last executing test programs: 8.26772048s ago: executing program 0 (id=2580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000e00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x2f0, 0x1b, 0x400, 0x70bd2d, 0x25dfdbff, {0x4}, [@nested={0x34, 0x37, 0x0, 0x1, [@nested={0x4, 0x59}, @nested={0x4, 0x121}, @typed={0x6, 0x44, 0x0, 0x0, @str='$*'}, @typed={0x14, 0x113, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x150}, @typed={0x8, 0x11, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x190, 0x105, 0x0, 0x1, [@nested={0x4, 0xdc}, @nested={0x4, 0x11}, @generic="5ca85df468e23544ce1d25afb9ca79c99f4321c9a9b929babc8ed0bb332827236efdc708f91192b03531caf84183b008cef7b614cffe238e9e1ef4422e9321000e3cd1607da076d7db8efd2de9723c253be7da0b9c9d8db7854c1bdfc8d1dbb47c804528eba38c115c2a231c41f0f8983180c340e239076a227059e0b85ab4fb6e7183b929dfbaf4708f9e948de43e547fdd497f440bd3424fda81d76273215fe19be774284b408b0b07c17a967ebf076242a2b28e0268948d4b0ad4ea08781caa5c32bdda9f531bf6f2bfe2620a45", @generic="5d237605caeeba8f9864047213b1f211f397d08d8272f62d68c7c7dfc51d6af7b9e60d10645fba1f4b4c644541f28524f34d23b850ecb189e218efe53938b5c0fbc45539865537784d2c5f2ab1b84dfb7ba10cc0c6916f8fe0c8b6389e80f35d663162fa027a11e158c1c5be4ad105c5175f4c3dc81d0bdb5d289cbdc6d0ccddfbae2b787f945dcf692537f7c8f563c4df1d5d2af9d02e194e8d7d146b3db6585b77ad5fbad96d256c0cb5a0206724ed90a9e03f37"]}, @nested={0xf7, 0xb5, 0x0, 0x1, [@generic="9658bbf3232ad606edba256b9f1fbf1c1d52fd886f281bf2858e106e350a23c69667d9408e84ddcc8b334cfb4eb62fde2db6909fbfd45094a430895c9b62ada6ece25f489072a096c8a5da988c3053f8289b6414bd3f308b8dd4e23dd1a5d42ee4409163b6421b6c429d24c222bb89416afd6ec096cb994bb04b3370ce8c27ef65b399a66dae84c2057f1916296255043c705ccc2540ed2237b7e1829eece9b8a3882a4f69ab08a14309d62b097a695ac0df50d13b607a3e508d22792ad2639160bd4db2837f22efb1c16738848d88d786e4b65efed482b6a437da3a7d6054893f0ff0", @typed={0x4, 0x12a}, @typed={0x5, 0xd8, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x140}]}, @generic="c0903276ec5dce018a49996e3d378087a2be7e08df0f9922261f3e5461"]}, 0x2f0}, 0x1, 0x0, 0x0, 0x40044}, 0x8014) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) getresuid(&(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000340)) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PTAB={0x404, 0x3, [0x2fb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x80000009, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x10004, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x464}}, 0x0) 7.733121518s ago: executing program 1 (id=2583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/72, 0x48}], 0x1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000040)={0x2}) r8 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r8, 0x48eb, 0x1158, 0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r11, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x3c}}, 0xc0) 7.484172528s ago: executing program 4 (id=2584): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x6, 0x4) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100319ecae08cd0c9900a1000000000000020000a472479baa797217d700000000020000"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) lseek(r1, 0x8000000, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0xd0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'wlan0\x00'}, 0x18) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000180)=0x9) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {0x6}]}) 7.109320934s ago: executing program 3 (id=2586): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB='/\x00'], 0x20) 6.856839017s ago: executing program 3 (id=2587): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8f62, 0x26243) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x2f0, 0xf8, 0xfeffffff, 0x2f0, 0x220, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r3 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x60603) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000540)="9edf55168046", 0x0, 0x0, 0x12, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001640)=ANY=[@ANYBLOB="020805000800000029bd7000fddbdf2502700007a64a84bc92d633ee0004d3068a8e010000002002000100000004e408773502000000e09870e9f8f260e8f8c8c8dc36af2c4d64e2417880fe436c3068a4c7a1c8688da3f56e0b12701b919bf6c2d13a9d314642361558e8006082f5d1950afbb964d66b6d771b0b06797ad13b901f9ba7f9020d41e92e011408d89276de2e61e1e4d7bf5506cd7d213a2e913a65a4b551ce823c8a862e901778d703a6a90fbe132be7e78429777442e91d4a44350452b6190767e20c6a96"], 0x40}}, 0x80000d4) fcntl$setlease(r5, 0x400, 0x1) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f00000003c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000640)="82cca5005d122f97cf8d2e1d3d30ed919732a7eb5a8d611e7b2f9e470399f32e3fc22706adc7a76c69ea114fc0f2e963078471863c00dd8f98e9b73ccac38413b87d304c3ce785a1436ba162feac5e376075528a1944a300d33c0749fc7b304307a4edafcf116b8a1c72bf5b0bbd19a4dcb54f9aedb512682d6e73b2babaa373e5290457daef31fc4e5c81e8e5b1f4190300a95cf58f5bb21084667bb57aa4b78053596a3db60c2c38bd31f9a632e618955219381cb7cc731c6dedb02e25c455a1923403fd4ac48438fe8cdb8e9aab1857d811a7fc1c0e9fee2cfb400c358ed5251f22b0b67575c897208c6ac3f4250f3f92d91c69ebebacb3809333550f7826759b93ca7450b7eefeddeb8ce3c6914f2348b3c1e4512146adb538b9764cd73203c84f3d2a3262de4d2a06321cf7d5b3be0a0bab84f4f162c49be2d4ff4c3bb7b4500ed1e3b517fb6c530cb019e058239f96912e1f325bd9116a88419be2b6b9871edacf77da03bb35ec0e8bd2b291aa62aafd7db23eed68a70a2d494d0e89e706e0e22ec6fb7c58f001858af5792df27308b070b4be0e25e1c1c4a5a7036715934cc04fa43a5ea5fcae29e913929d338530814227313dc93302515728635224824f48ea15ac463ff4cf3dfcac414c158303926dcb34f717ea1dff6307448bd9d78ebcf35f817e272b0205f6b5b0e40f2eaeb28ce6d3c6622cc100b595481375b6b5f1d78483195b4248e68216c297bc222a5583944144e06224eb2269eceeb9d49cba884c5ce56593c35a6bd2aad5d9f2feb31450680680e60e35977adc50b15504800595f58f41db6dd128fff04bbc9230af37cf0500e8339f9d81eb14a0dbf04497ee414fca2a664088c67289734eeb2f0a345cd8f97eebd4331124c5e0d16d89b0aa4559aa5753b85aee3c3671916b77661e2fa38b1442a83d504d7a8de66fa454ed573a5f51918324c351063bc78ae5d6da93473b32e204f8256544d6a4d872e0515392bc593bf35e5d1442072fd9d1e935a0281474ae6781f7b650b5323e875a6c5cfd3045736c05e414fb5d8ed980ebb282bb338fab927dbb705a6864638719f042f200fe1f5dbba7e87b60a9c8cfed0d8e50f736c82ff814a7da18384f572d53ce58c57cdeef007abc15044591e544b6a45bfcd4918f0367a0617ffaf915af698ac6319ea07378f88ba0ec8f432e21eaf080a242c26fa027377816c15825fb248887f4ffc51f2b81477d64c423a4067b40639577e09ffafe1249bc77173b6c3467bfb746a8f1064f08f9799edc7934359f36bb6ff2368d5a3a78ed25e17a494ad4479ef8674f595730a59e2c7d01d2741fb31371bc19c5bfa508bfc2e664b54eb49603701ef08fcad8f6ef384fd5f0939040fb6364693cab6b9d290e0fbb00af311c81057534f27770e442283aeff80f2a6a2312073811ade87c11f1da9acf8fece061303ed47b914e0e8eee95e5ca40217fbc340170b5e40b3a9fe3f810ba03b9d590ec06052ca555f4f09b3ce1c4f987c570af99de5308bf48eedcd44ed8a337238227d69785b9188470ada9aca1953d50285d60a0290d419f15a2443506a56e0adbe48aa8f1b7e9ce3439ebaea98f65cc675724b041956d36363861de2c53d725c8293b3a0acca8e723af75ca50bd9d6e3f9d54dd89812c58abcfa35c7fca2b2e7897dcc45e8c4a8634805691b11950d42fd29705d0446cd1818e7114ef14c3e9de7ab144df37481957aaf1f0991226ae14ef445202b390b8c75dc1ff8036ec3a974f1cbe5779e2dc2f958575da2f53bc31c3aeb3843ff1fdcbb2cc8fdc50498abcb5952bfb63b323449bd7b17463d62713433437fae0d624b2666175371dd3ded8f8275fcdc926126979b4e1465a2bce493f5487fde3f60a262f23974e20f7b80ae31c9fc268031cd6c85cbf005b5f6bb22db95452f61380e9d435c29ce4883e4f47bb1b481189a148de72324295f66641a41483bd999201078490190177e82a494646242afeaa727bc81ea594d1aed3fa5ab83ea1ab2e27e21cc42433da84ce0ce011cdd6152118e8effec4476f4acd703b067deb960461488da551b53aa044d4f4f1c38618c2d095a432778f30775861be19ab42f28104906ee65e2400d1ddf5bde14ba10bad0957a4d6f6351f6da8aa8a85a91892f1cf021010cfbfae76f2b49812070ab5e58f2a48b39f03fc035dfb78ce5aeba16c73e62a008cff29fada983134c301d2d7c65c023c5209c75dce423c61640b396750207835b4917777acd4bf7446fe6dc73833611e1ba6798b1bca121c2d4dabe5150eb1622c4eed3cc09cf10235e6a004a16f7eb90002be64447250b87000534c298440ee2c35fc6a875247a94128128d829d44665413893d58dae3249a2ce946994f5016f749ccf431fbd1f13ef8b92f9fd58bc866ba712bad2c6c813adb17b437ba2d24046ab57a26b2fae3f735d565399a343c4fe11a06079bf8a53359f44ff809f7825fca675640819cf92378ebdaa4b40539361cc16f117b4a9a6acccd6459d9fb0055c0604ee63f874ee4366319254f59a1c1e80f83a6c54c9ee34c7687661e9b5ca3b3c6e6e1d7adbdae9233bac31ed81b999e26d70fc9dd833777928b9f231e01bd88f502f51d5efbb9dded1697e6a6ee0fe4e534a8708272f986f06b92ebfff0fb6bf00448d0603d189101cf29b0e563d68f25144f04d028fc16bdc5b708d0f4f01dd69c3d3d9ab0863a2666b5a23922348660cab4c6a6cea6241f1db4b2c0dbb5750b41483cf682e70230061d61ab101752a838a75eb52643340b3a18730b4d654a43af7af5e788c94c64b9fc152c5f679a601bbbcac77ea190c7d76cbd2b4d3ec7c945504de21dd0320467cbc1279c1730793b509b3adb9bcea713bdc1782a6d10a1907bf28c177180eee64c49d7bf48c50b2ebe2145053a7b3ac561b3f5aa57fb8854589bb71024fc0f471c0b5112ecd32b1f48a0f058ffa113384a3204373f9a7004ccccab282542259ce343fa1537ddf69dac7fa307144bcebd18a7f675aebe5bd8e840828a7dae6c7f95da9f9ef3f76f4dffc09fbb28b9fd74b554b07263008900ad8138942acfed8322b94422fdb77ba4de7a9effbbbfa177862ed7edb4acfd0d9f743beccd14eb575016d0dc822e01260c5a5824d092e74515cfc3d75f048e68d49861eb0ce439adaa972d0c5023af8721caad57881d988d3e3d0458946304e76d037308a7b41e4a74b0248061c704211f33717c4aba799db61bd81fe5e425aa37218c78d355fe46e9488adfe5de3c4ebce873c7f2883425a0796ddc29fd3f32e0b9053d3a10e0745f96ef458b710290ef5040eb6a184b0850138eb0dd54296ba1e49914d1eb7bb8ec506b3b530109827f176615f4f3a77e75de4450d6972bdcdd33ce883e7764f40c7149b85dbd41019e35df66d7f335d29d31374252bade5124ad7d4d4d5c73c1938d6f4a1089d798ca8a04700cbc5a8da740bb01abf2ba70c23d7558dda8d6385d2c1de7d29ae0a57d21e63473bd7f7e435006cc48733249f66c9771b5d16111f6fa339a678419de6ca5c05d01c9a9f0b57a8b1e2926c0ecc5bc7b3491af834e30775f39dff52eb9ae14d11a2cc6d1d3fc358cd9f56c094c5d16b6597f7bc097ff612bef718d1ccc09ec47d0addf9017baf596ef2a288db643a3713c135741313bcdd9d4768a18fbfca837a7ce01e74d328be32d0c55b652ddd16e101d6e7f16c978b0a6e1578f7906dbc035e378fe3879657bd84cf49285740c2ed796e2d9f4c74c9e8c15e1c5eafe23390903793cc6a8021ca1b4e5119a9c55450362e63a52deef4324167dd926f115057dee6195bef398c5afe4808da46575b22ab331583dd0a155f2dea29066f0664589a3ac65eee053a2cba52d72c9e600ac64e2df3d1559e2eefac4b7c0320a9528c02ab3461665a76c969af185c75fa53aea2def4dcbaafa9d88d6a4cb9f6664bb36f43326097d086514e5dd03cd2de9019f2e181e22e9cd120e08f79215a7b63a86eb66c0d566c3398af400f6f0656bd854b5e78d3aafe701e713d9b0af81f1faf959ace5806f40266d387b7286fe70b0de5bed4c5cfe560b45f51176d6864f4eb8ca960c3631a197958a0602c79b9354938be2bfe781044560b688434e6ee7d32160ca087a6e3529c88a5514a6a304607319e3ed9c5c9848a812b67601ebdc40b01cadee8b666c9f21783fe97b0b8b29d7686a19820e5fd318b1ee030dbbcc8ba71d5ab0cd1c15f12c8a0a7f6d9abfef830108a172602a0cff89e72e10fec566845718b2db46912541b5a209e5df87e3751c9e75daa4d5f17d2072895051641546a7887cf40c65fc497b90158edcdbbc98deca6c84369aef37aec68380ef141d745cae966172f0995a813b4089823e27f0584c77b7d0995ea10f0edf629625c8d91e5ed842b53a062a0ed3c5756cfc268ba9ddfa15f7cf7905636634209bd08bdda52dc048928a3001b1fe5ed4ec3ca8cd338b2d0b985d910923a6d30bb4e26402731bfa79dc18f36f88443e87f1df24e679a2fc4447470a9f52a351104edbab2f750031202840c555fdc90953d359ed5d1e9cc3b8031613817808b9f056cbc10c5067a393e78a371f0d43737719eaa3218af74e771abaa1070e50f47d90d3c8f2fc3ecf49757dcbc0e59b81ca6644c9c96a926b90ca8ab53bbe8fc9fafae505d2d7b15d68726984d6fead17eec5048ec978ffc64d966258dbeb0bf706f421655f4443b94cd8d8669464208f69819c7800549ac4f04461ea5e12426d4a1faaff52a49e63dd5f3d30f99295d53e07d010f6c86b2a823d53c3dccfd9722cd927321abfd0e6771d5de35fe26634620a9c70b9f5c34faa15a49938f84413058a27c29433f46194cfd2e7860a199738768c3719e90055a961de00064839f4c079ecd87e925e226b846db5421bc4294f81ffba071cc15d2f763485bb6674a090a32112b8f42bd2f5599bac9d877acf5584ab5f4cee0f4e25972ceaeea75191e15fec0c04ec9271bcad44822b5d22f69782f147e2d6eada2be1bd25de765b9d6ca7a6f4e576591dd2fd6aac2e7ba80ad48623bd6e3df1346cc7458235c401bbd3ba51abac2328cde262888ee3e56a7991c6e3a56668e5b51977e4d8f07b93318e2fe820d01906750b8169a2a0001b274dd203201bf0197908b250ba506b1ce527a21d16b87e456036e83a9c3e6de5684f0795c011e42b541d120d94912565e724762711cc688c24c29aaffe1b7339cd9644b2181be1abac322e2d73f795e97b2d5e3f665578c1430be367090eda0eae60bd9f78825b8d741a3afe7318a94fe5c5200cdc5f34dd0aefbaa73537b9c4488dcc4cee454322376a52eba4cf445a868338e8add267e8882b3d8b9c7333e6d883c083d385a7e9d7b904b7e3d5ceae3245732e20bce3070a036ca71223a880af70c594041381391120e810eb25363499609f472f0dd5e0851cf6ff6490793778d4bd5e7335a372a0e89d04909c33d9e80a658fd6a1a4372f2a9743a4bd8bfc5d97d2f9b18b6284963f9636a4612fc9152233d7d5f7cd4d82eb723726b8fe830aaa2b31e68fb74492f7994115884a64ec5d706df504549d782df678a1f9b2b5cf68c0ef2865672d7c6824850d105de183ed404304bdb944890b6f5e26058c6b2783fe6f352ec0a244805ea644d9e84d3a8788efb93752420492771e5d567eddb2ef6190c5d1228487209353df2e7bcdcad3b58fe1223aa5b6063c3a72afe8dc92fd106f0196d3bd91e9093d92e5ac28a65170990166e4c955", 0xffc, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={r4, 0xb, &(0x7f00000000c0)=""/11}) openat$audio(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f00000001c0)=""/122, 0x7a) r8 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r8) keyctl$link(0x8, r8, r9) 6.487913788s ago: executing program 1 (id=2589): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3d18cb791311977c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0xffffffffffffffe0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x682}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480d4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x233}, 0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020601080000000000000000020000000c00078008001240002400000500010006000000050005000a00000005000400000000000c000300686173683a6970000900020073797a32"], 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) accept$alg(r5, 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xc6943) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r9, 0xc00464c9, &(0x7f0000000140)={r10}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000800)={r10}) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) 6.412336503s ago: executing program 3 (id=2590): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = fanotify_init(0x202, 0x101000) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup2(r5, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2, [], [{{0x9, 0x5, 0x8a, 0x13, 0x8, 0x3, 0x7, 0xdb}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_RELEASE_PORT(r8, 0x80045519, &(0x7f00000001c0)=0x5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) 