last executing test programs: 9.793524758s ago: executing program 2 (id=255): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1, 0x18, 0x6) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000440)=""/200, 0x200000, 0x1000, 0x0, 0x3}, 0x20) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673496d307ff0ff00000f00080016800400018044001100060000"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x7, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x40000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xff, 0x10, 0x2}]}) r9 = msgget$private(0x0, 0x4a0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c00028006000100000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "bdab7e9d"}, @main=@item_4={0x3, 0x0, 0xa, "582a6eb3"}]}}, 0x0}, 0x0) msgctl$IPC_STAT(r9, 0x2, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 8.484534352s ago: executing program 4 (id=259): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0xf) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) setpgid(r3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}, {{&(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000640)="9bdf2e1af37b1f56ae538870f77e41a8632396dc954eb60fd2f7128d62cdfd9742f26327b696d9013c276dea7588f3f6a63d80947854c0989bb8d0ad85405ceaf127de6dba02c45cf5ea43488ec0617972ba557b45785b9738b7f264bc1b72372ddbc75739b1578b5c13889c174bda7339e135ee1feb220e1d6b19a51a3660cc1c9e0ba4faf57aa19376273ddf79dbba0edeff0138d3bce1e42d6f40255e6f413f4a53eb7c9447032b4cbae2fb4a4813cf35a15ff2c87219b50554ec209c1e748ba28bd7ecc185c227b9d73584", 0xcd}, {&(0x7f0000000780)="2890cb7cd1b4d615d57f06b1187c223130e5ed54fd971995bb402ef695a9d21f3037dfa210192bbde55a439e922af27393eb339e18e02f28c93f86fda74f34b987dd7f878e786a8c6265ba17f02a901b8dc22f9565330c05", 0x58}], 0x2}}], 0x2, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r5 = socket$netlink(0x10, 0x3, 0x14) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb5de1c3e4ffff01000000010000000000000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{0x0}], 0x1) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/318], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80000}, 0x10}, 0x94) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r7, &(0x7f0000000000)=0x2b00, 0x12) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 7.136863218s ago: executing program 1 (id=263): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x800, 0xe3) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) r1 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0xb54, &(0x7f0000000080)={0x0, 0x28ba1, 0x1000, 0x3, 0x1ad}) ptrace(0x10, r1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000"], 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000040)=0x6, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x800, 0xe3) (async) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) (async) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_uring_setup(0xb54, &(0x7f0000000080)={0x0, 0x28ba1, 0x1000, 0x3, 0x1ad}) (async) ptrace(0x10, r1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000"], 0x48) (async) socket$igmp(0x2, 0x3, 0x2) (async) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) (async) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000040)=0x6, 0x4) (async) 6.673930286s ago: executing program 1 (id=265): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x1}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) write$cgroup_devices(r1, &(0x7f0000000180)={'c', ' *:* ', 'rwm\x00'}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000700", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 6.179586904s ago: executing program 0 (id=266): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)={'#! ', '', [{0x20, '\t\xbb\x9bc\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4]I<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}, {0x20, '@_*\xfe\xeb\x89\xe2qEt\xba\x01\"s}R\x83\x82S\x16]\xaf\x0el\x9b3W\xfd\xdb\xae\xab\xe8\n\x10\x18\xe7v\xa4/t\x02\x16\xfe@\x1e\xe2\xb6\xacN\xc7l\x82\xe8\x91\xb0\x05Q\xe0\x10\xb5h\x1a\xa1\x88\x1e\xd46na\xc8\xc1%\xe1m\xd6P\x0el\x15\x94\xcdw\xbaY\x9b\xf4S\x8f8\xc0\xb0[\x89\xd4\xf5\x9a\xf9\xf1e@\xe9CT\xb25\xecEw\xc2c/\xd1\xab\xeaC\x10}\xa4g\x7f\x1b^\"\x1c\x15\x90l\x86!a\xba\xc4&;\xfb[\xa3\xa9\x8e\xa3\xe6\xc4\x94|\x19o\xb8\xea\b\xb9\x91\f\xc3T\xa5\xb3\x9e}\xa3\x1f\xedB\x8f\xd1\x9d\x87G\xe9Z\xc4{\xa4\xe2l\xcdh~\aW\x011\x94\xd8\x13?\xe7\xec\x87d\xa6<\xe7\a\xd9\xd1\xe1\x9d\xa9J\xb6U\x19>\nf\"\xc8\xdc\x1c\x81n\xa2!\xf0\xf8\xebO\x95~\xe1!>6H\v\xc3F\x84\xb3\xb8\xbd\xe9\x00\xcd\x92\xf0\xce\xc5<\xcc(\xf0\axo\xd4%7\xc4\xc0\xe2\xc5\x94\xc3u\x17\x83\xe76\xd9\x06I\x8b(\xb3\x85\x13\xee`\xa6\x9eQ0\xf0\xc4\xee7E\x008\xc2\xb2\xd3#\x92PJ \xf6O\xcc6x1\xac\xf3E\xd3\x1e\xec?\xc6n\xd8S\xceb\x9b\x9e\f%7,\xcd\xc8\x81\x9b\xf8-\xec\xa7\xe8\x94\xbd5\x1e%\x02'}, {0x20, '#! '}]}, 0x1ca) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) (async) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r1, &(0x7f0000001080)=[{0x41, 0x9, 0x3, 0xfd, @time={0x0, 0x1}, {0x46, 0x1}, {0xf}, @quote={{0xf, 0x6}, 0x8}}], 0x1c) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x1906) (async) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) connect(0xffffffffffffffff, 0x0, 0x0) (async) write$UHID_CREATE2(r2, &(0x7f0000002200)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x2, 0xfffffe01, 0x800, 0x1, 0x40}}, 0x118) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000080)={&(0x7f0000000200), 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1308000000000000110011000000040009803400098000000100030000004e00010000000000000002000000000008000100000000000800020000000000a9fd010000000000"], 0x4c}}, 0x0) 6.012032138s ago: executing program 2 (id=267): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x10, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_emit_ethernet(0xdb, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100130088480000000001ab441ff1091f88fba828140ae5997ff3e05969bd23d1ca171bf5a45715552a27211541e363adc8b2fcd30cb197a930f4dfcf0ecdc4d6fc2b50e771893d5c403920b5003444edbfd70652ea7599f6e2fd69cc29de3839ec814850aec2a1944e314d6ba1b3c403f3aaf9aefe064e0140770ef65ccd2166a8e4f2fd4d520310233c5b591378933a76f5bac9b4fb26626c5a17aeaaaf334847fecb8b610b32c5c11aaa832c955432f0c2c907ae3545b2794fa96fd56fd703ab01033f830533d70c8059bce79a657f"], &(0x7f0000000140)={0x0, 0x2, [0x96f, 0x840, 0xd9f, 0x60]}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 5.918598083s ago: executing program 1 (id=268): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) clock_nanosleep(0x3, 0xfffffdfc, &(0x7f0000000080)={0x77359400}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$uinput_user_dev(r2, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x1, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0xffff, 0x80, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x7fffff], [0x11, 0xffffffff, 0x7, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x8001, 0xfffffffc, 0x0, 0x100, 0x0, 0x10000, 0xec6a, 0x5, 0x40000000, 0x2, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8000018c, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x4000000, 0x80, 0x8000, 0x40000004, 0xffffffff, 0x3, 0x92, 0x7], [0xe, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffc, 0x7, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x401, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xffffffff, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x0, 0x0, 0x4, 0x6, 0x0, 0x401, 0x1000, 0x211, 0x4, 0x7ff, 0x100, 0x3, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x2, 0x7fff, 0x9, 0xd, 0x71, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x1, 0x0, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xd30, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5]}, 0x45c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002e40)={0x2020}, 0x2020) r3 = gettid() timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r3}, &(0x7f0000044000)) syz_clone(0x8d5ece4d85991ca3, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r4, 0x40047452, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000040)=0xfffffffc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={r6, 0x3}, &(0x7f0000000300)=0x8) 5.484869429s ago: executing program 2 (id=269): unshare(0x22020600) unshare(0x2a020400) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000) 5.48417184s ago: executing program 4 (id=270): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c1f02010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000180905810300020000000904010000020d000009040101"], 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$cdc_ecm(0x1, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x80, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, "1c7753"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7fff, 0x94b1, 0x81}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @dmm={0x7, 0x24, 0x14, 0x1ff, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x30, 0x4, 0x68, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x81, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x3, 0xc}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x3, 0x9, 0x74, 0x20}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x2, 0x3}]}, 0x4, [{0x63, &(0x7f0000000100)=@string={0x63, 0x3, "39f4fcffbf835ae710812b2964ec3627c3de51f4e620496e7c9a625688334f70f2c64fd2f698e05098bfe2a9225fcb4c5fb89371d90939f1126ac8da318993ac73c9e143ce4f0d7ccc51770bf084f7bb4385508b87d5a6e702572cc70085ac37e8"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x436}}, {0x2f, &(0x7f00000001c0)=@string={0x2f, 0x3, "1d222da944deec8a577b0b645ad54a42c4271985b526027b283fb58674f5421ca91236f93f3cf985469daf8942"}}, {0x80, &(0x7f0000000200)=@string={0x80, 0x3, "4660d4931c882fe072451a40f4c4bb42f4cdfc5497c4235812e862a97a8aa42c0c74823d3c26c7a148e1d33274f2cc7b8034ce15f6e20bd0e73113c93b425676813f791b2be41be82e1dc463ad1173cbc2c9e5aad27086df6f8658bc1bf47d975f0f174d47f7495c5185fa5fc8d1f21610968815922132dda79442de6b49"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000380)={0x14, &(0x7f0000000300)={0x20, 0x0, 0x34, {0x34, 0xb, "9fc3b3d09a4e8949145993b4a33a01fcce9af06c585e14c61b255789b0bc7a19751a9e4048a9efb4a6e1f42ebd356854e136"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f0000000500)={0x40, 0xf, 0xa4, "e6e4a8aec3fb3a7e94b139748535b3462a748b790a43383dd448a9c1798b4c9d137e8dec48a8d7f760b82ca93bf5c4c5ba30eb83ed5f6b4cc242a071e83d90f263d827e939a3b471532d480ed5fa3f9d84313f1d50f8161d0fc670eef28e4b4e6ea7a6e5109c949a12295601d7d85c6bcf79a001ae7aa95e4605154270574aa04275a737aef48eee6654e60417030c3a2a4b3cdabf9ae7fc64a6af41ba9eb2a8ad42c167"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c1f02010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000180905810300020000000904010000020d000009040101"], 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ecm(0x1, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x80, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, "1c7753"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7fff, 0x94b1, 0x81}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @dmm={0x7, 0x24, 0x14, 0x1ff, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x30, 0x4, 0x68, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x81, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x3, 0xc}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x3, 0x9, 0x74, 0x20}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x2, 0x3}]}, 0x4, [{0x63, &(0x7f0000000100)=@string={0x63, 0x3, "39f4fcffbf835ae710812b2964ec3627c3de51f4e620496e7c9a625688334f70f2c64fd2f698e05098bfe2a9225fcb4c5fb89371d90939f1126ac8da318993ac73c9e143ce4f0d7ccc51770bf084f7bb4385508b87d5a6e702572cc70085ac37e8"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x436}}, {0x2f, &(0x7f00000001c0)=@string={0x2f, 0x3, "1d222da944deec8a577b0b645ad54a42c4271985b526027b283fb58674f5421ca91236f93f3cf985469daf8942"}}, {0x80, &(0x7f0000000200)=@string={0x80, 0x3, "4660d4931c882fe072451a40f4c4bb42f4cdfc5497c4235812e862a97a8aa42c0c74823d3c26c7a148e1d33274f2cc7b8034ce15f6e20bd0e73113c93b425676813f791b2be41be82e1dc463ad1173cbc2c9e5aad27086df6f8658bc1bf47d975f0f174d47f7495c5185fa5fc8d1f21610968815922132dda79442de6b49"}}]}) (async) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000380)={0x14, &(0x7f0000000300)={0x20, 0x0, 0x34, {0x34, 0xb, "9fc3b3d09a4e8949145993b4a33a01fcce9af06c585e14c61b255789b0bc7a19751a9e4048a9efb4a6e1f42ebd356854e136"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f0000000500)={0x40, 0xf, 0xa4, "e6e4a8aec3fb3a7e94b139748535b3462a748b790a43383dd448a9c1798b4c9d137e8dec48a8d7f760b82ca93bf5c4c5ba30eb83ed5f6b4cc242a071e83d90f263d827e939a3b471532d480ed5fa3f9d84313f1d50f8161d0fc670eef28e4b4e6ea7a6e5109c949a12295601d7d85c6bcf79a001ae7aa95e4605154270574aa04275a737aef48eee6654e60417030c3a2a4b3cdabf9ae7fc64a6af41ba9eb2a8ad42c167"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}}) (async) 5.461867396s ago: executing program 3 (id=271): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r1 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000100)=@generic={0x6, "82a99f5e6780f40e24bd809b20ee95341468506a251a4709351dc21527a3211b5d7d9e23507615dbd34b9caf736ffe39f6e94374a73afc6f093b934563f782377d352d07fdcece73844223bbd35bd6f6f009b93ad04c58f9ac067e8978ce9a7748bbd6c30f76a6b803b81161ab575fb223948b4264ca38775a28b1518ec2"}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)="b41c67069cf7d0e58b933b6b07516b13d6c4b9566da24468e40e7184bf31e64f1a960e37f84efe15d0f1e398ea1c84441422a7b805c27aefa79389ba07251a06ed3dddba913816692d80f152742a27753e24", 0x52}, {&(0x7f00000001c0)="ae3949da09617108867413c59759108a3a738a71bb1a9accb1374dca9476e2cdca98246a3729a90ef1869b6a4507fd352e", 0x31}, {&(0x7f00000002c0)="1ea8b3d3de29ef7febfada5f8be6ca73ee015381d1624d0c05fd76ce80f318db1d5f19921da7427ecb37a6eedb27772216fd17c3d727401e10", 0x39}, {&(0x7f0000000300)="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", 0xfe}, {&(0x7f0000000400)="f125a63040d2808b683aec7950b09bad3ce273b35ad0c0571e53dce5327760b28c7782641aedccd396ca48c087bb72dae0", 0x31}, {&(0x7f0000000440)="01e4b47036ae80ea7c9416e56933a779f07a75b11aebe2247f7144465da11c92d07f64593235993e1efc11116f9734ae8742d6e7441a7727dc978a5580e085a8d1b5e5d535a807339191c78ba0d275d27279a5314fa1996ff37b583b5bbc307f34a107de124642622bba8e360a973d7fd53baf4f1c636be00dfe6ed4f8cea3", 0x7f}, {&(0x7f0000000500)="1384697df0381f9efbf60a9c978e53792d4b10636b2b31514ab08042d0f3a539ed3becba7e9cd29ada1c", 0x2a}, {&(0x7f0000000780)="d7a080d1b9f557aa89f7e69da4b100133b1c545822c384dd253a36682c5103df71a1c4fdccd471925d403100e6555b5dcfda4fc40627d27ff47786de426d75011b672eafe9469d3ed7bf9203467c006583b89cbf2f20a2cf4636553c66f3bb5cd89893025bb3b47ab8906b703d5d8b49a490b4519cf138fc74127e68468b1a4251d07efe59ce9773027a1308ed72e61bed66f2883609ea5a296499b5b4a55cc04e00c44d7005a90fc0762c5e4cbfaac4b5513a4f1c6b39249aaafd44b5f4f60a796759a6357a8296cbf0f90669965e48", 0xd0}], 0x8, &(0x7f0000000e00)=[{0xf8, 0x11, 0x7fffffff, "4eea88f87b2669c9fdf12d6bbf85af5e11ef3d8c7fb41d6e2943fcb5533d0e1f2dcaf97f61e8de9d3338bfe5c581b9053584885d5f1c0d3b5687768739f14b7d1dba6dbb7ced6c82d1312b34d2fdbe6f8268904c1658e9dee576c29b23c0468f97fb359248e6eb88957d5afe9452c40dc1f9adc86f99ecf3c62afb285056aab155664b7e74eccd7c74ef1ccf8a4bc354242d1aa9599a12ddefde9c626304bc8a771040b9d6deb24d24ae2ba429fece9d2291d61cadab7ca67adac69564f44b36da32c51f0051abe1e5d67496f41edbc233b535841f86948b558d12c87f6623b52fc7"}, {0xb8, 0x10b, 0x5, "561189daf9cbb3d96b13c1b5c7010a7600ca0cd0cb3c9a0baa6e1dc3a049b180a6677cd79834bfbea08259fb5bc57dce3e345821d7b7218c2e192310ea817e587184bc43c134a90bc5a44a0958c26eca7c03008f41e4d4a5c0cafd1a3ac45c6f55dda31ba7303ed7396c268b20cd2736d0698b11e9afb3a0b081831a30302743def3b4ebc88537224cc783be226f99984d6529648d93b3a21f1922e4d963cfad29"}, {0x18, 0x119, 0xfffffff9, "b2dd1b6ed369bc"}, {0xd8, 0x84, 0x80000001, "f1bec1d396d93c17678c56d229d303f0991a2a1a35cbd17b1cbaec833c387d214395ca7803d29a61e6c1d097e136223d675250f674563511e938993f24f7c6cb6f53c90bb4698064dda205c26f227435cfbc99625958f8258170df163bc9d0ef7d5c1cb873c25472a4f50498825c56fd57dd66b67c9ce5a5c468af43d027ba113c7802eaa95c27d48cc552b3ce0e2e36734f7bfe239d6769248d5c6f3b035f2b0528c48c65420874cb9ba7d4bb773b8a3e425bbff2053028b9fda236237d4e39e7bb7fc89d"}, {0x40, 0x10d, 0x5, "e57b81ed12e1b6c204990a2b65b7f6e2545f19066b5fe916f013be2d55796c4fea099f74e1af81736805fc6ed4"}, {0x80, 0x114, 0x1000, "104604cadec9d18be9b204506b920fce604e78de68a62e0284ebde38dc2f7899eab6a7df496734a6729a407bcd691e18d6d28e4c0cd153f1c7b215a51aa271df6a844b762e0394282f730f5383c5a93a3abb5552e71d4e195ece8a3684ea2e15d32ded8590158f655472a75293a588"}, {0x100, 0x10f, 0xdf2a, "31d269c44bfc3b995d398291a29cb819714891dcda23f7bfbd52d08d84d856f7ef5040d4374e11373c0ed52cd0359458a2dd131e3ab96b750528bc30a6bf325726c4eec83c579d91e9fa1c771c13a1a05422b36a4d79deda2edc8557ff3d31d31560cdca3d5535bd7964acd1621995ac43bdbcb1ddbb48903dc8bf40e6429089e0bf4aa27122faf5b16014e157f8a3c1ef804a1f92ca1ffa0ff1156adc66f019f0c9321a27d13601d840c64fea1543c56fe21bb904d98bb9ac36e1cfd62c07817bf22d1a28e496ffe9edc2c5306f7abe3d9d5ff9557d9d851ec986e7f047a62cbfdc11c7918e7e26ea0e"}], 0x460}, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x40847ba, 0x0, 0xe, 0x0, 0x1b) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x20000010001, 0x0, 0xd, 0x3, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.997873425s ago: executing program 0 (id=272): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x20007f00) 4.855324653s ago: executing program 3 (id=273): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x418000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) rmdir(&(0x7f0000000040)='./file0\x00') sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10}}, 0x1c}}, 0x8800) syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffff7, 0x50001) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_open_dev$hidraw(0x0, 0x0, 0x418000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) rmdir(&(0x7f0000000040)='./file0\x00') (async) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) (async) fsopen(0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) connect$qrtr(r0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10}}, 