last executing test programs: 14m2.625166773s ago: executing program 32 (id=49): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x20}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}]}, 0x5c}}, 0x0) 12m55.798400544s ago: executing program 33 (id=366): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) 12m33.152880057s ago: executing program 34 (id=459): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029"], 0x108}}], 0x2, 0xc040) 8m59.934040915s ago: executing program 35 (id=1442): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pvfs2\x00', 0x800080, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) pipe2$9p(&(0x7f0000004280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = open$dir(&(0x7f00000042c0)='./file0\x00', 0x28c1c2, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice(r8, &(0x7f00000003c0)=[{&(0x7f0000000300)="e90954", 0x3}], 0x1, 0x9) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000004300), &(0x7f0000004340)=0x14) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) r11 = gettid() r12 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r13) syz_clone(0x1000, &(0x7f0000004380)="40e079cfc5e51bcebeb835a2c000022669b84f5c5d983be281c5a5ec55501bec0b363b878c5ef9340f0041f0d94eac962bc8370d5ceeeeec8d88d7753bd5fa8bdcff724bf910df223b261e4666a98c509a1d5f42f2086a03dd45b7bd7d0bf866b66d8f4efa33e446fb7d0f21c35a832367231989aa677ca628e726e85129b876955bec6c0af8aaa4019aebb4225301a3f6cfe0a66a9e1dac16cb06b51ee03d58f2a21099595e5782c68a48226706c1d3bb91f3aa1cc05c61e7293ee0736d1304d49c48850ebbc5c57bd093c6b0889ad5710bd1dd1686ff", 0xd7, &(0x7f0000004480), &(0x7f00000044c0), &(0x7f0000004500)="14ae82ce57f55e12c6742616f545ba3a6aa29bdee3") getuid() getgroups(0x9, &(0x7f0000004540)=[0xee00, 0xee00, 0xee01, 0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xee00]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000280)="2f6d842f59e04ef97bda84598b2a299a1ea8dc9fb8cd5695251afa9464298b31aafa4d4c0dd003202f8490fcecfce59a89453303ad7228521c2817dc5edb8bf6fc9ccae77f21b3b2c8050270e4c2c23a10782d74886979b2f1006aca2eb528d194a305ed0f2115ea57a181e7db1bc7d392b2e5630949d9d30169de228459ebf2520da095da2a01bdfa9d423730f0ff2326ab5ed3633991efe2156fd073ed8479b338b5b2f65e87287ab6efe9eb96440100f851a2f3bb3ad68e266505abb28c2c299ee1cfc509e8dec5103a02152e83edc194001eb84c6836595aca76808c85ec3cf57d59ab29f07538e484ac6f85574bbac833dd0a868c00", 0xf8}, {&(0x7f0000000400)="9844a3da202a1de6ed112766dd881c9e22f0568f3e01a14add569217579cd00dd5b8b2765292f1d5f18618621aba87a06aadfd114c6939f0b92caca6b6f76e9c014ef45bd26f275423a8ae2794fe74961d859123d6103fbf587bba6523d102193899bf73e8c61ee58c40b3827dd505804e7ff9d2806ad0fb3847ec6a2a", 0x7d}, {&(0x7f0000000480)="527de4a8028c4a3dcca8d3508cfad608aca9e25a6b958c34966390adce698deebbe876a7c78cabea89023727f39533ec94548bd24634682483f0b817771b49b5bc22a34d80e4442108cb6b66f2fde5a6285d62ba74e649f170f9dbc62469f9990dcc44e5fa357ad35be2919e8c37381436238271ea31aec73fc3df6fb055a832ac16a7709310b559f92e2bf12ff10c40c2fc3b122d7bc26c9f44c69352db9254edc12740f31fa04c2748ebefcf", 0xad}, {&(0x7f0000000540)="81cb525e72abbd87e448794ddb4cec82a4374d3dadd86cc16b3a04720039e1c40d9b9c415d2f429471ec2d0e1c79f8", 0x2f}, {&(0x7f0000000580)="778a5244956f1838c9b3e0fd555ba463c25a9191a2be9e599749a797cf99e5780a2a7c7bb81c09084a0c99ae36f29a4e627f3248bf4e", 0x36}, {&(0x7f00000005c0)="256db512b3678734d957086074b4b8164375d36bfed37eaab1b740b92073f27cea19f300fe1a4a7d5d67ea3a5534a405a36e199d3190d8e977e033c9a72a52a53f685cdc072b8148540d8187dfcc9bfb98c0c2ab30c9fecb680ca6944e3795738081a1a6088823a7fb2422e661bd9d4b08e96645921e435aa8708b62584cb568027f565611ec7589673bcc5c9231a82da4596215956a1c441502871fbe0474b022482a5c8caf0d503f9b682817320d39ef86bfd199f22a8e99f8750c4acbf2c605b7bbb67908b076bc6c7a1630a599520a", 0xd1}, {&(0x7f00000006c0)="1a88bdc5b68cf38f72c5aa4f214fb10a2b1457d914ec83", 0x17}, {&(0x7f0000000700)="b6bcb1032f373a47e38a5794b66b7248b6af0104084a37408faa34ee599de3f69a656623e14b2f39f9aa0be997c7b8ef6e1d391478eca49793f19278d62545602774f9bf", 0x44}, {&(0x7f0000000780)="7d141cfdc737e5729d200e304864c7efae7580ec032a719550fea231393e6488b00ddcb3ea9ab61d435c48c9014eb1671840a593f4b7911d516ebd6616b58e3b5c14f6ee308c476a5176b5c323331c", 0x4f}, {&(0x7f0000000800)="91db8cb5ac6a24b71b5aff64fd7e6f4e30fd4e85bdcd8c0c6f520e52fc2361af013f4a7c5b7ba196133c5a803f92b0317e3b70492f68da127ce9452ff27eaf999a22aaaece0579f7e3f6f6c3fc797644c2a3382fe6b6746b2ca4e6298c05dcaffeb9d52c40b6bab1991fb365e08cf667b64cbfaa0a4addbd0498fef0b1dc72952037300177d7ac4d29b03ae5cd57d3dcd1076431ee0ecf24a881df1c78b266b083fd4f7e06e0f0b821fe366ad3910759ed83231b94c39ff7701c908fb959c7883f99", 0xc2}], 0xa, &(0x7f0000001200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100, 0x190}}, {{&(0x7f0000001300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000014c0), 0x2, &(0x7f0000001800), 0x78, 0x8040}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="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", 0x1000}, {&(0x7f0000003880)="2b39acceca5171dbf0af94b819dcfab3ba3a26fc6a34f7e6a993f6db450b544027d9bd612eb8496b14bdffae71718bf4a847ad982482177b8b86dd90fb08a2386754c2beab8d596db671ebbf2072787e98b8a9db29427623079f774a269efc835ec85db54791432ddfd8231de98baaa287a6f68e049e0f3a58006b43159f97b5507cd6facde01277ce306329be8c0b", 0x8f}], 0x3, &(0x7f0000003980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x20008010}}, {{&(0x7f00000039c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004180)=[{&(0x7f0000003a40)="17a9b3c61e7f7084855dbff2051578c2b18fbe97d56f28fd95d4ab00af5597b8d41028cde475d03842eb1dc56fe92534206a13208cd93bc822d7c9448e0069ccfc41ca90f1bb9bb79b557fbf47b1598d8175a308ce423c52b32226a2d3094807802f77e83e593dd8a615260d4f24d1e335449108ee6bedb551c9fde01c9b6e0a00c20952e154945b3e75758741f39bd7ac25076403a3", 0x96}, {&(0x7f0000003b00)="9184cf206a4cae9cbb4f86796bcd094f5962348d1e8913035b9b1664999a99c5bd324db603ab72081bdba1c9457b8b938a11b6327ed1611604ad1394d896e6bfed62001bad38e2a22edb912d2dab233fbeceb622d4a7f7728ab265dd485952724571263189c602e57c2c933ba0177017c3fdec94fea761245e9ee3fdbdd63e50f66f2cdeb6dc0636657e875142f94f84ebb397f580f13f3c64ce514c14fbe2e82423571e906d235ae7cfc392aca8fe1cce31bae952f0d18a95", 0xb9}, {&(0x7f0000003bc0)="50121bd2f2209d707d758f54b692e8ee96a74651c89c9226f993d3f50f6ec659a390f9ea68d51a75602187f211199ac1ffc5702d840efe928d6a0f1f91a9eb4472c6d79e97bd3bb86e9cbe078d6574d33f6d58f6c6a510a558e52906a3bf4b4675d71c3b15467720bab24474cb3a97661a57b3b15b45124a4824af4038477eca5c08fca2588c701bbe01bc49a7ca6f", 0x8f}, {&(0x7f0000003c80)="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", 0xfd}, {&(0x7f0000003d80)="477218dfcd63b796aee1510bcd1392e4b70a8e4609b909623e674f0dd723900ba8343d9b55868b4b79ee0bddb6f38f1dfd55a1380122bdcebe7212b5893a07a9500abea7b46c26be6a634ce7e95a87849aec32de16850d774b2c1e4e76fb4d9d66d09afed0cabfff827b7857b6f9af5e06f3f4afd55b7bfb6c3d7a8ef80e94d385afaf6c8fdccc8e0d661920598c923f258fe9bec3dc8eef758b9d9a9faa51671928ce93bfccd9fcefcdb2702a67370bc4f7085f4cd570", 0xb7}, {&(0x7f0000003e40)="c1c9c4521dfbe5b679b0b2efefcee4fc0125b1ebb9fcfc544dbcc78262a151d4c69385ca5e56e3e917af", 0x2a}, {&(0x7f0000003e80)="c15575c743e5a1357d37e5077c98f6be7990faa3a09528c9c4fd2d8badceef18c972b61c35d09b983656de2f53983c00759e3c46c5de0d80ebda7db09eeb629f3368e2279a544cfaac47be7bb5bb0f39d0c04428a343d14a43ce589ab4834a466c0ff6b99080e543034ba8962fc2736ee208112ebc3fc657008f11d6819bca27b977d28ad61079552878ce9802000940527049cdd24c3a3147cdf13e13c03110d1337ffc6f1916cb14807531", 0xac}, {&(0x7f0000003f40)="302c2de1bb9b11f768910e038ac19358858c3132d56c3d19d1643361d6c4acc7dcc9c2e0a664c635fbe58e4d9bda14465b310deae72f4627c00aad65b257d5dfd8f8492158d0e1b1c051768e39736eb0c188c064222eeb9d5e9b70e0b263974c2515a574531a7f0e7d08623f124c80348c006c962c491591f1b10cf4f529accb497f1a5cd8b7dbb0c5fa6375353441a9381ea949d27a7cee9fa066f8e629b7dac2058be56d253fd89977dea9e21151adad2159c51851a698a2f4bf7d94fc623d9e6bdf5981e263df9d8a7564886493790a1cc4591cfbcfd2ab0e0b1e57df3ba42c6520c6e062f9a185fe5db5", 0xec}, {&(0x7f0000004040)="8c55b9407c2783c5db572f9c6f2a40357dffcf44453486aa21bf1b1e3f1ce50ae8aa9a8f7ac9a5f6987c037e40e2a046a1d0d0b84f804b688ab63835ce60a78f6cc65e443b385c5e759301d883fc70358f41c86e8778e03edafb46ba5dd14133a26ee65e6342b15d73f0e6e05f4dfd50fd9f37145dfec1d93d0477c43f74712f714814e257e57d81", 0x88}, {&(0x7f0000004100)="006b9f5f21f1f27c2a2d60f19b328cd66886a5a7199b992d7c1b8189a394adc24eb131fdb6a34a89f36fdd5744db4482897da7759c649b187b532952c77556d15c", 0x41}], 0xa, &(0x7f0000000a80)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="dbfc0000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="140000", @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r13, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x8050}}, {{&(0x7f0000004640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004840)=[{&(0x7f00000046c0)="a13207970f7d637813955d914ff71766b0e6ecb5437c4e6537268c48e5d5114de4621f517e46a78afb468629fbacbc2a97c61facbf78c65b6972077576f4c8540ca9a2dbe44afd926adde2aca2770c401ba275a4aba89fededf8897abd78da88c51c2caf5d4700f4d9deb4f6764e78c8c62390773d83b3c006719d9273baae41e0fca1fd24d4733f380b38219c0750098b855c28", 0x94}, {&(0x7f0000004780)="b9c59d994d2673d2193a359de4fd60dc5601c52469dcd6c2f7619bbc76845b41ae5bf77b406ec342ca797cfb1742a1ce60d727fe4935edb5a964013f2942a0e73a1e735d2692436d727d6bc883cd07f346f28b4c1a7db185884855ec2540a461f3051b81e843181adf801f0bb5f3bf5d3bf3822b22f7234b2d3f2784b197bb9b863e72fbdbbb247e32cd0388f6250afa2d", 0x91}], 0x2, 0x0, 0x0, 0x4095}}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000004880)="62fffe8f943500d4185afdd35bb6315939a3d47828ff6493973527c463335e754954d9fb11163c8f7f83261320445d83c6e89528091598e24160f878c3efa98bda711cd12ef6d4e26bcff14f59ce92a4c06f74221430c4a573b278dfadefc3059d092e06a73f958ea2617641b6e8786b7fcc91d708055a9430720cb510155b7dc6b5e5db13d6596ec46758a8fa8f040b", 0x90}], 0x1, 0x0, 0x0, 0x24044481}}], 0x6, 0x40000) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f00000004c0)=ANY=[], 0x1f, 0x1) r14 = syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206", @ANYRESHEX=r9], 0x0) syz_usb_control_io$sierra_net(r14, 0x0, 0x0) syz_usb_control_io$hid(r14, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="0000000007b08445499a486d05009d09a212d62cc61a95580ca464fad11c6d009b64a27623697bc4ca82440f63a35a461e9d5062f7dec52ede744bb9f7a130972c447e38916e9331ec062871a053bb64de42e0e1fd6d4e51ab18338696393c1b62948337097f6d9949400a3ff17f5c47b6d511a89cca6b7f39659d532e7ec57309db1fdffd3ace3206710ab1018a1798b9db6c45609f716927ac3be026cf4b32569ddd8e973b55f5ac5ec6e44892b56880"], 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x3) 7m23.577437528s ago: executing program 36 (id=2020): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0x2800c005}, 0x4) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @host, 0x0, 0x0, 0x2e, 0x3, 0x9a6, 0x680d782e, 0x8}) close(0x3) 6m54.583378041s ago: executing program 37 (id=2093): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x108) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='n', 0x1, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/245, 0xf5}], 0x1, 0x40000004, 0x5) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @remote}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) landlock_restrict_self(r4, 0x8) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x240988c0, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) r6 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0xe20, 0x4) syz_usb_disconnect(r6) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000340), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}, [@typed={0x8, 0x167, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000454", @ANYRES16=r1, @ANYBLOB="01002cde701004002000050000000600010005000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 6m1.255029718s ago: executing program 38 (id=2399): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) ptrace$peek(0x2, r0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') write$P9_RUNLINKAT(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0xe0180, 0x0) read(r2, 0x0, 0x0) 4m54.469434934s ago: executing program 9 (id=2667): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_usb_connect$uac1(0x2, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000081e04df3040000102030109027a0003010090bc0904000000010100000a240100000a000201020904010000"], 0x0) 4m52.924574847s ago: executing program 9 (id=2673): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000580)={0x14, &(0x7f00000004c0)={0x40, 0x21, 0x65, {0x65, 0x9, "4ca5a4f3308914aeb25902bc56329d1c7421eb5ea65e0bba161976ae369b7c0cdaa9450955b49ce3d9bc1164ecca9295a57c4c075cdfb789410d7af46b58c569517923707e9392750e8eaaece8ddfc6d182e540e30d9f720611cdf5f93d114b6be2f1f"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e80)={0x44, &(0x7f00000005c0)={0x40, 0x13, 0x1c, "e93c45263e346f8edbb2a48a8eb465e3ccb17e3f81310a4378789a6f"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x6, 0x8, 0xf, 0x42e, 0x2, 0x7, 0xff, 0x3, 0xf0, 0x7, 0xd, 0x7ff}}, &(0x7f0000000a00)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000a40)={0x20, 0x83, 0x2}, &(0x7f0000000a80)={0x20, 0x87, 0x2, 0xfffc}, &(0x7f0000000ac0)={0x20, 0x89, 0x2}}) 4m50.114699677s ago: executing program 9 (id=2681): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r1, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendto$inet(r1, &(0x7f0000000600)="12", 0xfffd, 0x1000000000000000, 0x0, 0x0) 4m49.75091969s ago: executing program 9 (id=2683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x2000) 4m49.289422265s ago: executing program 9 (id=2685): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000011006bcc9e3be35c6e17aa31076b876c1c0000007ea6", 0x1a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x14, 0x51b, 0x70bd28, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "d76f51d2877e3e1d6a"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0x25, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6ccf62f9}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x728e052e}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0xdc}}, 0x0) close(0x3) 4m47.710288456s ago: executing program 9 (id=2693): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x5, 0x0, 0x0, r1, 0x0, 0x0, 0x21}) 4m32.223048333s ago: executing program 39 (id=2693): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x5, 0x0, 0x0, r1, 0x0, 0x0, 0x21}) 4m30.351998729s ago: executing program 8 (id=2723): syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000220a40308801b09e3401f010203010902240001010900060904a7a7025d81df0209058a01"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet(0x2, 0x5, 0x0) (async) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000240)) recvmsg$can_raw(r1, &(0x7f0000000500)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000003c0), 0x55, &(0x7f0000000540)=""/139, 0x8b}, 0x40002101) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7d, 0x0, &(0x7f0000000000)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r4, 0x3b83, &(0x7f0000000000)={0x28, 0x10000, r5, r5, 0x1601e6, 0x7, 0xa, 0x338710}) (async) ioctl$IOMMU_IOAS_COPY$syz(r4, 0x3b83, &(0x7f0000000000)={0x28, 0x10000, r5, r5, 0x1601e6, 0x7, 0xa, 0x338710}) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1400009a23e108ace56400a37b85cacdd4531900"], 0x14}], 0x1, 0x0, 0x0, 0x4004}, 0x8000) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x231, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xa, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x50, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) 4m28.325169919s ago: executing program 8 (id=2727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xa, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x7, 0x6, {0x7, 0x25, 0x1, 0x0, 0x70, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x56, 0x7b, 0x4, {0x7, 0x25, 0x1, 0x4, 0xd, 0x7ff}}}}}}}}]}}, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x200001, "5660359c3245d1c42317afad7d48ed51a026000000000001060000b2a04fb600"}) pipe2(&(0x7f0000000040), 0x4000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m26.979616012s ago: executing program 8 (id=2729): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x13, r3, 0x80000000) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x72879d90}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x64040}, 0x4090) write(r0, &(0x7f0000000140)='never', 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xfffffffffffffccf, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0xc840}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x4c}}, 0x0) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc01c5868, &(0x7f00000004c0)={r2, &(0x7f0000000380)='batadv\x00', 0x84100, &(0x7f00000003c0)={@align=0xe1, {0x1d2, 0x0, 0xe, 0x1}}, 0x0, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xdc51}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8815}, 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffff83}}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x4000000000) ppoll(&(0x7f0000000080)=[{r10, 0x1108}], 0x1, 0x0, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) 4m23.818498888s ago: executing program 8 (id=2733): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285629, &(0x7f0000000980)={0x0, 0x7, 0x2, '\x00', &(0x7f0000000640)=0x8}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) read$FUSE(r8, 0x0, 0x0) r9 = dup(r7) io_setup(0x2, &(0x7f00000005c0)) syz_ublk_setup_queues(r9, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20, 0x0, 0x346, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0xf0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001cc0)={0x3c, r11, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88010}, 0x8000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x800001, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x0, 0x79, {{0x16, 0x4, 0x1, 0x0, 0x58, 0x67, 0x0, 0x2, 0x0, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp={0x44, 0x24, 0x84, 0x0, 0xd, [0x8, 0x1, 0x3e, 0x8, 0xf, 0x5, 0x6df2, 0xf9]}, @ssrr={0x89, 0xb, 0x39, [@dev={0xac, 0x14, 0x14, 0x27}, @private=0x7fffffff]}, @cipso={0x86, 0x12, 0x1, [{0x6, 0xc, "79a263042290ed24bf2d"}]}]}}}}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='netdevsim0\x00', 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000580)={'erspan0\x00', &(0x7f00000004c0)={'syztnl2\x00', r12, 0x80, 0x7810, 0x0, 0x8, {{0x1d, 0x4, 0x1, 0x3c, 0x74, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @empty, {[@end, @ssrr={0x89, 0x23, 0x80, [@broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @broadcast, @remote, @remote]}, @noop, @ssrr={0x89, 0x1f, 0x5a, [@broadcast, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @loopback, @local]}, @lsrr={0x83, 0x7, 0x1f, [@loopback]}, @timestamp={0x44, 0x14, 0x3c, 0x0, 0x0, [0x6, 0xfffffff9, 0x3, 0x8]}]}}}}}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 4m21.570309054s ago: executing program 8 (id=2735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xa, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x7, 0x6, {0x7, 0x25, 0x1, 0x0, 0x70, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x56, 0x7b, 0x4, {0x7, 0x25, 0x1, 0x4, 0xd, 0x7ff}}}}}}}}]}}, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x200001, "5660359c3245d1c42317afad7d48ed51a026000000000001060000b2a04fb600"}) pipe2(&(0x7f0000000040), 0x4000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m18.545685463s ago: executing program 8 (id=2740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xa, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x7, 0x6, {0x7, 0x25, 0x1, 0x0, 0x70, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x56, 0x7b, 0x4, {0x7, 0x25, 0x1, 0x4, 0xd, 0x7ff}}}}}}}}]}}, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x200001, "5660359c3245d1c42317afad7d48ed51a026000000000001060000b2a04fb600"}) pipe2(&(0x7f0000000040), 0x4000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m17.63190795s ago: executing program 40 (id=2740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xa, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x7, 0x6, {0x7, 0x25, 0x1, 0x0, 0x70, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x56, 0x7b, 0x4, {0x7, 0x25, 0x1, 0x4, 0xd, 0x7ff}}}}}}}}]}}, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x200001, "5660359c3245d1c42317afad7d48ed51a026000000000001060000b2a04fb600"}) pipe2(&(0x7f0000000040), 0x4000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m32.00378486s ago: executing program 5 (id=3090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5ddc25bd7000fddbdf250e00000008000300", @ANYRES32=r2], 