6.028744471s ago: executing program 0 (id=2591): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) request_key(0x0, &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000580)='^\x00', 0xfffffffffffffffb) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r2, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1eace2d0fb0a010000000000000000030001000000008000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x400004]}}) r4 = memfd_create(&(0x7f00000002c0)='{#\'\x00', 0x1) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000300)={r4, 0x1, 0x2000, 0x1000000}) keyctl$setperm(0x5, r1, 0x2040200) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x195) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643da111da7a6bb9b53082243a000000006ce09c883a43036a9a04f3007f3b8e2c18db1e615c15ee9b957e0bd1d5ef1ec21449d94ed827b3e899aa5ced8e52628cd9989c88d4a8116d5bf58eddd8c5c76f6f0823cb65704bfb1d86d9714a81c7fd1f83b109119417d80ae4466e5def8dfd3b7165bc436447c7cdedb50170af99d95b60290ddc144e5ab810c8ceb7", @ANYRES64=r7, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) umount2(&(0x7f0000000180)='./file0/file0/file0/file0/file0\x00', 0x1) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) chdir(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00') syz_fuse_handle_req(r7, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0xffffffffffffff1b, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) 4.498350211s ago: executing program 2 (id=2592): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001300)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, 0x0) 4.494017214s ago: executing program 1 (id=2593): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) recvfrom(r0, &(0x7f00000000c0)=""/226, 0xe2, 0x20, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x2, 0x0, 0x4, {0xa, 0x4e24, 0x5, @local, 0x3}}}, 0x80) 4.348254521s ago: executing program 4 (id=2594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000003c0), 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x3c, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x7}}}]}, 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000300)=@x86={0x3, 0x6, 0x80, 0x0, 0x0, 0x2, 0x2, 0xfc, 0xfd, 0x12, 0xfe, 0x0, 0x0, 0x4004, 0xa, 0x0, 0x0, 0x0, 0x9, '\x00', 0x4, 0x8000000000002}) getsockopt$netlink(r8, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.578636289s ago: executing program 1 (id=2595): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x800011e, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x1a4, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x154, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0xc4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x4}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1a4}}, 0x0) 3.218360039s ago: executing program 3 (id=2596): r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000, {r4}}, 0x20) r5 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000008) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000200)=@newqdisc={0x140, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x114, 0x2, [@TCA_RED_STAB={0xff81, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x8}}]}}]}, 0x140}}, 0x8000) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000500)={0x0, 0x30, 0x5, "3e961d3e53"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) splice(r7, &(0x7f00000000c0)=0x10000, r2, &(0x7f0000000100)=0x3, 0x6, 0x8) 2.812373162s ago: executing program 0 (id=2597): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB='/\x00'], 0x20) 2.767601938s ago: executing program 0 (id=2598): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x60, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0xe7, 0x1, 0x0}, &(0x7f00000064c0)=0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x450, 0xffffffff, 0xffffffff, 0x450, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x350, 0x380, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x0, 0x81, 0x1, 0xfffffff7, 0x5, 0x6, 0x0, 0x40, 0x40}, {0x3}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x40, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x580) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x12}) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@private1}, &(0x7f00000002c0)=0xfffffffffffffe4f) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000440)={0x8000000000000000, 0x50a0c164, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 2.493435874s ago: executing program 2 (id=2599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014c7"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 2.332127889s ago: executing program 2 (id=2600): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8f62, 0x26243) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x2f0, 0xf8, 0xfeffffff, 0x2f0, 0x220, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r3 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x60603) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000540)="9edf55168046", 0x0, 0x0, 0x12, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001640)=ANY=[@ANYBLOB="020805000800000029bd7000fddbdf2502700007a64a84bc92d633ee0004d3068a8e010000002002000100000004e408773502000000e09870e9f8f260e8f8c8c8dc36af2c4d64e2417880fe436c3068a4c7a1c8688da3f56e0b12701b919bf6c2d13a9d314642361558e8006082f5d1950afbb964d66b6d771b0b06797ad13b901f9ba7f9020d41e92e011408d89276de2e61e1e4d7bf5506cd7d213a2e913a65a4b551ce823c8a862e901778d703a6a90fbe132be7e78429777442e91d4a44350452b6190767e20c6a96"], 0x40}}, 0x80000d4) fcntl$setlease(r5, 0x400, 0x1) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f00000003c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000640)="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", 0xffc, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={r4, 0xb, &(0x7f00000000c0)=""/11}) openat$audio(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f00000001c0)=""/122, 0x7a) r8 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r8) keyctl$link(0x8, r8, r9) 2.241713075s ago: executing program 2 (id=2601): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000640)={@ipv4={'\x00', '\xff\xff', @remote}, @private0, @empty, 0x40000, 0x40, 0x5, 0x100, 0x4, 0x40180243}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$vbi(0x0, 0x1, 0x2) syz_emit_ethernet(0x46, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x640101b8, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private=0xa010100, @local}, "a815a23da43974ff"}}}}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205649, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x101, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x5}}) recvmmsg(r0, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001700)=""/217, 0xdc}, {0x0}], 0x1}, 0x4}], 0x1, 0x600100a2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000c4b000/0x1000)=nil, 0x1000, 0x0, 0x20010, r4, 0x41995000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$sock(r4, &(0x7f0000000140)={&(0x7f00000002c0)=@can={0x1d, r8}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)="1a19e87f4f9e0c0285df4807f084a352758f2337bd25cf7769b90fd1bf8e3f297ab28bfc0f6c2129f8e2ab987c6e2b9765e817129f3f2707417129291be75f4a62ab64d4bdb79d2a1df19de774d646d9d3de06ea0c7a46886baecde3735b3c8acc8d0069e230f60a9033c876ca0613ac37e95b91734bb50c621dded56f030f7a5ee5b2d9bbf674f516c3d33edf3657870901992828243ecd2ee526491051df7772fcf0d400f1357e70fb0c9fbbcd5962b6b1d80b84efa987338be87d15e1791d2f473aaa561fad2e1d179e93a2a105e629749f49375b23f5bcd7a23b78", 0xdd}, {&(0x7f0000000440)="9330dc78576e02046f2a174da8b279109881e7fc8ea5d6e4a2857a22c713928b65600d81b1a55e70876989a0fb08873ac50c056740e13584d31700ab18881a965dc19d6793179b370c98def258beff6ada8302965a8fe0cc2dd6a7deeadb591cddaa89ecb4e04577e5b9610772e1710361db5a5bf9d748377145fcfb9246791dcd2757432bcc0a105902f3c11cd01740f0f60821b3a02944df8bce924f2de7108b97fc22221fde923f", 0xa9}, {&(0x7f0000000500)="b027fa367c66f5b30a127a508c0e7461f005b3be5b3d6ceccfc6f59c6a10710cd1882218e4f0286bb18609bc84be1e4c414b58585d5d1354078878209280f9b545a938fd1b38c6977bfda95744071fc004eaf326ab", 0x55}, {&(0x7f00000006c0)="0619310af8f08d0825cf9a19c6462c6ca4b2b9e97157f114000538dceec5c8004429ea619f055e02575d6448a17083aae13f82b28a5812626371d5ff78a060e1527a9a696e043f3a1a8f55722f169df8105469e45b041b40629dc02decde03571e72e555d9d3cab6e03c55ad01ffd77fed65dd4469ee77cb66e4be8c1c495aaaf905dacd17b94dec7f3698efacf05e1569fa4474c969d3b3505cfa91f27bf2188ed4c921278a234b007bc54cf9a3a99b6249271f03694e673d10725de2e03a", 0xbf}, {&(0x7f0000000780)="3c97412af5e83837df869c62287967164f604b38f4e4680d12eea5e4590b9ca79099ef4d34e85254f78f41b8ef879fbc94db3d705569b8552497e3cd12828eeff2c01a1745fff65b71fd2745feace445e65fef1e399e5a05470c16b71a2d5dd9302ae47ef7ace25967ee8dc7d14df0eeb01eec878373e3d17b9490dc1adaca8e6ea0c928ebb4046957ff7418ea983c766f57401140b8f6e939e8a20b8ef4661259d90f7252c3f3", 0xa7}], 0x5}, 0x0) io_setup(0x8, &(0x7f00000001c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0xe87e5798cf664865, 0x0) 2.150508642s ago: executing program 1 (id=2602): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newsa={0x1c4, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x89, 0x1, {{'md5\x00'}, 0x208, "fd2f480f2e2ebb04183ebcaed78f40b20e8473b935f6cf6f3d2c402e34b339e1b0cd2b29cd33e8f258cf85e6c1348f664a094fe82198b2247fe438734b6b8a3542"}}]}, 0x1c4}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg(r8, &(0x7f00000014c0)={&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x1, 0x4, 0x4, {0xa, 0x4e23, 0x9f22, @remote, 0x5}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001b80)="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", 0x1000}, {&(0x7f00000010c0)="4b561ee26e1ff16618c49f8a0155c8cbc14b821a1110d2", 0x17}, {&(0x7f0000001100)="bc9341b9f8ea2fa79d9ba29a048a0faaa520d20326a2a4954b967f7b56baaedc9fe5653d6c9adeda3825bbbe0273fca141fc2018e1b4a8bd1c437c7f869976f145b8c1fbdba7f5d643b0687c59654353cf39c960360386344a75bc436cc3b4294bd69ba03b39bf59a1eea02013f05204e6bec26831fe172cab531fc632f7f9c235", 0x81}, {&(0x7f00000011c0)="5f02eac11a1585981a2e5fa6ed9becfe91325c6692f72c14da23804864107706f18961b9032ad2d7ee589c5f55aca0ab51b15094be0d47b459cbf718287daca101adbf1feee5b5625fd45fa6139075004567ebbbc71883a16db68efa340a96d4ab25b8c40be6ea2c46da9e2b35a53454ec212d759f4622", 0x77}, {&(0x7f0000001240)="d7301b1e", 0x4}, {&(0x7f0000001280)="1337c070ecef5a", 0x7}, {&(0x7f00000012c0)="79c23b68e7339a841c47c628574ee9aae21fa9c7b1cf71e406e8d47e22c6acd928a67ad450a9b6dc010d5737fdadfb70a774f043d8ef9cc54933a14b7de7fe2a67a6523c17930998a4b9b0661144aafacc1841d014d27b1895d1f2e9918e11d19201a9234e0f975e27377e1af5d714b6efaa224a926121d058c8f106edae22", 0x7f}, {&(0x7f0000001340)="d68bd8fcd2f9d41bd55f76744cd7b142b39b975699a9344ee889cc3582fea863b87b2f3db6c4ae3668ff0f81480ab236b67a9e60f149ba9cbd51ce8b476999a98538c7a5a158c2f6f6c794fcb039dccf745f15918b916e9d2fdae09ef5395fa44b1087db1ba6ff257d788f78abe8018b3204934f0e746884524b1350fb122e09655f630d17dcba91c366fcbca1b07396209f6ebe74462fd9915ab3db8cf224ae5878fdd8ead934f190ea13a5f82d26baa8b37a68f50cfbe47b772863c6c00f317546", 0xc2}], 0x8}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.168100849s ago: executing program 4 (id=2603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="480021000906010800000000000020000200feff0900020073797a310000000008000940000004390500010007000000100008800c00078008"], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 884.230545ms ago: executing program 4 (id=2604): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000080)={0x8, 0xe}) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c0002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 32) 838.607647ms ago: executing program 0 (id=2605): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d0000000100000000000000140000000000000010"], 0x30}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x2f126000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9e46, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000200001002bbd700000ff00000a108000000000080400010014000200fc020000000000000000000000000000140001002001"], 0x44}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0xa, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 590.868075ms ago: executing program 1 (id=2606): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = fanotify_init(0x202, 0x101000) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup2(r5, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2, [], [{{0x9, 0x5, 0x8a, 0x13, 0x8, 0x3, 0x7, 0xdb}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_RELEASE_PORT(r8, 0x80045519, &(0x7f00000001c0)=0x5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) 496.298738ms ago: executing program 3 (id=2607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40281, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000800ff9d0f00"], 0xffbf) 420.839824ms ago: executing program 4 (id=2608): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB='/\x00'], 0x20) 239.066767ms ago: executing program 4 (id=2609): shutdown(0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000009100)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000009340)=""/208, 0xd0}, {&(0x7f0000000400)=""/169, 0xa9}], 0x2, &(0x7f00000005c0)=""/202, 0xca}}, {{&(0x7f00000006c0)=@un=@abs, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000740)=""/175, 0xaf}, {&(0x7f0000000800)=""/175, 0xaf}, {&(0x7f00000008c0)=""/10, 0xa}, {&(0x7f0000000900)=""/46, 0x2e}, {&(0x7f0000000940)=""/249, 0xf9}, {&(0x7f0000000a40)=""/199, 0xc7}, {&(0x7f0000000b40)=""/184, 0xb8}, {&(0x7f0000000c00)=""/4, 0x4}], 0x8, &(0x7f0000000cc0)=""/82, 0x52}, 0x2000000}, {{&(0x7f0000000d40)=@nfc_llcp, 0x80, &(0x7f0000001380)=[{&(0x7f0000000dc0)=""/30, 0x1e}, {&(0x7f0000000e00)=""/219, 0xdb}, {&(0x7f0000000f00)=""/75, 0x4b}, {&(0x7f0000000f80)=""/71, 0x47}, {&(0x7f0000001000)=""/21, 0x15}, {&(0x7f0000001040)=""/211, 0xd3}, {&(0x7f0000001140)}, {&(0x7f0000001180)=""/166, 0xa6}, {&(0x7f0000001240)=""/109, 0x6d}, {&(0x7f00000012c0)=""/138, 0x8a}], 0xa, &(0x7f0000001440)=""/235, 0xeb}, 0x1}, {{&(0x7f0000001540)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002840)=[{&(0x7f00000015c0)=""/92, 0x5c}, {&(0x7f0000001640)=""/187, 0xbb}, {&(0x7f0000001700)=""/187, 0xbb}, {&(0x7f00000017c0)=""/92, 0x5c}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x5, &(0x7f00000028c0)=""/203, 0xcb}, 0x2}, {{&(0x7f00000029c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000002a40)=""/36, 0x24}, {&(0x7f0000002a80)=""/131, 0x83}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/197, 