0x1c}}, 0x8800) (async) syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffff7, 0x50001) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) (async) 4.846616681s ago: executing program 0 (id=274): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) renameat2(r0, &(0x7f0000000380)='./cgroup\x00', r0, &(0x7f00000003c0)='./mnt\x00', 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000021200010000000009040000850036e4d500072b78e268e7e6882abaf130000000"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 4.496239494s ago: executing program 2 (id=275): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0x2064, 0x1}) mmap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x0, 0x8021852, r2, 0x1000f0000) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x28000400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xbc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0xcf, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) 4.173941029s ago: executing program 3 (id=276): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfffffffffffffffe, 0x200400d1, &(0x7f000005ffe4)={0xa, 0x4e25, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 3.569355014s ago: executing program 4 (id=277): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x74cd, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.448583308s ago: executing program 4 (id=278): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x1}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) write$cgroup_devices(r1, &(0x7f0000000180)={'c', ' *:* ', 'rwm\x00'}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000900", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 2.369766146s ago: executing program 1 (id=279): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0xfffffffffffffffc, 0x8001, 0xdec, 0x7}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x10000000000008, 0x8, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0), 0x0, 0x8000, 0x0) setns(0xffffffffffffffff, 0x8020000) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) 2.164800705s ago: executing program 4 (id=280): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) (async, rerun: 32) r0 = userfaultfd(0x801) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) (async) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x4, @win={{0x7fffffff, 0xff, 0x3, 0x2ff}, 0x8, 0xae, 0x0, 0x29a, &(0x7f0000000680), 0x1}}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 64) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)) syz_usb_connect(0x0, 0x51, 0x0, 0x0) (async) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$mouse(&(0x7f0000000240), 0x940b, 0x141000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket(0x2b, 0x1, 0x1) listen(r5, 0x5) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$packet(r6, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f00000003c0)={0x6}) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 1.876248843s ago: executing program 2 (id=282): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0xf0bd2a, 0x24dfdbfe, {{@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x102, 0xa, 0x0, 0x0, 0x1d}, {@in6=@remote, 0xfe, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x7, 0x0, 0xc, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x80ffffff}, {0x2, 0x3}, 0x70bd2e, 0x3503, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e22, 0x4e20, @in=@loopback}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "a10466000000000800f10100000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 1.799422675s ago: executing program 4 (id=283): socket$netlink(0x10, 0x3, 0x0) (async) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2123) (async) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') creat(&(0x7f0000000140)='./file0\x00', 0x18a) (async) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYBLOB="a29009c0555d8d5d72e4a25d5d9e25657dbd5ca6dee7e8dbffc78bb89481c7d9889fec8437eefdafa407dba94e5d543c31510f017f6e40cd2091d788441976019314ab064100e5b95d53d6071dc3bcad1a0d0fbd17dcd8468e41e06d79d8fbde16db95e199677660722bf6c24df63fcbeb33cb4cf97e90765783e4e85b53001c0c89db8698906958da572326e508b5", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES16=r0], 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001500)={0x4, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/192, 0xc0}, {&(0x7f0000000340)=""/254, 0xfe}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f0000000280)}, {&(0x7f00000002c0)}, {&(0x7f0000000440)=""/4096, 0x1000}], &(0x7f00000014c0)=[0x8, 0x0, 0x5], 0x6}, 0x20) 1.648138709s ago: executing program 0 (id=284): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r1 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000100)=@generic={0x6, "82a99f5e6780f40e24bd809b20ee95341468506a251a4709351dc21527a3211b5d7d9e23507615dbd34b9caf736ffe39f6e94374a73afc6f093b934563f782377d352d07fdcece73844223bbd35bd6f6f009b93ad04c58f9ac067e8978ce9a7748bbd6c30f76a6b803b81161ab575fb223948b4264ca38775a28b1518ec2"}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)="b41c67069cf7d0e58b933b6b07516b13d6c4b9566da24468e40e7184bf31e64f1a960e37f84efe15d0f1e398ea1c84441422a7b805c27aefa79389ba07251a06ed3dddba913816692d80f152742a27753e24", 0x52}, {&(0x7f00000001c0)="ae3949da09617108867413c59759108a3a738a71bb1a9accb1374dca9476e2cdca98246a3729a90ef1869b6a4507fd352e", 0x31}, {&(0x7f00000002c0)="1ea8b3d3de29ef7febfada5f8be6ca73ee015381d1624d0c05fd76ce80f318db1d5f19921da7427ecb37a6eedb27772216fd17c3d727401e10", 0x39}, {&(0x7f0000000300)="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", 0xfe}, {&(0x7f0000000400)="f125a63040d2808b683aec7950b09bad3ce273b35ad0c0571e53dce5327760b28c7782641aedccd396ca48c087bb72dae0", 0x31}, {&(0x7f0000000440)="01e4b47036ae80ea7c9416e56933a779f07a75b11aebe2247f7144465da11c92d07f64593235993e1efc11116f9734ae8742d6e7441a7727dc978a5580e085a8d1b5e5d535a807339191c78ba0d275d27279a5314fa1996ff37b583b5bbc307f34a107de124642622bba8e360a973d7fd53baf4f1c636be00dfe6ed4f8cea3", 0x7f}, {&(0x7f0000000780)="d7a080d1b9f557aa89f7e69da4b100133b1c545822c384dd253a36682c5103df71a1c4fdccd471925d403100e6555b5dcfda4fc40627d27ff47786de426d75011b672eafe9469d3ed7bf9203467c006583b89cbf2f20a2cf4636553c66f3bb5cd89893025bb3b47ab8906b703d5d8b49a490b4519cf138fc74127e68468b1a4251d07efe59ce9773027a1308ed72e61bed66f2883609ea5a296499b5b4a55cc04e00c44d7005a90fc0762c5e4cbfaac4b5513a4f1c6b39249aaafd44b5f4f60a796759a6357a8296cbf0f90669965e4889", 0xd1}], 0x7, &(0x7f0000000e00)=[{0xf8, 0x11, 0x7fffffff, "4eea88f87b2669c9fdf12d6bbf85af5e11ef3d8c7fb41d6e2943fcb5533d0e1f2dcaf97f61e8de9d3338bfe5c581b9053584885d5f1c0d3b5687768739f14b7d1dba6dbb7ced6c82d1312b34d2fdbe6f8268904c1658e9dee576c29b23c0468f97fb359248e6eb88957d5afe9452c40dc1f9adc86f99ecf3c62afb285056aab155664b7e74eccd7c74ef1ccf8a4bc354242d1aa9599a12ddefde9c626304bc8a771040b9d6deb24d24ae2ba429fece9d2291d61cadab7ca67adac69564f44b36da32c51f0051abe1e5d67496f41edbc233b535841f86948b558d12c87f6623b52fc7"}, {0xb8, 0x10b, 0x5, "561189daf9cbb3d96b13c1b5c7010a7600ca0cd0cb3c9a0baa6e1dc3a049b180a6677cd79834bfbea08259fb5bc57dce3e345821d7b7218c2e192310ea817e587184bc43c134a90bc5a44a0958c26eca7c03008f41e4d4a5c0cafd1a3ac45c6f55dda31ba7303ed7396c268b20cd2736d0698b11e9afb3a0b081831a30302743def3b4ebc88537224cc783be226f99984d6529648d93b3a21f1922e4d963cfad29"}, {0x18, 0x119, 0xfffffff9, "b2dd1b6ed369bc"}, {0xd8, 0x84, 0x80000001, "f1bec1d396d93c17678c56d229d303f0991a2a1a35cbd17b1cbaec833c387d214395ca7803d29a61e6c1d097e136223d675250f674563511e938993f24f7c6cb6f53c90bb4698064dda205c26f227435cfbc99625958f8258170df163bc9d0ef7d5c1cb873c25472a4f50498825c56fd57dd66b67c9ce5a5c468af43d027ba113c7802eaa95c27d48cc552b3ce0e2e36734f7bfe239d6769248d5c6f3b035f2b0528c48c65420874cb9ba7d4bb773b8a3e425bbff2053028b9fda236237d4e39e7bb7fc89d"}, {0x40, 0x10d, 0x5, "e57b81ed12e1b6c204990a2b65b7f6e2545f19066b5fe916f013be2d55796c4fea099f74e1af81736805fc6ed4"}, {0x80, 0x114, 0x1000, "104604cadec9d18be9b204506b920fce604e78de68a62e0284ebde38dc2f7899eab6a7df496734a6729a407bcd691e18d6d28e4c0cd153f1c7b215a51aa271df6a844b762e0394282f730f5383c5a93a3abb5552e71d4e195ece8a3684ea2e15d32ded8590158f655472a75293a588"}, {0x100, 0x10f, 0xdf2a, "31d269c44bfc3b995d398291a29cb819714891dcda23f7bfbd52d08d84d856f7ef5040d4374e11373c0ed52cd0359458a2dd131e3ab96b750528bc30a6bf325726c4eec83c579d91e9fa1c771c13a1a05422b36a4d79deda2edc8557ff3d31d31560cdca3d5535bd7964acd1621995ac43bdbcb1ddbb48903dc8bf40e6429089e0bf4aa27122faf5b16014e157f8a3c1ef804a1f92ca1ffa0ff1156adc66f019f0c9321a27d13601d840c64fea1543c56fe21bb904d98bb9ac36e1cfd62c07817bf22d1a28e496ffe9edc2c5306f7abe3d9d5ff9557d9d851ec986e7f047a62cbfdc11c7918e7e26ea0e"}], 0x460}, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x40847ba, 0x0, 0xe, 0x0, 0x1b) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x20000010001, 0x0, 0xd, 0x3, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.573448603s ago: executing program 2 (id=285): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r0) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x2, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000400)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x8, 0xfffffffe, 0x368, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c87d77107309fcb933dcf67d50bb5f6ca33f8bbbeea99a3c6ec47646cba3ab5d1b936495db7e23a5722d63305521dfc468444", @ANYRESDEC=0x0]) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x20, 0x2, 0x6, 0xfffff034}]}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000000)=""/40, &(0x7f0000000200)=0x28) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r6 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x110008, &(0x7f0000002140)=ANY=[@ANYBLOB='dd=', @ANYRESHEX=r8, @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r10, 0xffffffffffffffff, 0x5, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xcfe}}, 0x30) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xa}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r11 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r11, &(0x7f0000000700)={0x4, 0x8}, 0x10) 1.048063124s ago: executing program 1 (id=286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000600)={@dev={0xfe, 0x80, '\x00', 0x40}}, 0x14) r1 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1/file3\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{r1}, 0x2, &(0x7f00000001c0)=[0x4, 0xc19], 0x10001, 0xc, 0x1}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000440)={0x5}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1114c1, 0x160) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x300, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f00000002c0)={0x9, 0x2, 0xffffffff, 0x100000}) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 808.93783ms ago: executing program 1 (id=287): r0 = fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r3 = eventfd2(0x6, 0xc0001) io_cancel(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0xff, r1, &(0x7f0000001500)="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", 0x1000, 0x9, 0x0, 0x3, r3}, &(0x7f00000002c0)) r4 = socket(0x1e, 0x4, 0x0) tee(r3, r4, 0x5, 0x3) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000003c0)=""/105, 0x69}], 0x1}, 0x20003ff1}], 0x1, 0x183, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e) io_submit(r2, 0x3, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000340)="12d0", 0x2, 0x7fff}, 0x0, 0x0]) r6 = open(&(0x7f0000000300)='./file0\x00', 0x210200, 0x9) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 662.769354ms ago: executing program 0 (id=288): setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) timer_create(0x3, 0x0, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 248.064879ms ago: executing program 0 (id=289): rt_sigprocmask(0x2, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) r0 = gettid() (async) r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x14, &(0x7f00000019c0)={0x8000, 0x13, 0x4}) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008ca) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="13000000010203", 0x7}, {&(0x7f0000000880)="77f19066edd0", 0x6}], 0x2) 153.157888ms ago: executing program 3 (id=290): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x1}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) write$cgroup_devices(r1, &(0x7f0000000180)={'c', ' *:* ', 'rwm\x00'}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000d00", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 0s ago: executing program 3 (id=291): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0xef, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, 0x0, 0x3, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['%\x00', '1![\xb0\xfd\x00', '+\x00'], 0xa}) semget(0x1, 0x4, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) readahead(0xffffffffffffffff, 0x100, 0x96) socket$packet(0x11, 0x3, 0x300) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000780), 0x6c4280, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0xffc, 0x0, 0xd968d5b908ac0cde, 0x2, {0x0, 0x8}, {0x350, 0x0, 0x1}, {0xf4ef}, {0x0, 0x4, 0xffe}, 0x1, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x4, 0x0, 0xb}) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r5, &(0x7f0000000280)=[{&(0x7f0000000140)='15', 0x2}, {&(0x7f0000000400)='0', 0x1}], 0x2) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts. syzkaller login: [ 82.868175][ T5821] cgroup: Unknown subsys name 'net' [ 83.014153][ T5821] cgroup: Unknown subsys name 'cpuset' [ 83.022635][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.680941][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.244128][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.252983][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.272005][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.280389][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.288518][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.419021][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.427698][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.436900][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.445905][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.462145][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.471141][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.480164][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.488593][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.497536][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.505654][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.602730][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.612101][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.620375][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.629683][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.637793][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.664284][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.673552][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.691460][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.703582][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.712479][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.309302][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 88.356129][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.515791][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 88.639716][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.647121][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.654965][ T5835] bridge_slave_0: entered allmulticast mode [ 88.662163][ T5835] bridge_slave_0: entered promiscuous mode [ 88.760177][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.768221][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.776095][ T5835] bridge_slave_1: entered allmulticast mode [ 88.784652][ T5835] bridge_slave_1: entered promiscuous mode [ 88.793865][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 88.808026][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.815314][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.822656][ T5843] bridge_slave_0: entered allmulticast mode [ 88.829762][ T5843] bridge_slave_0: entered promiscuous mode [ 88.880190][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.887533][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.895446][ T5843] bridge_slave_1: entered allmulticast mode [ 88.902906][ T5843] bridge_slave_1: entered promiscuous mode [ 88.915573][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 88.928678][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.981666][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.046004][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.097301][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.106596][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.114835][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.122108][ T5841] bridge_slave_0: entered allmulticast mode [ 89.130189][ T5841] bridge_slave_0: entered promiscuous mode [ 89.143657][ T5835] team0: Port device team_slave_0 added [ 89.173017][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.180279][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.187535][ T5841] bridge_slave_1: entered allmulticast mode [ 89.195177][ T5841] bridge_slave_1: entered promiscuous mode [ 89.210371][ T5835] team0: Port device team_slave_1 added [ 89.266751][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.274110][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.281390][ T5846] bridge_slave_0: entered allmulticast mode [ 89.288796][ T5846] bridge_slave_0: entered promiscuous mode [ 89.297804][ T5843] team0: Port device team_slave_0 added [ 89.311544][ T5833] Bluetooth: hci0: command tx timeout [ 89.339969][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.347205][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.354608][ T5846] bridge_slave_1: entered allmulticast mode [ 89.362668][ T5846] bridge_slave_1: entered promiscuous mode [ 89.371614][ T5843] team0: Port device team_slave_1 added [ 