0x74}, 0x1, 0x0, 0x0, 0x24008001}, 0x20008800) 2m31.950547615s ago: executing program 5 (id=3091): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) setresuid(0xee01, 0xee00, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m31.884076258s ago: executing program 5 (id=3092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5ddc25bd7000fddbdf250e00000008000300", @ANYRES32=r2], 0x74}, 0x1, 0x0, 0x0, 0x24008001}, 0x20008800) (fail_nth: 1) 2m31.839023693s ago: executing program 5 (id=3093): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x13, r3, 0x80000000) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x72879d90}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x64040}, 0x4090) write(r0, &(0x7f0000000140)='never', 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xfffffffffffffccf, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0xc840}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x4c}}, 0x0) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8815}, 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffff83}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x4000000000) ppoll(&(0x7f0000000080)=[{r9, 0x1108}], 0x1, 0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) 2m28.651890696s ago: executing program 5 (id=3111): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x8001, @loopback, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, '\x00', [@calipso={0x7, 0x40, {0xb1bbf2d6b755cdf8, 0xe, 0x0, 0x3, [0x7f, 0xff00000000000000, 0x0, 0x1, 0x2, 0x200, 0x5]}}]}}}, @dstopts={{0x18, 0x29, 0x37, {0x3b}}}], 0x78}, 0xff00) 2m28.543507697s ago: executing program 5 (id=3113): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f00000001c0)}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0xb) mount$cgroup(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x10800, &(0x7f0000000040)={[{@name={'name', 0x3d, 'upperdir'}}, {@none}]}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x78) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7180a5f1a6e4700543ed38dae703182900607acd2f18710c4788bf188bb3e12cd67b768999ebeb087d48342d6879a7f85c44740d000cd0d210d2648530a212ce963d72", 0x43, 0x804, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 2m12.435259888s ago: executing program 41 (id=3113): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f00000001c0)}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0xb) mount$cgroup(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x10800, &(0x7f0000000040)={[{@name={'name', 0x3d, 'upperdir'}}, {@none}]}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x78) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7180a5f1a6e4700543ed38dae703182900607acd2f18710c4788bf188bb3e12cd67b768999ebeb087d48342d6879a7f85c44740d000cd0d210d2648530a212ce963d72", 0x43, 0x804, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 2m9.488217863s ago: executing program 2 (id=3189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x161002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) syz_usb_connect$uac3(0x3, 0x98, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100100000008410e494240000102030109028600030109200c080b0001010130080904000000010130000a240101220000100000132403030000"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="66baf80cb8044fdc87efed666a0f388059e0e005000000b91e4200000fc73e0f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b936080000b846330000ba000000000f30b9210000000f01c1c4e17929d8", 0x5e}], 0x1, 0x11, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xffffffff}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3}, 0x10) close(r2) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x1, 0x40000000, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m5.680057567s ago: executing program 2 (id=3192): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000410007012cbd7000fadbdf25037c00000401cb80100001800c00108008000b"], 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000410007012cbd7000fadbdf25037c00000401cb80100001800c00108008000b"], 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x6ed8, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x6ed8, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/165, 0xa5}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1d, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1d, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_to_bond\x00', 0x2}) 2m5.156101587s ago: executing program 2 (id=3195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff38}]}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x8c}, 0x1, 0x0, 0x0, 0x14}, 0x0) (fail_nth: 13) 2m5.045816381s ago: executing program 2 (id=3196): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x98, &(0x7f00000001c0)={0x7, 0xfffffffffffffffe, 0xd}}) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) epoll_create1(0x0) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0xa0000) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000400)={"a0453822", 0x80, 0x6, 0x2, 0xc0, 0x8, "3377f877c734c40400", "0000d61d", "00000100", "04ffffbf", ["c3fffdffe663ec0100", "0080000000000100001000", "000000000000000000c40800", "0000000000000100"]}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x40000000000000, 0x2, 0x80000001}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x400000000, 0x5, 0x0, 0x0, 0x7ff}, 0x0, 0x0) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x3) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) writev(r4, &(0x7f0000004380)=[{&(0x7f0000004180)="30a4d56fda3472e1f343adcf74a3301dea5497dae412c708e9258b15ba34aa4942ca0b7cfd0de19c51eec4ac565e4c73561c45beaa31f849e52ef21855b261d37e45f63da1201b8b8c6e668369a086e6b1d458fe64ec1c19051cdece49a1207af1f286a032fe06c4a9a8b7ff71f2139af6f338117933a413da1a8567f79c18b5", 0x80}], 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) tkill(r5, 0x12) tkill(r5, 0x12) ptrace(0x4208, r5) ptrace$ARCH_SHSTK_STATUS(0x1e, r5, &(0x7f0000000140), 0x5005) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x45, 0x1, 0x80002, 0x25dfdbf9, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040d9}, 0x4008094) 2m4.769784831s ago: executing program 2 (id=3197): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) r7 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='secret\x00', &(0x7f0000000080)='A===\x00', 0x0) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000001400)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/70, 0x0, 0x9000}) r9 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f000000a080)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0xdc}], 0x1, &(0x7f000000a000)=[@cred={{0x1c}}], 0x20, 0x4000001}, 0x8000004) 2m3.684000918s ago: executing program 2 (id=3201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$FUSE(r1, 0x0, 0x0) 2m3.361379636s ago: executing program 42 (id=3201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$FUSE(r1, 0x0, 0x0) 1m53.813324343s ago: executing program 0 (id=3222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peekuser(0x3, r4, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x1, 0x6}]}, 0x10) sendto$inet(r3, &(0x7f0000000140)="87", 0x1, 0x4000010, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x402c810}, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m52.713804316s ago: executing program 0 (id=3225): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x0, 0x30000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m52.06779791s ago: executing program 0 (id=3226): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f700000fff6ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1m51.910381318s ago: executing program 0 (id=3227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x1000c080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xc}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8051}, 0x2000400c) sysfs$1(0x1, &(0x7f00000000c0)='F\xd9\xeb\xbc\x92\xf7>\xb0\xbd\xad\xa4r\xc5\x06\xd2LE\xaf\x8b\xa3\x8fC3$\xf2\"\x8e&\x13\xf0\x947\x98\'Y\xa0\xe9\xf1\xf0\xae4\r\xf7\xe5\x00.\xd8p\x87\x97\xca\x02-\x9a(\xc3\xc2\x0e\xa3\xe2\n|\xba\x92\xce\x1e\t\xc2\xad\a\x00\x83H\xdb\xdfa\xe7\x01\x1a+\x8cfI8\x01\xa3\xb2\xb4\x84\xfdu\x9c\x12\x97\x01\x89\x84Q\xb7\xd8\xaa\xc5d\x9b\xf5lp\xeb\x92\by\bb\x18\xef\x0eL- N\xf4\x7f\xe3\xde\x00\x00\x00\x00\x00\x00\xcd\x02\x80\r\xc3\x92\x15C\xda\n,\x19\xc9\x87\f\xde\x9c\xf2^\x98\x99k\x00'/167) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x20000000) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8081}, 0x20008854) 1m51.6269011s ago: executing program 0 (id=3228): syz_usb_connect(0x2, 0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c00010100807f0904"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000240)={{0x6, 0x2, 0x7f, 0x5, 'syz1\x00', 0x2d19}, 0x5, 0x20, 0x5, 0x0, 0x1, 0x9, 'syz0\x00', &(0x7f0000000100)=['/dev/audio\x00'], 0xb}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000000800000018000180"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) 1m48.449294885s ago: executing program 0 (id=3234): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000100), 0x10800, &(0x7f00000004c0)={[{@name={'name', 0x3d, 'upperdir'}}]}) syz_usb_connect(0x2, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b8db3008720541005470012207010902740001000040000904"], 0x0) 1m46.74885818s ago: executing program 1 (id=3239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000010000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240521deb0b68000000060a010400000000000000000500000008000b400000000040000480240001800b00010074756e6e656c000014000280080001400000000008000240000000091800018008000100667764000c00028008000140000000090900010073797a300000000014000000110001"], 0xf0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="2800000043000701fefffffffcdbdf25047c00000c00458008000400", @ANYRES32, @ANYBLOB="080001"], 0x28}}, 0x2004c000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000680)={0x420, 0x3f3, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x29, [0x1, 0x863, 0xffffff81, 0x1321, 0x339c000, 0x3, 0xd3f, 0x7, 0x8, 0xffff, 0xc7, 0x5, 0x8, 0x8, 0xa8, 0xd, 0x10000, 0x5, 0x3, 0x7, 0xe7, 0x6, 0x653b3e45, 0x0, 0x2, 0x8, 0xfffffff9, 0x6, 0x2, 0x3, 0x8, 0x5, 0x8, 0xfffffffc, 0x2, 0x401, 0x40000000, 0x3, 0x9, 0xb81b, 0x7, 0x7, 0x9, 0xd5ab, 0x7, 0x101, 0xe, 0x9, 0x0, 0x9, 0x8f7, 0x0, 0x3, 0x6, 0x6, 0x1, 0x4, 0x7, 0x2, 0x3, 0x4, 0x1, 0x6, 0x1], [0xfffffff8, 0xfff, 0xbf, 0x3, 0x8, 0x8, 0xf7, 0x0, 0x9, 0x7, 0x2, 0xfffff287, 0x4, 0x7, 0xfffffffd, 0x200, 0x4, 0x5000000, 0x3ff, 0x21, 0x1e9, 0xfff, 0x4, 0xff, 0x5, 0xfff, 0x0, 0x8, 0xfffffffb, 0x7, 0x4010, 0x0, 0xcd560000, 0x8000, 0xaf, 0xe, 0xf1, 0x1, 0xd12, 0x0, 0x44, 0x8, 0x8, 0x8, 0x1, 0x0, 0xc3, 0x5, 0xfffffffe, 0x3ff, 0x2, 0x8, 0x3, 0x3, 0x6, 0x3c, 0x0, 0x1, 0xf, 0xf, 0x7ff, 0x0, 0x3, 0x3], [0xffff, 0x7, 0xd000, 0x0, 0x9, 0x7, 0x7, 0x7, 0xd1d4, 0x3, 0x4a8, 0x3, 0xc, 0x9, 0x9c, 0x0, 0x7f, 0x4, 0x3ff, 0x8, 0x8001, 0x7, 0x8, 0x3, 0x3, 0xd, 0x7, 0x40, 0xa315, 0x4, 0x3, 0x1, 0x5, 0x5, 0xbc, 0x8be3, 0x2, 0x5, 0x0, 0x1, 0x3, 0x8, 0x7, 0x1, 0x7, 0xadec, 0x4, 0x4, 0x8, 0xf, 0x0, 0x1d04, 0x3ff, 0xfffffff8, 0x2, 0x2, 0xf, 0x7, 0x200, 0x80, 0x9, 0x7fff, 0x9, 0xffff], [0x4, 0xb60, 0x0, 0x8, 0x5, 0x7, 0xffffff32, 0x3340, 0x9, 0xdb200000, 0x7, 0xffff1080, 0x80000001, 0x7f, 0x4, 0x6, 0xdee, 0x1, 0x100000, 0xadc, 0x1, 0x1, 0x4000, 0x8001, 0x1000, 0x1, 0x18, 0x3667, 0x8, 0x27d9499f, 0x0, 0x2, 0x8, 0x8, 0x800, 0x0, 0x401, 0x7, 0x18a, 0xfffffffd, 0x2, 0x3, 0xfd, 0x69c, 0x1000, 0x3ff, 0x9e, 0x7fff, 0xfff, 0x0, 0x6, 0x0, 0x7ff, 0x6, 0x7fffffff, 0x4, 0x10000, 0xb00, 0x7, 0x1, 0x1, 0x7fffffff, 0x1, 0x8780]}}, 0x420}, 0x1, 0x0, 0x0, 0x40}, 0x880) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf2503000000060001004e200000040005"], 0x20}, 0x1, 0x0, 0x0, 0x48881}, 0x840) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b, 0x0, 0xfff5}], {0x14}}, 0x3c}}, 0x0) 1m46.507797056s ago: executing program 1 (id=3241): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x200, 0x5e}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 1m45.998329585s ago: executing program 1 (id=3244): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x13, r3, 0x80000000) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x72879d90}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x64040}, 0x4090) write(r0, &(0x7f0000000140)='never', 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xfffffffffffffccf, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0xc840}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x4c}}, 0x0) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc01c5868, &(0x7f00000004c0)={r2, &(0x7f0000000380)='batadv\x00', 0x84100, &(0x7f00000003c0)={@align=0xe1, {0x1d2, 0x0, 0xe, 0x1}}, 0x0, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xdc51}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8815}, 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffff83}}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x4000000000) ppoll(&(0x7f0000000080)=[{r10, 0x1108}], 0x1, 0x0, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) 1m42.679183006s ago: executing program 1 (id=3246): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x800001, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 1m41.675882164s ago: executing program 1 (id=3250): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x30000, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1m40.92997229s ago: executing program 1 (id=3254): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x13, r3, 0x80000000) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x72879d90}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x64040}, 0x4090) write(r0, &(0x7f0000000140)='never', 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xfffffffffffffccf, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0xc840}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x4c}}, 0x0) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc01c5868, &(0x7f00000004c0)={r2, &(0x7f0000000380)='batadv\x00', 0x84100, &(0x7f00000003c0)={@align=0xe1, {0x1d2, 0x0, 0xe, 0x1}}, 0x0, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xdc51}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8815}, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffff83}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x4000000000) ppoll(&(0x7f0000000080)=[{r9, 0x1108}], 0x1, 0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) 1m40.58142522s ago: executing program 43 (id=3254): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x13, r3, 0x80000000) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x72879d90}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x64040}, 0x4090) write(r0, &(0x7f0000000140)='never', 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xfffffffffffffccf, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0xc840}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x4c}}, 0x0) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc01c5868, &(0x7f00000004c0)={r2, &(0x7f0000000380)='batadv\x00', 0x84100, &(0x7f00000003c0)={@align=0xe1, {0x1d2, 0x0, 0xe, 0x1}}, 0x0, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xdc51}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8815}, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffff83}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x4000000000) ppoll(&(0x7f0000000080)=[{r9, 0x1108}], 0x1, 0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) 1m33.399446815s ago: executing program 44 (id=3234): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000100), 0x10800, &(0x7f00000004c0)={[{@name={'name', 0x3d, 'upperdir'}}]}) syz_usb_connect(0x2, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b8db3008720541005470012207010902740001000040000904"], 0x0) 9.595099939s ago: executing program 6 (id=3630): pipe2(0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x10100, 0x0) r1 = openat(r0, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x4c0103, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xb4b3}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xc0}}, 0x4000000) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020000004082050c0040000102030109026f0003010838030904000000010100000a240107000a00020102090401000001020000090401010101020000082402010002180507240107a4010009050109f7"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) 6.983818063s ago: executing program 6 (id=3636): r0 = fanotify_init(0x0, 0x400) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], &(0x7f0000000340)={0x0, 0x0, 0xfffffd96, 0x0, 0x0, [{0x0, &(0x7f0000000000)=@lang_id={0x0, 0x3, 0x427}}, {0x0, &(0x7f0000000640)=@string={0x0, 0x3, "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"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.681857594s ago: executing program 4 (id=3649): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000c0a000/0x3000)=nil, 0x2, 0x0, 0x0, 0x0, 0xe4ff, 0x2a, 0x0, 0x2}) 4.504170232s ago: executing program 4 (id=3650): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1204840, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') setuid(0xee01) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 4.365658652s ago: executing program 4 (id=3651): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xf, 0x0, &(0x7f0000000080)=0x4c) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x777) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2240, 0x100) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x4, 0x5, 0x7fffffff, @vifc_lcl_addr=@broadcast, @local}, 0x10) 4.101901061s ago: executing program 4 (id=3653): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000140001200400000000000000020000000100000014000100ff010000000000000000000000000001140002"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) 3.99628758s ago: executing program 4 (id=3654): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x180480, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a240101000000000008240505"], 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x18, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_eee={0x0, 0x5, 0x2, 0x40, 0x3, 0x604, 0x30, 0x6}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) dup2(r1, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./my_configfs/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1fe) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/functions/uvc.usb0/control/terminal/output/default/iTerminal\x00', 0x0, 0x0) read(r3, &(0x7f0000000900), 0x64) 3.885693991s ago: executing program 6 (id=3655): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0xa) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r2 = socket$pptp(0x18, 0x1, 0x2) recvmsg(r2, &(0x7f00000005c0)={&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/14, 0xe}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000340)=""/70, 0x46}, {&(0x7f00000003c0)=""/180, 0xb4}, {&(0x7f0000000480)=""/97, 0x61}, {&(0x7f0000000500)=""/13, 0xd}], 0x7}, 0x40000002) ioctl$MEMREADOOB64(r1, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x10, &(0x7f0000000000)="76d30b442665857a34c3bc7db4c7ea85"}) lsetxattr$trusted_overlay_origin(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, 0x0, 0x0) 3.754779424s ago: executing program 6 (id=3656): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000412f00090028bd7000fddbdf250400000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 3.635733088s ago: executing program 6 (id=3658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xa, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x7, 0x6, {0x7, 0x25, 0x1, 0x0, 0x70, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x56, 0x7b, 0x4, {0x7, 0x25, 0x1, 0x4, 0xd, 0x7ff}}}}}}}}]}}, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x200001, "5660359c3245d1c42317afad7d48ed51a026000000000001060000b2a04fb600"}) pipe2(0x0, 0x4000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.810247897s ago: executing program 4 (id=3662): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab120400000000000001090224"], 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000080)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) statx(r7, 0x0, 0x7800, 0x80, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="2f0000000600000000000000000000000400efff00000000040000000000000006000000000000007d5c27282b4000"], 0x2f) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x5, @empty, 0xb}], 0x3c) 1.96714248s ago: executing program 3 (id=3668): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) write(r2, &(0x7f00000003f0)='0\n', 