0xc5}, {&(0x7f0000003c40)=""/66, 0x42}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000005d40)=""/4096, 0x1000}, 0xed1}, {{0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000006d40)=""/205, 0xfffffffffffffdaa}, {&(0x7f0000006e40)=""/246, 0xf6}, {&(0x7f0000006f40)=""/138, 0x8a}, {&(0x7f0000007000)=""/217, 0xd9}, {&(0x7f0000007100)=""/52, 0x34}, {&(0x7f0000007140)=""/230, 0xe6}, {&(0x7f0000007240)=""/217, 0xd9}, {&(0x7f0000007340)=""/99, 0x63}], 0x8, &(0x7f0000007440)=""/43, 0x2b}, 0x9}, {{&(0x7f0000007480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000007980)=[{&(0x7f0000007500)}, {&(0x7f0000007540)=""/193, 0xc1}, {&(0x7f0000007640)=""/193, 0xc1}, {&(0x7f0000007740)=""/81, 0x51}, {&(0x7f00000077c0)=""/59, 0x3b}, {&(0x7f0000007800)=""/166, 0xa6}, {&(0x7f00000078c0)=""/143, 0x8f}], 0x7, &(0x7f0000007a00)=""/128, 0x80}, 0x8c}, {{&(0x7f0000007a80), 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007b00)=""/182, 0xb6}], 0x1, &(0x7f0000007c00)=""/137, 0x89}, 0x6}, {{&(0x7f0000007cc0)=@nl=@unspec, 0x80, &(0x7f0000008f80)=[{&(0x7f0000007d40)=""/190, 0xbe}, {&(0x7f0000007e00)=""/16, 0x10}, {&(0x7f0000007e40)=""/14, 0xe}, {&(0x7f0000007e80)=""/47, 0x2f}, {&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000008ec0)=""/69, 0x45}, {&(0x7f0000008f40)=""/48, 0x30}], 0x7, &(0x7f0000009000)=""/250, 0xfa}, 0xcc5}], 0x9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x4, 0x101d00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x10, 0x22, 0xe4}]}, 0x10) close(r3) sendmsg$nl_netfilter(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) sched_getattr(r7, &(0x7f0000000140)={0x38}, 0x38, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x80, r8, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18ed}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x39}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x91}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={0x0, r9}, 0x18) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c060000", @ANYRES16=0x0, @ANYBLOB="01000000000000000000170000000800068004000500"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 164.245102ms ago: executing program 2 (id=2610): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x8e, 0x384, 0x1000, 0x0, 0x18, 0x2, {}, {0x3}, {0xf4ef}, {0xffffffff, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}) 111.453356ms ago: executing program 0 (id=2611): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (fail_nth: 16) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 48.759504ms ago: executing program 2 (id=2612): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00') unshare(0x2040400) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x6, 0x0, 0xf, 0x0, 0xffffffffffffff01, 0x40000}) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0487c2000000000001090224000100000000090400000103000000092100ddff002253c9fcf3f20d2b224ee3fa4e6de8e8d257457cb68c046d"], 0x0) unshare(0x20040200) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220b00000083881c7c752b000000002840bcc1790d0a3d318e81be15ff1e0ea3b675870462c799c1b56696ee1bd942e5024991e01d13b2fcf5ac9ce1c2fa37ddd857ccfcefefad8ffd87d18808c8726dbb665984ed"], 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0xd400) 0s ago: executing program 3 (id=2613): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x97, 0xb206, &(0x7f0000006680)) r1 = inotify_init1(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7fffffffffffffff, &(0x7f0000000000)) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0xa4000061) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x20, 0xb, 0x63, {0x63, 0xe, "b4cd18263ac1a00c0542668d87660369a6488d636d04e7bf6039960c5df8985af746021715d4a5b8250f56202b30639316979090c59ed83f0e99217bfabee307c46beed7253faa5ebf88923381a96166a8b5434ff8413bb2152a484a5d28887921"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000000340)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xa, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "b55e1423ab30a509de4de5549c46392d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x0, 0x5, 0x1, 0xb9}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "5f3f9b5b5d748157c37195526e7d3f91"}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "2db1078ddc7db2fa1ed5b3ba68440598"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x2, 0x5, 0x3, "66b1f6bf", "dacdc151"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x8, 0x9, 0x2, 0x8, 0x2}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000640)={0x0, 0x27, 0xac, "7edf2f965bae9609c2852b939ddb018f9485ef24e47ce5ed59b1e1fe3cf93a43e99d77ba7d83489ff5d7c18e58e941ab79553b57966ec59dad1220513548ecee8f6b4ec2c9a39c09afdda258b2c062d88c2940f171389394f22d53013ae384012d2ef6a76237434811e167867492102f821908a7b25428a9f2eb472fac0f75fcc1afa6987d2d874c00b4e4e8a8e175a5f9c9f9812db9a887c702e864d781caf000f5cdb40669e06b4c123721"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x60}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x2, 0x8, [0xf]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0xa29}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, "851d"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000800)={0x40, 0x13, 0x6, @random="da5f2b49cd33"}, &(0x7f0000000840)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000880)={0x40, 0x19, 0x2, "fc5f"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0xee8a}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x73}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x68}}) r2 = socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r2) r3 = socket$l2tp6(0xa, 0x2, 0x73) close_range(0xffffffffffffffff, r1, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000300), 0x83f, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r4, 0x0, &(0x7f0000000200)=""/35}, 0x20) sendmsg(r3, &(0x7f0000000600)={&(0x7f0000000040)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @null, @default]}, 0x80, 0x0}, 0x80) kernel console output (not intermixed with test programs): _ep_enable returned -22 [ 849.916021][ T5880] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 850.068155][ T5880] usb 2-1: unable to get BOS descriptor or descriptor too short [ 850.153695][ T5880] usb 2-1: not running at top speed; connect to a high speed hub [ 850.209141][ T5880] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 850.229397][ T5880] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 850.260589][ T5880] usb 2-1: config 4 has no interface number 0 [ 850.272981][ T5880] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 850.300451][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.320999][ T5880] usb 2-1: Product: syz [ 850.325618][ T5880] usb 2-1: Manufacturer: syz [ 850.336069][ T5880] usb 2-1: SerialNumber: syz [ 850.585554][ T5880] usb 2-1: USB disconnect, device number 122 [ 850.645990][ T5879] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 850.818221][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.853157][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.893512][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 850.942990][ T5879] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 850.981998][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.023038][ T5879] usb 3-1: config 0 descriptor?? [ 851.028220][T10286] hackrf 4-1:4.77: usb_control_msg() failed -71 request 0e [ 851.047801][T10286] hackrf 4-1:4.77: Could not detect board [ 851.067032][T10286] hackrf 4-1:4.77: probe with driver hackrf failed with error -71 [ 851.107369][T15755] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2284'. [ 851.166555][T10286] usb 4-1: USB disconnect, device number 118 [ 851.465742][T15765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2285'. [ 851.478134][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2285'. [ 851.487521][ T5879] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 851.530155][ T5879] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 851.630639][ T5879] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 852.246856][T15765] tipc: New replicast peer: 10.1.1.0 [ 852.289260][T15781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'. [ 853.132161][T10286] usb 3-1: USB disconnect, device number 116 [ 853.256567][ T5879] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 853.374596][T15792] kernel profiling enabled (shift: 63) [ 853.415915][T15792] profiling shift: 63 too large [ 853.505943][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 853.516749][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.586772][ T5879] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 853.605900][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.613943][ T5879] usb 4-1: Product: syz [ 853.676168][ T5879] usb 4-1: Manufacturer: syz [ 853.701133][ T5879] usb 4-1: SerialNumber: syz [ 853.743226][ T5879] usb 4-1: config 0 descriptor?? [ 853.758484][ T5879] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 853.780373][ T5879] sr9700 4-1:0.0: probe with driver sr9700 failed with error -22 [ 853.988619][ T24] usb 4-1: USB disconnect, device number 119 [ 854.166214][ T5879] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 854.346100][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 854.360868][ T5879] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 854.380103][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.408906][ T5879] usb 2-1: Product: syz [ 854.433500][ T5879] usb 2-1: Manufacturer: syz [ 854.445786][ T5879] usb 2-1: SerialNumber: syz [ 854.483137][ T5879] usb 2-1: config 0 descriptor?? [ 854.499435][ T5879] gspca_main: se401-2.14.0 probing 047d:5003 [ 854.602665][T15819] fuse: Bad value for 'fd' [ 854.845985][ T977] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 854.901746][ T5879] gspca_se401: Frame size: 80x0 bayer [ 854.996002][ T977] usb 4-1: device descriptor read/64, error -71 [ 855.249984][ T977] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 855.370752][ T5879] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input136 [ 855.415531][ T977] usb 4-1: device descriptor read/64, error -71 [ 855.425618][ T5879] usb 2-1: USB disconnect, device number 123 [ 855.518067][T13422] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 855.561258][ T977] usb usb4-port1: attempt power cycle [ 855.716255][T13422] usb 5-1: device descriptor read/64, error -71 [ 855.936002][ T977] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 855.966352][T13422] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 855.997055][ T977] usb 4-1: device descriptor read/8, error -71 [ 856.046111][ T5879] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 856.129240][T13422] usb 5-1: device descriptor read/64, error -71 [ 856.218096][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.240673][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 856.259538][T13422] usb usb5-port1: attempt power cycle [ 856.267178][ T977] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 856.284751][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 856.323658][ T977] usb 4-1: device descriptor read/8, error -71 [ 856.337457][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 856.378518][ T5879] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 856.396364][ T5879] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 856.405057][ T5879] usb 2-1: Manufacturer: syz [ 856.415670][ T5879] usb 2-1: config 0 descriptor?? [ 856.467114][ T977] usb usb4-port1: unable to enumerate USB device [ 856.626200][T13422] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 856.648752][T13422] usb 5-1: device descriptor read/8, error -71 [ 856.895970][T13422] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 856.927147][T13422] usb 5-1: device descriptor read/8, error -71 [ 857.036504][T13422] usb usb5-port1: unable to enumerate USB device [ 857.102958][T15841] tipc: Enabling of bearer rejected, already enabled [ 857.334010][T15844] loop8: detected capacity change from 0 to 7 [ 857.344309][T15844] Dev loop8: unable to read RDB block 7 [ 857.351463][T15844] loop8: AHDI p1 p3 p4 [ 857.359101][T15844] loop8: partition table partially beyond EOD, truncated [ 857.367694][T15844] loop8: p1 start 975770946 is beyond EOD, truncated [ 857.374566][T15844] loop8: p3 start 6514546 is beyond EOD, truncated [ 858.175973][T13422] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 858.344938][T13422] usb 4-1: Using ep0 maxpacket: 8 [ 858.368988][T13422] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 858.381195][ T30] audit: type=1326 audit(1749073574.993:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15851 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 858.411945][T15860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 858.429781][T13422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.441482][T13422] usb 4-1: Product: syz [ 858.446086][T13422] usb 4-1: Manufacturer: syz [ 858.453121][T13422] usb 4-1: SerialNumber: syz [ 858.461192][ T30] audit: type=1326 audit(1749073574.993:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15851 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 858.496277][T13422] usb 4-1: config 0 descriptor?? [ 858.548559][ T30] audit: type=1326 audit(1749073574.993:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15851 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 858.616641][ T30] audit: type=1326 audit(1749073574.993:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15851 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 858.716361][ T30] audit: type=1326 audit(1749073574.993:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15851 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 858.772331][ T977] usb 2-1: USB disconnect, device number 124 [ 858.782464][T13422] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 858.952674][ T30] audit: type=1326 audit(1749073575.003:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15851 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 859.001493][ T30] audit: type=1326 audit(1749073575.003:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15851 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 859.050774][ T30] audit: type=1326 audit(1749073575.003:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15851 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 859.085681][ T30] audit: type=1326 audit(1749073575.453:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15851 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 859.116524][ T30] audit: type=1326 audit(1749073575.453:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15851 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 859.286125][ T24] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 859.294026][ T977] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 859.437819][ T24] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 859.453262][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 859.483123][ T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 859.494739][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.517581][ T24] usb 2-1: Product: syz [ 859.523447][ T24] usb 2-1: Manufacturer: syz [ 859.536865][ T24] usb 2-1: SerialNumber: syz [ 859.569518][ T24] usb 2-1: config 0 descriptor?? [ 859.583358][ T977] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 859.597390][ T977] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 859.606935][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.659156][ T977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 859.789536][ T977] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 859.873956][T15872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2318'. [ 860.406501][T15880] Unknown options in mask 5 [ 860.415406][T15880] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.2320'. [ 860.424954][T15880] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.2320'. [ 860.589421][T15884] Unknown options in mask 5 [ 860.624892][ T24] usb 2-1: USB disconnect, device number 125 [ 860.857192][T15890] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2321'. [ 860.869448][T15890] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2321'. [ 861.049433][T13422] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 861.089190][T13422] usb 4-1: USB disconnect, device number 124 [ 861.676051][T13422] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 861.881498][T13422] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.901347][T13422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 861.989617][T13422] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 862.005398][T13422] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 862.022137][T13422] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 862.031842][T13422] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 862.049908][T13422] usb 2-1: Manufacturer: syz [ 862.109119][T13422] usb 2-1: config 0 descriptor?? [ 862.258461][ T24] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 862.386159][ T5880] usb 5-1: USB disconnect, device number 126 [ 862.438677][ T24] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 862.457895][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.471850][ T24] usb 4-1: Product: syz [ 862.477561][ T24] usb 4-1: Manufacturer: syz [ 862.482426][ T24] usb 4-1: SerialNumber: syz [ 862.513671][ T24] usb 4-1: config 0 descriptor?? [ 862.530221][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 862.798466][T15907] loop8: detected capacity change from 0 to 7 [ 862.808064][T15907] Dev loop8: unable to read RDB block 7 [ 862.813991][T15907] loop8: AHDI p1 p3 p4 [ 862.819252][T15907] loop8: partition table partially beyond EOD, truncated [ 862.827622][T15907] loop8: p1 start 975770946 is beyond EOD, truncated [ 862.834647][T15907] loop8: p3 start 6514546 is beyond EOD, truncated [ 863.086010][ T24] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 863.240535][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.265538][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 863.281992][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 863.299554][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 863.310284][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 863.340518][ T24] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 863.358874][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 863.367904][ T24] usb 5-1: Product: syz [ 863.372405][ T24] usb 5-1: Manufacturer: syz [ 863.377189][ T24] usb 5-1: SerialNumber: syz [ 863.392359][ T24] usb 5-1: config 0 descriptor?? [ 863.579335][T15915] netlink: 'syz.2.2332': attribute type 1 has an invalid length. [ 863.613740][ T24] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 863.614297][T15915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 863.631812][ T24] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 863.656373][T15915] bond4: (slave veth7): Enslaving as an active interface with a down link [ 863.677945][T15915] bond3: (slave veth0_to_bond): Releasing active interface [ 863.692435][T15915] bond4: (slave veth0_to_bond): making interface the new active one [ 863.702595][T15915] veth0_to_bond: entered promiscuous mode [ 863.709074][T15915] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 863.815466][ T24] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 863.824215][ T24] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 863.839231][ T24] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 864.017297][T15907] fuse: Bad value for 'user_id' [ 864.032094][T15907] fuse: Bad value for 'user_id' [ 864.042831][ T24] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 864.060661][ T24] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 864.068873][ T24] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 864.078982][ T24] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 864.101356][ T24] usb 5-1: USB disconnect, device number 127 [ 864.445548][ T977] usb 2-1: USB disconnect, device number 126 [ 864.886324][T15930] kernel profiling enabled (shift: 63) [ 864.892046][T15930] profiling shift: 63 too large [ 864.897277][ T977] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 865.057887][ T977] usb 2-1: unable to get BOS descriptor or descriptor too short [ 865.085155][ T24] usb 4-1: USB disconnect, device number 125 [ 865.097750][ T977] usb 2-1: not running at top speed; connect to a high speed hub [ 865.132585][ T977] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 865.150452][ T977] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 865.195893][ T977] usb 2-1: config 4 has no interface number 0 [ 865.219320][ T977] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 865.252876][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.274950][ T977] usb 2-1: Product: syz [ 865.284937][ T977] usb 2-1: Manufacturer: syz [ 865.296930][ T977] usb 2-1: SerialNumber: syz [ 865.554665][ T977] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 865.577135][ T977] usb 2-1: No valid video chain found. [ 865.623499][ T977] usb 2-1: USB disconnect, device number 127 [ 866.094798][T15950] Unknown options in mask 5 [ 866.100979][T15950] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2342'. [ 866.110691][T15950] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2342'. [ 866.226174][ T977] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 866.256337][ T5879] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 866.359422][ T977] usb 4-1: device descriptor read/64, error -71 [ 866.398460][T15954] loop8: detected capacity change from 0 to 7 [ 866.421284][ T6016] Dev loop8: unable to read RDB block 7 [ 866.427801][ T6016] loop8: AHDI p1 p3 p4 [ 866.432188][ T6016] loop8: partition table partially beyond EOD, truncated [ 866.432217][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.441100][ T6016] loop8: p1 start 975770946 is beyond EOD, truncated [ 866.468809][ T6016] loop8: p3 start 6514546 is beyond EOD, truncated [ 866.485209][T15954] Dev loop8: unable to read RDB block 7 [ 866.515812][T15954] loop8: AHDI p1 p3 p4 [ 866.521981][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 866.543180][T15954] loop8: partition table partially beyond EOD, truncated [ 866.616205][ T977] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 866.624922][T15960] fuse: Bad value for 'fd' [ 866.640819][T15954] loop8: p1 start 975770946 is beyond EOD, truncated [ 866.651930][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 866.660566][T15954] loop8: p3 start 6514546 is beyond EOD, truncated [ 866.686188][ T5843] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 866.713940][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 866.733652][ T5879] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 866.742872][ T5879] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 866.754297][ T5879] usb 5-1: Manufacturer: syz [ 866.769964][ T5879] usb 5-1: config 0 descriptor?? [ 866.836172][ T977] usb 4-1: device descriptor read/64, error -71 [ 866.858562][ T5843] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.868908][ T5880] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 866.891913][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 866.904095][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 866.915485][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 866.926501][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 866.944470][ T5843] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 866.954106][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 866.963206][ T5843] usb 2-1: Product: syz [ 866.967340][ T977] usb usb4-port1: attempt power cycle [ 866.968147][ T5843] usb 2-1: Manufacturer: syz [ 866.978003][ T5843] usb 2-1: SerialNumber: syz [ 866.992195][ T5843] usb 2-1: config 0 descriptor?? [ 867.036023][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 867.044518][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.057107][ T5880] usb 3-1: config 0 interface 0 has no altsetting 0 [ 867.067994][ T5880] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 867.078000][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.086690][ T5880] usb 3-1: Product: syz [ 867.091105][ T5880] usb 3-1: Manufacturer: syz [ 867.095753][ T5880] usb 3-1: SerialNumber: syz [ 867.108440][ T5880] usb 3-1: config 0 descriptor?? [ 867.118823][ T5880] hub 3-1:0.0: bad descriptor, ignoring hub [ 867.133338][ T5880] hub 3-1:0.0: probe with driver hub failed with error -5 [ 867.163411][ T5880] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 867.197826][ T9634] usb 3-1: Failed to submit usb control message: -71 [ 867.214933][ T9634] usb 3-1: unable to send the bmi data to the device: -71 [ 867.234194][ T9634] usb 3-1: unable to get target info from device [ 867.241985][ T9634] usb 3-1: could not get target info (-71) [ 867.252035][ T9634] usb 3-1: could not probe fw (-71) [ 867.261164][ T5843] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 867.276335][ T5843] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 867.346325][ T977] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 867.416610][ T977] usb 4-1: device descriptor read/8, error -71 [ 867.426248][ T5880] usb 3-1: USB disconnect, device number 117 [ 867.456086][ T5843] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 867.480783][ T5843] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 867.493444][ T5843] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 867.654662][T15954] fuse: Bad value for 'user_id' [ 867.659876][ T977] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 867.662960][T15954] fuse: Bad value for 'user_id' [ 867.675715][ T5843] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 867.688832][ T977] usb 4-1: device descriptor read/8, error -71 [ 867.703242][ T5843] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 867.717872][ T5843] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 867.727582][ T5843] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 867.761593][ T5843] usb 2-1: USB disconnect, device number 2 [ 867.808887][ T977] usb usb4-port1: unable to enumerate USB device [ 868.196060][ T5843] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 868.356272][ T5843] usb 3-1: Using ep0 maxpacket: 8 [ 868.363667][ T5843] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 868.374973][ T5843] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 868.385092][ T5843] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 868.395139][ T5843] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.408421][ T5843] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 868.418438][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.545958][ T5883] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 868.633648][ T5843] usb 3-1: GET_CAPABILITIES returned 0 [ 868.639549][ T5843] usbtmc 3-1:16.0: can't read capabilities [ 868.706104][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 868.715744][ T5883] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 868.729726][ T5883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 868.740049][ T5883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 868.750248][ T5883] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.763459][ T5883] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 868.773287][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.004258][ T5883] usb 2-1: GET_CAPABILITIES returned 0 [ 869.029670][ T5883] usbtmc 2-1:16.0: can't read capabilities [ 869.047941][ T5880] usb 5-1: USB disconnect, device number 2 [ 869.476530][ T5880] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 869.607609][ T5883] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 869.641245][ T5880] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 869.650744][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.663285][ T5880] usb 5-1: config 0 has no interface number 0 [ 869.673062][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'. [ 869.673235][ T5880] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 869.696702][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2356'. [ 869.708343][T15986] netlink: 'syz.0.2356': attribute type 15 has an invalid length. [ 869.708349][ T5880] usb 5-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 869.739899][ T5880] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 869.752870][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.776280][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 869.782472][ T5880] usb 5-1: config 0 descriptor?? [ 869.796581][ T5883] usb 4-1: config 0 has an invalid interface number: 231 but max is 1 [ 869.805164][T15988] FAULT_INJECTION: forcing a failure. [ 869.805164][T15988] name failslab, interval 1, probability 0, space 0, times 0 [ 869.811256][ T5883] usb 4-1: config 0 has no interface number 1 [ 869.823400][T15988] CPU: 0 UID: 0 PID: 15988 Comm: syz.0.2357 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 869.823433][T15988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 