89.379765][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.402417][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.409402][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.436477][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.489980][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.499257][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.507314][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.514568][ T5847] bridge_slave_0: entered allmulticast mode [ 89.521795][ T5847] bridge_slave_0: entered promiscuous mode [ 89.529536][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.536696][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.563050][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.573691][ T5833] Bluetooth: hci1: command tx timeout [ 89.595880][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.603043][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.630092][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.641287][ T5833] Bluetooth: hci2: command tx timeout [ 89.658972][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.666558][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.673815][ T5847] bridge_slave_1: entered allmulticast mode [ 89.681102][ T5847] bridge_slave_1: entered promiscuous mode [ 89.697363][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.707316][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.714488][ T5833] Bluetooth: hci4: command tx timeout [ 89.719980][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.746054][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.790915][ T5833] Bluetooth: hci3: command tx timeout [ 89.792696][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.819434][ T5841] team0: Port device team_slave_0 added [ 89.856809][ T5841] team0: Port device team_slave_1 added [ 89.878398][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.924693][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.960584][ T5846] team0: Port device team_slave_0 added [ 89.967490][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.975441][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.002053][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.029930][ T5835] hsr_slave_0: entered promiscuous mode [ 90.036583][ T5835] hsr_slave_1: entered promiscuous mode [ 90.056436][ T5846] team0: Port device team_slave_1 added [ 90.063104][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.070150][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.096740][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.133584][ T5843] hsr_slave_0: entered promiscuous mode [ 90.140026][ T5843] hsr_slave_1: entered promiscuous mode [ 90.146291][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 90.152307][ T5843] Cannot create hsr debugfs directory [ 90.177726][ T5847] team0: Port device team_slave_0 added [ 90.220556][ T5847] team0: Port device team_slave_1 added [ 90.242552][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.249699][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.276366][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.339879][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.347273][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.373400][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.409154][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.416177][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.442700][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.483587][ T5841] hsr_slave_0: entered promiscuous mode [ 90.490086][ T5841] hsr_slave_1: entered promiscuous mode [ 90.496528][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 90.502820][ T5841] Cannot create hsr debugfs directory [ 90.509101][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.516902][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.543209][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.709444][ T5846] hsr_slave_0: entered promiscuous mode [ 90.716782][ T5846] hsr_slave_1: entered promiscuous mode [ 90.723137][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 90.728870][ T5846] Cannot create hsr debugfs directory [ 90.789862][ T5847] hsr_slave_0: entered promiscuous mode [ 90.797286][ T5847] hsr_slave_1: entered promiscuous mode [ 90.804435][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 90.810347][ T5847] Cannot create hsr debugfs directory [ 91.163443][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.189785][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.201930][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.231947][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.304258][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.317735][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.342384][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.355336][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.392063][ T5833] Bluetooth: hci0: command tx timeout [ 91.444456][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.474140][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.489402][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.510221][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.599621][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.624189][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.631058][ T5833] Bluetooth: hci1: command tx timeout [ 91.639884][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.666080][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.711022][ T5833] Bluetooth: hci2: command tx timeout [ 91.716433][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.738900][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.764174][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.784629][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.801926][ T5833] Bluetooth: hci4: command tx timeout [ 91.811700][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.870706][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.881791][ T5833] Bluetooth: hci3: command tx timeout [ 91.919502][ T3902] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.926772][ T3902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.940018][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.954618][ T10] cfg80211: failed to load regulatory.db [ 92.005759][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.013087][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.033703][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.069387][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.116609][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.123809][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.139284][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.169339][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.176494][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.186039][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.193141][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.219859][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.227121][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.277104][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.338838][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.381707][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.388877][ T4280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.418104][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.429386][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.444094][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.451262][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.505284][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.539892][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.547188][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.573325][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.580431][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.601922][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.635570][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.717479][ T5835] veth0_vlan: entered promiscuous mode [ 92.756830][ T5835] veth1_vlan: entered promiscuous mode [ 92.815186][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.834737][ T5841] veth0_vlan: entered promiscuous mode [ 92.852130][ T5843] veth0_vlan: entered promiscuous mode [ 92.875179][ T5841] veth1_vlan: entered promiscuous mode [ 92.891680][ T5835] veth0_macvtap: entered promiscuous mode [ 92.906590][ T5843] veth1_vlan: entered promiscuous mode [ 92.918847][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.935051][ T5835] veth1_macvtap: entered promiscuous mode [ 92.995266][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.018336][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.059888][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.069026][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.086213][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.095290][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.118064][ T5846] veth0_vlan: entered promiscuous mode [ 93.126913][ T5843] veth0_macvtap: entered promiscuous mode [ 93.135631][ T5847] veth0_vlan: entered promiscuous mode [ 93.150419][ T5841] veth0_macvtap: entered promiscuous mode [ 93.165820][ T5843] veth1_macvtap: entered promiscuous mode [ 93.187522][ T5846] veth1_vlan: entered promiscuous mode [ 93.196914][ T5841] veth1_macvtap: entered promiscuous mode [ 93.216072][ T5847] veth1_vlan: entered promiscuous mode [ 93.264793][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.275677][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.320251][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.331536][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.368607][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.377462][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.398016][ T3902] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.415963][ T3902] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.425497][ T3902] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.435989][ T3902] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.456761][ T3902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.471866][ T5833] Bluetooth: hci0: command tx timeout [ 93.492155][ T3902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.502026][ T3902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.526673][ T3902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.553971][ T5847] veth0_macvtap: entered promiscuous mode [ 93.563523][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.572131][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.580507][ T5846] veth0_macvtap: entered promiscuous mode [ 93.634153][ T5847] veth1_macvtap: entered promiscuous mode [ 93.656199][ T5846] veth1_macvtap: entered promiscuous mode [ 93.675087][ T3902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.699234][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.703635][ T3902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.731645][ T5833] Bluetooth: hci1: command tx timeout [ 93.791381][ T5833] Bluetooth: hci2: command tx timeout [ 93.808181][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.818327][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.828592][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.855175][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.873126][ T5833] Bluetooth: hci4: command tx timeout [ 93.915946][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.937600][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.951275][ T5833] Bluetooth: hci3: command tx timeout [ 93.965127][ T3902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.978517][ T3902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.002167][ T3902] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.017765][ T3902] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.063809][ T3902] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.090388][ T30] audit: type=1326 audit(1764968479.943:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz.1.2" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa92478f749 code=0x0 [ 94.117070][ T3902] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.133732][ T3902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.133789][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.151282][ T3902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.160330][ T3902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.170979][ T5928] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 94.179539][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.195501][ T5928] veth0_vlan: entered allmulticast mode [ 94.210166][ T5928] veth0_vlan: left promiscuous mode [ 94.217022][ T5928] veth0_vlan: entered promiscuous mode [ 94.226678][ T5928] team0: Device veth0_vlan failed to register rx_handler [ 94.231318][ T5891] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.249884][ T3902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.403496][ T4588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.420323][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.433410][ T4588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.444471][ T5891] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 94.456048][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.467859][ T5891] usb 4-1: Product: syz [ 94.474016][ T5891] usb 4-1: Manufacturer: syz [ 94.478929][ T5891] usb 4-1: SerialNumber: syz [ 94.488301][ T5891] usb 4-1: config 0 descriptor?? [ 94.507331][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.528871][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.705341][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.776091][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.835318][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.846276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.856323][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.963382][ T3844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.154967][ T3844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.552230][ T5833] Bluetooth: hci0: command tx timeout [ 95.590912][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 95.795098][ T5833] Bluetooth: hci1: command tx timeout [ 95.822724][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 95.840977][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.873120][ T5833] Bluetooth: hci2: command tx timeout [ 95.884118][ T24] usb 5-1: config 0 descriptor?? [ 95.952429][ T5833] Bluetooth: hci4: command tx timeout [ 96.034692][ T5833] Bluetooth: hci3: command tx timeout [ 96.071432][ T981] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.240887][ T981] usb 2-1: Using ep0 maxpacket: 8 [ 96.250401][ T981] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.269209][ T981] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 96.283337][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 96.305973][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 96.348798][ T981] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 96.398896][ T981] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 96.418573][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 96.438131][ T981] usb 2-1: Product: syz [ 96.481159][ T981] usb 2-1: Manufacturer: syz [ 96.499068][ T981] usb 2-1: SerialNumber: syz [ 96.529149][ T981] usb 2-1: config 0 descriptor?? [ 96.753206][ T981] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 96.783004][ T981] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 96.929622][ T5891] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 96.955600][ T981] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 96.967349][ T5891] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 96.997388][ T981] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 97.008301][ T5891] usb 4-1: USB disconnect, device number 2 [ 97.050681][ T981] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 97.131219][ T184] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 97.172767][ T5942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6'. [ 97.348160][ T184] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 97.358041][ T184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.367368][ T184] usb 1-1: Product: syz [ 97.372212][ T184] usb 1-1: Manufacturer: syz [ 97.376930][ T184] usb 1-1: SerialNumber: syz [ 97.386477][ T184] usb 1-1: config 0 descriptor?? [ 97.401916][ T981] usb 2-1: USB disconnect, device number 2 [ 97.403023][ T184] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 97.529720][ T5970] xt_connbytes: Forcing CT accounting to be enabled [ 97.540896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.568815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.600995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.621348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.651564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.670043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.679594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.700865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 97.941361][ T5832] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.100861][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 98.114254][ T5832] usb 4-1: config 23 has 0 interfaces, different from the descriptor's value: 1 [ 98.137108][ T5832] usb 4-1: New USB device found, idVendor=0000, idProduct=1202, bcdDevice=85.40 [ 98.146422][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.155191][ T5832] usb 4-1: Product: syz [ 98.159510][ T5832] usb 4-1: Manufacturer: syz [ 98.164330][ T5832] usb 4-1: SerialNumber: syz [ 98.227025][ T5960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.252798][ T5960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.344223][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 98.350290][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 98.388611][ T24] usb 5-1: USB disconnect, device number 2 [ 98.436112][ T5832] usb 4-1: USB disconnect, device number 3 [ 98.681099][ T5891] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.869621][ T5891] usb 3-1: config 3 has an invalid interface number: 202 but max is 0 [ 98.896136][ T5891] usb 3-1: config 3 has no interface number 0 [ 98.940967][ T5891] usb 3-1: config 3 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 98.983292][ T5891] usb 3-1: config 3 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 99.057275][ T5891] usb 3-1: config 3 interface 202 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 99.115690][ T5891] usb 3-1: config 3 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 99.186806][ T5891] usb 3-1: config 3 interface 202 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 32 [ 99.219852][ T5891] usb 3-1: config 3 interface 202 has no altsetting 0 [ 99.253659][ T5891] usb 3-1: New USB device found, idVendor=0403, idProduct=fa02, bcdDevice=cc.66 [ 99.278077][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.313765][ T5891] usb 3-1: Product: syz [ 99.332256][ T5891] usb 3-1: Manufacturer: 焆焧ꨄࡊ♀렢뾸퓓齙ʍ㐤쥥绝ᫍ뽫上蒳潢従攕䛆윯埭镱ꧣᫌ뷛⫱ꑑ訚胞鬹䈼໴槾ѷ괺錾킎ਆ涢礻伳䲒慘䅮滢櫊䔢⋂῝핃鼣ටĤ怋␛퓛ꄢ蠾┪脘ﰪ舿⹤⣔匘鶥其쌓곰빹昫ᭂ␙襁顰⺺㙲竆❉洪轥䤏禸⊋顢►궎콫䎫㿏ﵙ큌驰鯝ዬ䲮 [ 99.410730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.435064][ T5891] usb 3-1: SerialNumber: syz [ 99.453349][ T5981] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 99.706108][ T6005] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET) [ 99.975153][ T184] gspca_stk1135: reg_w 0x300 err -71 [ 99.987945][ T184] gspca_stk1135: serial bus timeout: status=0x00 [ 100.018597][ T184] gspca_stk1135: Sensor write failed [ 100.044152][ T184] gspca_stk1135: serial bus timeout: status=0x00 [ 100.061555][ T184] gspca_stk1135: Sensor write failed [ 100.075939][ T184] gspca_stk1135: serial bus timeout: status=0x00 [ 100.102137][ T5891] ftdi_sio 3-1:3.202: FTDI USB Serial Device converter detected [ 100.103765][ T981] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.110044][ T184] gspca_stk1135: Sensor read failed [ 100.140277][ T5891] ftdi_sio ttyUSB0: unknown device type: 0xcc66 [ 100.149004][ T184] gspca_stk1135: serial bus timeout: status=0x00 [ 100.179817][ T184] gspca_stk1135: Sensor read failed [ 100.196715][ T5891] usb 3-1: USB disconnect, device number 2 [ 100.205560][ T184] gspca_stk1135: Detected sensor type unknown (0x0) [ 100.222055][ T184] gspca_stk1135: serial bus timeout: status=0x00 [ 100.229915][ T5891] ftdi_sio 3-1:3.202: device disconnected [ 100.239190][ T184] gspca_stk1135: Sensor read failed [ 100.258173][ T184] gspca_stk1135: serial bus timeout: status=0x00 [ 100.276307][ T184] gspca_stk1135: Sensor read failed [ 100.292957][ T184] gspca_stk1135: serial bus timeout: status=0x00 [ 100.309630][ T184] gspca_stk1135: Sensor write failed [ 100.320971][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 100.333693][ T981] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 100.342845][ T981] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 100.351552][ T981] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 100.359753][ T981] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 100.368267][ T981] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 100.377578][ T981] usb 2-1: config 0 has no interface number 0 [ 100.383968][ T981] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 100.395149][ T981] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 100.405106][ T981] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 100.423331][ T981] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.433476][ T184] gspca_stk1135: serial bus timeout: status=0x00 [ 100.441922][ T981] usb 2-1: config 0 interface 125 has no altsetting 0 [ 100.450391][ T981] usb 2-1: config 0 interface 125 has no altsetting 2 [ 100.471993][ T184] gspca_stk1135: Sensor write failed [ 100.478651][ T184] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 100.503903][ T184] usb 1-1: USB disconnect, device number 2 [ 100.627733][ T981] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 100.650810][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.720400][ T981] usb 2-1: Product: syz [ 100.752734][ T981] usb 2-1: Manufacturer: syz [ 100.776399][ T981] usb 2-1: SerialNumber: syz [ 100.786688][ T6018] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 100.809293][ T981] usb 2-1: config 0 descriptor?? [ 100.861648][ T981] usb 2-1: selecting invalid altsetting 2 [ 101.191166][ T5920] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.391504][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 101.408781][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 101.479006][ T5920] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 101.530874][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.621045][ T5920] usb 5-1: config 0 descriptor?? [ 101.638165][ T6043] FAULT_INJECTION: forcing a failure. [ 101.638165][ T6043] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.672945][ T5920] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 101.696272][ T6043] CPU: 1 UID: 0 PID: 6043 Comm: syz.2.28 Not tainted syzkaller #0 PREEMPT(full) [ 101.696299][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.696308][ T6043] Call Trace: [ 101.696316][ T6043] [ 101.696322][ T6043] dump_stack_lvl+0x189/0x250 [ 101.696346][ T6043] ? __pfx____ratelimit+0x10/0x10 [ 101.696370][ T6043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.696393][ T6043] ? __pfx__printk+0x10/0x10 [ 101.696433][ T6043] should_fail_ex+0x414/0x560 [ 101.696467][ T6043] _copy_to_user+0x31/0xb0 [ 101.696491][ T6043] simple_read_from_buffer+0xe1/0x170 [ 101.696517][ T6043] proc_fail_nth_read+0x1b3/0x220 [ 101.696549][ T6043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.696581][ T6043] ? rw_verify_area+0x2a6/0x4d0 [ 101.696606][ T6043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.696634][ T6043] vfs_read+0x200/0xa30 [ 101.696668][ T6043] ? __pfx_vfs_read+0x10/0x10 [ 101.696695][ T6043] ? kmem_cache_free+0x197/0x620 [ 101.696723][ T6043] ? __pfx_do_fcntl+0x10/0x10 [ 101.696751][ T6043] ? do_sys_openat2+0x15a/0x200 [ 101.696793][ T6043] ksys_read+0x145/0x250 [ 101.696818][ T6043] ? tomoyo_file_fcntl+0x78/0x210 [ 101.696846][ T6043] ? __pfx_ksys_read+0x10/0x10 [ 101.696878][ T6043] ? do_syscall_64+0xbe/0xf80 [ 101.696902][ T6043] do_syscall_64+0xfa/0xf80 [ 101.696922][ T6043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.696942][ T6043] ? clear_bhb_loop+0x60/0xb0 [ 101.696966][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.696985][ T6043] RIP: 0033:0x7f4b37b8e15c [ 101.697003][ T6043] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.697018][ T6043] RSP: 002b:00007f4b389e0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.697040][ T6043] RAX: ffffffffffffffda RBX: 00007f4b37de5fa0 RCX: 00007f4b37b8e15c [ 101.697054][ T6043] RDX: 000000000000000f RSI: 00007f4b389e00a0 RDI: 0000000000000005 [ 101.697065][ T6043] RBP: 00007f4b389e0090 R08: 0000000000000000 R09: 0000000000000000 [ 101.697077][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.697088][ T6043] R13: 00007f4b37de6038 R14: 00007f4b37de5fa0 R15: 00007f4b37f0fa28 [ 101.697120][ T6043] [ 102.132690][ T6045] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.142829][ T5190] bcm5974 5-1:0.0: could not read from device [ 102.164428][ T5920] usb 5-1: USB disconnect, device number 3 [ 102.210044][ T6046] Zero length message leads to an empty skb [ 102.359139][ T981] usb 2-1: USB disconnect, device number 3 [ 102.413581][ T5962] udevd[5962]: Error opening device "/dev/input/event4": No such file or directory [ 102.451041][ T5962] udevd[5962]: Unable to EVIOCGABS device "/dev/input/event4" [ 102.468949][ T5962] udevd[5962]: Unable to EVIOCGABS device "/dev/input/event4" [ 102.494630][ T5962] udevd[5962]: Unable to EVIOCGABS device "/dev/input/event4" [ 102.522433][ T5962] udevd[5962]: Unable to EVIOCGABS device "/dev/input/event4" [ 102.682035][ T6051] fuse: Bad value for 'fd' [ 102.795540][ T6056] binder: 6055:6056 ioctl c0306201 200000000080 returned -14 [ 102.808354][ T6056] binder: 6055:6056 ioctl 3b81 200000000240 returned -22 [ 102.908540][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 103.086299][ T6068] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 103.340719][ T6076] loop9: detected capacity change from 0 to 7 [ 103.340892][ T981] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.365721][ T5920] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.520615][ T5898] loop9: [POWERTEC] p1 p2 p3 [ 103.525642][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 103.534322][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.547273][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.559355][ T5898] loop9: p1 size 65536 extends beyond EOD, truncated [ 103.620880][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 103.627632][ T5920] usb 3-1: config 4 has an invalid interface number: 37 but max is 0 [ 103.636071][ T5920] usb 3-1: config 4 has no interface number 0 [ 103.643874][ T981] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 103.654178][ T5920] usb 3-1: config 4 interface 37 altsetting 2 endpoint 0x82 has invalid maxpacket 1088, setting to 1024 [ 103.666104][ T5898] loop9: p2 start 779379555 is beyond EOD, truncated [ 103.674280][ T5898] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 103.691789][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.700969][ T5920] usb 3-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 103.725168][ T5920] usb 3-1: config 4 interface 37 has no altsetting 0 [ 103.735550][ T981] usb 2-1: config 0 descriptor?? [ 103.750065][ T6076] loop9: [POWERTEC] p1 p2 p3 [ 103.760402][ T5920] usb 3-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 103.770628][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.781214][ T5920] usb 3-1: Product: syz [ 103.785419][ T5920] usb 3-1: Manufacturer: syz [ 103.790023][ T5920] usb 3-1: SerialNumber: syz [ 103.802555][ T6076] loop9: p1 size 65536 extends beyond EOD, truncated [ 103.817613][ T6051] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 103.834236][ T6076] loop9: p2 start 779379555 is beyond EOD, truncated [ 103.845357][ T6076] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 103.976522][ T5925] udevd[5925]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 103.980154][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 104.127119][ T5925] udevd[5925]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 104.140043][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 104.154029][ T981] hid (null): invalid report_size 25464 [ 104.169781][ T981] kye 0003:0458:5016.0001: control desc unexpectedly large [ 104.262992][ T981] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0001/input/input6 [ 104.414616][ T981] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0001/input/input7 [ 104.600033][ T981] kye 0003:0458:5016.0001: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 105.362754][ C1] kye 0003:0458:5016.0001: usb_submit_urb(ctrl) failed: -1 [ 105.535427][ T184] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.711526][ T184] usb 1-1: Using ep0 maxpacket: 8 [ 105.733576][ T184] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.765477][ T5920] usb 3-1: USB disconnect, device number 3 [ 105.796212][ T184] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 105.819593][ T184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.858813][ T184] usb 1-1: Product: syz [ 105.884454][ T184] usb 1-1: Manufacturer: syz [ 105.908442][ T184] usb 1-1: SerialNumber: syz [ 105.953776][ T184] usb 1-1: config 0 descriptor?? [ 106.174404][ T5832] usb 1-1: USB disconnect, device number 3 [ 106.310914][ T5920] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 106.383991][ T5919] usb 2-1: USB disconnect, device number 4 [ 106.533909][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.584772][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.695840][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.764822][ T5920] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 106.791020][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.812925][ T5920] usb 3-1: config 0 descriptor?? [ 106.840536][ T6113] loop9: detected capacity change from 0 to 7 [ 106.860336][ T5898] loop9: [POWERTEC] p1 p2 p3 [ 106.871318][ T5898] loop9: p1 size 65536 extends beyond EOD, truncated [ 106.882854][ T5898] loop9: p2 start 779379555 is beyond EOD, truncated [ 106.888972][ T6115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.48'. [ 106.890960][ T5898] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 106.911629][ T981] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.954056][ T6113] loop9: [POWERTEC] p1 p2 p3 [ 106.959749][ T6113] loop9: p1 size 65536 extends beyond EOD, truncated [ 106.969325][ T6113] loop9: p2 start 779379555 is beyond EOD, truncated [ 106.977819][ T6113] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 106.998773][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 107.056047][ T981] usb 4-1: device descriptor read/64, error -71 [ 107.067132][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.127026][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 107.314829][ T981] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.443516][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.451114][ T981] usb 4-1: device descriptor read/64, error -71 [ 107.477280][ T30] audit: type=1326 audit(1764968493.333:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.4.51" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53d6f8f749 code=0x0 [ 107.534709][ T5920] ntrig 0003:1B96:0009.0002: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.2-1/input0 [ 107.552102][ T6128] dvmrp0: entered allmulticast mode [ 107.562654][ T981] usb usb4-port1: attempt power cycle [ 107.709145][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.739583][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.836956][ T5891] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.911892][ T981] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.941697][ T981] usb 4-1: device descriptor read/8, error -71 [ 107.991487][ T5832] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.011151][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 108.028065][ T5891] usb 5-1: config 2 has an invalid interface number: 128 but max is 0 [ 108.041991][ T5891] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 108.058439][ T5891] usb 5-1: config 2 has no interface number 0 [ 108.070164][ T5891] usb 5-1: config 2 interface 128 has no altsetting 0 [ 108.085178][ T5891] usb 5-1: New USB device found, idVendor=0f11, idProduct=1042, bcdDevice=bc.ef [ 108.095691][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.107305][ T5891] usb 5-1: Product: ㏯髹쬌勊ⷋ英ḻス쁋牚䃝⾇Ꟑ籞뵭侅绱⇀ᗕ퇠所૏䏯赳뚠顜ꮠ쐲䛟쏶D仦뜱谩껧ಿੑﱞᩜ仾怜ꥡꇃᝌ옷뽥횹젼涖㽏·℮埾畐剖ෝ倓怹枽셣卪 [ 108.131626][ T5891] usb 5-1: Manufacturer: 倊 [ 108.138440][ T5891] usb 5-1: SerialNumber: 簁砎ᄌພ돺娾旸굇豸⊡蹛큌裂䒵痳긩옓띵殳套딢ࣆ㏵ल곎㬩塾ᴽ [ 108.151319][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 108.161533][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.173081][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.191987][ T981] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.200211][ T5832] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.211594][ T981] usb 4-1: device descriptor read/8, error -71 [ 108.219487][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 108.242100][ T5832] usb 1-1: New USB device found, idVendor=00a4, idProduct=b138, bcdDevice= 1.42 [ 108.256111][ T5832] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 108.269455][ T5832] usb 1-1: Manufacturer: syz [ 108.293060][ T5832] usb 1-1: config 0 descriptor?? [ 108.406533][ T981] usb usb4-port1: unable to enumerate USB device [ 108.574849][ T5832] usb 1-1: USB disconnect, device number 4 [ 109.112751][ T5920] usb 3-1: USB disconnect, device number 4 [ 109.292980][ T6149] netlink: 'syz.2.55': attribute type 63 has an invalid length. [ 109.324738][ T6149] netlink: 5 bytes leftover after parsing attributes in process `syz.2.55'. [ 109.351764][ T6149] gretap0: entered allmulticast mode [ 109.357956][ T6149] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 109.382519][ T6151] capability: warning: `syz.0.56' uses 32-bit capabilities (legacy support in use) [ 109.458508][ T6149] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.661158][ T5920] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.815821][ T5920] usb 1-1: device descriptor read/64, error -71 [ 109.838977][ T6157] loop9: detected capacity change from 0 to 7 [ 109.850666][ T6157] loop9: [POWERTEC] p1 p2 p3 [ 109.859629][ T6157] loop9: p1 size 65536 extends beyond EOD, truncated [ 109.869911][ T6157] loop9: p2 start 779379555 is beyond EOD, truncated [ 109.883786][ T6157] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 110.004726][ T5925] udevd[5925]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 110.017059][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 110.100936][ T5919] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.108542][ T5920] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.250871][ T5920] usb 1-1: device descriptor read/64, error -71 [ 110.261193][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 110.278260][ T5919] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 110.291519][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.304706][ T5919] usb 4-1: config 0 descriptor?? [ 110.372331][ T5920] usb usb1-port1: attempt power cycle [ 110.507431][ T5891] ldusb 5-1:2.128: Interrupt in endpoint not found [ 110.541986][ T5891] usb 5-1: USB disconnect, device number 4 [ 110.711041][ T5920] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.721144][ T5963] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.751733][ T5920] usb 1-1: device descriptor read/8, error -71 [ 110.888909][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.902811][ T6185] tipc: Started in network mode [ 110.907873][ T6185] tipc: Node identity 4243e9bf93aa, cluster identity 4711 [ 110.911234][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.925729][ T5963] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.936634][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.946842][ T6185] tipc: Enabled bearer , priority 0 [ 110.950903][ T5963] usb 2-1: config 0 descriptor?? [ 