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c1, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x100, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)="110000000200050000efdf2254f217c2", 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7800, 0x701, 0x7, 0xff, {{0x5, 0x4, 0x2, 0x13, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @empty, @empty}}}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.652292726s ago: executing program 3 (id=3670): ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000000040)=0x2) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x5, 0x0, &(0x7f0000000040)) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x5, 0x0, &(0x7f0000000040)) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000080)=0x13b) syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000180)) (async) syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000180)) 1.622418641s ago: executing program 6 (id=3671): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25, 0x0, 0xa1ff}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 1.534330193s ago: executing program 3 (id=3672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000fe9000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.45827877s ago: executing program 7 (id=3673): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x48, 0x1, 0x200000, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x10, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x422, @local}, 0x1c) 1.366161334s ago: executing program 7 (id=3674): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0x3ff) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x1, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 1.025897513s ago: executing program 7 (id=3675): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@handle, @flat=@weak_binder={0x77622a85, 0x1081, 0x2}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x2, 0x36}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 607.448598ms ago: executing program 7 (id=3676): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='gre0\x00', 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800) (async) sendto$inet6(r0, &(0x7f0000000300), 0x1e, 0x3b00, 0x0, 0xfffffffffffffdfd) 561.323713ms ago: executing program 7 (id=3677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="b8010000000f01d9dce9c4e1795bf5b8640b00000f23c80f21f8350800a0000f23f8b9740b0000b80c000000ba000000000f30660f388274720066b83f018ee00f21ca65660f3838ef260fc79b70000000", 0x51}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 13) 303.888683ms ago: executing program 3 (id=3678): r0 = fsopen(&(0x7f0000000300)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x300000000000000) 91.403403ms ago: executing program 7 (id=3679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xa, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x7, 0x6, {0x7, 0x25, 0x1, 0x0, 0x70, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x56, 0x7b, 0x4, {0x7, 0x25, 0x1, 0x4, 0xd, 0x7ff}}}}}}}}]}}, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x200001, "5660359c3245d1c42317afad7d48ed51a026000000000001060000b2a04fb600"}) pipe2(&(0x7f0000000040), 0x4000) openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 90.872308ms ago: executing program 3 (id=3680): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) (async) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r3 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r3}, &(0x7f00000000c0)) (async) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r3}, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) timer_gettime(0x0, &(0x7f0000000140)) read$FUSE(r5, &(0x7f0000003d00)={0x2020}, 0x2020) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "16"}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4048840) 0s ago: executing program 3 (id=3681): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) (fail_nth: 7) kernel console output (not intermixed with test programs): 15] usb 4-1: USB disconnect, device number 95 [ 886.708349][T17458] lo speed is unknown, defaulting to 1000 [ 886.833814][ T199] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 886.973298][ T199] usb 7-1: device descriptor read/64, error -71 [ 887.037220][T16715] usb 5-1: USB disconnect, device number 22 [ 887.213723][ T199] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 887.232235][T17469] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3368'. [ 887.348085][ T199] usb 7-1: device descriptor read/64, error -71 [ 887.455003][ T199] usb usb7-port1: attempt power cycle [ 887.695141][ T6173] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 887.823963][ T199] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 887.860847][ T199] usb 7-1: device descriptor read/8, error -71 [ 887.863969][ T6173] usb 5-1: Using ep0 maxpacket: 8 [ 887.864078][T16715] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 887.883384][ T6173] usb 5-1: unable to get BOS descriptor or descriptor too short [ 887.884405][ T6173] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 887.884438][ T6173] usb 5-1: can't read configurations, error -71 [ 888.053731][T16715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.053782][T16715] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 888.053804][T16715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 888.053826][T16715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 888.053844][T16715] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 888.114831][ T199] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 888.174536][ T199] usb 7-1: device descriptor read/8, error -71 [ 888.175492][T16715] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 888.175517][T16715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 888.175537][T16715] usb 4-1: Product: syz [ 888.175551][T16715] usb 4-1: Manufacturer: syz [ 888.175565][T16715] usb 4-1: SerialNumber: syz [ 888.196638][T16715] usb 4-1: config 0 descriptor?? [ 888.284659][ T199] usb usb7-port1: unable to enumerate USB device [ 888.402422][T17477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.403020][T17477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.419780][T16715] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 888.419804][T16715] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 888.494399][ T10] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 888.619408][T16715] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 888.619434][T16715] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 888.619731][T16715] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 888.654556][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 888.656879][ T10] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 888.656904][ T10] usb 8-1: config 0 has no interface number 0 [ 888.656949][ T10] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 888.682640][ T10] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 888.682668][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.682688][ T10] usb 8-1: Product: syz [ 888.682702][ T10] usb 8-1: Manufacturer: syz [ 888.682733][ T10] usb 8-1: SerialNumber: syz [ 888.737753][T16715] usb 4-1: USB disconnect, device number 96 [ 888.759963][ T10] usb 8-1: config 0 descriptor?? [ 888.763800][T17484] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 889.009458][T17484] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 889.213958][ T10] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 889.214178][ T10] asix 8-1:0.188: probe with driver asix failed with error -61 [ 889.458066][T17484] input input63: cannot allocate more than FF_MAX_EFFECTS effects [ 889.518390][ T10] usb 8-1: USB disconnect, device number 71 [ 889.747192][T16982] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 889.894971][T16982] usb 5-1: Using ep0 maxpacket: 8 [ 889.941807][T16982] usb 5-1: unable to get BOS descriptor or descriptor too short [ 889.942815][T16982] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 889.942851][T16982] usb 5-1: can't read configurations, error -71 [ 890.135265][ T10] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 890.169812][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3390'. [ 890.169907][T17525] bridge_slave_1: left allmulticast mode [ 890.169935][T17525] bridge_slave_1: left promiscuous mode [ 890.170229][T17525] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.289110][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.305009][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 890.305038][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.305058][ T10] usb 4-1: Product: syz [ 890.316634][ T10] usb 4-1: Manufacturer: syz [ 890.323647][ T10] usb 4-1: SerialNumber: syz [ 890.355563][ T10] usb 4-1: config 0 descriptor?? [ 890.361409][ T10] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 890.391496][ T38] kauditd_printk_skb: 23 callbacks suppressed [ 890.391512][ T38] audit: type=1800 audit(1788242019.165:2698): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=295082 res=0 errno=0 [ 890.391556][ T38] audit: type=1800 audit(1788242019.165:2699): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=295114 res=0 errno=0 [ 890.391594][ T38] audit: type=1800 audit(1788242019.175:2700): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=295089 res=0 errno=0 [ 890.391633][ T38] audit: type=1800 audit(1788242019.175:2701): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=295090 res=0 errno=0 [ 890.393036][ T38] audit: type=1800 audit(1788242019.175:2702): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=295111 res=0 errno=0 [ 890.393706][ T38] audit: type=1800 audit(1788242019.175:2703): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=295112 res=0 errno=0 [ 890.397288][T17527] netlink: 'syz.7.3392': attribute type 10 has an invalid length. [ 890.398458][ T38] audit: type=1800 audit(1788242019.185:2704): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=295091 res=0 errno=0 [ 890.409887][ T38] audit: type=1800 audit(1788242019.195:2705): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=295113 res=0 errno=0 [ 890.503923][ T38] audit: type=1800 audit(1788242019.285:2706): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=295134 res=0 errno=0 [ 890.619774][T17525] bridge_slave_0: left allmulticast mode [ 890.619808][T17525] bridge_slave_0: left promiscuous mode [ 890.620081][T17525] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.895919][T17532] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3393'. [ 891.286857][T17527] bond0: (slave bond_slave_0): Releasing backup interface [ 891.553117][T16982] kernel read not supported for file /video9 (pid: 16982 comm: kworker/1:7) [ 891.661881][ T38] audit: type=1800 audit(1788242020.454:2707): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=295170 res=0 errno=0 [ 892.176208][ T37] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 892.239186][T17566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3405'. [ 892.330531][ T37] usb 8-1: Using ep0 maxpacket: 8 [ 892.358732][ T37] usb 8-1: unable to get BOS descriptor or descriptor too short [ 892.361036][ T37] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 892.361074][ T37] usb 8-1: can't read configurations, error -71 [ 892.495080][T17569] ufs: You didn't specify the type of your ufs filesystem [ 892.495080][T17569] [ 892.495080][T17569] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 892.495080][T17569] [ 892.495080][T17569] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 892.726515][T16982] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 892.876559][T16715] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 892.877426][T16982] usb 7-1: Using ep0 maxpacket: 16 [ 892.879573][T16982] usb 7-1: too many configurations: 255, using maximum allowed: 8 [ 892.882914][T16982] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 892.882948][T16982] usb 7-1: can't read configurations, error -61 [ 892.898759][ T5683] usb 4-1: USB disconnect, device number 97 [ 893.006607][T16982] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 893.028546][T16715] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 893.028572][T16715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.028591][T16715] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 893.030732][T16715] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 893.030758][T16715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.030778][T16715] usb 5-1: Product: syz [ 893.030791][T16715] usb 5-1: Manufacturer: syz [ 893.030801][T16715] usb 5-1: SerialNumber: syz [ 893.101433][T16715] usb 5-1: invalid UAC_HEADER (v1) [ 893.148539][T16715] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 893.156756][T16982] usb 7-1: Using ep0 maxpacket: 16 [ 893.157562][T16982] usb 7-1: too many configurations: 255, using maximum allowed: 8 [ 893.162422][T16982] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 893.162455][T16982] usb 7-1: can't read configurations, error -61 [ 893.164788][T16982] usb usb7-port1: attempt power cycle [ 893.220906][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.277818][ T5683] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 893.451609][ T37] usb 5-1: USB disconnect, device number 27 [ 893.483898][ T5683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.483942][ T5683] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 893.483965][ T5683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.511696][T16982] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 893.538586][T16982] usb 7-1: Using ep0 maxpacket: 16 [ 893.539614][T16982] usb 7-1: too many configurations: 255, using maximum allowed: 8 [ 893.542679][T16982] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 893.542716][T16982] usb 7-1: can't read configurations, error -61 [ 893.569657][ T5683] usb 4-1: config 0 descriptor?? [ 893.687103][T16982] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 893.707689][T16982] usb 7-1: Using ep0 maxpacket: 16 [ 893.708397][T16982] usb 7-1: too many configurations: 255, using maximum allowed: 8 [ 893.709740][T16982] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 893.709759][T16982] usb 7-1: can't read configurations, error -61 [ 893.710062][T16982] usb usb7-port1: unable to enumerate USB device [ 893.788700][ T5683] usbhid 4-1:0.0: can't add hid device: -71 [ 893.788813][ T5683] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 893.801945][ T5683] usb 4-1: USB disconnect, device number 98 [ 893.888767][ T199] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 894.039840][ T199] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.039873][ T199] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.039900][ T199] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 894.039912][ T199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.046030][ T199] usb 8-1: config 0 descriptor?? [ 894.170306][T17587] netlink: 'syz.4.3414': attribute type 4 has an invalid length. [ 894.170320][T17587] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3414'. [ 894.227209][ T5683] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 894.268078][ T199] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 894.268111][ T199] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 894.268136][ T199] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 894.268161][ T199] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 894.268185][ T199] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 894.268209][ T199] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 894.268232][ T199] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 894.279393][ T199] hid-thrustmaster 0003:044F:B65D.0041: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 894.279777][ T199] hid-thrustmaster 0003:044F:B65D.0041: Wrong number of endpoints? [ 894.290520][ C0] hid-thrustmaster 0003:044F:B65D.0041: URB to get model id failed with error -32 [ 894.439541][T17593] tipc: Started in network mode [ 894.439560][T17593] tipc: Node identity 2007ff, cluster identity 4711 [ 894.439572][T17593] tipc: Node number set to 2099199 [ 894.493911][ T5683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.493958][ T5683] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 894.493979][ T5683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.495745][T16982] usb 8-1: USB disconnect, device number 74 [ 894.550268][ T5683] usb 4-1: config 0 descriptor?? [ 895.077666][T16982] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 895.227705][T16982] usb 5-1: Using ep0 maxpacket: 16 [ 895.231449][T16982] usb 5-1: unable to get BOS descriptor or descriptor too short [ 895.232551][T16982] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.232573][T16982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 895.234716][T16982] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 895.234743][T16982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.234762][T16982] usb 5-1: Product: syz [ 895.234776][T16982] usb 5-1: Manufacturer: syz [ 895.234786][T16982] usb 5-1: SerialNumber: syz [ 895.301000][ T10] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 895.388699][ T5683] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 895.394144][ T5683] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input64 [ 895.416010][ T38] kauditd_printk_skb: 36 callbacks suppressed [ 895.416027][ T38] audit: type=1800 audit(1788242024.202:2744): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=295869 res=0 errno=0 [ 895.446271][ T38] audit: type=1800 audit(1788242024.232:2745): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=295885 res=0 errno=0 [ 895.456950][ T38] audit: type=1800 audit(1788242024.232:2746): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=295888 res=0 errno=0 [ 895.462922][ T38] audit: type=1800 audit(1788242024.252:2747): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=295887 res=0 errno=0 [ 895.467230][ T38] audit: type=1800 audit(1788242024.252:2748): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=295886 res=0 errno=0 [ 895.470686][ T38] audit: type=1800 audit(1788242024.262:2749): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=295877 res=0 errno=0 [ 895.480060][ T38] audit: type=1800 audit(1788242024.262:2750): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=295880 res=0 errno=0 [ 895.480188][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 895.495202][ T38] audit: type=1800 audit(1788242024.282:2751): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=295783 res=0 errno=0 [ 895.651100][T16982] usb 5-1: 0:1 : does not exist [ 895.651290][T16982] usb 5-1: unit 5 not found! [ 895.651511][ T38] audit: type=1800 audit(1788242024.432:2752): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=295786 res=0 errno=0 [ 895.653003][T16982] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 895.653180][T16982] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 895.653199][T16982] usb 5-1: [2] FU [Headset Playback Volume] ch = 1, val = 0/1/1 [ 895.688814][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 895.695768][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 895.695803][ T10] usb 8-1: can't read configurations, error -71 [ 895.743670][ T38] audit: type=1800 audit(1788242024.532:2753): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=295873 res=0 errno=0 [ 895.744928][T16982] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 895.818864][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 895.818941][ T5683] usb 4-1: USB disconnect, device number 99 [ 895.896252][T16982] usb 5-1: USB disconnect, device number 28 [ 895.955108][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 896.304345][ T5606] Bluetooth: hci6: unexpected event for opcode 0x2035 [ 896.599303][ T32] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 896.720754][ T199] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 896.758431][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 896.761077][ T32] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 896.761135][ T32] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 896.761156][ T32] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 896.761176][ T32] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 896.761196][ T32] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.761234][ T32] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 896.761254][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.900915][T17629] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3427'. [ 