869.823450][T15988] Call Trace: [ 869.823472][T15988] [ 869.823483][T15988] dump_stack_lvl+0x189/0x250 [ 869.823528][T15988] ? __pfx____ratelimit+0x10/0x10 [ 869.823573][T15988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 869.823612][T15988] ? __pfx__printk+0x10/0x10 [ 869.823645][T15988] ? __pfx___might_resched+0x10/0x10 [ 869.823675][T15988] should_fail_ex+0x414/0x560 [ 869.823716][T15988] should_failslab+0xa8/0x100 [ 869.823747][T15988] __kmalloc_node_noprof+0xd1/0x4e0 [ 869.823771][T15988] ? alloc_slab_obj_exts+0x39/0xa0 [ 869.823818][T15988] alloc_slab_obj_exts+0x39/0xa0 [ 869.823841][T15988] __memcg_slab_post_alloc_hook+0x31e/0x7f0 [ 869.823903][T15988] kmem_cache_alloc_node_noprof+0x2bd/0x3c0 [ 869.823930][T15988] ? __alloc_skb+0x112/0x2d0 [ 869.823962][T15988] __alloc_skb+0x112/0x2d0 [ 869.823994][T15988] alloc_skb_with_frags+0xca/0x890 [ 869.824033][T15988] ? __might_fault+0xb0/0x130 [ 869.824062][T15988] sock_alloc_send_pskb+0x857/0x990 [ 869.824114][T15988] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 869.824152][T15988] ? __lock_acquire+0xab9/0xd20 [ 869.824202][T15988] queue_oob+0xc2/0x8a0 [ 869.824241][T15988] ? __pfx_queue_oob+0x10/0x10 [ 869.824279][T15988] ? sock_def_readable+0x30f/0x550 [ 869.824313][T15988] ? sock_def_readable+0xbe/0x550 [ 869.824352][T15988] unix_stream_sendmsg+0xaf9/0xc90 [ 869.824400][T15988] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 869.824437][T15988] ? aa_sock_msg_perm+0x94/0x160 [ 869.824484][T15988] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 869.824518][T15988] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 869.824548][T15988] __sock_sendmsg+0x219/0x270 [ 869.824588][T15988] ____sys_sendmsg+0x505/0x830 [ 869.824625][T15988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.824668][T15988] ? import_iovec+0x74/0xa0 [ 869.824703][T15988] ___sys_sendmsg+0x21f/0x2a0 [ 869.824736][T15988] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.824774][T15988] ? rcu_read_lock_any_held+0xb3/0x120 [ 869.824816][T15988] ? sb_end_write+0xe9/0x1c0 [ 869.824861][T15988] ? __pfx_vfs_write+0x10/0x10 [ 869.824896][T15988] __x64_sys_sendmsg+0x19b/0x260 [ 869.824930][T15988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 869.824972][T15988] ? __pfx_ksys_write+0x10/0x10 [ 869.824993][T15988] ? rcu_is_watching+0x15/0xb0 [ 869.825021][T15988] ? do_syscall_64+0xbe/0x3b0 [ 869.825062][T15988] do_syscall_64+0xfa/0x3b0 [ 869.825098][T15988] ? lockdep_hardirqs_on+0x9c/0x150 [ 869.825133][T15988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.825158][T15988] ? clear_bhb_loop+0x60/0xb0 [ 869.825188][T15988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.825211][T15988] RIP: 0033:0x7f79d9d8e929 [ 869.825234][T15988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.825256][T15988] RSP: 002b:00007f79dabbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.825282][T15988] RAX: ffffffffffffffda RBX: 00007f79d9fb5fa0 RCX: 00007f79d9d8e929 [ 869.825301][T15988] RDX: 0000000000020001 RSI: 0000200000000d40 RDI: 0000000000000004 [ 869.825318][T15988] RBP: 00007f79dabbf090 R08: 0000000000000000 R09: 0000000000000000 [ 869.825335][T15988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.825350][T15988] R13: 0000000000000000 R14: 00007f79d9fb5fa0 R15: 00007f79da0dfa28 [ 869.825387][T15988] [ 870.172118][ T5880] ttusbir 5-1:0.83: cannot find expected altsetting [ 870.199878][ T5880] usb 5-1: USB disconnect, device number 3 [ 870.231048][ T5883] usb 4-1: too many endpoints for config 0 interface 231 altsetting 15: 203, using maximum allowed: 30 [ 870.243597][ T5883] usb 4-1: config 0 interface 231 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 870.258106][ T5883] usb 4-1: config 0 interface 231 has no altsetting 0 [ 870.272374][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.283973][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.294158][ T5883] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 870.303397][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.312871][ T5883] usb 4-1: Product: syz [ 870.317320][ T5883] usb 4-1: Manufacturer: syz [ 870.322025][ T5883] usb 4-1: SerialNumber: syz [ 870.338868][ T5883] usb 4-1: config 0 descriptor?? [ 870.572257][ T5883] usb 4-1: Could not set interface, error -71 [ 870.610307][ T5883] usb 4-1: USB disconnect, device number 4 [ 870.904384][ T5883] usb 3-1: USB disconnect, device number 118 [ 871.055950][ T977] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 871.216839][ T977] usb 5-1: no configurations [ 871.236547][ T977] usb 5-1: can't read configurations, error -22 [ 871.316883][ T5883] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 871.349959][ T5880] usb 2-1: USB disconnect, device number 3 [ 871.425970][ T977] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 871.479577][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.521097][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 871.548643][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 871.586165][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 871.586610][ T977] usb 5-1: no configurations [ 871.637692][ T977] usb 5-1: can't read configurations, error -22 [ 871.645061][ T977] usb usb5-port1: attempt power cycle [ 871.670085][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 871.683673][ T5883] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 871.693493][ T5883] usb 3-1: Manufacturer: syz [ 871.711015][ T5883] usb 3-1: config 0 descriptor?? [ 872.006401][ T977] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 872.039049][ T977] usb 5-1: no configurations [ 872.043849][ T977] usb 5-1: can't read configurations, error -22 [ 872.050487][ T5879] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 872.185973][ T977] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 872.208085][ T977] usb 5-1: no configurations [ 872.213017][ T977] usb 5-1: can't read configurations, error -22 [ 872.220155][ T5879] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 872.228820][ T977] usb usb5-port1: unable to enumerate USB device [ 872.236654][ T5879] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 872.245307][ T5879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.257104][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 872.266193][ T5879] usb 2-1: config 1 has no interface number 0 [ 872.272350][ T5879] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 872.281564][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.307604][ T5879] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 872.501228][ T5879] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 872.513821][ T5879] snd_usb_pod 2-1:1.1: invalid control EP [ 872.519727][ T5879] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 872.526904][ T5879] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 872.534586][ T5879] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 872.717198][ T5843] usb 2-1: USB disconnect, device number 4 [ 873.368295][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'. [ 874.183600][ T5886] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 874.216182][ T5879] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 874.296121][ T5883] rc_core: IR keymap rc-hauppauge not found [ 874.312330][ T5883] Registered IR keymap rc-empty [ 874.322733][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 874.366218][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 874.398576][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 874.406360][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 874.417327][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 874.430808][ T5879] usb 5-1: config 1 has no interface number 0 [ 874.454906][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input141 [ 874.465984][ T5879] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.503150][ T5879] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 874.524484][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 874.541395][ T5879] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 874.566212][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 874.582773][ T5879] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 874.604112][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.606283][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 874.638173][ T5879] usb 5-1: Product: syz [ 874.660253][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 874.682456][ T5879] usb 5-1: Manufacturer: syz [ 874.692946][ T5879] usb 5-1: SerialNumber: syz [ 874.697700][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 874.716744][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 874.789531][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 874.836380][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 874.876117][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 874.916290][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 874.962163][ T5883] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 874.991069][ T5883] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 875.042284][ T5883] usb 3-1: USB disconnect, device number 119 [ 875.057889][ T1154] veth0_to_bond: left promiscuous mode [ 875.501581][ T5886] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 875.527395][ T5886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 875.556826][ T5886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 875.592570][T16034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.601299][ T5886] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 875.629991][T16034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.649870][ T5886] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 875.669303][ T5879] cdc_ncm 5-1:1.1: bind() failure [ 875.687081][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.873143][ T5879] usb 5-1: USB disconnect, device number 8 [ 876.290957][ T5886] usb 4-1: GET_CAPABILITIES returned 0 [ 876.296813][ T5886] usbtmc 4-1:16.0: can't read capabilities [ 876.596025][ T5886] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 876.751771][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.772251][ T5886] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 876.784416][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.805051][ T5886] usb 3-1: config 0 descriptor?? [ 876.828717][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 877.509768][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 877.517306][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 877.524501][ T5886] pwc: recv_control_msg error -32 req 04 val 1000 [ 877.527316][T16066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.544022][T16066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.569432][ T5886] pwc: recv_control_msg error -32 req 04 val 1300 [ 877.581694][ T5886] pwc: recv_control_msg error -32 req 04 val 1400 [ 877.590447][ T5886] pwc: recv_control_msg error -32 req 02 val 2000 [ 877.602983][ T5886] pwc: recv_control_msg error -32 req 02 val 2100 [ 877.621328][ T5886] pwc: recv_control_msg error -32 req 04 val 1500 [ 877.669265][ T5880] usb 4-1: USB disconnect, device number 5 [ 877.719872][ T30] audit: type=1326 audit(1749073594.343:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16081 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c58e929 code=0x7ffc0000 [ 877.742773][ C1] vkms_vblank_simulate: vblank timer overrun [ 877.762063][ T30] audit: type=1326 audit(1749073594.373:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16081 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f449c58e929 code=0x7ffc0000 [ 877.793277][ T30] audit: type=1326 audit(1749073594.373:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16081 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c58e929 code=0x7ffc0000 [ 877.893277][ T5886] pwc: recv_control_msg error -71 req 02 val 2400 [ 877.977053][ T5886] pwc: recv_control_msg error -71 req 02 val 2600 [ 877.984343][ T30] audit: type=1326 audit(1749073594.373:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16081 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f449c58e929 code=0x7ffc0000 [ 878.035054][ T5886] pwc: recv_control_msg error -71 req 02 val 2900 [ 878.083752][ T5886] pwc: recv_control_msg error -71 req 02 val 2800 [ 878.095217][ T30] audit: type=1326 audit(1749073594.373:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16081 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c58e929 code=0x7ffc0000 [ 878.117917][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 878.128212][ T30] audit: type=1326 audit(1749073594.373:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16081 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f449c58e929 code=0x7ffc0000 [ 878.128272][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 878.151095][ T5843] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 878.183348][ T5886] pwc: Registered as video103. [ 878.283042][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input142 [ 878.318883][ T5886] usb 3-1: USB disconnect, device number 120 [ 878.319812][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 878.340184][ T5843] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 878.354242][ T5843] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 878.362761][ T5880] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 878.383083][ T5843] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 878.431429][ T5843] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 878.457737][ T5843] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 878.498620][ T5843] usb 2-1: config 0 has no interface number 0 [ 878.528140][ T5843] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 878.544072][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 878.578328][ T5843] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 878.590956][ T5880] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 878.609178][ T5880] usb 4-1: can't read configurations, error -71 [ 878.646341][ T5843] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 878.678472][ T5843] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 878.703064][ T5843] usb 2-1: config 0 interface 125 has no altsetting 0 [ 878.711047][ T5843] usb 2-1: config 0 interface 125 has no altsetting 2 [ 878.723041][ T5843] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 878.735029][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.743579][ T5843] usb 2-1: Product: syz [ 878.748077][ T5843] usb 2-1: Manufacturer: syz [ 878.752680][ T5843] usb 2-1: SerialNumber: syz [ 878.759869][ T5843] usb 2-1: config 0 descriptor?? [ 878.767413][ T5843] usb 2-1: selecting invalid altsetting 2 [ 880.025895][ T5843] get_1284_register timeout [ 880.030551][ T5843] uss720 2-1:0.125: probe with driver uss720 failed with error -5 [ 880.038803][ C1] usb 2-1: async_complete: urb error -104 [ 880.038966][ C1] usb 2-1: async_complete: urb error -104 [ 880.039106][ C1] usb 2-1: async_complete: urb error -104 [ 880.584719][T16121] Unknown options in mask 5 [ 880.600675][T16121] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.2400'. [ 880.620980][T16121] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.2400'. [ 880.954960][ T5883] usb 2-1: USB disconnect, device number 5 [ 882.305977][ T5879] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 882.478324][ T5879] usb 3-1: unable to get BOS descriptor or descriptor too short [ 882.493222][ T5879] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 882.501367][ T5879] usb 3-1: can't read configurations, error -71 [ 882.856183][ T5886] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 883.016640][ T5886] usb 5-1: no configurations [ 883.021275][ T5886] usb 5-1: can't read configurations, error -22 [ 883.166093][ T5886] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 883.279385][T16149] loop8: detected capacity change from 0 to 7 [ 883.289718][T16149] Dev loop8: unable to read RDB block 7 [ 883.300106][T16149] loop8: AHDI p1 p3 p4 [ 883.304659][T16149] loop8: partition table partially beyond EOD, truncated [ 883.337131][ T5886] usb 5-1: no configurations [ 883.339540][T16149] loop8: p1 start 975770946 is beyond EOD, truncated [ 883.343115][ T5886] usb 5-1: can't read configurations, error -22 [ 883.374003][ T5886] usb usb5-port1: attempt power cycle [ 883.399978][T16149] loop8: p3 start 6514546 is beyond EOD, truncated [ 883.698934][ T5879] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 883.746185][ T5886] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 883.777057][ T5886] usb 5-1: no configurations [ 883.782640][ T5886] usb 5-1: can't read configurations, error -22 [ 883.877706][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.898279][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 883.926164][ T5886] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 883.972106][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 883.996230][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 884.007590][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 884.024449][ T5886] usb 5-1: no configurations [ 884.029295][ T5886] usb 5-1: can't read configurations, error -22 [ 884.046523][ T5886] usb usb5-port1: unable to enumerate USB device [ 884.055632][ T5879] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 884.065341][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 884.083723][ T5879] usb 3-1: Product: syz [ 884.093785][ T5879] usb 3-1: Manufacturer: syz [ 884.105732][ T5879] usb 3-1: SerialNumber: syz [ 884.157613][ T5879] usb 3-1: config 0 descriptor?? [ 884.440734][ T5879] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 884.455957][ T5879] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 884.698979][ T5879] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 884.709470][ T5879] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 884.742816][ T5879] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 884.909947][T16149] fuse: Bad value for 'user_id' [ 884.932727][T16149] fuse: Bad value for 'user_id' [ 884.980651][ T5879] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 885.011252][ T5879] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 885.053492][ T5879] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 885.087593][ T5879] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 885.115382][ T5879] usb 3-1: USB disconnect, device number 123 [ 887.142465][T16187] trusted_key: encrypted_key: insufficient parameters specified [ 887.600242][T16195] usb usb8: usbfs: process 16195 (syz.3.2420) did not claim interface 0 before use [ 887.649250][T16195] usb usb8: usbfs: process 16195 (syz.3.2420) did not claim interface 0 before use [ 888.078012][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'. [ 888.136150][ T5879] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 888.300117][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.349304][ T5879] usb 5-1: config 0 has no interfaces? [ 888.383713][ T5879] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 888.398715][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.413704][ T5879] usb 5-1: config 0 descriptor?? [ 891.034588][ T5886] usb 5-1: USB disconnect, device number 13 [ 891.106114][ T5879] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 891.195944][ T5843] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 891.266016][ T5879] usb 2-1: device descriptor read/64, error -71 [ 891.378470][ T5843] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.456014][ T5886] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 891.475441][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 891.493898][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 891.505319][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 891.506080][ T5879] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 891.519389][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 891.548860][ T5843] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 891.628503][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.649274][ T5886] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 891.669986][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.678514][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 891.686399][ T5879] usb 2-1: device descriptor read/64, error -71 [ 891.695987][ T5843] usb 4-1: Product: syz [ 891.700216][ T5843] usb 4-1: Manufacturer: syz [ 891.704838][ T5843] usb 4-1: SerialNumber: syz [ 891.713855][ T5886] usb 5-1: config 0 descriptor?? [ 891.740143][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 891.741118][ T5843] usb 4-1: config 0 descriptor?? [ 891.827667][ T5879] usb usb2-port1: attempt power cycle [ 891.972779][ T5843] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 891.990708][ T5843] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 892.039953][ T5843] usb 4-1: USB disconnect, device number 8 [ 892.184349][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 892.191260][ T5879] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 892.208897][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 892.236629][ T5879] usb 2-1: device descriptor read/8, error -71 [ 892.531516][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 892.538087][ T5879] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 892.576845][ T5879] usb 2-1: device descriptor read/8, error -71 [ 892.648372][T16250] fuse: Unknown parameter '`?UyuL!9NyYbkSwbe{q["h+ůbs5%Nv͒7D|0xffffffffffffffff' [ 892.697030][ T5879] usb usb2-port1: unable to enumerate USB device [ 893.041991][T16254] loop8: detected capacity change from 0 to 7 [ 893.057805][T16254] Dev loop8: unable to read RDB block 7 [ 893.063611][T16254] loop8: AHDI p1 p3 p4 [ 893.071283][T16254] loop8: partition table partially beyond EOD, truncated [ 893.080997][T16254] loop8: p1 start 975770946 is beyond EOD, truncated [ 893.091599][T16254] loop8: p3 start 6514546 is beyond EOD, truncated [ 893.367297][ T977] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 893.758138][ T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.820859][ T977] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 893.853052][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 893.864795][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 893.874903][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 893.893640][ T977] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 893.913582][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 893.934968][ T977] usb 4-1: Product: syz [ 893.943837][ T977] usb 4-1: Manufacturer: syz [ 893.954959][ T977] usb 4-1: SerialNumber: syz [ 894.161625][T16621] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 894.207512][ T977] usb 4-1: config 0 descriptor?? [ 894.366115][ T5843] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 894.579270][ T5843] usb 2-1: unable to get BOS descriptor or descriptor too short [ 894.600652][ T5843] usb 2-1: not running at top speed; connect to a high speed hub [ 894.636639][ T977] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 894.654008][ T977] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 894.670213][ T5843] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 894.699714][ T5843] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 894.739324][ T5886] pwc: recv_control_msg error -71 req 04 val 1300 [ 894.751338][ T5886] pwc: recv_control_msg error -71 req 04 val 1400 [ 894.798811][ T5886] pwc: recv_control_msg error -71 req 02 val 2000 [ 894.813277][ T5886] pwc: recv_control_msg error -71 req 02 val 2100 [ 894.831795][ T5886] pwc: recv_control_msg error -71 req 04 val 1500 [ 894.850454][ T977] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 894.854134][ T5843] usb 2-1: config 4 has no interface number 0 [ 894.900366][ T5843] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 894.910283][ T977] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 894.926130][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.930911][ T5886] pwc: recv_control_msg error -71 req 02 val 2500 [ 894.934228][ T5843] usb 2-1: Product: syz [ 894.955133][ T5843] usb 2-1: Manufacturer: syz [ 894.959878][ T5843] usb 2-1: SerialNumber: syz [ 895.036589][ T5886] pwc: recv_control_msg error -71 req 02 val 2400 [ 895.047008][T16254] fuse: Bad value for 'user_id' [ 895.051917][T16254] fuse: Bad value for 'user_id' [ 895.065970][ T977] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 895.096223][ T5886] pwc: recv_control_msg error -71 req 02 val 2600 [ 895.115965][ T5886] pwc: recv_control_msg error -71 req 02 val 2900 [ 895.130528][ T5886] pwc: recv_control_msg error -71 req 02 val 2800 [ 895.156595][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 895.171823][ T977] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 895.181804][ T977] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 895.189426][ T977] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 895.198059][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 895.237369][ T5843] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 895.269010][ T5843] usb 2-1: No valid video chain found. [ 895.289082][ T977] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 895.303780][ T5886] pwc: Registered as video103. [ 895.327436][ T5843] usb 2-1: USB disconnect, device number 10 [ 895.336118][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input144 [ 895.440027][ T977] usb 4-1: USB disconnect, device number 9 [ 895.456214][ T5886] usb 5-1: USB disconnect, device number 14 [ 895.947370][ T5886] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 896.119000][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.135277][ T5886] usb 5-1: config 0 has no interfaces? [ 896.142775][ T5886] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 896.152000][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.164501][ T5886] usb 5-1: config 0 descriptor?? [ 896.615987][ T24] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 896.817669][ T5886] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 896.825937][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 896.942182][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 896.950486][ T24] usb 3-1: config 0 has no interface number 0 [ 896.978254][ T24] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 896.986070][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 897.001105][ T5886] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 897.014134][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.023279][ T5886] usb 4-1: Product: syz [ 897.029484][ T5886] usb 4-1: Manufacturer: syz [ 897.034398][ T5886] usb 4-1: SerialNumber: syz [ 897.040516][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.050887][T16791] loop8: detected capacity change from 0 to 7 [ 897.059455][ T5886] usb 4-1: config 0 descriptor?? [ 897.067524][ T24] usb 3-1: Product: syz [ 897.071863][ T24] usb 3-1: Manufacturer: syz [ 897.076779][T16791] Dev loop8: unable to read RDB block 7 [ 897.099002][T16791] loop8: AHDI p1 p3 p4 [ 897.105222][T16791] loop8: partition table partially beyond EOD, truncated [ 897.114755][T16791] loop8: p1 start 975770946 is beyond EOD, truncated [ 897.124328][T16791] loop8: p3 start 6514546 is beyond EOD, truncated [ 897.138873][ T24] usb 3-1: SerialNumber: syz [ 897.152953][ T24] usb 3-1: config 0 descriptor?? [ 897.189041][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 897.281937][ T5886] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 897.376344][ T5843] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 897.389818][T16786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2448'. [ 897.416005][T16786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.432446][T16786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.548431][ T5843] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.576605][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 897.612151][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 897.640629][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 897.653874][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 897.677195][ T5843] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 897.704573][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 897.749001][ T5843] usb 2-1: Product: syz [ 897.771146][ T5843] usb 2-1: Manufacturer: syz [ 897.774382][T16797] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2451'. [ 897.785632][ T5843] usb 2-1: SerialNumber: syz [ 897.792244][T16797] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2451'. [ 897.835049][ T5843] usb 2-1: config 0 descriptor?? [ 898.053333][ T5843] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 898.081239][ T5843] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 898.267004][ T5843] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 898.275305][ T5843] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 898.292015][ T5843] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 898.470755][T16791] fuse: Bad value for 'user_id' [ 898.476417][T16791] fuse: Bad value for 'user_id' [ 898.485306][ T5843] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 898.554076][ T5843] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 898.582017][ T5843] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 898.591504][ T5843] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 898.618936][ T5843] usb 2-1: USB disconnect, device number 11 [ 898.681512][ T977] usb 5-1: USB disconnect, device number 15 [ 898.789069][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2452'. [ 899.313751][T16801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2452'. [ 899.807678][ T5886] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 899.859122][ T5886] usb 4-1: USB disconnect, device number 10 [ 899.947776][ T5843] usb 3-1: USB disconnect, device number 124 [ 900.036403][T16804] FAULT_INJECTION: forcing a failure. [ 900.036403][T16804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.049795][T16804] CPU: 1 UID: 0 PID: 16804 Comm: syz.1.2453 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 900.049821][T16804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 900.049835][T16804] Call Trace: [ 900.049844][T16804] [ 900.049853][T16804] dump_stack_lvl+0x189/0x250 [ 900.049887][T16804] ? __pfx____ratelimit+0x10/0x10 [ 900.049916][T16804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 900.049946][T16804] ? __pfx__printk+0x10/0x10 [ 900.049980][T16804] should_fail_ex+0x414/0x560 [ 900.050014][T16804] _copy_to_user+0x31/0xb0 [ 900.050041][T16804] simple_read_from_buffer+0xe1/0x170 [ 900.050067][T16804] proc_fail_nth_read+0x1df/0x250 [ 900.050095][T16804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 900.050122][T16804] ? rw_verify_area+0x258/0x650 [ 900.050152][T16804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 900.050178][T16804] vfs_read+0x1fd/0x980 [ 900.050205][T16804] ? __pfx_vfs_read+0x10/0x10 [ 900.050227][T16804] ? do_sys_openat2+0x154/0x1c0 [ 900.050251][T16804] ? kmem_cache_free+0x18f/0x400 [ 900.050286][T16804] ksys_read+0x145/0x250 [ 900.050307][T16804] ? __pfx_ksys_read+0x10/0x10 [ 900.050323][T16804] ? rcu_is_watching+0x15/0xb0 [ 900.050348][T16804] ? do_syscall_64+0xbe/0x3b0 [ 900.050381][T16804] do_syscall_64+0xfa/0x3b0 [ 900.050412][T16804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.050430][T16804] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 900.050449][T16804] ? clear_bhb_loop+0x60/0xb0 [ 900.050483][T16804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.050502][T16804] RIP: 0033:0x7f41f458d33c [ 900.050520][T16804] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 900.050538][T16804] RSP: 002b:00007f41f5411030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 900.050558][T16804] RAX: ffffffffffffffda RBX: 00007f41f47b5fa0 RCX: 00007f41f458d33c [ 900.050572][T16804] RDX: 000000000000000f RSI: 00007f41f54110a0 RDI: 0000000000000009 [ 900.050584][T16804] RBP: 00007f41f5411090 R08: 0000000000000000 R09: 0000000000000000 [ 900.050595][T16804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.050606][T16804] R13: 0000000000000000 R14: 00007f41f47b5fa0 R15: 00007f41f48dfa28 [ 900.050636][T16804] [ 900.545985][ T5843] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 900.614780][T16814] syzkaller1: entered promiscuous mode [ 900.622650][T16814] syzkaller1: entered allmulticast mode [ 900.696110][ T5843] usb 3-1: Using ep0 maxpacket: 16 [ 900.712063][ T5843] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 900.723216][ T5843] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 900.733461][ T5843] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 900.748407][ T5843] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 900.748435][ T5843] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 900.748457][ T5843] usb 3-1: config 0 has no interface number 0 [ 900.748514][ T5843] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 900.748542][ T5843] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 900.748565][ T5843] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 900.748598][ T5843] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 900.748625][ T5843] usb 3-1: config 0 interface 125 has no altsetting 0 [ 900.748644][ T5843] usb 3-1: config 0 interface 125 has no altsetting 2 [ 900.752931][ T5843] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 900.850666][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.869370][ T5843] usb 3-1: Product: syz [ 900.873956][ T5843] usb 3-1: Manufacturer: syz [ 900.891684][ T5843] usb 3-1: SerialNumber: syz [ 900.900621][ T5843] usb 3-1: config 0 descriptor?? [ 900.906628][ T5883] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 900.911892][ T5843] usb 3-1: selecting invalid altsetting 2 [ 901.060582][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 901.069736][ T5883] usb 2-1: not running at top speed; connect to a high speed hub [ 901.079103][ T5883] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 901.087434][ T5883] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 901.099274][ T5883] usb 2-1: config 4 has no interface number 0 [ 901.108192][ T5883] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 901.117481][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.125580][ T5883] usb 2-1: Product: syz [ 901.129931][ T5883] usb 2-1: Manufacturer: syz [ 901.134597][ T5883] usb 2-1: SerialNumber: syz [ 901.360523][ T5883] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 901.373366][ T5883] usb 2-1: No valid video chain found. [ 901.383192][ T5883] usb 2-1: USB disconnect, device number 12 [ 902.006153][ T5843] get_1284_register timeout [ 902.014108][ T5843] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 902.014168][ C1] usb 3-1: async_complete: urb error -104 [ 902.027823][ C1] usb 3-1: async_complete: urb error -104 [ 902.033656][ C1] usb 3-1: async_complete: urb error -104 [ 902.040331][ T5883] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 902.206098][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 902.218773][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.232278][ T5883] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 902.242990][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.258639][ T5883] usb 5-1: config 0 descriptor?? [ 902.271284][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 902.376070][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 902.390171][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 902.399599][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.413640][ T24] usb 2-1: Product: syz [ 902.418493][ T24] usb 2-1: Manufacturer: syz [ 902.423141][ T24] usb 2-1: SerialNumber: syz [ 902.431438][ T24] usb 2-1: config 0 descriptor?? [ 902.642822][ T24] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 902.923785][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 902.931341][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 902.941017][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 902.942366][T16827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.958078][T16827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.980611][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 902.988552][ T5883] pwc: recv_control_msg error -32 req 04 val 1400 [ 902.997182][ T5883] pwc: recv_control_msg error -32 req 02 val 2000 [ 903.005372][ T5883] pwc: recv_control_msg error -32 req 02 val 2100 [ 903.024218][ T5883] pwc: recv_control_msg error -32 req 04 val 1500 [ 903.122947][ T5880] usb 3-1: USB disconnect, device number 125 [ 903.239788][ T5883] pwc: recv_control_msg error -71 req 02 val 2400 [ 903.251316][ T5883] pwc: recv_control_msg error -71 req 02 val 2600 [ 903.258398][ T5883] pwc: recv_control_msg error -71 req 02 val 2900 [ 903.265202][ T5883] pwc: recv_control_msg error -71 req 02 val 2800 [ 903.278766][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 903.285791][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 903.296569][ T5883] pwc: Registered as video103. [ 903.304367][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input146 [ 903.322760][ T5883] usb 5-1: USB disconnect, device number 16 [ 903.526192][ T5880] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 903.699751][T16836] vlan5: entered promiscuous mode [ 903.795293][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 903.799534][T16840] fuse: Bad value for 'fd' [ 903.816883][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 903.845021][ T5880] usb 3-1: can't read configurations, error -71 [ 904.002741][T16844] SET target dimension over the limit! [ 904.066129][ T977] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 904.225928][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 904.235270][ T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.245568][ T977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 904.255532][ T977] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 904.264803][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.273175][ T977] usb 4-1: Product: syz [ 904.277436][ T977] usb 4-1: Manufacturer: syz [ 904.282166][ T977] usb 4-1: SerialNumber: syz [ 904.289594][ T977] usb 4-1: config 0 descriptor?? [ 904.296992][ T977] hub 4-1:0.0: bad descriptor, ignoring hub [ 904.302974][ T977] hub 4-1:0.0: probe with driver hub failed with error -5 [ 904.313781][ T977] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 904.337659][ T1154] usb 4-1: Failed to submit usb control message: -71 [ 904.344989][ T1154] usb 4-1: unable to send the bmi data to the device: -71 [ 904.353205][ T1154] usb 4-1: unable to get target info from device [ 904.360076][ T1154] usb 4-1: could not get target info (-71) [ 904.376664][ T1154] usb 4-1: could not probe fw (-71) [ 904.476407][ T24] usb write operation failed. (-71) [ 904.486758][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 904.502348][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 904.512347][ T24] usb 2-1: media controller created [ 904.518820][ T24] usb read operation failed. (-71) [ 904.524865][ T24] usb write operation failed. (-71) [ 904.538321][ T24] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 904.563738][ T24] usb 2-1: USB disconnect, device number 13 [ 904.646885][T16838] usb 4-1: USB disconnect, device number 11 [ 905.466349][ T5880] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 905.672790][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 905.780804][ T5880] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 905.812158][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.833238][ T5880] usb 2-1: Product: syz [ 905.872412][ T5880] usb 2-1: Manufacturer: syz [ 905.910393][ T5880] usb 2-1: SerialNumber: syz [ 905.970931][ T5880] r8152-cfgselector 2-1: Unknown version 0x0000 [ 906.029738][ T5880] r8152-cfgselector 2-1: config 0 descriptor?? [ 906.525519][T16858] syz.2.2468 (16858): drop_caches: 2 [ 907.455923][T13422] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 907.608368][T13422] usb 3-1: unable to get BOS descriptor or descriptor too short [ 907.634730][T13422] usb 3-1: not running at top speed; connect to a high speed hub [ 907.658796][T13422] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 907.711713][T13422] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 907.726672][ T5886] r8152-cfgselector 2-1: USB disconnect, device number 14 [ 907.836845][T13422] usb 3-1: config 4 has no interface number 0 [ 907.883058][T13422] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 907.902805][T13422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.939772][T13422] usb 3-1: Product: syz [ 907.966185][T13422] usb 3-1: Manufacturer: syz [ 907.972935][T13422] usb 3-1: SerialNumber: syz [ 908.004057][T16907] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 908.235389][T13422] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 908.366115][T13422] usb 3-1: No valid video chain found. [ 908.406675][T13422] usb 3-1: USB disconnect, device number 2 [ 908.595935][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 908.771771][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 908.785214][ T24] usb 2-1: config 6 has an invalid interface number: 16 but max is 0 [ 908.835769][ T24] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 908.901401][ T24] usb 2-1: config 6 has an invalid descriptor of length 9, skipping remainder of the config [ 908.958898][ T24] usb 2-1: config 6 has no interface number 0 [ 908.983231][ T24] usb 2-1: config 6 interface 16 altsetting 4 has an endpoint descriptor with address 0x5B, changing to 0xB [ 908.995270][ T24] usb 2-1: config 6 interface 16 altsetting 4 endpoint 0xB has invalid maxpacket 2858, setting to 1024 [ 909.006880][ T24] usb 2-1: config 6 interface 16 altsetting 4 bulk endpoint 0xB has invalid maxpacket 1024 [ 909.017496][ T24] usb 2-1: config 6 interface 16 altsetting 4 has an invalid endpoint descriptor of length 3, skipping [ 909.029743][ T24] usb 2-1: config 6 interface 16 altsetting 4 bulk endpoint 0xD has invalid maxpacket 48 [ 909.054755][ T24] usb 2-1: config 6 interface 16 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 909.096366][ T24] usb 2-1: config 6 interface 16 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 909.134580][ T24] usb 2-1: config 6 interface 16 altsetting 4 endpoint 0x6 has invalid maxpacket 959, setting to 64 [ 909.176816][ T24] usb 2-1: config 6 interface 16 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 909.206108][T13422] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 909.220807][ T24] usb 2-1: config 6 interface 16 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 909.300806][ T24] usb 2-1: config 6 interface 16 altsetting 4 endpoint 0x1 has an invalid bInterval 223, changing to 11 [ 909.318060][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2487'. [ 909.329605][T16922] bridge_slave_1: left allmulticast mode [ 909.335531][T16922] bridge_slave_1: left promiscuous mode [ 909.343129][T16922] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.358967][T16922] bridge_slave_0: left allmulticast mode [ 909.365005][T16922] bridge_slave_0: left promiscuous mode [ 909.383042][T16922] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.394008][ T24] usb 2-1: config 6 interface 16 has no altsetting 0 [ 909.395470][T13422] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 909.413555][T13422] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 909.425106][T13422] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 909.438339][T13422] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 909.448147][T13422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.536824][T13422] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 909.544796][T13422] usb 5-1: invalid MIDI out EP 0 [ 909.577952][ T24] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=6d.ab [ 909.606042][ T977] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 909.658445][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.692325][ T24] usb 2-1: Product: ъ [ 909.712740][ T24] usb 2-1: Manufacturer: 휋䴊肀䫸鰑캦孏萓ꊮ哂賂对模鵇珊لۉ羓姤ᬶ둻쨎ີ軛⬨┉삍咮荬뤿໫╄］⭨㈷㧡ꕟ娵ﾁ⼴홠뺠녾逢ੴ闰ӄ絓䓄炟뵊ￗ뫵즙௳ᝁ뾅뒦ཡ垳帮忎偷䰲݂⫃Ꝑ⸱撧ᴊ粫ⳋ陞陋♞卶끒 [ 909.741862][ T24] usb 2-1: SerialNumber: ㅧ㹽́νꇞ瘮聠吋矐걧⌔ꘪ恏揙뒵೤ᒪ䁱뷸棿ﰆ䁊証ⵓฬᡄ䖛搑ㄾ湔굪飘膲㗻⛁闝춯㹝珊ṹ鍀싖ᶕầꇚ客ᆙ鉴꺆댑ʡ₉퓞গ㆓鄢ꥄ朱袓ᅅ蕿ၶ믁╆蒓洖ᒟ閊萆괘䷵飍⛢䎨ဢ勭≑ꂲ [ 909.772472][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 909.804345][T16911] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 909.819198][T16911] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 909.900213][ T977] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 909.949498][T13422] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 909.964113][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.990286][ T977] usb 4-1: Product: syz [ 909.991393][T16930] fuse: Bad value for 'fd' [ 909.994592][ T977] usb 4-1: Manufacturer: syz [ 909.994614][ T977] usb 4-1: SerialNumber: syz [ 910.012386][ T30] audit: type=1326 audit(1749073626.633:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.2.