110.995546][ T6159] syzkaller0: entered promiscuous mode [ 111.015430][ T6159] syzkaller0: entered allmulticast mode [ 111.030928][ T5920] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 111.064048][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.58'. [ 111.081626][ T5920] usb 1-1: device descriptor read/8, error -71 [ 111.093937][ T6159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.58'. [ 111.114014][ T6159] tipc: Resetting bearer [ 111.167516][ T6158] tipc: Resetting bearer [ 111.213205][ T6158] tipc: Disabling bearer [ 111.219742][ T6190] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.248560][ T5920] usb usb1-port1: unable to enumerate USB device [ 111.303990][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 111.309218][ T6190] bond2: entered allmulticast mode [ 111.320728][ T6190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.329370][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 111.351598][ T5919] usb 4-1: USB disconnect, device number 8 [ 111.751654][ T5918] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 111.944993][ T5918] usb 3-1: unable to get BOS descriptor set [ 111.952184][ T5918] usb 3-1: not running at top speed; connect to a high speed hub [ 111.971421][ T5918] usb 3-1: config 1 interface 0 has no altsetting 0 [ 112.001362][ T5918] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 112.017949][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.031749][ T5918] usb 3-1: Product: syz [ 112.045090][ T5918] usb 3-1: Manufacturer: syz [ 112.049751][ T5918] usb 3-1: SerialNumber: syz [ 112.271111][ T5920] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.325701][ T5918] usb 3-1: USB disconnect, device number 5 [ 112.431006][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 112.443404][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 112.459484][ T5920] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 112.471102][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.479216][ T5920] usb 4-1: Product: syz [ 112.502088][ T5920] usb 4-1: Manufacturer: syz [ 112.512524][ T5920] usb 4-1: SerialNumber: syz [ 112.528703][ T5920] usb 4-1: config 0 descriptor?? [ 112.545105][ T5920] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 112.555053][ T5920] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 113.145200][ T5920] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 113.170440][ T6221] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.73'. [ 113.323855][ T6223] xt_bpf: check failed: parse error [ 113.480843][ T5918] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.489149][ T6230] binder: BINDER_SET_CONTEXT_MGR already set [ 113.496861][ T6230] binder: 6227:6230 ioctl 4018620d 200000000040 returned -16 [ 113.584538][ T5963] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 113.606299][ T5920] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 113.620947][ T5963] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 113.639611][ T5920] em28xx 4-1:0.0: board has no eeprom [ 113.651127][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 113.660502][ T5963] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 113.672640][ T5963] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 113.679075][ T5918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.691173][ T5919] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.700571][ T5963] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 113.710547][ T5918] usb 5-1: config 0 has an invalid interface number: 238 but max is 0 [ 113.732756][ T5918] usb 5-1: config 0 has no interface number 0 [ 113.739139][ T5918] usb 5-1: config 0 interface 238 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 113.770638][ T5963] usb 2-1: USB disconnect, device number 5 [ 113.789629][ T5918] usb 5-1: config 0 interface 238 has no altsetting 0 [ 113.823668][ T5918] usb 5-1: New USB device found, idVendor=06e0, idProduct=f108, bcdDevice=9e.70 [ 113.845334][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.863787][ T5919] usb 3-1: device descriptor read/64, error -71 [ 113.880539][ T5918] usb 5-1: Product: syz [ 113.895100][ T5918] usb 5-1: Manufacturer: syz [ 113.908417][ T5918] usb 5-1: SerialNumber: syz [ 113.973470][ T5918] usb 5-1: config 0 descriptor?? [ 114.007928][ T6221] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 114.020894][ T5920] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.030931][ T5920] em28xx 4-1:0.0: dvb set to bulk mode. [ 114.037019][ T5963] em28xx 4-1:0.0: Binding DVB extension [ 114.130865][ T5919] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.231024][ T5832] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 114.262830][ T6243] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.73'. [ 114.320922][ T5919] usb 3-1: device descriptor read/64, error -71 [ 114.368175][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.431402][ T5919] usb usb3-port1: attempt power cycle [ 114.443044][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 114.494567][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.540887][ T5832] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 114.557983][ T5832] usb 1-1: config 179 has no interface number 0 [ 114.569605][ T5918] ti_usb_3410_5052 5-1:0.238: TI USB 3410 1 port adapter converter detected [ 114.580088][ T5832] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 114.592182][ T5918] ti_usb_3410_5052 5-1:0.238: missing endpoints [ 114.695138][ T5832] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 114.709195][ T5918] usb 5-1: USB disconnect, device number 5 [ 114.726976][ T5832] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 114.740943][ T5832] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 114.794978][ T5832] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 114.810902][ T5919] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 114.813424][ T5832] usb 1-1: config 179 interface 65 has no altsetting 0 [ 114.839412][ T5832] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 114.849423][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.865555][ T5919] usb 3-1: device descriptor read/8, error -71 [ 115.105643][ T5832] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 115.221862][ T5190] input input8: unable to receive magic message: -110 [ 115.240860][ T5919] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 115.254787][ T6200] em28xx 4-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 115.287726][ T5190] input input8: unable to receive magic message: -32 [ 115.296677][ T5832] usb 1-1: USB disconnect, device number 9 [ 115.296744][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 115.297017][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 115.325252][ T5919] usb 3-1: device descriptor read/8, error -71 [ 115.451067][ T5919] usb usb3-port1: unable to enumerate USB device [ 115.620515][ T5963] em28xx 4-1:0.0: Registering input extension [ 115.740846][ T5918] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.903791][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.918003][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.968263][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.989627][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.140851][ T5918] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.149976][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.221973][ T5918] usb 5-1: config 0 descriptor?? [ 116.880937][ T6141] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 117.050852][ T6141] usb 3-1: Using ep0 maxpacket: 16 [ 117.057905][ T6141] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 117.071261][ T6141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.085961][ T6141] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 117.096474][ T6141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.104621][ T6141] usb 3-1: Product: syz [ 117.108847][ T6141] usb 3-1: Manufacturer: syz [ 117.113556][ T6141] usb 3-1: SerialNumber: syz [ 117.122297][ T6141] usb 3-1: config 0 descriptor?? [ 117.133203][ T6141] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 117.190811][ T6141] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 117.423724][ T5918] usbhid 5-1:0.0: can't add hid device: -71 [ 117.429990][ T5918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 117.449744][ T5918] usb 5-1: USB disconnect, device number 6 [ 117.521300][ T5891] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.674414][ T6142] usb 4-1: USB disconnect, device number 9 [ 117.723228][ T6142] em28xx 4-1:0.0: Disconnecting em28xx [ 117.728969][ T6142] em28xx 4-1:0.0: Closing input extension [ 117.743034][ T6141] em28xx 3-1:0.0: unknown em28xx chip ID (186) [ 117.832923][ T6142] em28xx 4-1:0.0: Freeing device [ 117.964787][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.976701][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.993567][ T6141] em28xx 3-1:0.0: Config register raw data: 0x07 [ 118.197727][ T10] usb 3-1: USB disconnect, device number 10 [ 118.250846][ T5891] usb 2-1: device descriptor read/64, error -71 [ 118.327835][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 118.361245][ T10] em28xx 3-1:0.0: Freeing device [ 118.561000][ T5891] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 118.570902][ T5920] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 118.710999][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 118.718121][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.729462][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.738763][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.813152][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.955765][ T5920] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.965801][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.975735][ T5920] usb 4-1: SerialNumber: syz [ 119.150689][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 119.182350][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.252340][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.290974][ T5891] usb 2-1: config 0 descriptor?? [ 119.315531][ T5891] hub 2-1:0.0: USB hub found [ 119.414294][ T6306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.464533][ T6306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.581017][ T5891] hub 2-1:0.0: 1 port detected [ 119.604659][ T6309] netlink: 'syz.4.95': attribute type 6 has an invalid length. [ 119.766886][ T6306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.038510][ T5920] usb 4-1: 0:2 : does not exist [ 120.105989][ T5920] usb 4-1: USB disconnect, device number 10 [ 120.141484][ T5891] hub 2-1:0.0: activate --> -90 [ 120.308069][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.441000][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 120.549606][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.562636][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.594566][ T10] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 120.654776][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.665934][ T5918] usb 2-1: USB disconnect, device number 7 [ 120.697591][ T10] usb 3-1: config 0 descriptor?? [ 120.724755][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 121.055929][ T6326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'. [ 121.414546][ T10] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 121.711473][ T5891] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.753549][ T6337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.103'. [ 121.827931][ T10] gspca_cpia1: usb_control_msg 02, error -71 [ 121.853010][ T10] gspca_cpia1: usb_control_msg 05, error -71 [ 121.867470][ T10] cpia1 3-1:0.0: unexpected systemstate: 00 [ 121.878103][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 121.889670][ T5891] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.902889][ T5891] usb 2-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 121.913003][ T10] usb 3-1: USB disconnect, device number 11 [ 121.918926][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.934695][ T5891] usb 2-1: Product: syz [ 121.960869][ T5891] usb 2-1: Manufacturer: syz [ 121.966595][ T5891] usb 2-1: SerialNumber: syz [ 121.989909][ T5891] usb 2-1: config 0 descriptor?? [ 122.304818][ T30] audit: type=1326 audit(1764968507.983:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.99" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff88b38f749 code=0x0 [ 122.704597][ T6347] netlink: 180 bytes leftover after parsing attributes in process `syz.1.102'. [ 122.915590][ T6352] bond3 (unregistering): Released all slaves [ 122.989777][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 123.005093][ T5920] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 123.174137][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 123.199009][ T5920] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 123.231462][ T5920] usb 4-1: config 0 has no interface number 0 [ 123.243774][ T5920] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 123.272869][ T5920] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 123.285014][ T5920] usb 4-1: config 0 interface 41 has no altsetting 0 [ 123.295296][ T5920] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 123.307180][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.324157][ T5920] usb 4-1: Product: syz [ 123.328443][ T5920] usb 4-1: Manufacturer: syz [ 123.333896][ T5920] usb 4-1: SerialNumber: syz [ 123.344033][ T5920] usb 4-1: config 0 descriptor?? [ 123.350355][ T6348] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 123.358473][ T6348] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 123.480914][ T184] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 123.568975][ T6348] CIFS: VFS: Malformed UNC in devname [ 123.701193][ T184] usb 3-1: Using ep0 maxpacket: 32 [ 123.709519][ T184] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 123.720964][ T184] usb 3-1: config 0 has no interface number 0 [ 123.727274][ T184] usb 3-1: config 0 interface 184 has no altsetting 0 [ 123.738196][ T184] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 123.748115][ T184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.756548][ T10] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 123.765045][ T184] usb 3-1: Product: syz [ 123.770492][ T184] usb 3-1: Manufacturer: syz [ 123.776039][ T184] usb 3-1: SerialNumber: syz [ 123.792941][ T184] usb 3-1: config 0 descriptor?? [ 123.830018][ T184] smsc75xx v1.0.0 [ 123.916098][ T10] usb 1-1: config 4 has an invalid interface number: 9 but max is 0 [ 123.927785][ T10] usb 1-1: config 4 has no interface number 0 [ 123.942647][ T10] usb 1-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=d7.0c [ 123.971451][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.990296][ T10] usb 1-1: Product: syz [ 123.999623][ T10] usb 1-1: Manufacturer: syz [ 124.013636][ T10] usb 1-1: SerialNumber: syz [ 124.053815][ T10] gspca_main: spca505-2.14.0 probing 0733:0430 [ 124.372813][ T6375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.382281][ T6375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.391953][ T6375] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 124.440713][ T10] gspca_spca505: reg write: error -71 [ 124.480408][ T10] spca505 1-1:4.9: probe with driver spca505 failed with error -5 [ 124.508318][ T10] usb 1-1: USB disconnect, device number 10 [ 124.570566][ T5921] usb 2-1: USB disconnect, device number 8 [ 125.205652][ T30] audit: type=1800 audit(1764968511.043:5): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.113" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=11590 res=0 errno=0 [ 125.898739][ T5920] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 125.977362][ T5920] usb 4-1: USB disconnect, device number 11 [ 126.416523][ T6398] bond1 (unregistering): Released all slaves [ 126.922487][ T30] audit: type=1326 audit(1764968512.783:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.031014][ T30] audit: type=1326 audit(1764968512.783:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.077852][ T184] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 127.102669][ T184] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 127.121254][ T30] audit: type=1326 audit(1764968512.783:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.145970][ T184] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 127.168728][ T184] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 127.188110][ T30] audit: type=1326 audit(1764968512.783:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.245211][ T184] usb 3-1: USB disconnect, device number 12 [ 127.259449][ T30] audit: type=1326 audit(1764968512.783:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.309462][ T30] audit: type=1326 audit(1764968512.783:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.339046][ T30] audit: type=1326 audit(1764968512.783:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.366043][ T30] audit: type=1326 audit(1764968512.783:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.389419][ T30] audit: type=1326 audit(1764968512.783:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.412477][ T30] audit: type=1326 audit(1764968512.803:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.435080][ T6142] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.443350][ T30] audit: type=1326 audit(1764968512.803:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.454430][ T5921] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.466542][ T30] audit: type=1326 audit(1764968512.803:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.498196][ T30] audit: type=1326 audit(1764968512.803:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.520828][ T30] audit: type=1326 audit(1764968512.803:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.544468][ T30] audit: type=1326 audit(1764968512.803:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.603977][ T30] audit: type=1326 audit(1764968512.803:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d6f8f749 code=0x7ffc0000 [ 127.628589][ T6142] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 