896.908833][ T199] usb 4-1: Using ep0 maxpacket: 16 [ 896.917213][ T199] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.917237][ T199] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 896.926608][ T199] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 896.926636][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.926657][ T199] usb 4-1: Product: syz [ 896.926671][ T199] usb 4-1: Manufacturer: syz [ 896.926685][ T199] usb 4-1: SerialNumber: syz [ 897.187264][T17614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.202344][T17614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.229565][T17613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.239460][ T199] usb 4-1: USB disconnect, device number 100 [ 897.786967][T17638] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3430'. [ 898.249384][T16715] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 898.412551][T16715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.412600][T16715] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 898.412624][T16715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.442639][T16715] usb 4-1: config 0 descriptor?? [ 898.776289][T16715] usbhid 4-1:0.0: can't add hid device: -71 [ 898.776406][T16715] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 898.867877][T16715] usb 4-1: USB disconnect, device number 101 [ 899.057555][T17650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3434'. [ 899.397603][T16715] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 899.632139][T16715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.632185][T16715] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 899.632208][T16715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.643033][T16715] usb 4-1: config 0 descriptor?? [ 899.910054][ T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 900.067057][ T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 900.067090][ T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.100877][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 900.100906][ T10] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 900.100926][ T10] usb 5-1: Product: syz [ 900.100940][ T10] usb 5-1: Manufacturer: syz [ 900.148054][ T10] hub 5-1:4.0: USB hub found [ 900.466913][T16715] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 900.478587][T16715] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input65 [ 900.494979][ T38] kauditd_printk_skb: 37 callbacks suppressed [ 900.494995][ T38] audit: type=1800 audit(1788242029.280:2791): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296601 res=0 errno=0 [ 900.538609][ T38] audit: type=1800 audit(1788242029.320:2792): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=296617 res=0 errno=0 [ 900.596536][ T38] audit: type=1800 audit(1788242029.380:2793): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=296620 res=0 errno=0 [ 900.599581][ T38] audit: type=1800 audit(1788242029.380:2794): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=296619 res=0 errno=0 [ 900.643906][ T38] audit: type=1800 audit(1788242029.430:2795): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=296618 res=0 errno=0 [ 900.671810][ T38] audit: type=1800 audit(1788242029.460:2796): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=296609 res=0 errno=0 [ 900.678046][ T38] audit: type=1800 audit(1788242029.460:2797): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=296612 res=0 errno=0 [ 900.699361][ T5615] usb 4-1: USB disconnect, device number 102 [ 900.699438][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 900.775871][T17656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.776638][T17656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.787447][ T38] audit: type=1800 audit(1788242029.570:2798): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=296605 res=0 errno=0 [ 900.818997][ T38] audit: type=1800 audit(1788242029.600:2799): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296633 res=0 errno=0 [ 900.841285][ T38] audit: type=1800 audit(1788242029.610:2800): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296646 res=0 errno=0 [ 901.498948][ T10] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 901.579165][ T10] usb 5-1: USB disconnect, device number 29 [ 901.646404][ T32] usb 7-1: usb_control_msg returned -71 [ 901.646452][ T32] usbtmc 7-1:16.0: can't read capabilities [ 901.682265][ T32] usb 7-1: USB disconnect, device number 15 [ 902.030302][T17675] sg_write: data in/out 462812/136 bytes for SCSI command 0x0-- guessing data in; [ 902.030302][T17675] program syz.6.3441 not setting count and/or reply_len properly [ 902.321276][ T10] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 902.475389][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.475437][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 902.475460][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.488210][ T10] usb 4-1: config 0 descriptor?? [ 902.603320][T17691] sg_write: data in/out 397324/136 bytes for SCSI command 0x0-- guessing data in; [ 902.603320][T17691] program syz.4.3448 not setting count and/or reply_len properly [ 902.653287][ T32] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 902.735426][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 902.735546][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 902.748731][ T10] usb 4-1: USB disconnect, device number 103 [ 902.784637][ T32] usb 8-1: device descriptor read/64, error -71 [ 903.021643][ T32] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 903.131694][T16982] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 903.151673][ T32] usb 8-1: device descriptor read/64, error -71 [ 903.262091][ T32] usb usb8-port1: attempt power cycle [ 903.281961][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 903.301964][T16982] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.301990][T16982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 903.303037][T16982] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 903.303062][T16982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 903.303082][T16982] usb 5-1: SerialNumber: syz [ 903.446610][ T10] usb 4-1: device descriptor read/64, error -71 [ 903.537297][T16982] usb 5-1: 0:2 : does not exist [ 903.601977][ T32] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 903.605299][T16982] usb 5-1: USB disconnect, device number 30 [ 903.625571][ T32] usb 8-1: device descriptor read/8, error -71 [ 903.680622][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 903.721958][ T10] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 903.852058][ T10] usb 4-1: device descriptor read/64, error -71 [ 903.862032][ T32] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 903.882936][ T32] usb 8-1: device descriptor read/8, error -71 [ 903.912108][ T5704] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 903.963399][ T10] usb usb4-port1: attempt power cycle [ 903.992554][ T32] usb usb8-port1: unable to enumerate USB device [ 904.074190][ T5704] usb 7-1: Using ep0 maxpacket: 8 [ 904.075926][ T5704] usb 7-1: config 53 has an invalid interface number: 101 but max is 0 [ 904.075952][ T5704] usb 7-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 904.075970][ T5704] usb 7-1: config 53 has no interface number 0 [ 904.075995][ T5704] usb 7-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 904.076009][ T5704] usb 7-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 904.076023][ T5704] usb 7-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 904.076036][ T5704] usb 7-1: config 53 interface 101 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 904.076047][ T5704] usb 7-1: config 53 interface 101 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 904.078122][ T5704] usb 7-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 904.078146][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.078165][ T5704] usb 7-1: Product: syz [ 904.078177][ T5704] usb 7-1: Manufacturer: syz [ 904.078185][ T5704] usb 7-1: SerialNumber: syz [ 904.130239][T17697] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 904.323153][ T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 904.353698][ T10] usb 4-1: device descriptor read/8, error -71 [ 904.457716][ T5704] kvaser_usb 7-1:53.101: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 904.457740][ T5704] kvaser_usb 7-1:53.101: error -EMSGSIZE: Failed to initialize card [ 904.468265][ T5704] kvaser_usb 7-1:53.101: probe with driver kvaser_usb failed with error -90 [ 904.487980][ T5704] usb 7-1: USB disconnect, device number 16 [ 904.672601][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 904.693380][ T10] usb 4-1: device descriptor read/8, error -71 [ 904.803610][ T10] usb usb4-port1: unable to enumerate USB device [ 905.035524][T17716] netlink: 'syz.6.3457': attribute type 21 has an invalid length. [ 905.035620][T17716] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3457'. [ 905.563620][ T5704] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 905.722949][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 905.731546][ T38] kauditd_printk_skb: 27 callbacks suppressed [ 905.731564][ T38] audit: type=1800 audit(1788242034.507:2828): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297267 res=0 errno=0 [ 905.733275][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 905.733307][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 905.733327][ T5704] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 905.733350][ T5704] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 905.733374][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 905.733399][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 905.733438][ T5704] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 905.733459][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.759305][ T5704] usb 5-1: config 0 descriptor?? [ 905.760592][T17725] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 905.854267][ T38] audit: type=1800 audit(1788242034.607:2829): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297345 res=0 errno=0 [ 905.868686][ T38] audit: type=1800 audit(1788242034.647:2830): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297282 res=0 errno=0 [ 905.879980][ T38] audit: type=1800 audit(1788242034.657:2831): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=297311 res=0 errno=0 [ 905.890087][ T38] audit: type=1800 audit(1788242034.667:2832): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=297289 res=0 errno=0 [ 905.890131][ T38] audit: type=1800 audit(1788242034.667:2833): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=297290 res=0 errno=0 [ 905.901291][ T38] audit: type=1800 audit(1788242034.677:2834): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=297291 res=0 errno=0 [ 905.923239][ T38] audit: type=1800 audit(1788242034.697:2835): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297331 res=0 errno=0 [ 905.960323][ T38] audit: type=1800 audit(1788242034.737:2836): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297431 res=0 errno=0 [ 905.997303][ T38] audit: type=1800 audit(1788242034.777:2837): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297441 res=0 errno=0 [ 906.094290][ T10] usb 5-1: USB disconnect, device number 31 [ 906.188404][T17748] netlink: 388 bytes leftover after parsing attributes in process `syz.7.3466'. [ 906.294089][ T5704] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 906.326674][T17754] netlink: 495 bytes leftover after parsing attributes in process `syz.3.3468'. [ 906.434591][ T5704] usb 7-1: device descriptor read/64, error -71 [ 906.493857][ T37] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 906.529799][T17764] netlink: 'syz.3.3471': attribute type 21 has an invalid length. [ 906.529840][T17764] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3471'. [ 906.529848][T17764] FAULT_INJECTION: forcing a failure. [ 906.529848][T17764] name failslab, interval 1, probability 1, space 0, times 0 [ 906.529866][T17764] CPU: 1 UID: 0 PID: 17764 Comm: syz.3.3471 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 906.529880][T17764] Tainted: [L]=SOFTLOCKUP [ 906.529885][T17764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.529891][T17764] Call Trace: [ 906.529896][T17764] [ 906.529900][T17764] dump_stack_lvl+0xe8/0x150 [ 906.529917][T17764] should_fail_ex+0x467/0x600 [ 906.529933][T17764] should_failslab+0xa8/0x100 [ 906.529944][T17764] __kmalloc_noprof+0xfb/0x790 [ 906.529958][T17764] ? mpls_build_state+0x1b7/0x560 [ 906.529969][T17764] ? mpls_build_state+0x1b7/0x560 [ 906.529984][T17764] mpls_build_state+0x1b7/0x560 [ 906.529997][T17764] ? __pfx_mpls_build_state+0x10/0x10 [ 906.530007][T17764] ? lock_acquire+0x115/0x350 [ 906.530027][T17764] ? lwtunnel_build_state+0xe2/0x4c0 [ 906.530041][T17764] lwtunnel_build_state+0x384/0x4c0 [ 906.530054][T17764] ? lwtunnel_build_state+0xe2/0x4c0 [ 906.530067][T17764] fib_nh_common_init+0x130/0x3d0 [ 906.530085][T17764] ? __pfx_fib_nh_common_init+0x10/0x10 [ 906.530102][T17764] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 906.530117][T17764] fib_nh_init+0x9e/0x410 [ 906.530133][T17764] fib_create_info+0x1b9b/0x3170 [ 906.530159][T17764] fib_table_insert+0xcb/0x1b10 [ 906.530174][T17764] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 906.530184][T17764] ? lockdep_hardirqs_on+0x7a/0x110 [ 906.530194][T17764] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 906.530204][T17764] ? fib_new_table+0x14b/0x3f0 [ 906.530215][T17764] ? inet_rtm_newroute+0x12b/0x250 [ 906.530230][T17764] inet_rtm_newroute+0x14f/0x250 [ 906.530245][T17764] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 906.530268][T17764] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 906.530281][T17764] rtnetlink_rcv_msg+0x802/0xc00 [ 906.530296][T17764] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 906.530309][T17764] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 906.530321][T17764] ? ref_tracker_free+0x668/0x820 [ 906.530334][T17764] ? __netlink_deliver_tap+0x600/0x880 [ 906.530348][T17764] ? netlink_deliver_tap+0x19c/0x1b0 [ 906.530362][T17764] ? netlink_unicast+0x7b8/0x990 [ 906.530374][T17764] ? netlink_sendmsg+0x813/0xb40 [ 906.530388][T17764] ? sock_sendmsg_nosec+0x13a/0x180 [ 906.530398][T17764] ? ____sys_sendmsg+0x565/0x870 [ 906.530412][T17764] ? ___sys_sendmsg+0x2a5/0x360 [ 906.530426][T17764] ? __x64_sys_sendmsg+0x1b7/0x290 [ 906.530439][T17764] ? do_syscall_64+0x17b/0x530 [ 906.530448][T17764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.530464][T17764] netlink_rcv_skb+0x226/0x4a0 [ 906.530479][T17764] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 906.530493][T17764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 906.530514][T17764] ? netlink_deliver_tap+0x2e/0x1b0 [ 906.530529][T17764] ? netlink_deliver_tap+0x2e/0x1b0 [ 906.530546][T17764] netlink_unicast+0x7f5/0x990 [ 906.530565][T17764] netlink_sendmsg+0x813/0xb40 [ 906.530585][T17764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.530607][T17764] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 906.530625][T17764] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 906.530640][T17764] ? arch_stack_walk+0xfb/0x150 [ 906.530658][T17764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.530673][T17764] sock_sendmsg_nosec+0x13a/0x180 [ 906.530686][T17764] ____sys_sendmsg+0x565/0x870 [ 906.530705][T17764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.530724][T17764] ? import_iovec+0x73/0xa0 [ 906.530741][T17764] ___sys_sendmsg+0x2a5/0x360 [ 906.530755][T17764] ? __lock_acquire+0x6df/0x2e40 [ 906.530767][T17764] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.530799][T17764] ? __fget_files+0x2a/0x420 [ 906.530810][T17764] ? __fget_files+0x3a8/0x420 [ 906.530825][T17764] __x64_sys_sendmsg+0x1b7/0x290 [ 906.530841][T17764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 906.530865][T17764] do_syscall_64+0x17b/0x530 [ 906.530875][T17764] ? irqentry_exit+0x10f/0x8f0 [ 906.530885][T17764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.530895][T17764] ? clear_bhb_loop+0x40/0x90 [ 906.530908][T17764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.530919][T17764] RIP: 0033:0x7f7952c8e019 [ 906.530929][T17764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.530938][T17764] RSP: 002b:00007f7950ee6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.530950][T17764] RAX: ffffffffffffffda RBX: 00007f7952f15fa0 RCX: 00007f7952c8e019 [ 906.530958][T17764] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 906.530965][T17764] RBP: 00007f7950ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 906.530971][T17764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.530977][T17764] R13: 00007f7952f16038 R14: 00007f7952f15fa0 R15: 00007ffc80707218 [ 906.530993][T17764] [ 906.723829][ T5704] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 906.790895][T17766] netlink: 'syz.4.3472': attribute type 11 has an invalid length. [ 906.825717][T17766] netlink: 'syz.4.3472': attribute type 10 has an invalid length. [ 906.825737][T17766] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3472'. [ 906.825768][T17766] team_slave_1: entered promiscuous mode [ 906.825786][T17766] team_slave_1: entered allmulticast mode [ 906.838427][ T37] usb 8-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 906.838453][ T37] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 906.873484][ T5704] usb 7-1: device descriptor read/64, error -71 [ 906.932535][ T37] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 906.932553][ T37] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.932563][ T37] usb 8-1: Product: syz [ 906.932571][ T37] usb 8-1: Manufacturer: syz [ 906.932581][ T37] usb 8-1: SerialNumber: syz [ 906.985642][ T5704] usb usb7-port1: attempt power cycle [ 907.057366][T17766] team0: Port device team_slave_1 removed [ 907.058419][T17766] bridge0: port 3(team_slave_1) entered blocking state [ 907.060498][T17766] bridge0: port 3(team_slave_1) entered disabled state [ 907.196233][ T37] usb 8-1: config 0 descriptor?? [ 907.213475][ T37] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 907.283144][T17770] tipc: Enabling of bearer rejected, failed to enable media [ 907.336434][ T5704] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 907.355007][ T5704] usb 7-1: device descriptor read/8, error -71 [ 907.593962][ T5704] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 907.614623][ T5704] usb 7-1: device descriptor read/8, error -71 [ 907.688816][T17784] ima: rule for LSM 'unconfined_t' is undefined [ 907.689097][T17783] ima: policy update completed [ 907.737321][ T5704] usb usb7-port1: unable to enumerate USB device [ 907.954450][ T37] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 908.064155][ T5704] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 908.104172][ T37] usb 4-1: Using ep0 maxpacket: 8 [ 908.247004][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.247037][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.247074][ T5704] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 908.247092][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.255057][ T5704] usb 5-1: config 0 descriptor?? [ 908.725014][ T5704] hid (null): nested delimiters [ 908.761481][ T5704] wacom 0003:056A:030C.0042: nested delimiters [ 908.761592][ T5704] wacom 0003:056A:030C.0042: item 0 1 2 10 parsing failed [ 908.762299][ T5704] wacom 0003:056A:030C.0042: parse failed [ 908.762410][ T5704] wacom 0003:056A:030C.0042: probe with driver wacom failed with error -22 [ 908.909733][ T32] usb 5-1: USB disconnect, device number 32 [ 909.342440][T16982] usb 8-1: USB disconnect, device number 81 [ 909.678193][T17796] FAULT_INJECTION: forcing a failure. [ 909.678193][T17796] name failslab, interval 1, probability 1, space 0, times 0 [ 909.678230][T17796] CPU: 0 UID: 0 PID: 17796 Comm: syz.7.3480 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 909.678257][T17796] Tainted: [L]=SOFTLOCKUP [ 909.678264][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 909.678276][T17796] Call Trace: [ 909.678284][T17796] [ 909.678293][T17796] dump_stack_lvl+0xe8/0x150 [ 909.678324][T17796] should_fail_ex+0x467/0x600 [ 909.678356][T17796] should_failslab+0xa8/0x100 [ 909.678379][T17796] __kmalloc_noprof+0xfb/0x790 [ 909.678407][T17796] ? ovl_cache_entry_new+0x4d/0x7b0 [ 909.678429][T17796] ? ovl_cache_entry_new+0x4d/0x7b0 [ 909.678459][T17796] ovl_cache_entry_new+0x4d/0x7b0 [ 909.678492][T17796] ovl_fill_merge+0x776/0xdb0 [ 909.678514][T17796] ? lock_acquire+0x115/0x350 [ 909.678553][T17796] ? __pfx_ovl_fill_merge+0x10/0x10 [ 909.678576][T17796] ? kernfs_root+0x1c/0x230 [ 909.678604][T17796] ? __pfx_ovl_fill_merge+0x10/0x10 [ 909.678626][T17796] kernfs_fop_readdir+0x583/0x960 [ 909.678666][T17796] iterate_dir+0x2f1/0x4e0 [ 909.678698][T17796] ovl_dir_read+0x141/0x4a0 [ 909.678725][T17796] ? __pfx_ovl_dir_read+0x10/0x10 [ 909.678745][T17796] ? ovl_path_upper+0x105/0x170 [ 909.678777][T17796] ? ovl_path_next+0x21a/0x430 [ 909.678809][T17796] ovl_dir_read_merged+0x2fb/0x520 [ 909.678833][T17796] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 909.678856][T17796] ? __pfx_ovl_fill_merge+0x10/0x10 [ 909.678887][T17796] ? __kasan_kmalloc+0x93/0xb0 [ 909.678917][T17796] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 909.678946][T17796] ? ovl_iterate+0xcce/0x2170 [ 909.678965][T17796] ? ovl_iterate+0xcce/0x2170 [ 909.678992][T17796] ovl_iterate+0xd6c/0x2170 [ 909.679013][T17796] ? __lock_acquire+0x6df/0x2e40 [ 909.679042][T17796] ? look_up_lock_class+0x57/0x110 [ 909.679063][T17796] ? register_lock_class+0x31/0x2e0 [ 909.679094][T17796] ? __pfx_ovl_iterate+0x10/0x10 [ 909.679114][T17796] ? __lock_acquire+0x6df/0x2e40 [ 909.679135][T17796] ? register_lock_class+0x31/0x2e0 [ 909.679177][T17796] ? __lock_acquire+0x6df/0x2e40 [ 909.679212][T17796] ? do_raw_spin_lock+0x12b/0x2f0 [ 909.679252][T17796] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 909.679273][T17796] ? lockdep_hardirqs_on+0x7a/0x110 [ 909.679294][T17796] ? rwbase_write_lock+0x550/0x720 [ 909.679322][T17796] ? __pfx_ovl_iterate+0x10/0x10 [ 909.679345][T17796] wrap_directory_iterator+0x99/0xe0 [ 909.679377][T17796] iterate_dir+0x2f1/0x4e0 [ 909.679408][T17796] __se_sys_getdents64+0xf1/0x280 [ 909.679439][T17796] ? __pfx___se_sys_getdents64+0x10/0x10 [ 909.679464][T17796] ? ksys_write+0x248/0x270 [ 909.679486][T17796] ? __pfx_filldir64+0x10/0x10 [ 909.679515][T17796] ? __pfx_ksys_write+0x10/0x10 [ 909.679549][T17796] do_syscall_64+0x17b/0x530 [ 909.679569][T17796] ? irqentry_exit+0x10f/0x8f0 [ 909.679588][T17796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.679609][T17796] ? clear_bhb_loop+0x40/0x90 [ 909.679633][T17796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.679654][T17796] RIP: 0033:0x7f675724e019 [ 909.679674][T17796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.679692][T17796] RSP: 002b:00007f67554a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 909.679714][T17796] RAX: ffffffffffffffda RBX: 00007f67574d5fa0 RCX: 00007f675724e019 [ 909.679730][T17796] RDX: 0000000000000058 RSI: 00002000000002c0 RDI: 0000000000000003 [ 909.679743][T17796] RBP: 00007f67554a6090 R08: 0000000000000000 R09: 0000000000000000 [ 909.679756][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 909.679769][T17796] R13: 00007f67574d6038 R14: 00007f67574d5fa0 R15: 00007ffefe05b828 [ 909.679801][T17796] [ 910.374578][T17803] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3482'. [ 910.448589][T17805] tipc: Started in network mode [ 910.448627][T17805] tipc: Node identity 00000000000040000000000000000001, cluster identity 4711 [ 910.448735][T17805] tipc: Enabling of bearer rejected, failed to enable media [ 910.601381][T17809] sg_write: data in/out 397276/136 bytes for SCSI command 0x0-- guessing data in; [ 910.601381][T17809] program syz.6.3486 not setting count and/or reply_len properly [ 910.791004][ T37] usb 4-1: unable to get BOS descriptor or descriptor too short [ 910.792300][ T37] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 910.792334][ T37] usb 4-1: can't read configurations, error -71 [ 910.877341][T17803] FAT-fs (nullb0): bogus number of reserved sectors [ 910.877363][T17803] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 911.300606][T17833] netlink: 'syz.4.3494': attribute type 83 has an invalid length. [ 911.316188][T17833] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3494'. [ 911.665257][T17852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.723280][T17852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.742763][T17852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.774305][T17848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.866388][ T5685] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 912.020679][ T5685] usb 5-1: Using ep0 maxpacket: 8 [ 912.488176][ T6173] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 912.675576][ T6173] usb 7-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 912.675618][ T6173] usb 7-1: config 0 interface 0 has no altsetting 0 [ 912.675714][ T6173] usb 7-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 912.675740][ T6173] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.732315][ T6173] usb 7-1: config 0 descriptor?? [ 912.741994][ T38] kauditd_printk_skb: 23 callbacks suppressed [ 912.742009][ T38] audit: type=1800 audit(1788242041.514:2861): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297841 res=0 errno=0 [ 912.754092][ T38] audit: type=1800 audit(1788242041.524:2862): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=297870 res=0 errno=0 [ 912.754138][ T38] audit: type=1800 audit(1788242041.524:2863): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=297848 res=0 errno=0 [ 912.758899][ T38] audit: type=1800 audit(1788242041.534:2864): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=297849 res=0 errno=0 [ 912.765494][ T38] audit: type=1800 audit(1788242041.534:2865): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=297850 res=0 errno=0 [ 912.897931][ T38] audit: type=1800 audit(1788242041.674:2866): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297899 res=0 errno=0 [ 912.963339][T17864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.963967][T17864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.966629][T17864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.967245][T17864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.969903][T17864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.975799][T17864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.179110][T17871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.180297][T17871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.406953][ T37] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 913.565608][ T37] usb 8-1: unable to get BOS descriptor or descriptor too short [ 913.594071][ T37] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 913.627185][ T37] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 913.627215][ T37] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.627291][ T37] usb 8-1: Product: syz [ 913.627306][ T37] usb 8-1: Manufacturer: syz [ 913.627320][ T37] usb 8-1: SerialNumber: syz [ 913.675265][ T38] audit: type=1800 audit(1788242042.443:2867): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297949 res=0 errno=0 [ 913.685503][ T38] audit: type=1800 audit(1788242042.453:2868): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=297981 res=0 errno=0 [ 913.700537][ T38] audit: type=1800 audit(1788242042.453:2869): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=297956 res=0 errno=0 [ 913.701421][ T38] audit: type=1800 audit(1788242042.483:2870): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=297957 res=0 errno=0 [ 913.891684][T17868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.893780][T17868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.936454][ T37] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 914.198347][ T37] usb 8-1: 2:1 : unknown format tag 0xc is detected. processed as MPEG. [ 914.198438][ T37] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 914.401441][ T37] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 914.626052][ T37] usb 8-1: USB disconnect, device number 82 [ 914.661093][ T5685] usb 5-1: unable to get BOS descriptor or descriptor too short [ 914.662989][ T5685] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 914.663025][ T5685] usb 5-1: can't read configurations, error -71 [ 914.841566][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 914.877527][ T5615] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 915.037737][ T5615] usb 4-1: Using ep0 maxpacket: 16 [ 915.040776][ T5615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.040826][ T5615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 915.040862][ T5615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 915.040884][ T5615] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 915.040906][ T5615] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 915.042007][ T5615] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 915.042033][ T5615] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 915.042053][ T5615] usb 4-1: Manufacturer: syz [ 915.057648][ T5615] usb 4-1: config 0 descriptor?? [ 915.536526][ T5615] rc_core: IR keymap rc-hauppauge not found [ 915.536547][ T5615] Registered IR keymap rc-empty [ 915.536727][ T5615] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.562572][ T5615] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.598183][ T5615] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 915.624359][ T5615] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input66 [ 915.639226][ T5615] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.648656][ T5615] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.678013][ T5615] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.688675][ T5615] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.708744][ T5615] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.739716][ T5615] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.766577][ T5615] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.789420][ T5615] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.822077][ T5615] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.849285][ T5615] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.895969][ T5615] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 915.895994][ T5615] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 915.981562][ T5615] usb 4-1: USB disconnect, device number 110 [ 917.139820][ T6173] usbhid 7-1:0.0: can't add hid device: -71 [ 917.139937][ T6173] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 917.186304][ T6173] usb 7-1: USB disconnect, device number 21 [ 917.247451][T17901] netlink: 'syz.3.3519': attribute type 4 has an invalid length. [ 917.247471][T17901] netlink: 'syz.3.3519': attribute type 5 has an invalid length. [ 917.247483][T17901] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3519'. [ 917.383817][T17907] FAULT_INJECTION: forcing a failure. [ 917.383817][T17907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.383853][T17907] CPU: 0 UID: 0 PID: 17907 Comm: syz.3.3524 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 917.383880][T17907] Tainted: [L]=SOFTLOCKUP [ 917.383888][T17907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 917.383899][T17907] Call Trace: [ 917.383906][T17907] [ 917.383915][T17907] dump_stack_lvl+0xe8/0x150 [ 917.383945][T17907] should_fail_ex+0x467/0x600 [ 917.383975][T17907] _copy_from_iter+0x1d3/0x1660 [ 917.384013][T17907] ? __pfx__copy_from_iter+0x10/0x10 [ 917.384065][T17907] file_tty_write+0x48a/0x980 [ 917.384106][T17907] vfs_write+0x61e/0xbb0 [ 917.384138][T17907] ? __pfx_vfs_write+0x10/0x10 [ 917.384172][T17907] ? __fget_files+0x2a/0x420 [ 917.384199][T17907] ksys_write+0x156/0x270 [ 917.384224][T17907] ? __pfx_ksys_write+0x10/0x10 [ 917.384254][T17907] do_syscall_64+0x17b/0x530 [ 917.384275][T17907] ? irqentry_exit+0x10f/0x8f0 [ 917.384293][T17907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.384312][T17907] ? clear_bhb_loop+0x40/0x90 [ 917.384336][T17907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.384356][T17907] RIP: 0033:0x7f7952c8e019 [ 917.384375][T17907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.384391][T17907] RSP: 002b:00007f7950ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 917.384411][T17907] RAX: ffffffffffffffda RBX: 00007f7952f15fa0 RCX: 00007f7952c8e019 [ 917.384425][T17907] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 917.384437][T17907] RBP: 00007f7950ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 917.384449][T17907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.384461][T17907] R13: 00007f7952f16038 R14: 00007f7952f15fa0 R15: 00007ffc80707218 [ 917.384492][T17907] [ 917.498235][T17911] netlink: 'syz.7.3523': attribute type 5 has an invalid length. [ 917.643609][ T5704] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 917.691056][T17916] FAULT_INJECTION: forcing a failure. [ 917.691056][T17916] name failslab, interval 1, probability 1, space 0, times 0 [ 917.691086][T17916] CPU: 1 UID: 0 PID: 17916 Comm: syz.6.3527 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 917.691106][T17916] Tainted: [L]=SOFTLOCKUP [ 917.691111][T17916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 917.691120][T17916] Call Trace: [ 917.691126][T17916] [ 917.691133][T17916] dump_stack_lvl+0xe8/0x150 [ 917.691154][T17916] should_fail_ex+0x467/0x600 [ 917.691180][T17916] should_failslab+0xa8/0x100 [ 917.691196][T17916] __kmalloc_cache_noprof+0xa1/0x670 [ 917.691217][T17916] ? sctp_add_bind_addr+0x8c/0x370 [ 917.691235][T17916] ? sctp_add_bind_addr+0x8c/0x370 [ 917.691257][T17916] sctp_add_bind_addr+0x8c/0x370 [ 917.691278][T17916] sctp_copy_local_addr_list+0x31a/0x4e0 [ 917.691299][T17916] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 917.691317][T17916] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 917.691337][T17916] ? sctp_v6_is_any+0x64/0x80 [ 917.691357][T17916] ? sctp_copy_one_addr+0x93/0x360 [ 917.691377][T17916] sctp_bind_addr_copy+0xb3/0x3c0 [ 917.691396][T17916] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 917.691416][T17916] sctp_connect_new_asoc+0x2ff/0x6b0 [ 917.691439][T17916] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 917.691463][T17916] ? __ipv6_addr_type+0x23d/0x2f0 [ 917.691485][T17916] ? sctp_inet6_send_verify+0x6e/0x300 [ 917.691501][T17916] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 917.691526][T17916] __sctp_connect+0x5cb/0xdc0 [ 917.691554][T17916] ? __local_bh_enable+0x1e1/0x2f0 [ 917.691571][T17916] ? __pfx___sctp_connect+0x10/0x10 [ 917.691592][T17916] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 917.691606][T17916] ? lockdep_hardirqs_on+0x7a/0x110 [ 917.691625][T17916] sctp_inet_connect+0x12e/0x210 [ 917.691647][T17916] __sys_connect+0x336/0x470 [ 917.691667][T17916] ? __pfx___sys_connect+0x10/0x10 [ 917.691694][T17916] ? __pfx_ksys_write+0x10/0x10 [ 917.691716][T17916] __x64_sys_connect+0x7a/0x90 [ 917.691735][T17916] do_syscall_64+0x17b/0x530 [ 917.691749][T17916] ? irqentry_exit+0x10f/0x8f0 [ 917.691763][T17916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.691778][T17916] ? clear_bhb_loop+0x40/0x90 [ 917.691796][T17916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.691810][T17916] RIP: 0033:0x7efd7027e019 [ 917.691824][T17916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.691836][T17916] RSP: 002b:00007efd6e4d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 917.691853][T17916] RAX: ffffffffffffffda RBX: 00007efd70505fa0 RCX: 00007efd7027e019 [ 917.691863][T17916] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003 [ 917.691872][T17916] RBP: 00007efd6e4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 917.691881][T17916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 917.691890][T17916] R13: 00007efd70506038 R14: 00007efd70505fa0 R15: 00007fff2b810288 [ 917.691914][T17916] [ 917.822915][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 918.377205][T17931] netlink: 300 bytes leftover after parsing attributes in process `syz.7.3533'. [ 918.396651][T17928] ubi: mtd0 is already attached to ubi0 [ 918.671392][T17937] FAULT_INJECTION: forcing a failure. [ 918.671392][T17937] name failslab, interval 1, probability 1, space 0, times 0 [ 918.671428][T17937] CPU: 1 UID: 0 PID: 17937 Comm: syz.3.3536 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 918.671455][T17937] Tainted: [L]=SOFTLOCKUP [ 918.671463][T17937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 918.671474][T17937] Call Trace: [ 918.671482][T17937] [ 918.671490][T17937] dump_stack_lvl+0xe8/0x150 [ 918.671522][T17937] should_fail_ex+0x467/0x600 [ 918.671554][T17937] should_failslab+0xa8/0x100 [ 918.671575][T17937] __kmalloc_noprof+0xfb/0x790 [ 918.671606][T17937] ? argv_split+0x18d/0x400 [ 918.671623][T17937] ? argv_split+0x18d/0x400 [ 918.671646][T17937] argv_split+0x18d/0x400 [ 918.671668][T17937] ? __pfx___trace_uprobe_create+0x10/0x10 [ 918.671701][T17937] trace_probe_create+0x94/0x130 [ 918.671733][T17937] ? __pfx_trace_probe_create+0x10/0x10 [ 918.671761][T17937] ? lockdep_hardirqs_on+0x7a/0x110 [ 918.671783][T17937] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 918.671806][T17937] ? mutex_lock_nested+0x152/0x1d0 [ 918.671830][T17937] ? dyn_event_create+0x20/0x70 [ 918.671855][T17937] dyn_event_create+0x4f/0x70 [ 918.671878][T17937] create_or_delete_trace_uprobe+0x65/0xa0 [ 918.671898][T17937] trace_parse_run_command+0x1f3/0x380 [ 918.671929][T17937] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 918.671950][T17937] ? __pfx_probes_write+0x10/0x10 [ 918.671968][T17937] vfs_write+0x29f/0xbb0 [ 918.672009][T17937] ? __pfx_vfs_write+0x10/0x10 [ 918.672034][T17937] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 918.672056][T17937] ? lockdep_hardirqs_on+0x7a/0x110 [ 918.672078][T17937] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 918.672098][T17937] ? mutex_lock_nested+0x152/0x1d0 [ 918.672125][T17937] ? fdget_pos+0x252/0x320 [ 918.672154][T17937] ksys_write+0x156/0x270 [ 918.672180][T17937] ? __pfx_ksys_write+0x10/0x10 [ 918.672212][T17937] do_syscall_64+0x17b/0x530 [ 918.672232][T17937] ? irqentry_exit+0x10f/0x8f0 [ 918.672251][T17937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.672271][T17937] ? clear_bhb_loop+0x40/0x90 [ 918.672295][T17937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.672316][T17937] RIP: 0033:0x7f7952c8e019 [ 918.672335][T17937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.672352][T17937] RSP: 002b:00007f7950ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 918.672376][T17937] RAX: ffffffffffffffda RBX: 00007f7952f15fa0 RCX: 00007f7952c8e019 [ 918.672391][T17937] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004 [ 918.672406][T17937] RBP: 00007f7950ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 918.672419][T17937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.672432][T17937] R13: 00007f7952f16038 R14: 00007f7952f15fa0 R15: 00007ffc80707218 [ 918.672465][T17937] [ 918.780114][ T5615] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 918.978256][ T5615] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 918.978309][ T5615] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.979018][ T5615] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.979043][ T5615] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 918.979084][ T5615] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 918.979106][ T5615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.027299][ T5615] usb 7-1: config 0 descriptor?? [ 919.103195][ T38] kauditd_printk_skb: 24 callbacks suppressed [ 919.103213][ T38] audit: type=1800 audit(1788242047.881:2895): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=298451 res=0 errno=0 [ 919.125846][ T38] audit: type=1800 audit(1788242047.901:2896): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=298480 res=0 errno=0 [ 919.136890][ T38] audit: type=1800 audit(1788242047.911:2897): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=298458 res=0 errno=0 [ 919.244929][ T38] audit: type=1800 audit(1788242048.021:2898): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=298459 res=0 errno=0 [ 919.261763][ T38] audit: type=1800 audit(1788242048.041:2899): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=298460 res=0 errno=0 [ 919.358569][ T38] audit: type=1800 audit(1788242048.130:2900): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=298500 res=0 errno=0 [ 919.628469][ T38] audit: type=1800 audit(1788242048.400:2901): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=298518 res=0 errno=0 [ 919.637164][ T5615] holtek_kbd 0003:04D9:A055.0043: item fetching failed at offset 5/7 [ 919.640224][ T5615] holtek_kbd 0003:04D9:A055.0043: probe with driver holtek_kbd failed with error -22 [ 919.786096][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3539'. [ 919.826540][ T199] usb 7-1: USB disconnect, device number 22 [ 920.434147][ T5704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 920.435204][ T5704] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 920.435239][ T5704] usb 5-1: can't read configurations, error -71 [ 920.496663][T17961] netlink: 'syz.6.3543': attribute type 39 has an invalid length. [ 920.496685][T17961] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3543'. [ 920.626367][T17966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.637710][T17966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.780507][ T5683] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 920.804019][T17975] comedi comedi1: comedi_config --init_data is deprecated [ 920.888405][T17980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.889012][T17980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.892598][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 920.930729][ T5683] usb 8-1: Using ep0 maxpacket: 32 [ 920.934618][ T5683] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 920.934643][ T5683] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 920.934663][ T5683] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 920.934677][ T5683] usb 8-1: config 1 has no interface number 0 [ 920.934729][ T5683] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 920.934754][ T5683] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 920.934793][ T5683] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 920.934816][ T5683] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.947644][ T38] audit: type=1800 audit(1788242049.720:2902): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=298598 res=0 errno=0 [ 920.953508][ T38] audit: type=1800 audit(1788242049.730:2903): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=298627 res=0 errno=0 [ 920.954256][ T38] audit: type=1800 audit(1788242049.730:2904): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=298605 res=0 errno=0 [ 921.019743][T17982] tipc: Enabling of bearer rejected, failed to enable media [ 921.040913][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 921.046392][ T10] usb 7-1: config 0 has no interfaces? [ 921.051216][ T10] usb 7-1: New USB device found, idVendor=4971, idProduct=8017, bcdDevice=5f.a1 [ 921.051244][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.051263][ T10] usb 7-1: Product: syz [ 921.051277][ T10] usb 7-1: Manufacturer: syz [ 921.051292][ T10] usb 7-1: SerialNumber: syz [ 921.140652][T12849] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 921.165821][ T5683] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 921.175276][ T10] usb 7-1: config 0 descriptor?? [ 921.296108][T12849] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 921.296137][T12849] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 921.297765][T12849] usb 4-1: config 220 has no interface number 2 [ 921.297837][T12849] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 921.297863][T12849] usb 4-1: config 220 interface 0 has no altsetting 0 [ 921.297881][T12849] usb 4-1: config 220 interface 76 has no altsetting 0 [ 921.297899][T12849] usb 4-1: config 220 interface 1 has no altsetting 0 [ 921.309901][T12849] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 921.309928][T12849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.309948][T12849] usb 4-1: Product: syz [ 921.309962][T12849] usb 4-1: Manufacturer: syz [ 921.309976][T12849] usb 4-1: SerialNumber: syz [ 921.392379][T17966] tipc: Can't bind to reserved service type 2 [ 921.394476][ T37] usb 7-1: USB disconnect, device number 23 [ 921.555376][ T5683] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 921.615596][T12849] usb 4-1: selecting invalid altsetting 0 [ 921.616146][T12849] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 921.616176][T12849] uvcvideo 4-1:220.0: No valid video chain found. [ 921.749659][T17988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.755219][T17988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.763728][T12849] usb 4-1: selecting invalid altsetting 0 [ 921.763763][T12849] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 921.767503][T17988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.771312][T17988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.779529][ T5683] usb 8-1: USB disconnect, device number 83 [ 921.833733][ T5683] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 921.834085][T12849] usb 4-1: USB disconnect, device number 111 [ 922.301479][ T199] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 922.341286][ T5704] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 922.461309][ T199] usb 7-1: Using ep0 maxpacket: 32 [ 922.463949][ T199] usb 7-1: unable to get BOS descriptor or descriptor too short [ 922.465160][ T199] usb 7-1: config 3 has an invalid interface number: 223 but max is 1 [ 922.465184][ T199] usb 7-1: config 3 has an invalid interface number: 25 but max is 1 [ 922.465203][ T199] usb 7-1: config 3 has an invalid interface number: 223 but max is 1 [ 922.465223][ T199] usb 7-1: config 3 has no interface number 0 [ 922.465239][ T199] usb 7-1: config 3 has no interface number 1 [ 922.465294][ T199] usb 7-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 922.465315][ T199] usb 7-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 922.465353][ T199] usb 7-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 922.465381][ T199] usb 7-1: config 3 interface 223 has no altsetting 1 [ 922.465398][ T199] usb 7-1: config 3 interface 25 has no altsetting 0 [ 922.468244][ T199] usb 7-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 922.468272][ T199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.468292][ T199] usb 7-1: Product: syz [ 922.468306][ T199] usb 7-1: Manufacturer: syz [ 922.468320][ T199] usb 7-1: SerialNumber: syz [ 922.501285][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 923.189918][T18017] JFS: discard option not supported on device [ 923.301929][T18017] Mount JFS Failure: -5 [ 923.301950][T18017] jfs_mount failed w/return code = -5 [ 923.527766][ T199] usb 7-1: USB disconnect, device number 24 [ 923.867544][ T5704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 923.868597][ T5704] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 923.868632][ T5704] usb 5-1: can't read configurations, error -71 [ 924.204681][T18032] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3562'. [ 924.206592][T18032] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3562'. [ 924.207876][T18032] gfs2meta: Unknown parameter 'discard' [ 924.292373][ T38] kauditd_printk_skb: 33 callbacks suppressed [ 924.292391][ T38] audit: type=1800 audit(1788242053.048:2938): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=23390 res=0 errno=0 [ 924.449269][ T38] audit: type=1800 audit(1788242053.218:2939): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=23516 res=0 errno=0 [ 924.621453][ T38] audit: type=1800 audit(1788242053.398:2940): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=23703 res=0 errno=0 [ 925.523217][T18000] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 925.523243][T18000] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 925.571390][ T38] audit: type=1800 audit(1788242054.337:2941): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=81915 res=0 errno=0 [ 927.108896][T18000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 927.108918][T18000] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 927.380331][T18000] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 927.380361][T18000] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 927.491357][T18000] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 927.491382][T18000] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 928.332969][T18000] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 928.332991][T18000] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 928.772837][T18000] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 928.772858][T18000] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 928.930200][T18000] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 928.930224][T18000] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 929.604142][ T38] audit: type=1800 audit(1788242058.375:2942): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299110 res=0 errno=0 [ 930.084143][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3577'. [ 930.087206][T18142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3577'. [ 930.145170][ T199] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 930.194160][T18149] netlink: 480 bytes leftover after parsing attributes in process `syz.3.3576'. [ 930.290933][T18152] nullb0: [POWERTEC] p1 p2 p3 p4 p5 [ 930.291193][T18152] nullb0: p1 start 1697608821 is beyond EOD, truncated [ 930.330811][ T199] usb 7-1: Using ep0 maxpacket: 8 [ 930.508955][ T38] audit: type=1800 audit(1788242059.275:2943): pid=5621 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299221 res=0 errno=0 [ 930.510414][ T38] audit: type=1800 audit(1788242059.275:2944): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299137 res=0 errno=0 [ 930.511596][ T38] audit: type=1800 audit(1788242059.275:2945): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299165 res=0 errno=0 [ 930.513383][ T38] audit: type=1800 audit(1788242059.275:2946): pid=5605 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299193 res=0 errno=0 [ 930.830279][ T199] usb 7-1: unable to get BOS descriptor or descriptor too short [ 930.835210][ T199] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 930.835248][ T199] usb 7-1: can't read configurations, error -71 [ 931.331850][T18175] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 931.636014][T16982] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 931.709290][T18184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3593'. [ 931.729040][ T38] audit: type=1800 audit(1788242060.494:2947): pid=18184 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.3593" name="delete_device" dev="sysfs" ino=43396 res=0 errno=0 [ 931.788679][T16982] usb 5-1: unable to get BOS descriptor or descriptor too short [ 931.790150][T16982] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 931.793579][T16982] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice= 0.40 [ 931.793605][T16982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.793624][T16982] usb 5-1: Product: syz [ 931.793637][T16982] usb 5-1: Manufacturer: syz [ 931.793652][T16982] usb 5-1: SerialNumber: syz [ 931.835997][ T38] audit: type=1800 audit(1788242060.574:2948): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299265 res=0 errno=0 [ 931.836045][ T38] audit: type=1800 audit(1788242060.584:2949): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=299297 res=0 errno=0 [ 931.836133][ T38] audit: type=1800 audit(1788242060.594:2950): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=299272 res=0 errno=0 [ 931.836169][ T38] audit: type=1800 audit(1788242060.594:2951): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=299273 res=0 errno=0 [ 931.976622][ T199] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 932.062786][T16982] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 932.126270][ T199] usb 7-1: Using ep0 maxpacket: 16 [ 932.135792][ T199] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 932.135821][ T199] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 932.162350][ T199] usb 7-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 932.162380][ T199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.162399][ T199] usb 7-1: Product: syz [ 932.162413][ T199] usb 7-1: Manufacturer: syz [ 932.162428][ T199] usb 7-1: SerialNumber: syz [ 932.164440][T16982] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 932.224763][T18186] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 932.227166][T16982] usb 5-1: USB disconnect, device number 39 [ 932.316222][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.497355][ T199] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 932.497406][ T199] usb 7-1: MIDIStreaming interface descriptor not found [ 932.536363][ T6173] usb 8-1: new full-speed USB device number 84 using dummy_hcd [ 932.688878][ T6173] usb 8-1: not running at top speed; connect to a high speed hub [ 932.688939][ T6173] usb 8-1: too many configurations: 254, using maximum allowed: 8 [ 932.689906][ T199] usb 7-1: USB disconnect, device number 26 [ 932.691157][ T6173] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 932.691189][ T6173] usb 8-1: can't read configurations, error -61 [ 932.729335][T12849] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 932.816922][ T6173] usb 8-1: new full-speed USB device number 85 using dummy_hcd [ 932.892162][T12849] usb 4-1: not running at top speed; connect to a high speed hub [ 932.928351][T12849] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.928423][T12849] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 49408, setting to 64 [ 932.928451][T12849] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 932.928492][T12849] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 932.928516][T12849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.995955][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 933.008985][ T6173] usb 8-1: not running at top speed; connect to a high speed hub [ 933.009048][ T6173] usb 8-1: too many configurations: 254, using maximum allowed: 8 [ 933.030047][ T6173] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 933.030080][ T6173] usb 8-1: can't read configurations, error -61 [ 933.030467][ T6173] usb usb8-port1: attempt power cycle [ 933.081011][T18199] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 933.087652][T12849] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 933.117716][T12849] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 933.118051][T12849] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 933.229179][T12849] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 933.243142][T18210] FAULT_INJECTION: forcing a failure. [ 933.243142][T18210] name failslab, interval 1, probability 1, space 0, times 0 [ 933.243176][T18210] CPU: 0 UID: 0 PID: 18210 Comm: syz.4.3602 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 933.243199][T18210] Tainted: [L]=SOFTLOCKUP [ 933.243204][T18210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 933.243214][T18210] Call Trace: [ 933.243220][T18210] [ 933.243227][T18210] dump_stack_lvl+0xe8/0x150 [ 933.243253][T18210] should_fail_ex+0x467/0x600 [ 933.243280][T18210] should_failslab+0xa8/0x100 [ 933.243311][T18210] __kmalloc_cache_noprof+0xa1/0x670 [ 933.243337][T18210] ? sctp_add_bind_addr+0x8c/0x370 [ 933.243360][T18210] ? sctp_add_bind_addr+0x8c/0x370 [ 933.243386][T18210] sctp_add_bind_addr+0x8c/0x370 [ 933.243406][T18210] sctp_copy_local_addr_list+0x31a/0x4e0 [ 933.243427][T18210] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 933.243445][T18210] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 933.243467][T18210] ? sctp_v4_is_any+0x35/0x60 [ 933.243487][T18210] ? sctp_copy_one_addr+0x93/0x360 [ 933.243508][T18210] sctp_bind_addr_copy+0xb3/0x3c0 [ 933.243527][T18210] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 933.243548][T18210] sctp_connect_new_asoc+0x2ff/0x6b0 [ 933.243575][T18210] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 933.243602][T18210] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 933.243620][T18210] ? lockdep_hardirqs_on+0x7a/0x110 [ 933.243636][T18210] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 933.243660][T18210] ? security_sctp_bind_connect+0x74/0x280 [ 933.243682][T18210] sctp_sendmsg+0x1506/0x2a50 [ 933.243717][T18210] ? __pfx_sctp_sendmsg+0x10/0x10 [ 933.243747][T18210] ? __lock_acquire+0x6df/0x2e40 [ 933.243770][T18210] ? __lock_acquire+0x6df/0x2e40 [ 933.243791][T18210] ? sock_rps_record_flow+0x19/0x350 [ 933.243818][T18210] ? inet_sendmsg+0x298/0x320 [ 933.243844][T18210] ? __pfx_inet_sendmsg+0x10/0x10 [ 933.243866][T18210] sock_sendmsg_nosec+0x10e/0x180 [ 933.243890][T18210] ____sys_sendmsg+0x565/0x870 [ 933.243925][T18210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 933.243961][T18210] ? import_iovec+0x73/0xa0 [ 933.243994][T18210] ___sys_sendmsg+0x2a5/0x360 [ 933.244022][T18210] ? __lock_acquire+0x6df/0x2e40 [ 933.244046][T18210] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.244107][T18210] ? __fget_files+0x2a/0x420 [ 933.244127][T18210] ? __fget_files+0x3a8/0x420 [ 933.244158][T18210] __x64_sys_sendmsg+0x1b7/0x290 [ 933.244188][T18210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 933.244238][T18210] do_syscall_64+0x17b/0x530 [ 933.244259][T18210] ? irqentry_exit+0x10f/0x8f0 [ 933.244278][T18210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.244307][T18210] ? clear_bhb_loop+0x40/0x90 [ 933.244332][T18210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.244352][T18210] RIP: 0033:0x7f7b7383e019 [ 933.244371][T18210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.244387][T18210] RSP: 002b:00007f7b71a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.244408][T18210] RAX: ffffffffffffffda RBX: 00007f7b73ac5fa0 RCX: 00007f7b7383e019 [ 933.244423][T18210] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 933.244436][T18210] RBP: 00007f7b71a96090 R08: 0000000000000000 R09: 0000000000000000 [ 933.244449][T18210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 933.244461][T18210] R13: 00007f7b73ac6038 R14: 00007f7b73ac5fa0 R15: 00007ffc5fed0248 [ 933.244494][T18210] [ 933.245087][T12849] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 933.245230][T12849] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 933.377524][ T6173] usb 8-1: new full-speed USB device number 86 using dummy_hcd [ 933.431394][ T6173] usb 8-1: not running at top speed; connect to a high speed hub [ 933.431459][ T6173] usb 8-1: too many configurations: 254, using maximum allowed: 8 [ 933.445473][ T6173] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 933.445508][ T6173] usb 8-1: can't read configurations, error -61 [ 933.578844][ T6173] usb 8-1: new full-speed USB device number 87 using dummy_hcd [ 933.601052][ T6173] usb 8-1: not running at top speed; connect to a high speed hub [ 933.601116][ T6173] usb 8-1: too many configurations: 254, using maximum allowed: 8 [ 933.621148][ T6173] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 933.621183][ T6173] usb 8-1: can't read configurations, error -61 [ 933.623892][ T6173] usb usb8-port1: unable to enumerate USB device [ 933.738900][T12849] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 934.071426][ T6173] usb 4-1: USB disconnect, device number 112 [ 934.136917][ T6173] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 934.176632][ T6173] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 934.188097][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.188195][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.209407][ T6173] keyspan 4-1:1.0: device disconnected [ 934.228578][ T5683] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 934.388622][ T5683] usb 5-1: Using ep0 maxpacket: 8 [ 934.422242][ T5683] usb 5-1: unable to get BOS descriptor or descriptor too short [ 934.423615][ T5683] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 934.423648][ T5683] usb 5-1: can't read configurations, error -71 [ 934.771187][T18224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3607'. [ 934.890706][T18226] FAULT_INJECTION: forcing a failure. [ 934.890706][T18226] name failslab, interval 1, probability 1, space 0, times 0 [ 934.890742][T18226] CPU: 1 UID: 0 PID: 18226 Comm: syz.3.3608 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 934.890769][T18226] Tainted: [L]=SOFTLOCKUP [ 934.890777][T18226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.890789][T18226] Call Trace: [ 934.890797][T18226] [ 934.890805][T18226] dump_stack_lvl+0xe8/0x150 [ 934.890834][T18226] should_fail_ex+0x467/0x600 [ 934.890865][T18226] should_failslab+0xa8/0x100 [ 934.890887][T18226] __kmalloc_noprof+0xfb/0x790 [ 934.890915][T18226] ? lock_acquire+0x115/0x350 [ 934.890944][T18226] ? tomoyo_encode+0x2ad/0x570 [ 934.890971][T18226] ? tomoyo_encode+0x2ad/0x570 [ 934.891005][T18226] tomoyo_encode+0x2ad/0x570 [ 934.891039][T18226] tomoyo_mount_permission+0x3a4/0x9e0 [ 