.441767][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1378.441794][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1378.441817][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1378.441843][ C1] ? uprobe_clear_state+0x288/0x2a0 [ 1378.441862][ C1] __mmput+0xcb/0x3d0 [ 1378.441884][ C1] exit_mm+0x168/0x220 [ 1378.441903][ C1] do_exit+0x6a2/0x23c0 [ 1378.441921][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1378.441942][ C1] ? __pfx_do_exit+0x10/0x10 [ 1378.441958][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1378.441981][ C1] ? reacquire_held_locks+0x104/0x190 [ 1378.441999][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1378.442026][ C1] do_group_exit+0x21b/0x2d0 [ 1378.442044][ C1] ? rt_spin_unlock+0x160/0x200 [ 1378.442068][ C1] get_signal+0x125c/0x1310 [ 1378.442098][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 1378.442119][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1378.442138][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1378.442166][ C1] exit_to_user_mode_loop+0x86/0x480 [ 1378.442191][ C1] ? rcu_is_watching+0x15/0xb0 [ 1378.442212][ C1] do_syscall_64+0x32d/0xf80 [ 1378.442229][ C1] ? trace_irq_disable+0x3b/0x150 [ 1378.442249][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.442266][ C1] ? clear_bhb_loop+0x40/0x90 [ 1378.442284][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.442301][ C1] RIP: 0033:0x7f1c9b767997 [ 1378.442316][ C1] Code: Unable to access opcode bytes at 0x7f1c9b76796d. [ 1378.442325][ C1] RSP: 002b:00007ffc75868760 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 1378.442342][ C1] RAX: fffffffffffffe00 RBX: 000055555f98c500 RCX: 00007f1c9b767997 [ 1378.442355][ C1] RDX: 0000000040000000 RSI: 00007ffc758687bc RDI: ffffffffffffffff [ 1378.442368][ C1] RBP: 00007ffc758687bc R08: 0000000000000000 R09: 0000000000000000 [ 1378.442379][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1378.442390][ C1] R13: 0000000000000003 R14: 00007ffc75868a18 R15: 0000000000000000 [ 1378.442409][ C1] [ 1378.443161][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1378.443180][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1378.443208][ T38] Tainted: [L]=SOFTLOCKUP [ 1378.443217][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1378.443229][ T38] Call Trace: [ 1378.443237][ T38] [ 1378.443247][ T38] vpanic+0x56c/0xa60 [ 1378.443283][ T38] ? __pfx_vpanic+0x10/0x10 [ 1378.443325][ T38] panic+0xc5/0xd0 [ 1378.443356][ T38] ? __pfx_panic+0x10/0x10 [ 1378.443385][ T38] ? printk_trigger_flush+0x117/0x180 [ 1378.443416][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1378.443449][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1378.443482][ T38] watchdog+0x1023/0x1030 [ 1378.443516][ T38] ? watchdog+0x21a/0x1030 [ 1378.443552][ T38] kthread+0x388/0x470 [ 1378.443575][ T38] ? __pfx_watchdog+0x10/0x10 [ 1378.443600][ T38] ? __pfx_kthread+0x10/0x10 [ 1378.443625][ T38] ret_from_fork+0x51e/0xb90 [ 1378.443659][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.443687][ T38] ? __switch_to+0xc7d/0x1450 [ 1378.443718][ T38] ? __pfx_kthread+0x10/0x10 [ 1378.443768][ T38] ret_from_fork_asm+0x1a/0x30 [ 1378.443807][ T38] [ 1378.444184][ T38] Kernel Offset: disabled