127.640626][ T6142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.656820][ T6142] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 127.671717][ T6142] usb 5-1: New USB device found, idVendor=04e8, idProduct=a055, bcdDevice= 0.00 [ 127.684573][ T6142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.710547][ T6142] usb 5-1: config 0 descriptor?? [ 127.731337][ T5921] usb 1-1: device descriptor read/64, error -71 [ 127.830853][ T184] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 127.891377][ T5920] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 127.980963][ T184] usb 4-1: Using ep0 maxpacket: 16 [ 127.981903][ T5921] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 127.993098][ T184] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 128.013047][ T184] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 128.027033][ T184] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.037148][ T184] usb 4-1: Product: syz [ 128.048400][ T184] usb 4-1: Manufacturer: syz [ 128.059388][ T184] usb 4-1: SerialNumber: syz [ 128.070875][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 128.082826][ T184] usb 4-1: config 0 descriptor?? [ 128.085083][ T5920] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 128.103258][ T184] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 128.118912][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 128.118952][ T184] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 128.180272][ T5921] usb 1-1: device descriptor read/64, error -71 [ 128.189306][ T5920] usb 3-1: Product: syz [ 128.193552][ T5920] usb 3-1: Manufacturer: syz [ 128.198308][ T5920] usb 3-1: SerialNumber: syz [ 128.209517][ T5920] usb 3-1: config 0 descriptor?? [ 128.212705][ T6142] hid-generic 0003:04E8:A055.0004: unknown main item tag 0x0 [ 128.288016][ T6142] hid-generic 0003:04E8:A055.0004: unknown main item tag 0x0 [ 128.302078][ T5921] usb usb1-port1: attempt power cycle [ 128.348003][ T6142] hid-generic 0003:04E8:A055.0004: unknown main item tag 0x0 [ 128.390022][ T6142] hid-generic 0003:04E8:A055.0004: unknown main item tag 0x0 [ 128.407062][ T6142] hid-generic 0003:04E8:A055.0004: hidraw0: USB HID v10.00 Device [HID 04e8:a055] on usb-dummy_hcd.4-1/input0 [ 128.475685][ T6142] usb 5-1: USB disconnect, device number 7 [ 128.505245][ T5891] usb 3-1: USB disconnect, device number 13 [ 128.578245][ T6433] fido_id[6433]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 128.749552][ T5921] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 128.750015][ T184] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 128.811799][ T5921] usb 1-1: device descriptor read/8, error -71 [ 129.057199][ T5921] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 129.091510][ T5921] usb 1-1: device descriptor read/8, error -71 [ 129.193783][ T184] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 129.204552][ T184] em28xx 4-1:0.0: board has no eeprom [ 129.218061][ T5921] usb usb1-port1: unable to enumerate USB device [ 129.271995][ T5920] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 129.449104][ T5920] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 129.460904][ T5920] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 129.472543][ T5920] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.488124][ T6404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.497261][ T6404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.529234][ T5920] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.544419][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.556237][ T5920] usb 5-1: Product: syz [ 129.562860][ T5920] usb 5-1: Manufacturer: syz [ 129.567742][ T5920] usb 5-1: SerialNumber: syz [ 129.739050][ T6445] bond3 (unregistering): Released all slaves [ 129.877437][ T5920] usb 5-1: USB disconnect, device number 8 [ 129.933368][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.271928][ T6403] em28xx 4-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 130.281224][ T6450] can: request_module (can-proto-5) failed. [ 130.331187][ T184] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 130.360876][ T184] em28xx 4-1:0.0: dvb set to bulk mode. [ 130.391029][ T5891] em28xx 4-1:0.0: Binding DVB extension [ 130.570907][ T5891] em28xx 4-1:0.0: Registering input extension [ 130.835592][ T5919] usb 4-1: USB disconnect, device number 12 [ 130.876939][ T5919] em28xx 4-1:0.0: Disconnecting em28xx [ 130.898072][ T5919] em28xx 4-1:0.0: Closing input extension [ 130.936548][ T5919] em28xx 4-1:0.0: Freeing device [ 131.103099][ T6485] netlink: 44 bytes leftover after parsing attributes in process `syz.1.146'. [ 131.112835][ T5920] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 131.296331][ T5920] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 131.333035][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.379321][ T5920] usb 5-1: config 0 descriptor?? [ 131.403945][ T5920] cp210x 5-1:0.0: cp210x converter detected [ 131.735288][ T6490] bond1 (unregistering): Released all slaves [ 131.803663][ T5920] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 131.836132][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.899731][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.990586][ T5920] usb 5-1: cp210x converter now attached to ttyUSB0 [ 132.154534][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.211357][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.367216][ T5919] usb 5-1: USB disconnect, device number 9 [ 132.424962][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 132.620193][ T5919] cp210x 5-1:0.0: device disconnected [ 132.628192][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 132.917030][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.937746][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.688619][ T6540] process 'syz.1.162' launched './file1' with NULL argv: empty string added [ 133.843173][ T6541] bond3 (unregistering): Released all slaves [ 134.929553][ T6573] netlink: 92 bytes leftover after parsing attributes in process `syz.3.171'. [ 135.370843][ T184] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 135.531035][ T184] usb 2-1: device descriptor read/64, error -71 [ 135.623764][ T6585] bond3 (unregistering): Released all slaves [ 135.701197][ T5891] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 135.777600][ T6587] netlink: 'syz.3.176': attribute type 21 has an invalid length. [ 135.786418][ T6587] netlink: 132 bytes leftover after parsing attributes in process `syz.3.176'. [ 135.830870][ T184] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.890861][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 135.903655][ T5891] usb 1-1: config 0 has an invalid interface number: 166 but max is 0 [ 135.912553][ T5891] usb 1-1: config 0 has no interface number 0 [ 135.932910][ T5891] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=79.c0 [ 135.942173][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.960905][ T184] usb 2-1: device descriptor read/64, error -71 [ 135.970633][ T5891] usb 1-1: Product: syz [ 135.976769][ T5891] usb 1-1: Manufacturer: syz [ 135.982269][ T5891] usb 1-1: SerialNumber: syz [ 136.008345][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.177'. [ 136.022209][ T5891] usb 1-1: config 0 descriptor?? [ 136.028897][ T6600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.178'. [ 136.067511][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 136.174880][ T184] usb usb2-port1: attempt power cycle [ 136.240930][ T10] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 136.254244][ T5891] snd-usb-audio 1-1:0.166: probe with driver snd-usb-audio failed with error -71 [ 136.294009][ T5891] usb 1-1: USB disconnect, device number 15 [ 136.370913][ T10] usb 4-1: device descriptor read/64, error -71 [ 136.523870][ T184] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 136.552382][ T184] usb 2-1: device descriptor read/8, error -71 [ 136.670916][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 136.821018][ T10] usb 4-1: device descriptor read/64, error -71 [ 136.827789][ T184] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 136.861404][ T184] usb 2-1: device descriptor read/8, error -71 [ 136.941118][ T10] usb usb4-port1: attempt power cycle [ 136.981331][ T184] usb usb2-port1: unable to enumerate USB device [ 137.306233][ T10] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 137.355451][ T10] usb 4-1: device descriptor read/8, error -71 [ 137.586351][ T6611] syz.2.180 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 137.610906][ T10] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 137.644196][ T10] usb 4-1: device descriptor read/8, error -71 [ 137.701214][ T6613] binder: BINDER_SET_CONTEXT_MGR already set [ 137.708558][ T6613] binder: 6606:6613 ioctl 4018620d 200000000040 returned -16 [ 137.831912][ T10] usb usb4-port1: unable to enumerate USB device [ 139.208583][ T6639] bond1 (unregistering): Released all slaves [ 139.651207][ T5963] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 139.719757][ T6654] loop9: detected capacity change from 0 to 7 [ 139.762061][ T6654] loop9: [POWERTEC] p1 p2 p3 [ 139.767060][ T6654] loop9: p1 size 65536 extends beyond EOD, truncated [ 139.820907][ T5963] usb 1-1: device descriptor read/64, error -71 [ 139.829466][ T6654] loop9: p2 start 779379555 is beyond EOD, truncated [ 139.856988][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.192'. [ 139.894721][ T6654] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 139.942400][ T6661] tipc: Started in network mode [ 139.947536][ T6661] tipc: Node identity c26dd7cc34ba, cluster identity 4711 [ 139.974252][ T6661] tipc: Enabled bearer , priority 0 [ 140.098493][ T5963] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 140.111821][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 140.130465][ T5925] udevd[5925]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 140.221906][ T6661] syzkaller0: entered promiscuous mode [ 140.227428][ T6661] syzkaller0: entered allmulticast mode [ 140.235284][ T5963] usb 1-1: device descriptor read/64, error -71 [ 140.249161][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 140.265195][ T6661] tipc: Resetting bearer [ 140.279457][ T6660] tipc: Resetting bearer [ 140.292580][ T6660] tipc: Disabling bearer [ 140.351519][ T5963] usb usb1-port1: attempt power cycle [ 140.391893][ T6142] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 140.462850][ T5940] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 140.550871][ T6142] usb 5-1: Using ep0 maxpacket: 16 [ 140.557885][ T6142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.591585][ T6142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.610920][ T6142] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 140.620068][ T6142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.628152][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 140.651641][ T5940] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.670932][ T5940] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.683676][ T6142] usb 5-1: config 0 descriptor?? [ 140.694492][ T5940] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.710832][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.718935][ T5940] usb 3-1: Product: syz [ 140.724153][ T6142] usbhid 5-1:0.0: can't add hid device: -22 [ 140.730851][ T5940] usb 3-1: Manufacturer: syz [ 140.730851][ T5963] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 140.730988][ T5919] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 140.735464][ T5940] usb 3-1: SerialNumber: syz [ 140.738281][ T6142] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 140.771587][ T5963] usb 1-1: device descriptor read/8, error -71 [ 140.902788][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.912236][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.920218][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 140.928339][ T24] usb 5-1: USB disconnect, device number 10 [ 140.943093][ T5919] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 140.956122][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.988700][ T5919] usb 2-1: config 0 descriptor?? [ 141.020895][ T5963] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 141.033893][ T5919] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 141.051565][ T5963] usb 1-1: device descriptor read/8, error -71 [ 141.161498][ T5963] usb usb1-port1: unable to enumerate USB device [ 141.184786][ T6667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.195163][ T6667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.378758][ T6676] geneve2: entered promiscuous mode [ 141.384240][ T6676] geneve2: entered allmulticast mode [ 141.618454][ T5919] gspca_sonixj: reg_w1 err -71 [ 141.634708][ T5919] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 141.652223][ T5919] usb 2-1: USB disconnect, device number 13 [ 141.803059][ T5940] usb 3-1: cannot find UAC_HEADER [ 141.811238][ T6680] bond1 (unregistering): Released all slaves [ 141.939885][ T5940] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 141.969921][ T5940] usb 3-1: USB disconnect, device number 14 [ 142.053734][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.139272][ T6686] loop5: detected capacity change from 0 to 7 [ 142.155907][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.165396][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.585359][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.594724][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.607406][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.616714][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.639774][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.649100][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.664577][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.673841][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.684147][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.693391][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.702667][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.712033][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.721063][ T5925] ldm_validate_partition_table(): Disk read failed. [ 142.730649][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.739870][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.748182][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.757381][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.768680][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.777866][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.787722][ T5925] Dev loop5: unable to read RDB block 0 [ 142.798731][ T5925] loop5: unable to read partition table [ 142.811573][ T5925] loop5: partition table beyond EOD, truncated [ 142.846054][ T6686] ldm_validate_partition_table(): Disk read failed. [ 142.859179][ T6686] Dev loop5: unable to read RDB block 0 [ 142.867289][ T6686] loop5: unable to read partition table [ 142.878127][ T6686] loop5: partition table beyond EOD, truncated [ 142.918593][ T6686] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 144.240871][ T5919] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 144.312298][ T6726] bond1 (unregistering): Released all slaves [ 144.432748][ T5919] usb 3-1: config index 0 descriptor too short (expected 46822, got 36) [ 144.441223][ T5919] usb 3-1: config 36 has too many interfaces: 83, using maximum allowed: 32 [ 144.460172][ T5919] usb 3-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 144.487528][ T5919] usb 3-1: config 36 has 0 interfaces, different from the descriptor's value: 83 [ 144.509857][ T5919] usb 3-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 144.523673][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.820827][ T5920] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 144.950835][ T5920] usb 2-1: device descriptor read/64, error -71 [ 145.055486][ T6734] syzkaller1: entered promiscuous mode [ 145.070048][ T6734] syzkaller1: entered allmulticast mode [ 145.200883][ T5920] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 145.321089][ T6142] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 145.351714][ T5920] usb 2-1: device descriptor read/64, error -71 [ 145.455019][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 145.455042][ T30] audit: type=1326 audit(1764968531.313:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea618f749 code=0x7ffc0000 [ 145.461581][ T5920] usb usb2-port1: attempt power cycle [ 145.500874][ T6142] usb 1-1: Using ep0 maxpacket: 8 [ 145.506462][ T30] audit: type=1326 audit(1764968531.313:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f9ea618f749 code=0x7ffc0000 [ 145.530872][ T6142] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 145.539168][ T6142] usb 1-1: config 179 has no interface number 0 [ 145.546394][ T6142] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 145.558004][ T30] audit: type=1326 audit(1764968531.313:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea618f749 code=0x7ffc0000 [ 145.581870][ T6142] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 145.639504][ T6142] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.668248][ T30] audit: type=1326 audit(1764968531.313:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ea618f749 code=0x7ffc0000 [ 145.697672][ T6142] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 145.729425][ T6142] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 145.743631][ T30] audit: type=1326 audit(1764968531.463:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea618f749 code=0x7ffc0000 [ 145.768982][ T6142] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 145.795883][ T6142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.806288][ T30] audit: type=1326 audit(1764968531.463:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea618f749 code=0x7ffc0000 [ 145.837653][ T6734] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 145.893151][ T30] audit: type=1326 audit(1764968531.553:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ea618f749 code=0x7ffc0000 [ 145.919346][ T30] audit: type=1326 audit(1764968531.553:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea618f749 code=0x7ffc0000 [ 145.943004][ T5920] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 145.943852][ T6751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.221'. [ 145.953871][ T30] audit: type=1326 audit(1764968531.553:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9ea618f749 code=0x7ffc0000 [ 146.031607][ T5920] usb 2-1: device descriptor read/8, error -71 [ 146.079613][ T30] audit: type=1326 audit(1764968531.573:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea618f749 code=0x7ffc0000 [ 146.281058][ T5963] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 146.288933][ T5920] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 146.321535][ T5920] usb 2-1: device descriptor read/8, error -71 [ 146.431735][ T5920] usb usb2-port1: unable to enumerate USB device [ 146.461287][ T5963] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 146.470498][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.478943][ T5963] usb 5-1: Product: syz [ 146.483202][ T5963] usb 5-1: Manufacturer: syz [ 146.487841][ T5963] usb 5-1: SerialNumber: syz [ 146.496009][ T5963] usb 5-1: config 0 descriptor?? [ 146.518434][ T5963] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 146.532873][ T5963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.543190][ T5963] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 146.557079][ T5963] usb 5-1: media controller created [ 146.588697][ T5963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.679959][ T5963] DVB: Unable to find symbol mt352_attach() [ 146.713743][ T6751] dvb-usb: bulk message failed: -22 (7/0) [ 146.844132][ T5963] DVB: Unable to find symbol nxt6000_attach() [ 146.850360][ T5963] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 146.875299][ T5920] usb 1-1: USB disconnect, device number 20 [ 146.875307][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 146.875358][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 146.926415][ T5963] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 146.957515][ T5963] dvb-usb: schedule remote query interval to 1000 msecs. [ 146.965595][ T5963] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 146.977455][ T5963] dvb-usb: bulk message failed: -22 (7/0) [ 146.990197][ T5963] dvb-usb: bulk message failed: -22 (7/0) [ 147.024764][ T5963] usb 5-1: USB disconnect, device number 11 [ 147.178295][ T6142] usb 3-1: USB disconnect, device number 15 [ 147.262468][ T5963] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 147.325426][ T6762] FAULT_INJECTION: forcing a failure. [ 147.325426][ T6762] name failslab, interval 1, probability 0, space 0, times 1 [ 147.349592][ T6762] CPU: 1 UID: 0 PID: 6762 Comm: syz.2.224 Not tainted syzkaller #0 PREEMPT(full) [ 147.349620][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.349632][ T6762] Call Trace: [ 147.349640][ T6762] [ 147.349648][ T6762] dump_stack_lvl+0x189/0x250 [ 147.349679][ T6762] ? __pfx____ratelimit+0x10/0x10 [ 147.349711][ T6762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.349734][ T6762] ? __pfx__printk+0x10/0x10 [ 147.349771][ T6762] ? ip6t_do_table+0x1db/0x1560 [ 147.349799][ T6762] ? __pfx_ip6t_do_table+0x10/0x10 [ 147.349828][ T6762] should_fail_ex+0x414/0x560 [ 147.349863][ T6762] should_failslab+0xa8/0x100 [ 147.349886][ T6762] __kmalloc_noprof+0xcb/0x800 [ 147.349912][ T6762] ? ___neigh_create+0x6d5/0x2230 [ 147.349939][ T6762] ___neigh_create+0x6d5/0x2230 [ 147.349973][ T6762] ? __ipv6_neigh_lookup_noref+0x531/0x710 [ 147.350014][ T6762] ip6_finish_output2+0x1175/0x1480 [ 147.350054][ T6762] ? __pfx_ip6_finish_output2+0x10/0x10 [ 147.350081][ T6762] ? ip6_mtu+0x7d/0x490 [ 147.350100][ T6762] ? ip6_mtu+0x38c/0x490 [ 147.350122][ T6762] ? ip6_finish_output+0x2ef/0x4e0 [ 147.350145][ T6762] ? ip6_output+0x126/0x550 [ 147.350167][ T6762] ip6_output+0x340/0x550 [ 147.350198][ T6762] ip6_mr_output+0x4e9/0x1100 [ 147.350233][ T6762] ? ip6_mr_output+0x1ca/0x1100 [ 147.350263][ T6762] ? __pfx_ip6_mr_output+0x10/0x10 [ 147.350300][ T6762] ? ip6t_do_table+0x1db/0x1560 [ 147.350328][ T6762] ? __pfx_ip6t_do_table+0x10/0x10 [ 147.350369][ T6762] ? skb_dst+0x4f/0xd0 [ 147.350397][ T6762] ? dst_output+0x17b/0x1c0 [ 147.350423][ T6762] ? rawv6_send_hdrinc+0xc9f/0x17a0 [ 147.350454][ T6762] rawv6_send_hdrinc+0xe16/0x17a0 [ 147.350502][ T6762] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 147.350523][ T6762] ? txopt_get+0x335/0x3f0 [ 147.350547][ T6762] ? __pfx_dst_output+0x10/0x10 [ 147.350567][ T6762] ? __pfx_txopt_get+0x10/0x10 [ 147.350601][ T6762] rawv6_sendmsg+0x12ee/0x1830 [ 147.350649][ T6762] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 147.350706][ T6762] ? __pfx_aa_sk_perm+0x10/0x10 [ 147.350731][ T6762] ? sock_rps_record_flow+0x19/0x410 [ 147.350769][ T6762] ? inet_sendmsg+0x2f4/0x370 [ 147.350792][ T6762] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.350823][ T6762] __sock_sendmsg+0x19c/0x270 [ 147.350856][ T6762] ____sys_sendmsg+0x505/0x820 [ 147.350889][ T6762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.350925][ T6762] ? import_iovec+0x74/0xa0 [ 147.350954][ T6762] ___sys_sendmsg+0x21f/0x2a0 [ 147.350982][ T6762] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.351016][ T6762] ? rcu_read_lock_any_held+0xb3/0x120 [ 147.351073][ T6762] ? __fget_files+0x2a/0x420 [ 147.351094][ T6762] ? __fget_files+0x3a0/0x420 [ 147.351128][ T6762] __x64_sys_sendmsg+0x19b/0x260 [ 147.351157][ T6762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.351195][ T6762] ? __pfx_ksys_write+0x10/0x10 [ 147.351228][ T6762] ? do_syscall_64+0xbe/0xf80 [ 147.351253][ T6762] do_syscall_64+0xfa/0xf80 [ 147.351275][ T6762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.351295][ T6762] ? clear_bhb_loop+0x60/0xb0 [ 147.351319][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.351338][ T6762] RIP: 0033:0x7f4b37b8f749 [ 147.351358][ T6762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.351374][ T6762] RSP: 002b:00007f4b389e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.351397][ T6762] RAX: ffffffffffffffda RBX: 00007f4b37de5fa0 RCX: 00007f4b37b8f749 [ 147.351411][ T6762] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 147.351424][ T6762] RBP: 00007f4b389e0090 R08: 0000000000000000 R09: 0000000000000000 [ 147.351436][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.351447][ T6762] R13: 00007f4b37de6038 R14: 00007f4b37de5fa0 R15: 00007f4b37f0fa28 [ 147.351484][ T6762] [ 148.405422][ T6774] fuse: Unknown parameter 'grou00000000000000000000' [ 148.752003][ T6781] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 150.281778][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.650811][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 150.683813][ T43] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 150.694433][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.724371][ T43] usb 5-1: Product: syz [ 150.735157][ T43] usb 5-1: Manufacturer: syz [ 150.757153][ T43] usb 5-1: SerialNumber: syz [ 150.771130][ T184] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 150.796059][ T43] usb 5-1: config 0 descriptor?? [ 150.880925][ T5891] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 150.949812][ T184] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.016422][ T43] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 151.082116][ T184] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 151.129606][ T184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.145878][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.176630][ T184] usb 2-1: Product: syz [ 151.183354][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.194060][ T184] usb 2-1: Manufacturer: syz [ 151.227622][ T184] usb 2-1: SerialNumber: syz [ 151.243899][ T5891] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 151.275907][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.354235][ T184] usb 2-1: config 0 descriptor?? [ 151.384857][ T184] usb 2-1: no audio or video endpoints found [ 151.392500][ T5891] usb 4-1: config 0 descriptor?? [ 151.527604][ T43] gspca_sunplus: reg_w_riv err -71 [ 151.577626][ T5891] usb 2-1: USB disconnect, device number 18 [ 151.578416][ T43] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 151.662936][ T43] usb 5-1: USB disconnect, device number 12 [ 152.412338][ T6827] mmap: syz.4.242 (6827) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 152.937412][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 152.937428][ T30] audit: type=1326 audit(1764968538.793:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88b38f749 code=0x7ffc0000 [ 152.993350][ T30] audit: type=1326 audit(1764968538.823:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88b38f749 code=0x7ffc0000 [ 153.041726][ T30] audit: type=1326 audit(1764968538.903:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff88b38f749 code=0x7ffc0000 [ 153.067110][ T6834] fuse: Unknown parameter 'group_i00000000000000000000' [ 153.126656][ T30] audit: type=1326 audit(1764968538.923:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88b38f749 code=0x7ffc0000 [ 153.158206][ T30] audit: type=1326 audit(1764968538.923:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff88b38f749 code=0x7ffc0000 [ 153.192566][ T30] audit: type=1326 audit(1764968538.923:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88b38f749 code=0x7ffc0000 [ 153.226737][ T30] audit: type=1326 audit(1764968538.923:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff88b38f749 code=0x7ffc0000 [ 153.253068][ T30] audit: type=1326 audit(1764968538.943:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88b38f749 code=0x7ffc0000 [ 153.275632][ T5891] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 153.289969][ T30] audit: type=1326 audit(1764968538.943:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ff88b38f749 code=0x7ffc0000 [ 153.317413][ T30] audit: type=1326 audit(1764968538.943:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88b38f749 code=0x7ffc0000 [ 153.411028][ T5940] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 153.431314][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 153.437762][ T5891] usb 2-1: config 1 has an invalid interface number: 233 but max is 0 [ 153.446586][ T5891] usb 2-1: config 1 has no interface number 0 [ 153.452932][ T5891] usb 2-1: config 1 interface 233 has no altsetting 0 [ 153.463879][ T5891] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 153.474085][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.482921][ T5891] usb 2-1: Product: syz [ 153.487249][ T5891] usb 2-1: Manufacturer: syz [ 153.492604][ T5891] usb 2-1: SerialNumber: syz [ 153.541255][ T43] usb 4-1: USB disconnect, device number 17 [ 153.571134][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 153.591139][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 153.612191][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 153.628551][ T5940] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 153.638359][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.646787][ T184] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 153.655351][ T5940] usb 5-1: Product: syz [ 153.661990][ T5940] usb 5-1: Manufacturer: syz [ 153.666928][ T5940] usb 5-1: SerialNumber: syz [ 153.676423][ T5940] usb 5-1: config 0 descriptor?? [ 153.694408][ T5940] usb 5-1: no audio or video endpoints found [ 153.710658][ T6836] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 153.820834][ T184] usb 3-1: Using ep0 maxpacket: 32 [ 153.829317][ T5891] imon_raw 2-1:1.233: IR endpoint missing [ 153.844802][ T184] usb 3-1: config 1 interface 0 has no altsetting 0 [ 153.860203][ T5891] usb 2-1: USB disconnect, device number 19 [ 153.883264][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.932300][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.947221][ T5940] usb 5-1: USB disconnect, device number 13 [ 153.970423][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.004088][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.020422][ T184] usb 3-1: string descriptor 0 read error: -71 [ 154.042987][ T184] usb 3-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 154.061619][ T184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.079821][ T184] usb 3-1: can't set config #1, error -71 [ 154.089585][ T184] usb 3-1: USB disconnect, device number 16 [ 154.190996][ T5918] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 154.343195][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.406804][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 154.419713][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 154.451513][ T5918] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 154.460615][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.483838][ T5918] usb 4-1: config 0 descriptor?? [ 154.490641][ T6849] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 154.710318][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.761827][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.816790][ T6864] loop9: detected capacity change from 0 to 7 [ 154.838630][ T5898] loop9: [POWERTEC] p1 p2 p3 [ 154.849838][ T5898] loop9: p1 size 65536 extends beyond EOD, truncated [ 155.131101][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 155.137209][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 155.163600][ T5898] loop9: p2 start 779379555 is beyond EOD, truncated [ 155.185637][ T5898] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 155.200038][ T5918] usb 4-1: USB disconnect, device number 18 [ 155.250293][ T6864] loop9: [POWERTEC] p1 p2 p3 [ 155.255277][ T6864] loop9: p1 size 65536 extends beyond EOD, truncated [ 155.276401][ T6864] loop9: p2 start 779379555 is beyond EOD, truncated [ 155.425116][ T6864] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 156.003157][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 156.018999][ T5925] udevd[5925]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 156.183393][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 156.189681][ T5925] udevd[5925]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 156.388274][ T6872] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 156.736510][ T6880] bond1 (unregistering): Released all slaves [ 158.671142][ T5918] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 158.870830][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 158.900084][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.944511][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.035507][ T6923] loop9: detected capacity change from 0 to 7 [ 159.047917][ T5898] loop9: [POWERTEC] p1 p2 p3 [ 159.055592][ T5898] loop9: p1 size 65536 extends beyond EOD, truncated [ 159.090494][ T5898] loop9: p2 start 779379555 is beyond EOD, truncated [ 159.106000][ T5898] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 159.132428][ T6923] loop9: [POWERTEC] p1 p2 p3 [ 159.137806][ T5918] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.147594][ T6923] loop9: p1 size 65536 extends beyond EOD, truncated [ 159.162513][ T5918] usb 1-1: no configurations [ 159.172493][ T5918] usb 1-1: can't read configurations, error -22 [ 159.181343][ T6923] loop9: p2 start 779379555 is beyond EOD, truncated [ 159.230842][ T6923] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 159.503723][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 159.514911][ T5925] udevd[5925]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 159.594209][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 159.608459][ T5925] udevd[5925]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 159.770856][ T6142] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 159.941238][ T6142] usb 2-1: Using ep0 maxpacket: 16 [ 159.967248][ T6142] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 159.994454][ T6142] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 160.027029][ T6142] usb 2-1: Product: syz [ 160.043010][ T6142] usb 2-1: Manufacturer: syz [ 160.047882][ T6142] usb 2-1: SerialNumber: syz [ 160.058706][ T6142] usb 2-1: config 0 descriptor?? [ 160.241305][ T5899] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 160.447862][ T5899] usb 5-1: config index 0 descriptor too short (expected 8028, got 92) [ 160.476919][ T5899] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.525708][ T5899] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.587692][ T5899] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.616261][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.635614][ T5899] usb 5-1: Product: syz [ 160.639838][ T5899] usb 5-1: Manufacturer: syz [ 160.672632][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 160.672652][ T30] audit: type=1326 audit(1764968546.533:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6945 comm="syz.0.274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff88b38f749 code=0x0 [ 160.672848][ T5899] usb 5-1: SerialNumber: syz [ 161.359953][ T6931] input: syz1 as /devices/virtual/input/input12 [ 161.584830][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.593874][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.613078][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.652585][ T5918] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 161.677704][ T6142] usb 2-1: USB disconnect, device number 20 [ 161.709605][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.764109][ T5899] cdc_ncm 5-1:1.0: bind() failure [ 161.845818][ T5899] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 161.849165][ T5918] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 161.852957][ T5899] cdc_ncm 5-1:1.1: bind() failure [ 161.858007][ T5899] usb 5-1: USB disconnect, device number 14 [ 161.886658][ T5918] usb 4-1: config 0 has no interface number 0 [ 161.926734][ T5918] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.938060][ T5918] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 161.955269][ T5918] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 161.977060][ T5918] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 161.988810][ T5918] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.169677][ T5918] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 162.178878][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.191638][ T5918] usb 4-1: config 0 descriptor?? [ 162.198235][ T6961] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 162.213902][ T5918] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 162.750142][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-1) [ 162.758958][ T5899] usb 4-1: USB disconnect, device number 19 [ 162.785211][ T5899] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 162.968878][ T6980] loop9: detected capacity change from 0 to 7 [ 162.980022][ T6980] loop9: [POWERTEC] p1 p2 p3 [ 162.998371][ T6980] loop9: p1 size 65536 extends beyond EOD, truncated [ 163.019584][ T6980] loop9: p2 start 779379555 is beyond EOD, truncated [ 163.032680][ T6980] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 163.145759][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 163.147552][ T5925] udevd[5925]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 163.983047][ T7006] fuse: Unknown parameter 'q0˓' [ 164.030999][ T184] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 164.172895][ T184] usb 5-1: device descriptor read/64, error -71 [ 164.261815][ T5920] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 164.420941][ T184] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 164.430588][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.455160][ T5920] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 164.483998][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 164.520458][ T5920] usb 3-1: Product: syz [ 164.533127][ T5920] usb 3-1: Manufacturer: syz [ 164.540378][ T5920] usb 3-1: SerialNumber: syz [ 164.573976][ T184] usb 5-1: device descriptor read/64, error -71 [ 164.594818][ T5920] usb 3-1: config 0 descriptor?? [ 164.629486][ T5920] usb 3-1: selecting invalid altsetting 0 [ 164.681580][ T184] usb usb5-port1: attempt power cycle [ 164.760860][ T7014] Cannot find set identified by id 0 to match [ 165.020858][ T184] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 165.063536][ T184] usb 5-1: device descriptor read/8, error -71 [ 165.244592][ T7022] loop9: detected capacity change from 0 to 7 [ 165.251968][ T7022] loop9: [POWERTEC] p1 p2 p3 [ 165.257156][ T7022] loop9: p1 size 65536 extends beyond EOD, truncated [ 165.265713][ T7022] loop9: p2 start 779379555 is beyond EOD, truncated [ 165.273452][ T7022] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 165.301855][ T184] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 165.334964][ T184] usb 5-1: device descriptor read/8, error -71 [ 165.369413][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 165.370687][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 165.468019][ T7006] ================================================================== [ 165.476259][ T7006] BUG: KASAN: slab-out-of-bounds in copy_to_urb+0x261/0x460 [ 165.480984][ T184] usb usb5-port1: unable to enumerate USB device [ 165.483665][ T7006] Write of size 264 at addr ffff888075a77600 by task syz.2.285/7006 [ 165.483696][ T7006] [ 165.483710][ T7006] CPU: 1 UID: 0 PID: 7006 Comm: syz.2.285 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.483734][ T7006] Tainted: [L]=SOFTLOCKUP [ 165.483740][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.483750][ T7006] Call Trace: [ 165.483757][ T7006] [ 165.483765][ T7006] dump_stack_lvl+0x189/0x250 [ 165.483789][ T7006] ? __virt_addr_valid+0x1c8/0x5c0 [ 165.483812][ T7006] ? rcu_is_watching+0x15/0xb0 [ 165.483834][ T7006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.483853][ T7006] ? rcu_is_watching+0x15/0xb0 [ 165.483873][ T7006] ? lock_release+0x4b/0x3b0 [ 165.483890][ T7006] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 165.483917][ T7006] ? __virt_addr_valid+0x1c8/0x5c0 [ 165.483939][ T7006] ? __virt_addr_valid+0x4a5/0x5c0 [ 165.483961][ T7006] print_report+0xca/0x240 [ 165.483978][ T7006] ? copy_to_urb+0x261/0x460 [ 165.483996][ T7006] kasan_report+0x118/0x150 [ 165.484014][ T7006] ? copy_to_urb+0x261/0x460 [ 165.484035][ T7006] kasan_check_range+0x2b0/0x2c0 [ 165.484051][ T7006] ? copy_to_urb+0x261/0x460 [ 165.484070][ T7006] __asan_memcpy+0x40/0x70 [ 165.484092][ T7006] copy_to_urb+0x261/0x460 [ 165.484115][ T7006] prepare_playback_urb+0x953/0x13d0 [ 165.484135][ T7006] ? rcu_is_watching+0x15/0xb0 [ 165.484166][ T7006] ? __pfx_prepare_playback_urb+0x10/0x10 [ 165.484187][ T7006] ? rcu_read_lock_sched_held+0x89/0x100 [ 165.484208][ T7006] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 165.484231][ T7006] ? __pfx_prepare_playback_urb+0x10/0x10 [ 165.484250][ T7006] prepare_outbound_urb+0x377/0xc50 [ 165.484276][ T7006] ? _copy_from_iter+0xb2c/0x1630 [ 165.484293][ T7006] ? __asan_memcpy+0x40/0x70 [ 165.484314][ T7006] ? __pfx_prepare_outbound_urb+0x10/0x10 [ 165.484335][ T7006] ? _copy_from_iter+0x11eb/0x1630 [ 165.484352][ T7006] ? snd_usb_endpoint_start_quirk+0x1f7/0x320 [ 165.484376][ T7006] snd_usb_endpoint_start+0x4d8/0x14a0 [ 165.484406][ T7006] ? __pfx_snd_usb_endpoint_start+0x10/0x10 [ 165.484430][ T7006] ? do_raw_spin_lock+0x121/0x290 [ 165.484455][ T7006] start_endpoints+0xa1/0x280 [ 165.484474][ T7006] ? snd_usb_substream_playback_trigger+0x3ce/0x7a0 [ 165.484495][ T7006] snd_usb_substream_playback_trigger+0x3e0/0x7a0 [ 165.484518][ T7006] snd_pcm_do_start+0xb7/0x180 [ 165.484542][ T7006] snd_pcm_action+0xe7/0x240 [ 165.484563][ T7006] __snd_pcm_lib_xfer+0x1762/0x1ce0 [ 165.484583][ T7006] ? __pfx_interleaved_copy+0x10/0x10 [ 165.484609][ T7006] ? __pfx_default_write_copy+0x10/0x10 [ 165.484629][ T7006] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 165.484651][ T7006] snd_pcm_oss_write3+0x1bc/0x320 [ 165.484684][ T7006] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 165.484703][ T7006] ? lockdep_hardirqs_on+0x98/0x140 [ 165.484721][ T7006] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 165.484739][ T7006] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 165.484761][ T7006] snd_pcm_oss_sync1+0x2f6/0x760 [ 165.484783][ T7006] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 165.484799][ T7006] ? __pfx_ima_file_free+0x10/0x10 [ 165.484823][ T7006] ? __pfx_default_wake_function+0x10/0x10 [ 165.484843][ T7006] ? __asan_memset+0x22/0x50 [ 165.484863][ T7006] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 165.484883][ T7006] snd_pcm_oss_sync+0x86c/0xc30 [ 165.484911][ T7006] snd_pcm_oss_release+0xff/0x250 [ 165.484935][ T7006] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 165.484959][ T7006] __fput+0x44c/0xa70 [ 165.484981][ T7006] task_work_run+0x1d4/0x260 [ 165.485006][ T7006] ? __pfx_task_work_run+0x10/0x10 [ 165.485029][ T7006] ? kmem_cache_free+0x197/0x620 [ 165.485052][ T7006] ? do_exit+0x6c0/0x2310 [ 165.485076][ T7006] do_exit+0x6c5/0x2310 [ 165.485100][ T7006] ? do_raw_spin_lock+0x121/0x290 [ 165.485123][ T7006] ? __pfx_do_exit+0x10/0x10 [ 165.485150][ T7006] do_group_exit+0x21c/0x2d0 [ 165.485172][ T7006] ? lockdep_hardirqs_on+0x98/0x140 [ 165.485189][ T7006] get_signal+0x1285/0x1340 [ 165.485213][ T7006] arch_do_signal_or_restart+0x9a/0x7a0 [ 165.485239][ T7006] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 165.485267][ T7006] ? exit_to_user_mode_loop+0x55/0x4f0 [ 165.485287][ T7006] exit_to_user_mode_loop+0x87/0x4f0 [ 165.485304][ T7006] ? rcu_is_watching+0x15/0xb0 [ 165.485326][ T7006] do_syscall_64+0x2e3/0xf80 [ 165.485343][ T7006] ? rcu_is_watching+0x15/0xb0 [ 165.485362][ T7006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.485379][ T7006] ? clear_bhb_loop+0x60/0xb0 [ 165.485398][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.485415][ T7006] RIP: 0033:0x7f4b37b8f749 [ 165.485430][ T7006] Code: Unable to access opcode bytes at 0x7f4b37b8f71f. [ 165.485439][ T7006] RSP: 002b:00007f4b389e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 165.485459][ T7006] RAX: fffffffffffffe00 RBX: 00007f4b37de5fa8 RCX: 00007f4b37b8f749 [ 165.485472][ T7006] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b37de5fa8 [ 165.485483][ T7006] RBP: 00007f4b37de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 165.485494][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.485504][ T7006] R13: 00007f4b37de6038 R14: 00007f4b37f0f940 R15: 00007f4b37f0fa28 [ 165.485523][ T7006] [ 165.485529][ T7006] [ 165.990213][ T7006] Allocated by task 7006: [ 165.994546][ T7006] kasan_save_track+0x3e/0x80 [ 165.999243][ T7006] __kasan_kmalloc+0x93/0xb0 [ 166.003935][ T7006] __kmalloc_noprof+0x411/0x800 [ 166.008792][ T7006] snd_usb_endpoint_set_params+0x1749/0x2e70 [ 166.014782][ T7006] snd_usb_hw_params+0xb12/0x1280 [ 166.019806][ T7006] snd_pcm_hw_params+0x89d/0x1d30 [ 166.024922][ T7006] snd_pcm_oss_change_params_locked+0x21cb/0x3e40 [ 166.031395][ T7006] snd_pcm_oss_write+0x2fb/0x1190 [ 166.036434][ T7006] vfs_write+0x27e/0xb30 [ 166.040684][ T7006] ksys_write+0x145/0x250 [ 166.045019][ T7006] do_syscall_64+0xfa/0xf80 [ 166.049528][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.055421][ T7006] [ 166.057751][ T7006] The buggy address belongs to the object at ffff888075a77600 [ 166.057751][ T7006] which belongs to the cache kmalloc-256 of size 256 [ 166.071801][ T7006] The buggy address is located 0 bytes inside of [ 166.071801][ T7006] allocated 240-byte region [ffff888075a77600, ffff888075a776f0) [ 166.085862][ T7006] [ 166.088187][ T7006] The buggy address belongs to the physical page: [ 166.094589][ T7006] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75a76 [ 166.103347][ T7006] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 166.111841][ T7006] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 166.119394][ T7006] page_type: f5(slab) [ 166.123381][ T7006] raw: 00fff00000000040 ffff88801a026b40 dead000000000122 0000000000000000 [ 166.131960][ T7006] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 166.140628][ T7006] head: 00fff00000000040 ffff88801a026b40 dead000000000122 0000000000000000 [ 166.149521][ T7006] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 166.158184][ T7006] head: 00fff00000000001 ffffea0001d69d81 00000000ffffffff 00000000ffffffff [ 166.166952][ T7006] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 166.175891][ T7006] page dumped because: kasan: bad access detected [ 166.182326][ T7006] page_owner tracks the page as allocated [ 166.188038][ T7006] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7004, tgid 7002 (syz.0.284), ts 164071759484, free_ts 99079874695 [ 166.209226][ T7006] post_alloc_hook+0x234/0x290 [ 166.213999][ T7006] get_page_from_freelist+0x2365/0x2440 [ 166.219546][ T7006] __alloc_frozen_pages_noprof+0x181/0x370 [ 166.225347][ T7006] alloc_pages_mpol+0x232/0x4a0 [ 166.230197][ T7006] allocate_slab+0x86/0x3b0 [ 166.234705][ T7006] ___slab_alloc+0xf2b/0x1960 [ 166.239378][ T7006] __slab_alloc+0x65/0x100 [ 166.243876][ T7006] __kmalloc_noprof+0x471/0x800 [ 166.248725][ T7006] io_cache_alloc_new+0x40/0x100 [ 166.253667][ T7006] __io_prep_rw+0x23f/0xe00 [ 166.258170][ T7006] io_prep_rwv+0x91/0x3e0 [ 166.262500][ T7006] io_submit_sqes+0xad3/0x2140 [ 166.267348][ T7006] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 166.272899][ T7006] do_syscall_64+0xfa/0xf80 [ 166.277429][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.283322][ T7006] page last free pid 5205 tgid 5205 stack trace: [ 166.289644][ T7006] __free_frozen_pages+0xbc4/0xd30 [ 166.294763][ T7006] __slab_free+0x21b/0x2a0 [ 166.299446][ T7006] qlist_free_all+0x97/0x100 [ 166.304129][ T7006] kasan_quarantine_reduce+0x148/0x160 [ 166.309592][ T7006] __kasan_slab_alloc+0x22/0x80 [ 166.314445][ T7006] __kmalloc_noprof+0x3c3/0x800 [ 166.319297][ T7006] tomoyo_realpath_from_path+0xe3/0x5d0 [ 166.324841][ T7006] tomoyo_path_perm+0x213/0x4b0 [ 166.329687][ T7006] security_inode_getattr+0x12f/0x330 [ 166.335064][ T7006] __x64_sys_newfstat+0xfc/0x200 [ 166.340000][ T7006] do_syscall_64+0xfa/0xf80 [ 166.344547][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.350511][ T7006] [ 166.352834][ T7006] Memory state around the buggy address: [ 166.358502][ T7006] ffff888075a77580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.366559][ T7006] ffff888075a77600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 166.374702][ T7006] >ffff888075a77680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 166.382764][ T7006] ^ [ 166.390558][ T7006] ffff888075a77700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.398615][ T7006] ffff888075a77780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.406667][ T7006] ================================================================== [ 166.414946][ T7006] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 166.422172][ T7006] CPU: 1 UID: 0 PID: 7006 Comm: syz.2.285 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.432945][ T7006] Tainted: [L]=SOFTLOCKUP [ 166.437278][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.447508][ T7006] Call Trace: [ 166.450819][ T7006] [ 166.453758][ T7006] dump_stack_lvl+0x99/0x250 [ 166.458353][ T7006] ? __asan_memcpy+0x40/0x70 [ 166.462968][ T7006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.468167][ T7006] ? __pfx__printk+0x10/0x10 [ 166.472777][ T7006] vpanic+0x237/0x6d0 [ 166.476772][ T7006] ? __pfx_vpanic+0x10/0x10 [ 166.481283][ T7006] panic+0xb9/0xc0 [ 166.485009][ T7006] ? __pfx_panic+0x10/0x10 [ 166.489433][ T7006] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 166.495421][ T7006] ? is_module_address+0x17/0xf0 [ 166.500364][ T7006] ? copy_to_urb+0x261/0x460 [ 166.504971][ T7006] check_panic_on_warn+0x89/0xb0 [ 166.509922][ T7006] ? copy_to_urb+0x261/0x460 [ 166.514515][ T7006] end_report+0x6f/0x140 [ 166.518763][ T7006] kasan_report+0x129/0x150 [ 166.523266][ T7006] ? copy_to_urb+0x261/0x460 [ 166.527857][ T7006] kasan_check_range+0x2b0/0x2c0 [ 166.532878][ T7006] ? copy_to_urb+0x261/0x460 [ 166.537468][ T7006] __asan_memcpy+0x40/0x70 [ 166.541886][ T7006] copy_to_urb+0x261/0x460 [ 166.546395][ T7006] prepare_playback_urb+0x953/0x13d0 [ 166.551683][ T7006] ? rcu_is_watching+0x15/0xb0 [ 166.556511][ T7006] ? __pfx_prepare_playback_urb+0x10/0x10 [ 166.562236][ T7006] ? rcu_read_lock_sched_held+0x89/0x100 [ 166.567966][ T7006] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 166.574035][ T7006] ? __pfx_prepare_playback_urb+0x10/0x10 [ 166.579757][ T7006] prepare_outbound_urb+0x377/0xc50 [ 166.584963][ T7006] ? _copy_from_iter+0xb2c/0x1630 [ 166.589990][ T7006] ? __asan_memcpy+0x40/0x70 [ 166.594843][ T7006] ? __pfx_prepare_outbound_urb+0x10/0x10 [ 166.600636][ T7006] ? _copy_from_iter+0x11eb/0x1630 [ 166.605836][ T7006] ? snd_usb_endpoint_start_quirk+0x1f7/0x320 [ 166.611911][ T7006] snd_usb_endpoint_start+0x4d8/0x14a0 [ 166.617470][ T7006] ? __pfx_snd_usb_endpoint_start+0x10/0x10 [ 166.623455][ T7006] ? do_raw_spin_lock+0x121/0x290 [ 166.628503][ T7006] start_endpoints+0xa1/0x280 [ 166.633186][ T7006] ? snd_usb_substream_playback_trigger+0x3ce/0x7a0 [ 166.639799][ T7006] snd_usb_substream_playback_trigger+0x3e0/0x7a0 [ 166.646216][ T7006] snd_pcm_do_start+0xb7/0x180 [ 166.650985][ T7006] snd_pcm_action+0xe7/0x240 [ 166.655603][ T7006] __snd_pcm_lib_xfer+0x1762/0x1ce0 [ 166.660840][ T7006] ? __pfx_interleaved_copy+0x10/0x10 [ 166.666420][ T7006] ? __pfx_default_write_copy+0x10/0x10 [ 166.671977][ T7006] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 166.677640][ T7006] snd_pcm_oss_write3+0x1bc/0x320 [ 166.682713][ T7006] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 166.688552][ T7006] ? lockdep_hardirqs_on+0x98/0x140 [ 166.693758][ T7006] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 166.700089][ T7006] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 166.706514][ T7006] snd_pcm_oss_sync1+0x2f6/0x760 [ 166.711554][ T7006] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 166.717045][ T7006] ? __pfx_ima_file_free+0x10/0x10 [ 166.722370][ T7006] ? __pfx_default_wake_function+0x10/0x10 [ 166.728205][ T7006] ? __asan_memset+0x22/0x50 [ 166.732814][ T7006] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 166.738849][ T7006] snd_pcm_oss_sync+0x86c/0xc30 [ 166.744184][ T7006] snd_pcm_oss_release+0xff/0x250 [ 166.749246][ T7006] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 166.754895][ T7006] __fput+0x44c/0xa70 [ 166.758889][ T7006] task_work_run+0x1d4/0x260 [ 166.763583][ T7006] ? __pfx_task_work_run+0x10/0x10 [ 166.768730][ T7006] ? kmem_cache_free+0x197/0x620 [ 166.773702][ T7006] ? do_exit+0x6c0/0x2310 [ 166.778051][ T7006] do_exit+0x6c5/0x2310 [ 166.782233][ T7006] ? do_raw_spin_lock+0x121/0x290 [ 166.787278][ T7006] ? __pfx_do_exit+0x10/0x10 [ 166.791979][ T7006] do_group_exit+0x21c/0x2d0 [ 166.796695][ T7006] ? lockdep_hardirqs_on+0x98/0x140 [ 166.802008][ T7006] get_signal+0x1285/0x1340 [ 166.806523][ T7006] arch_do_signal_or_restart+0x9a/0x7a0 [ 166.812077][ T7006] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 166.818304][ T7006] ? exit_to_user_mode_loop+0x55/0x4f0 [ 166.823851][ T7006] exit_to_user_mode_loop+0x87/0x4f0 [ 166.829137][ T7006] ? rcu_is_watching+0x15/0xb0 [ 166.833908][ T7006] do_syscall_64+0x2e3/0xf80 [ 166.838513][ T7006] ? rcu_is_watching+0x15/0xb0 [ 166.843280][ T7006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.849349][ T7006] ? clear_bhb_loop+0x60/0xb0 [ 166.854032][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.859923][ T7006] RIP: 0033:0x7f4b37b8f749 [ 166.864342][ T7006] Code: Unable to access opcode bytes at 0x7f4b37b8f71f. [ 166.871463][ T7006] RSP: 002b:00007f4b389e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.879882][ T7006] RAX: fffffffffffffe00 RBX: 00007f4b37de5fa8 RCX: 00007f4b37b8f749 [ 166.887869][ T7006] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b37de5fa8 [ 166.895844][ T7006] RBP: 00007f4b37de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 166.903821][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.911791][ T7006] R13: 00007f4b37de6038 R14: 00007f4b37f0f940 R15: 00007f4b37f0fa28 [ 166.919768][ T7006] [ 166.923864][ T7006] Kernel Offset: disabled [ 166.928180][ T7006] Rebooting in 86400 seconds..