934.891067][T18226] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 934.891098][T18226] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 934.891124][T18226] ? kasan_save_track+0x4f/0x80 [ 934.891197][T18226] ? kasan_quarantine_put+0xbb/0x1f0 [ 934.891227][T18226] security_sb_mount+0xda/0x2d0 [ 934.891260][T18226] path_mount+0xbc/0x1050 [ 934.891286][T18226] ? user_path_at+0xd4/0x160 [ 934.891311][T18226] __se_sys_mount+0x31d/0x420 [ 934.891337][T18226] ? __pfx___se_sys_mount+0x10/0x10 [ 934.891362][T18226] ? __x64_sys_mount+0x20/0xc0 [ 934.891384][T18226] do_syscall_64+0x17b/0x530 [ 934.891405][T18226] ? irqentry_exit+0x10f/0x8f0 [ 934.891423][T18226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.891443][T18226] ? clear_bhb_loop+0x40/0x90 [ 934.891468][T18226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.891488][T18226] RIP: 0033:0x7f7952c8e019 [ 934.891506][T18226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.891523][T18226] RSP: 002b:00007f7950ee6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 934.891543][T18226] RAX: ffffffffffffffda RBX: 00007f7952f15fa0 RCX: 00007f7952c8e019 [ 934.891558][T18226] RDX: 0000200000000000 RSI: 0000200000001440 RDI: 0000200000000040 [ 934.891572][T18226] RBP: 00007f7950ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 934.891592][T18226] R10: 0000000000208083 R11: 0000000000000246 R12: 0000000000000001 [ 934.891604][T18226] R13: 00007f7952f16038 R14: 00007f7952f15fa0 R15: 00007ffc80707218 [ 934.891637][T18226] [ 934.917592][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 935.026955][T18229] 9p: Bad value for 'rfdno' [ 935.208041][ T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 935.208080][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.208098][ T10] usb 7-1: Product: syz [ 935.208112][ T10] usb 7-1: Manufacturer: syz [ 935.208125][ T10] usb 7-1: SerialNumber: syz [ 935.231890][ T38] kauditd_printk_skb: 28 callbacks suppressed [ 935.231905][ T38] audit: type=1800 audit(1788242064.003:2980): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299914 res=0 errno=0 [ 935.245885][ T38] audit: type=1800 audit(1788242064.013:2981): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=299951 res=0 errno=0 [ 935.254994][ T38] audit: type=1800 audit(1788242064.013:2982): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=299921 res=0 errno=0 [ 935.255622][ T38] audit: type=1800 audit(1788242064.023:2983): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=299922 res=0 errno=0 [ 935.412734][ T38] audit: type=1800 audit(1788242064.182:2984): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=299948 res=0 errno=0 [ 935.412782][ T38] audit: type=1800 audit(1788242064.182:2985): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=299949 res=0 errno=0 [ 935.413354][ T5615] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 935.420870][ T38] audit: type=1800 audit(1788242064.192:2986): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=299923 res=0 errno=0 [ 935.428174][ T38] audit: type=1800 audit(1788242064.192:2987): pid=5838 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=299950 res=0 errno=0 [ 935.437787][ T6173] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 935.464080][ T38] audit: type=1800 audit(1788242064.232:2988): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299971 res=0 errno=0 [ 935.597334][ T6173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1088, setting to 64 [ 935.605179][ T6173] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 935.605207][ T6173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.605226][ T6173] usb 4-1: Product: syz [ 935.605239][ T6173] usb 4-1: Manufacturer: ⠁ [ 935.605253][ T6173] usb 4-1: SerialNumber: syz [ 935.639966][T18231] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 935.641035][ T38] audit: type=1800 audit(1788242064.412:2989): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300101 res=0 errno=0 [ 936.954534][ T5615] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 937.000449][ T10] usb 7-1: USB disconnect, device number 27 [ 937.277135][ T5615] ath9k_htc: Failed to initialize the device [ 937.278029][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 937.367618][T18252] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3615'. [ 937.370482][ T6173] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 937.370532][ T6173] usb 4-1: MIDIStreaming interface descriptor not found [ 937.581626][ T6173] usb 4-1: USB disconnect, device number 113 [ 937.678877][ T5611] udevd[5611]: setting owner of /dev/bus/usb/004/113 to uid=0, gid=0 failed: No such file or directory [ 937.727296][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 937.975239][T18277] FAULT_INJECTION: forcing a failure. [ 937.975239][T18277] name failslab, interval 1, probability 1, space 0, times 0 [ 937.975274][T18277] CPU: 0 UID: 0 PID: 18277 Comm: syz.6.3625 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 937.975293][T18277] Tainted: [L]=SOFTLOCKUP [ 937.975297][T18277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 937.975304][T18277] Call Trace: [ 937.975309][T18277] [ 937.975314][T18277] dump_stack_lvl+0xe8/0x150 [ 937.975331][T18277] should_fail_ex+0x467/0x600 [ 937.975353][T18277] should_failslab+0xa8/0x100 [ 937.975365][T18277] __kvmalloc_node_noprof+0x176/0x880 [ 937.975380][T18277] ? do_raw_spin_lock+0x12b/0x2f0 [ 937.975395][T18277] ? nf_hook_entries_grow+0x287/0x740 [ 937.975406][T18277] ? nf_hook_entries_grow+0x287/0x740 [ 937.975420][T18277] nf_hook_entries_grow+0x287/0x740 [ 937.975438][T18277] __nf_register_net_hook+0x2c9/0x930 [ 937.975448][T18277] ? nft_chain_add+0xe52/0x10b0 [ 937.975467][T18277] nf_register_net_hook+0xb2/0x190 [ 937.975479][T18277] nf_tables_newchain+0x2384/0x28b0 [ 937.975502][T18277] ? __pfx_nf_tables_newchain+0x10/0x10 [ 937.975534][T18277] ? nfnl_pernet+0x23/0x240 [ 937.975553][T18277] ? __nla_parse+0x40/0x60 [ 937.975569][T18277] nfnetlink_rcv+0x1291/0x28d0 [ 937.975601][T18277] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 937.975623][T18277] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 937.975634][T18277] ? ref_tracker_free+0x668/0x820 [ 937.975660][T18277] ? skb_clone+0x246/0x3a0 [ 937.975677][T18277] ? __netlink_deliver_tap+0x838/0x880 [ 937.975696][T18277] ? netlink_deliver_tap+0x2e/0x1b0 [ 937.975711][T18277] ? netlink_deliver_tap+0x2e/0x1b0 [ 937.975729][T18277] netlink_unicast+0x7f5/0x990 [ 937.975749][T18277] netlink_sendmsg+0x813/0xb40 [ 937.975769][T18277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.975786][T18277] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 937.975803][T18277] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 937.975818][T18277] ? arch_stack_walk+0xfb/0x150 [ 937.975835][T18277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.975856][T18277] sock_sendmsg_nosec+0x13a/0x180 [ 937.975870][T18277] ____sys_sendmsg+0x565/0x870 [ 937.975889][T18277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 937.975909][T18277] ? import_iovec+0x73/0xa0 [ 937.975927][T18277] ___sys_sendmsg+0x2a5/0x360 [ 937.975941][T18277] ? __lock_acquire+0x6df/0x2e40 [ 937.975954][T18277] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.975987][T18277] ? __fget_files+0x2a/0x420 [ 937.975998][T18277] ? __fget_files+0x3a8/0x420 [ 937.976014][T18277] __x64_sys_sendmsg+0x1b7/0x290 [ 937.976030][T18277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 937.976055][T18277] do_syscall_64+0x17b/0x530 [ 937.976066][T18277] ? irqentry_exit+0x10f/0x8f0 [ 937.976076][T18277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.976087][T18277] ? clear_bhb_loop+0x40/0x90 [ 937.976100][T18277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.976110][T18277] RIP: 0033:0x7efd7027e019 [ 937.976121][T18277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.976130][T18277] RSP: 002b:00007efd6e4d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 937.976142][T18277] RAX: ffffffffffffffda RBX: 00007efd70505fa0 RCX: 00007efd7027e019 [ 937.976150][T18277] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 937.976157][T18277] RBP: 00007efd6e4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 937.976163][T18277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 937.976170][T18277] R13: 00007efd70506038 R14: 00007efd70505fa0 R15: 00007fff2b810288 [ 937.976186][T18277] [ 938.069074][T16982] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 938.219984][ T10] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 938.384876][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 938.384904][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.384923][ T10] usb 4-1: Product: syz [ 938.384937][ T10] usb 4-1: Manufacturer: syz [ 938.384950][ T10] usb 4-1: SerialNumber: syz [ 938.420054][T16982] usb 8-1: Using ep0 maxpacket: 8 [ 938.470147][T18280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.478503][T18280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.497865][T18280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.498351][T18280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.504705][T18280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.505348][T18280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.511333][ T199] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 938.514865][T18280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.523217][T18280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.533988][T18280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.542564][T18280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.723228][T18285] Invalid source name [ 938.841962][ T5615] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 938.911446][T18287] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3628'. [ 939.186438][T18278] netlink: 4944 bytes leftover after parsing attributes in process `syz.3.3624'. [ 939.186476][T18278] sit0: entered promiscuous mode [ 939.186495][T18278] sit0: entered allmulticast mode [ 939.563150][T18278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.564203][T18278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.771137][T16982] usb 8-1: unable to get BOS descriptor or descriptor too short [ 939.780762][T16982] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 939.780798][T16982] usb 8-1: can't read configurations, error -71 [ 940.829230][ T5615] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 940.850868][ T5704] usb 4-1: USB disconnect, device number 114 [ 940.980669][ T5615] ath9k_htc: Failed to initialize the device [ 940.981337][ T5704] usb 4-1: ath9k_htc: USB layer deinitialized [ 941.052487][ T199] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 941.213937][ T199] usb 7-1: unable to get BOS descriptor or descriptor too short [ 941.216660][ T199] usb 7-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 941.216684][ T199] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 941.216741][ T199] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 105, changing to 7 [ 941.216767][ T199] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 25847, setting to 1024 [ 941.226261][ T199] usb 7-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 941.226286][ T199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.226306][ T199] usb 7-1: Product: syz [ 941.226320][ T199] usb 7-1: Manufacturer: syz [ 941.226333][ T199] usb 7-1: SerialNumber: syz [ 941.246903][ T38] kauditd_printk_skb: 16 callbacks suppressed [ 941.246918][ T38] audit: type=1800 audit(1788242070.010:3006): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300667 res=0 errno=0 [ 941.266356][ T38] audit: type=1800 audit(1788242070.030:3007): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=300699 res=0 errno=0 [ 941.275219][ T38] audit: type=1800 audit(1788242070.040:3008): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=300674 res=0 errno=0 [ 941.286275][ T38] audit: type=1800 audit(1788242070.050:3009): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=300675 res=0 errno=0 [ 941.465526][ T199] usb 7-1: 1:1 : no or invalid class specific endpoint descriptor [ 941.465545][ T199] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 941.465554][ T199] usb 7-1: 1:1 : invalid channels 0 [ 941.507320][ T38] audit: type=1800 audit(1788242070.269:3010): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=300696 res=0 errno=0 [ 941.507348][ T38] audit: type=1800 audit(1788242070.269:3011): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=300697 res=0 errno=0 [ 941.507369][ T38] audit: type=1800 audit(1788242070.269:3012): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=300676 res=0 errno=0 [ 941.508369][ T199] usb 7-1: USB disconnect, device number 29 [ 941.539347][ T38] audit: type=1800 audit(1788242070.299:3013): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=300698 res=0 errno=0 [ 941.597107][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 941.641526][ T5704] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 941.711034][ T6173] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 941.803044][ T5704] usb 4-1: unable to get BOS descriptor or descriptor too short [ 941.804137][ T5704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.804159][ T5704] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 941.806228][ T5704] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 941.806254][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.806273][ T5704] usb 4-1: Product: syz [ 941.806283][ T5704] usb 4-1: Manufacturer: syz [ 941.806290][ T5704] usb 4-1: SerialNumber: syz [ 941.812310][ T38] audit: type=1800 audit(1788242070.569:3014): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300864 res=0 errno=0 [ 941.820474][ T38] audit: type=1800 audit(1788242070.579:3015): pid=5611 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=300896 res=0 errno=0 [ 941.916121][ T6173] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.916155][ T6173] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.916194][ T6173] usb 8-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 941.916216][ T6173] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.937551][ T5704] usb 4-1: interface 1 not found [ 941.979420][ T6173] usb 8-1: config 0 descriptor?? [ 942.178934][ T5704] usb 4-1: USB disconnect, device number 115 [ 942.408647][T18308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.409657][T18308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.411501][ T5683] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 942.441360][ T6173] usbhid 8-1:0.0: can't add hid device: -71 [ 942.441475][ T6173] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 942.451325][ T6173] usb 8-1: USB disconnect, device number 90 [ 942.610676][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3639'. [ 942.621445][ T5683] usb 7-1: device descriptor read/64, error -71 [ 942.861727][ T5683] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 942.971853][ T6173] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 942.991618][ T5683] usb 7-1: device descriptor read/64, error -71 [ 943.102434][ T5683] usb usb7-port1: attempt power cycle [ 943.122848][ T6173] usb 5-1: Using ep0 maxpacket: 8 [ 943.451805][ T5683] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 943.453310][ T199] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 943.472981][ T5683] usb 7-1: device descriptor read/8, error -71 [ 943.614684][ T199] usb 4-1: Using ep0 maxpacket: 8 [ 943.617128][ T199] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.617158][ T199] usb 4-1: config 0 has no interfaces? [ 943.617193][ T199] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 943.617220][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.669130][ T199] usb 4-1: config 0 descriptor?? [ 943.685876][ T6173] usb 5-1: unable to get BOS descriptor or descriptor too short [ 943.688834][ T6173] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 943.688875][ T6173] usb 5-1: can't read configurations, error -71 [ 943.712039][ T5683] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 943.734458][ T5683] usb 7-1: device descriptor read/8, error -71 [ 943.842444][ T5683] usb usb7-port1: unable to enumerate USB device [ 943.884891][T18333] FAULT_INJECTION: forcing a failure. [ 943.884891][T18333] name failslab, interval 1, probability 1, space 0, times 0 [ 943.884917][T18333] CPU: 1 UID: 0 PID: 18333 Comm: syz.3.3646 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 943.884932][T18333] Tainted: [L]=SOFTLOCKUP [ 943.884936][T18333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 943.884942][T18333] Call Trace: [ 943.884947][T18333] [ 943.884952][T18333] dump_stack_lvl+0xe8/0x150 [ 943.884970][T18333] should_fail_ex+0x467/0x600 [ 943.884987][T18333] should_failslab+0xa8/0x100 [ 943.884997][T18333] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 943.885013][T18333] kmem_cache_alloc_noprof+0x9e/0x680 [ 943.885028][T18333] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 943.885041][T18333] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 943.885058][T18333] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 943.885078][T18333] mmu_topup_memory_caches+0x21/0x170 [ 943.885096][T18333] kvm_mmu_load+0x9d/0x22b0 [ 943.885106][T18333] ? kvm_msr_allowed+0x3f4/0x490 [ 943.885120][T18333] ? kvm_msr_allowed+0x9a/0x490 [ 943.885133][T18333] ? kvm_msr_allowed+0x9a/0x490 [ 943.885150][T18333] ? kvm_apic_has_interrupt+0x4b1/0x770 [ 943.885168][T18333] vcpu_run+0x4d91/0x7780 [ 943.885217][T18333] ? __pfx_vcpu_run+0x10/0x10 [ 943.885231][T18333] ? lock_acquire+0x115/0x350 [ 943.885255][T18333] kvm_arch_vcpu_ioctl_run+0xe23/0x1920 [ 943.885271][T18333] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1920 [ 943.885294][T18333] kvm_vcpu_ioctl+0xa64/0xfe0 [ 943.885312][T18333] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 943.885328][T18333] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 943.885340][T18333] ? lockdep_hardirqs_on+0x7a/0x110 [ 943.885358][T18333] ? __fget_files+0x2a/0x420 [ 943.885372][T18333] ? __fget_files+0x3a8/0x420 [ 943.885385][T18333] ? __fget_files+0x2a/0x420 [ 943.885397][T18333] ? bpf_lsm_file_ioctl+0x9/0x20 [ 943.885413][T18333] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 943.885428][T18333] __se_sys_ioctl+0xff/0x170 [ 943.885444][T18333] do_syscall_64+0x17b/0x530 [ 943.885454][T18333] ? irqentry_exit+0x10f/0x8f0 [ 943.885464][T18333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.885475][T18333] ? clear_bhb_loop+0x40/0x90 [ 943.885488][T18333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.885498][T18333] RIP: 0033:0x7f7952c8e019 [ 943.885509][T18333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.885518][T18333] RSP: 002b:00007f7950ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 943.885530][T18333] RAX: ffffffffffffffda RBX: 00007f7952f15fa0 RCX: 00007f7952c8e019 [ 943.885538][T18333] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 943.885545][T18333] RBP: 00007f7950ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 943.885551][T18333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 943.885558][T18333] R13: 00007f7952f16038 R14: 00007f7952f15fa0 R15: 00007ffc80707218 [ 943.885574][T18333] [ 944.417523][T18342] syzkaller1: entered promiscuous mode [ 944.417549][T18342] syzkaller1: entered allmulticast mode [ 944.457723][ T37] usb 4-1: USB disconnect, device number 116 [ 944.928700][T18349] pimreg2: entered allmulticast mode [ 945.015333][T18353] netlink: 'syz.4.3653': attribute type 1 has an invalid length. [ 945.015347][T18353] netlink: 'syz.4.3653': attribute type 2 has an invalid length. [ 945.221246][T18357] overlayfs: missing 'workdir' [ 945.262715][T16982] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 945.332791][ T5615] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 945.412786][T16982] usb 8-1: Using ep0 maxpacket: 8 [ 945.415338][T16982] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 945.415389][T16982] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 945.415410][T16982] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 945.415434][T16982] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 945.415456][T16982] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 945.415496][T16982] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 945.415518][T16982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.575708][ T5615] usb 5-1: Using ep0 maxpacket: 32 [ 945.608574][ T5615] usb 5-1: unable to get BOS descriptor or descriptor too short [ 945.609550][ T5615] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 945.609584][ T5615] usb 5-1: can't read configurations, error -71 [ 945.762982][ T6173] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 945.895822][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3660'. [ 945.913023][ T6173] usb 7-1: Using ep0 maxpacket: 8 [ 946.066727][T16982] usb 8-1: usb_control_msg returned -71 [ 946.066839][T16982] usbtmc 8-1:16.0: can't read capabilities [ 946.204689][T18375] trusted_key: encrypted_key: master key parameter 'default=user:new' is invalid [ 946.235915][T16982] usb 8-1: USB disconnect, device number 91 [ 946.445834][T18379] FAULT_INJECTION: forcing a failure. [ 946.445834][T18379] name failslab, interval 1, probability 1, space 0, times 0 [ 946.445887][T18379] CPU: 0 UID: 0 PID: 18379 Comm: syz.3.3663 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 946.445919][T18379] Tainted: [L]=SOFTLOCKUP [ 946.445926][T18379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 946.445938][T18379] Call Trace: [ 946.445946][T18379] [ 946.445958][T18379] dump_stack_lvl+0xe8/0x150 [ 946.445988][T18379] should_fail_ex+0x467/0x600 [ 946.446021][T18379] should_failslab+0xa8/0x100 [ 946.446042][T18379] ? p9_client_prepare_req+0x16d/0xaa0 [ 946.446072][T18379] kmem_cache_alloc_noprof+0x9e/0x680 [ 946.446100][T18379] ? p9_client_prepare_req+0x16d/0xaa0 [ 946.446148][T18379] p9_client_prepare_req+0x16d/0xaa0 [ 946.446186][T18379] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 946.446218][T18379] ? rt_spin_unlock+0x163/0x200 [ 946.446246][T18379] ? save_netdev_trace_buffer+0x4ae/0x5e0 [ 946.446281][T18379] p9_client_rpc+0x19e/0xed0 [ 946.446306][T18379] ? __se_sys_mount+0x31d/0x420 [ 946.446327][T18379] ? do_syscall_64+0x17b/0x530 [ 946.446356][T18379] ? rt_spin_unlock+0x157/0x200 [ 946.446387][T18379] ? __pfx_p9_client_rpc+0x10/0x10 [ 946.446410][T18379] ? rt_spin_unlock+0x163/0x200 [ 946.446444][T18379] ? __pfx_tun_chr_poll+0x10/0x10 [ 946.446466][T18379] ? p9_conn_create+0x52e/0x5c0 [ 946.446491][T18379] ? p9_fd_create+0x341/0x450 [ 946.446517][T18379] p9_client_create+0x5ae/0xcf0 [ 946.446551][T18379] ? __pfx_p9_client_create+0x10/0x10 [ 946.446593][T18379] v9fs_session_init+0x46/0xd40 [ 946.446618][T18379] ? v9fs_get_tree+0xaa/0xac0 [ 946.446640][T18379] ? v9fs_get_tree+0xaa/0xac0 [ 946.446675][T18379] v9fs_get_tree+0xbd/0xac0 [ 946.446699][T18379] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 946.446729][T18379] ? __pfx_v9fs_get_tree+0x10/0x10 [ 946.446754][T18379] ? cap_capable+0x123/0x460 [ 946.446775][T18379] ? safesetid_security_capable+0xa9/0x1a0 [ 946.446811][T18379] vfs_get_tree+0x92/0x2a0 [ 946.446841][T18379] do_new_mount+0x319/0xdc0 [ 946.446859][T18379] ? cap_capable+0x123/0x460 [ 946.446886][T18379] ? __pfx_do_new_mount+0x10/0x10 [ 946.446907][T18379] ? ns_capable+0x89/0xe0 [ 946.446930][T18379] ? path_mount+0x647/0x1050 [ 946.446954][T18379] ? user_path_at+0xd4/0x160 [ 946.446982][T18379] __se_sys_mount+0x31d/0x420 [ 946.447009][T18379] ? __pfx___se_sys_mount+0x10/0x10 [ 946.447035][T18379] ? __x64_sys_mount+0x20/0xc0 [ 946.447057][T18379] do_syscall_64+0x17b/0x530 [ 946.447077][T18379] ? irqentry_exit+0x10f/0x8f0 [ 946.447095][T18379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.447118][T18379] ? clear_bhb_loop+0x40/0x90 [ 946.447152][T18379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.447176][T18379] RIP: 0033:0x7f7952c8e019 [ 946.447197][T18379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.447214][T18379] RSP: 002b:00007f7950ee6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 946.447236][T18379] RAX: ffffffffffffffda RBX: 00007f7952f15fa0 RCX: 00007f7952c8e019 [ 946.447251][T18379] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 946.447265][T18379] RBP: 00007f7950ee6090 R08: 0000200000000180 R09: 0000000000000000 [ 946.447281][T18379] R10: 000000000121484b R11: 0000000000000246 R12: 0000000000000002 [ 946.447294][T18379] R13: 00007f7952f16038 R14: 00007f7952f15fa0 R15: 00007ffc80707218 [ 946.447327][T18379] [ 946.719396][ T6173] usb 7-1: unable to get BOS descriptor or descriptor too short [ 946.721745][ T6173] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 946.721780][ T6173] usb 7-1: can't read configurations, error -71 [ 946.919903][T18381] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 947.768063][ T38] kauditd_printk_skb: 25 callbacks suppressed [ 947.768083][ T38] audit: type=1800 audit(1788242076.526:3041): pid=4971 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301704 res=0 errno=0 [ 948.379331][T18397] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.583993][T18415] FAULT_INJECTION: forcing a failure. [ 948.583993][T18415] name failslab, interval 1, probability 1, space 0, times 0 [ 948.584015][T18415] CPU: 0 UID: 0 PID: 18415 Comm: syz.7.3677 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 948.584030][T18415] Tainted: [L]=SOFTLOCKUP [ 948.584034][T18415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 948.584041][T18415] Call Trace: [ 948.584045][T18415] [ 948.584050][T18415] dump_stack_lvl+0xe8/0x150 [ 948.584069][T18415] should_fail_ex+0x467/0x600 [ 948.584086][T18415] should_failslab+0xa8/0x100 [ 948.584097][T18415] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 948.584113][T18415] kmem_cache_alloc_noprof+0x9e/0x680 [ 948.584127][T18415] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 948.584140][T18415] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 948.584157][T18415] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 948.584185][T18415] mmu_topup_memory_caches+0x21/0x170 [ 948.584213][T18415] kvm_mmu_load+0x9d/0x22b0 [ 948.584230][T18415] ? kvm_msr_allowed+0x9a/0x490 [ 948.584257][T18415] ? kvm_msr_allowed+0x9a/0x490 [ 948.584283][T18415] ? kvm_msr_allowed+0x9a/0x490 [ 948.584308][T18415] ? kvm_msr_allowed+0x3f4/0x490 [ 948.584335][T18415] ? kvm_msr_allowed+0x9a/0x490 [ 948.584361][T18415] ? kvm_apic_has_interrupt+0x740/0x770 [ 948.584393][T18415] vcpu_run+0x4d91/0x7780 [ 948.584450][T18415] ? __se_sys_ioctl+0x47/0x170 [ 948.584506][T18415] ? __pfx_vcpu_run+0x10/0x10 [ 948.584531][T18415] ? lock_acquire+0x115/0x350 [ 948.584575][T18415] kvm_arch_vcpu_ioctl_run+0xe23/0x1920 [ 948.584603][T18415] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1920 [ 948.584638][T18415] kvm_vcpu_ioctl+0xa64/0xfe0 [ 948.584670][T18415] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 948.584694][T18415] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 948.584710][T18415] ? lockdep_hardirqs_on+0x7a/0x110 [ 948.584738][T18415] ? __fget_files+0x2a/0x420 [ 948.584757][T18415] ? __fget_files+0x3a8/0x420 [ 948.584772][T18415] ? __fget_files+0x2a/0x420 [ 948.584790][T18415] ? bpf_lsm_file_ioctl+0x9/0x20 [ 948.584814][T18415] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 948.584837][T18415] __se_sys_ioctl+0xff/0x170 [ 948.584859][T18415] do_syscall_64+0x17b/0x530 [ 948.584876][T18415] ? irqentry_exit+0x10f/0x8f0 [ 948.584890][T18415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.584907][T18415] ? clear_bhb_loop+0x40/0x90 [ 948.584926][T18415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.584942][T18415] RIP: 0033:0x7f675724e019 [ 948.584959][T18415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.584983][T18415] RSP: 002b:00007f67554a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 948.585001][T18415] RAX: ffffffffffffffda RBX: 00007f67574d5fa0 RCX: 00007f675724e019 [ 948.585015][T18415] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 948.585026][T18415] RBP: 00007f67554a6090 R08: 0000000000000000 R09: 0000000000000000 [ 948.585037][T18415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 948.585048][T18415] R13: 00007f67574d6038 R14: 00007f67574d5fa0 R15: 00007ffefe05b828 [ 948.585078][T18415] [ 949.033203][T18397] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.099913][T18424] FAULT_INJECTION: forcing a failure. [ 949.099913][T18424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.099935][T18424] CPU: 0 UID: 0 PID: 18424 Comm: syz.3.3681 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 949.099950][T18424] Tainted: [L]=SOFTLOCKUP [ 949.099955][T18424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.099964][T18424] Call Trace: [ 949.099968][T18424] [ 949.099974][T18424] dump_stack_lvl+0xe8/0x150 [ 949.099990][T18424] should_fail_ex+0x467/0x600 [ 949.100010][T18424] _copy_to_user+0x31/0xb0 [ 949.100029][T18424] video_usercopy+0xdf4/0x1430 [ 949.100053][T18424] ? __pfx___video_do_ioctl+0x10/0x10 [ 949.100074][T18424] ? __pfx_video_usercopy+0x10/0x10 [ 949.100105][T18424] ? __fget_files+0x3a8/0x420 [ 949.100128][T18424] v4l2_ioctl+0x190/0x1e0 [ 949.100152][T18424] ? __pfx_v4l2_ioctl+0x10/0x10 [ 949.100166][T18424] __se_sys_ioctl+0xff/0x170 [ 949.100181][T18424] do_syscall_64+0x17b/0x530 [ 949.100192][T18424] ? irqentry_exit+0x10f/0x8f0 [ 949.100201][T18424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.100212][T18424] ? clear_bhb_loop+0x40/0x90 [ 949.100224][T18424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.100235][T18424] RIP: 0033:0x7f7952c8e019 [ 949.100245][T18424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.100254][T18424] RSP: 002b:00007f7950ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 949.100266][T18424] RAX: ffffffffffffffda RBX: 00007f7952f15fa0 RCX: 00007f7952c8e019 [ 949.100274][T18424] RDX: 00002000000001c0 RSI: 00000000c0205647 RDI: 0000000000000003 [ 949.100280][T18424] RBP: 00007f7950ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 949.100288][T18424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.100294][T18424] R13: 00007f7952f16038 R14: 00007f7952f15fa0 R15: 00007ffc80707218 [ 949.100309][T18424] [ 949.286104][T16982] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 949.337514][T18426] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3682'. [ 949.434774][T16982] usb 8-1: Using ep0 maxpacket: 8 [ 949.765052][ T199] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 949.831951][T18397] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.905128][ T199] usb 5-1: device descriptor read/64, error -71 [ 950.076299][T16982] usb 8-1: unable to get BOS descriptor or descriptor too short [ 950.078382][T16982] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 950.078417][T16982] usb 8-1: can't read configurations, error -71 [ 950.165642][ T199] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 950.307628][ T199] usb 5-1: device descriptor read/64, error -71 [ 950.415792][ T199] usb usb5-port1: attempt power cycle [ 950.447186][T18397] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.775049][ T199] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 950.808303][ T199] usb 5-1: device descriptor read/8, error -71 [ 951.055569][ T199] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 951.087893][ T199] usb 5-1: device descriptor read/8, error -71 [ 951.196161][ T199] usb usb5-port1: unable to enumerate USB device [ 951.272716][ T8230] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.350322][ T8230] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.410150][T14426] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.462258][ T6442] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.800285][ T39] INFO: task syz.5.3113:16335 blocked for more than 143 seconds. [ 959.800314][ T39] Tainted: G L syzkaller #0 [ 959.800327][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 959.800337][ T39] task:syz.5.3113 state:D stack:28480 pid:16335 tgid:16334 ppid:14332 task_flags:0x400140 flags:0x00080002 [ 959.800415][ T39] Call Trace: [ 959.800423][ T39] [ 959.800437][ T39] __schedule+0x1709/0x5530 [ 959.800473][ T39] ? __lock_acquire+0x6df/0x2e40 [ 959.800518][ T39] ? __pfx___schedule+0x10/0x10 [ 959.800546][ T39] ? lock_acquire+0x115/0x350 [ 959.800584][ T39] ? schedule+0x90/0x2b0 [ 959.800615][ T39] schedule+0x164/0x2b0 [ 959.800645][ T39] cgroup_lock_and_drain_offline+0x51a/0x650 [ 959.800688][ T39] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 959.800717][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 959.800745][ T39] ? safesetid_security_capable+0xa9/0x1a0 [ 959.800773][ T39] ? bpf_lsm_capable+0x9/0x20 [ 959.800793][ T39] ? security_capable+0x74/0x280 [ 959.800827][ T39] cgroup1_get_tree+0x9d/0x890 [ 959.800851][ T39] ? cap_capable+0x123/0x460 [ 959.800873][ T39] ? safesetid_security_capable+0xa9/0x1a0 [ 959.800900][ T39] ? bpf_lsm_capable+0x9/0x20 [ 959.800924][ T39] vfs_get_tree+0x92/0x2a0 [ 959.800954][ T39] do_new_mount+0x319/0xdc0 [ 959.800973][ T39] ? cap_capable+0x123/0x460 [ 959.800999][ T39] ? __pfx_do_new_mount+0x10/0x10 [ 959.801022][ T39] ? ns_capable+0x89/0xe0 [ 959.801045][ T39] ? path_mount+0x647/0x1050 [ 959.801076][ T39] ? user_path_at+0xd4/0x160 [ 959.801101][ T39] __se_sys_mount+0x31d/0x420 [ 959.801128][ T39] ? __pfx___se_sys_mount+0x10/0x10 [ 959.801154][ T39] ? __x64_sys_mount+0x20/0xc0 [ 959.801177][ T39] do_syscall_64+0x17b/0x530 [ 959.801198][ T39] ? irqentry_exit+0x10f/0x8f0 [ 959.801217][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.801237][ T39] ? clear_bhb_loop+0x40/0x90 [ 959.801262][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.801283][ T39] RIP: 0033:0x7f350676e019 [ 959.801301][ T39] RSP: 002b:00007f35049c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 959.801321][ T39] RAX: ffffffffffffffda RBX: 00007f35069f5fa0 RCX: 00007f350676e019 [ 959.801336][ T39] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000000000000000 [ 959.801349][ T39] RBP: 00007f350680500c R08: 0000200000000040 R09: 0000000000000000 [ 959.801363][ T39] R10: 0000000000010800 R11: 0000000000000246 R12: 0000000000000000 [ 959.801377][ T39] R13: 00007f35069f6038 R14: 00007f35069f5fa0 R15: 00007fff49f72ce8 [ 959.801409][ T39] [ 959.801451][ T39] [ 959.801451][ T39] Showing all locks held in the system: [ 959.801508][ T39] locks held by khungtaskd/39: 1, last CPU#1: [ 959.801642][ T39] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 959.801786][ T39] locks held by kworker/u8:6/157: 3, last CPU#0: [ 959.801801][ T39] #0: ffff888033501138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 959.801846][ T39] #1: ffffc90004077c60 ((work_completion)(&(&bat_priv->orig_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 959.801893][ T39] #2: ffff8880b86261d8 (&base->lock){-...}-{2:2}, at: unwind_next_frame+0x8f/0x2550 [ 959.801962][ T39] locks held by getty/5359: 2, on CPU#1: [ 959.801976][ T39] #0: ffff8880376030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 959.802033][ T39] #1: ffffc900044bb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 959.802096][ T39] locks held by kworker/u8:40/8224: 4, last CPU#0: [ 959.802111][ T39] #0: ffff888038684938 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 959.802157][ T39] #1: ffffc90005b97c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 959.802204][ T39] #2: ffff88805b8457b8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 959.802264][ T39] #3: ffff888040fc5938 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 959.802324][ T39] locks held by kworker/u8:46/8230: 2, on CPU#0: [ 959.802339][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 959.802385][ T39] #1: ffffc90005f3fc60 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 959.802446][ T39] [ 959.802452][ T39] ============================================= [ 959.802452][ T39] [ 959.802498][ T39] NMI backtrace for cpu 1 [ 959.802514][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 959.802541][ T39] Tainted: [L]=SOFTLOCKUP [ 959.802548][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 959.802559][ T39] Call Trace: [ 959.802567][ T39] [ 959.802575][ T39] dump_stack_lvl+0xe8/0x150 [ 959.802602][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 959.802630][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 959.802660][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 959.802691][ T39] sys_info+0x135/0x170 [ 959.802715][ T39] watchdog+0xfd7/0x1030 [ 959.802752][ T39] ? watchdog+0x1c7/0x1030 [ 959.802788][ T39] kthread+0x388/0x470 [ 959.802815][ T39] ? __pfx_watchdog+0x10/0x10 [ 959.802843][ T39] ? __pfx_kthread+0x10/0x10 [ 959.802870][ T39] ret_from_fork+0x514/0xb70 [ 959.802900][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 959.802927][ T39] ? __switch_to+0xc89/0x1420 [ 959.802953][ T39] ? __pfx_kthread+0x10/0x10 [ 959.802980][ T39] ret_from_fork_asm+0x1a/0x30 [ 959.803021][ T39] [ 959.803029][ T39] Sending NMI from CPU 1 to CPUs 0: [ 959.803060][ C0] NMI backtrace for cpu 0 [ 959.803082][ C0] CPU: 0 UID: 0 PID: 157 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 959.803107][ C0] Tainted: [L]=SOFTLOCKUP [ 959.803114][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 959.803126][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 959.803157][ C0] RIP: 0010:unwind_next_frame+0x19d8/0x2550 [ 959.803177][ C0] Code: 49 8d 56 40 4c 89 f7 4c 89 c6 e8 33 0e 00 00 84 c0 0f 84 4e 01 00 00 48 bb 00 00 00 00 00 fc ff df 48 8b 44 24 10 0f b6 04 18 <84> c0 0f 85 7b 08 00 00 40 b5 01 8b 44 24 5c 41 39 06 4c 8b 6c 24 [ 959.803193][ C0] RSP: 0018:ffffc900040776a0 EFLAGS: 00000202 [ 959.803208][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000001 [ 959.803221][ C0] RDX: ffffc90004077788 RSI: dffffc0000000000 RDI: ffffc90004077880 [ 959.803235][ C0] RBP: 1ffffffff20cb89b R08: ffffc90004077880 R09: 0000000000000000 [ 959.803249][ C0] R10: ffffc90004077798 R11: fffff5200080eef5 R12: dffffc0000000000 [ 959.803263][ C0] R13: ffffffff9065c4d9 R14: ffffc90004077748 R15: ffffc90004077790 [ 959.803277][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 959.803292][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.803306][ C0] CR2: 00007f2353309e80 CR3: 000000000e1b0000 CR4: 00000000003526f0 [ 959.803322][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 959.803333][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 959.803345][ C0] Call Trace: [ 959.803352][ C0] [ 959.803362][ C0] ? stack_trace_save+0xa9/0x100 [ 959.803388][ C0] ? unwind_next_frame+0x8f/0x2550 [ 959.803407][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 959.803433][ C0] arch_stack_walk+0x11b/0x150 [ 959.803463][ C0] ? kasan_save_track+0x3e/0x80 [ 959.803491][ C0] stack_trace_save+0xa9/0x100 [ 959.803516][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 959.803544][ C0] ? __lock_acquire+0x6df/0x2e40 [ 959.803569][ C0] kasan_save_track+0x3e/0x80 [ 959.803623][ C0] kasan_save_free_info+0x40/0x50 [ 959.803644][ C0] __kasan_slab_free+0x5c/0x80 [ 959.803669][ C0] kfree+0x1c5/0x6c0 [ 959.803691][ C0] ? process_one_work+0xaaf/0x1480 [ 959.803710][ C0] ? process_one_work+0x7fd/0x1480 [ 959.803728][ C0] process_one_work+0xaaf/0x1480 [ 959.803757][ C0] ? __pfx_process_one_work+0x10/0x10 [ 959.803773][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 959.803801][ C0] ? assign_work+0x3cf/0x5d0 [ 959.803821][ C0] worker_thread+0xb05/0x10d0 [ 959.803853][ C0] kthread+0x388/0x470 [ 959.803876][ C0] ? __pfx_worker_thread+0x10/0x10 [ 959.803894][ C0] ? __pfx_kthread+0x10/0x10 [ 959.803918][ C0] ret_from_fork+0x514/0xb70 [ 959.803943][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 959.803966][ C0] ? __switch_to+0xc89/0x1420 [ 959.803988][ C0] ? __pfx_kthread+0x10/0x10 [ 959.804011][ C0] ret_from_fork_asm+0x1a/0x30 [ 959.804044][ C0] [ 959.804066][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 959.804083][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 959.804108][ T39] Tainted: [L]=SOFTLOCKUP [ 959.804116][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 959.804126][ T39] Call Trace: [ 959.804134][ T39] [ 959.804142][ T39] vpanic+0x56c/0xa60 [ 959.804166][ T39] ? __pfx_vpanic+0x10/0x10 [ 959.804195][ T39] panic+0xc5/0xd0 [ 959.804214][ T39] ? __pfx_panic+0x10/0x10 [ 959.804236][ T39] ? wq_watchdog_touch+0xf9/0x160 [ 959.804269][ T39] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 959.804298][ T39] watchdog+0x1030/0x1030 [ 959.804333][ T39] ? watchdog+0x1c7/0x1030 [ 959.804367][ T39] kthread+0x388/0x470 [ 959.804393][ T39] ? __pfx_watchdog+0x10/0x10 [ 959.804421][ T39] ? __pfx_kthread+0x10/0x10 [ 959.804449][ T39] ret_from_fork+0x514/0xb70 [ 959.804478][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 959.804505][ T39] ? __switch_to+0xc89/0x1420 [ 959.804531][ T39] ? __pfx_kthread+0x10/0x10 [ 959.804559][ T39] ret_from_fork_asm+0x1a/0x30 [ 959.804600][ T39] [ 959.804891][ T39] Kernel Offset: disabled