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 910.053396][ T30] audit: type=1326 audit(1749073626.663:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.2.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 910.071230][ T977] r8152-cfgselector 4-1: Unknown version 0x0000 [ 910.090525][T16911] program syz.1.2483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 910.100011][ T977] r8152-cfgselector 4-1: config 0 descriptor?? [ 910.108599][ T30] audit: type=1326 audit(1749073626.673:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.2.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 910.134591][T16911] fuse: Bad value for 'fd' [ 910.141546][T16931] IPVS: set_ctl: invalid protocol: 12078 108.101.48.0:0 [ 910.142836][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 910.158965][ T30] audit: type=1326 audit(1749073626.673:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.2.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 910.204519][ T30] audit: type=1326 audit(1749073626.673:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.2.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 910.245050][ T30] audit: type=1326 audit(1749073626.673:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.2.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 910.347395][ T30] audit: type=1326 audit(1749073626.973:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.2.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 910.386177][ T30] audit: type=1326 audit(1749073626.973:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.2.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dfd8e929 code=0x7ffc0000 [ 910.473465][ T24] input: 휋䴊肀䫸鰑캦孏萓ꊮ哂賂对模鵇珊لۉ羓姤ᬶ둻쨎ີ軛⬨┉삍咮荬뤿໫╄］⭨㈷㧡ꕟ娵ﾁ⼴ as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.16/input/input147 [ 910.504635][T13422] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 910.541203][ T980] r8152-cfgselector 4-1: USB disconnect, device number 12 [ 910.559972][T16940] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2490'. [ 910.570019][T16940] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2490'. [ 910.656435][T13422] usb 3-1: device descriptor read/64, error -71 [ 910.774922][ T24] usb 2-1: USB disconnect, device number 15 [ 910.896095][T13422] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 911.036067][T13422] usb 3-1: device descriptor read/64, error -71 [ 911.146591][T13422] usb usb3-port1: attempt power cycle [ 911.506015][T10286] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 911.545087][T13422] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 911.590172][T13422] usb 3-1: device descriptor read/8, error -71 [ 911.729774][T10286] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 911.754456][T10286] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 911.827616][ T30] audit: type=1326 audit(1749073628.443:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.3.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b5d8e929 code=0x7ffc0000 [ 911.867069][T13422] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 911.877933][T10286] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 911.887240][T10286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.897037][T13422] usb 3-1: device descriptor read/8, error -71 [ 911.906144][T10286] usb 2-1: Product: syz [ 911.970910][T10286] usb 2-1: Manufacturer: syz [ 911.975594][T10286] usb 2-1: SerialNumber: syz [ 912.001065][ T30] audit: type=1326 audit(1749073628.443:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.3.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f87b5d8e929 code=0x7ffc0000 [ 912.016349][T13422] usb usb3-port1: unable to enumerate USB device [ 912.087359][T10286] usb 2-1: config 0 descriptor?? [ 912.868104][T13422] usb 5-1: USB disconnect, device number 17 [ 913.426034][T10286] usb 2-1: USB disconnect, device number 16 [ 913.589876][T16955] loop8: detected capacity change from 0 to 7 [ 913.617984][T16955] Dev loop8: unable to read RDB block 7 [ 913.642722][T16955] loop8: AHDI p1 p3 p4 [ 913.678790][T16955] loop8: partition table partially beyond EOD, truncated [ 913.711869][T16955] loop8: p1 start 975770946 is beyond EOD, truncated [ 913.739948][T16955] loop8: p3 start 6514546 is beyond EOD, truncated [ 913.886575][ T980] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 914.056073][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.079728][ T980] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 914.092075][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 914.103814][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 914.114551][T16838] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 914.122518][ T980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 914.139752][ T980] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 914.149191][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 914.157431][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 914.165136][ T980] usb 4-1: Product: syz [ 914.170864][ T980] usb 4-1: Manufacturer: syz [ 914.175477][ T980] usb 4-1: SerialNumber: syz [ 914.182575][ T980] usb 4-1: config 0 descriptor?? [ 914.288646][T16838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.300766][T16838] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 914.312576][T16838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 914.316349][T10286] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 914.323916][T16838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 914.342067][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 914.348632][T16838] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 914.363142][ T24] usb 5-1: config 0 has an invalid interface number: 36 but max is 0 [ 914.371413][ T24] usb 5-1: config 0 has no interface number 0 [ 914.378057][ T24] usb 5-1: config 0 interface 36 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 914.391464][ T980] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 914.398500][ T24] usb 5-1: config 0 interface 36 has no altsetting 0 [ 914.405413][ T980] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 914.418231][T16838] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 914.428014][T16838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 914.436724][T16838] usb 2-1: Product: syz [ 914.441138][T16838] usb 2-1: Manufacturer: syz [ 914.446263][T16838] usb 2-1: SerialNumber: syz [ 914.452950][ T24] usb 5-1: New USB device found, idVendor=2304, idProduct=0208, bcdDevice=e9.bc [ 914.462790][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.472444][T16838] usb 2-1: config 0 descriptor?? [ 914.478258][ T24] usb 5-1: Product: syz [ 914.482574][ T24] usb 5-1: Manufacturer: syz [ 914.491422][ T24] usb 5-1: SerialNumber: syz [ 914.499380][ T24] usb 5-1: config 0 descriptor?? [ 914.507995][T10286] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.518772][T10286] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 914.523026][ T24] em28xx 5-1:0.36: New device syz syz @ 480 Mbps (2304:0208, interface 36, class 36) [ 914.528201][T10286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.531736][T10286] usb 3-1: config 0 descriptor?? [ 914.543761][ T24] em28xx 5-1:0.36: Video interface 36 found: [ 914.552019][T10286] pwc: Askey VC010 type 2 USB webcam detected. [ 914.591936][ T980] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 914.600295][ T980] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 914.615957][ T980] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 914.694088][T16838] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 914.701315][T16838] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 914.795013][T16955] fuse: Bad value for 'user_id' [ 914.800587][T16955] fuse: Bad value for 'user_id' [ 914.808124][ T980] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 914.823684][ T980] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 914.866834][ T980] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 914.875981][ T980] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 914.898875][T16838] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 914.910077][ T980] usb 4-1: USB disconnect, device number 13 [ 914.920287][T16838] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 914.930313][T16838] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 914.950255][T16838] usb 2-1: USB disconnect, device number 17 [ 915.280970][T10286] pwc: recv_control_msg error -32 req 02 val 2700 [ 915.288589][T10286] pwc: recv_control_msg error -32 req 02 val 2c00 [ 915.296426][T10286] pwc: recv_control_msg error -32 req 04 val 1000 [ 915.306128][T16968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.315360][T16968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.334445][T10286] pwc: recv_control_msg error -32 req 04 val 1300 [ 915.348118][T10286] pwc: recv_control_msg error -32 req 04 val 1400 [ 915.364633][T10286] pwc: recv_control_msg error -32 req 02 val 2000 [ 915.386832][T10286] pwc: recv_control_msg error -32 req 02 val 2100 [ 915.417411][T10286] pwc: recv_control_msg error -32 req 04 val 1500 [ 915.466944][ T24] em28xx 5-1:0.36: unknown em28xx chip ID (0) [ 915.567461][ T24] em28xx 5-1:0.36: reading from i2c device at 0xa0 failed (error=-5) [ 915.601599][ T24] em28xx 5-1:0.36: board has no eeprom [ 915.636574][T10286] pwc: recv_control_msg error -71 req 02 val 2400 [ 915.656084][T10286] pwc: recv_control_msg error -71 req 02 val 2600 [ 915.663633][T10286] pwc: recv_control_msg error -71 req 02 val 2900 [ 915.686622][ T24] em28xx 5-1:0.36: Identified as Pinnacle PCTV USB 2 (card=3) [ 915.693767][T10286] pwc: recv_control_msg error -71 req 02 val 2800 [ 915.715457][T10286] pwc: recv_control_msg error -71 req 04 val 1100 [ 915.728237][ T24] em28xx 5-1:0.36: analog set to bulk mode. [ 915.732415][T10286] pwc: recv_control_msg error -71 req 04 val 1200 [ 915.753262][T10286] pwc: Registered as video103. [ 915.769220][T10286] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input148 [ 915.797773][T10286] usb 3-1: USB disconnect, device number 7 [ 915.835602][ T980] em28xx 5-1:0.36: Registering V4L2 extension [ 915.926432][ T24] usb 5-1: USB disconnect, device number 18 [ 916.010955][ T24] em28xx 5-1:0.36: Disconnecting em28xx [ 916.055945][T16838] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 916.270178][T16838] usb 4-1: Using ep0 maxpacket: 8 [ 916.288372][T16838] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 916.346411][T16838] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 916.347253][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2505'. [ 916.420306][T16838] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 916.445999][T16838] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 916.517849][T16838] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 916.651941][ T980] em28xx 5-1:0.36: Config register raw data: 0xffffffed [ 916.665975][T16838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.696404][ T980] em28xx 5-1:0.36: AC97 chip type couldn't be determined [ 916.711102][ T980] em28xx 5-1:0.36: No AC97 audio processor [ 916.767497][ T980] usb 5-1: Decoder not found [ 916.780345][ T980] em28xx 5-1:0.36: failed to create media graph [ 916.830259][ T980] em28xx 5-1:0.36: V4L2 device video103 deregistered [ 916.918227][ T980] em28xx 5-1:0.36: Registering input extension [ 917.145944][ T980] rc_core: IR keymap rc-pinnacle-grey not found [ 917.177151][ T980] Registered IR keymap rc-empty [ 917.213974][ T980] rc rc0: Pinnacle PCTV USB 2 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.36/rc/rc0 [ 917.269126][ T980] input: Pinnacle PCTV USB 2 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.36/rc/rc0/input149 [ 917.319185][ T980] em28xx 5-1:0.36: Input extension successfully initialized [ 917.335127][T16838] usb 4-1: GET_CAPABILITIES returned 0 [ 917.340889][T16838] usbtmc 4-1:16.0: can't read capabilities [ 917.350997][ T24] em28xx 5-1:0.36: Closing input extension [ 917.396929][ T24] em28xx 5-1:0.36: Freeing device [ 918.201154][T17016] tipc: Enabling of bearer rejected, already enabled [ 918.983225][T17024] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 918.989870][T17024] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 919.004524][T17024] vhci_hcd vhci_hcd.0: Device attached [ 919.015764][T17025] vhci_hcd: connection closed [ 919.024810][ T9632] vhci_hcd: stop threads [ 919.066017][ T9632] vhci_hcd: release socket [ 919.070575][ T9632] vhci_hcd: disconnect device [ 919.123431][T16838] usb 4-1: USB disconnect, device number 14 [ 919.242178][T17030] fuse: Bad value for 'fd' [ 919.566367][T10286] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 919.588696][T16838] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 919.611451][T17036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2515'. [ 919.756127][T16838] usb 4-1: Using ep0 maxpacket: 16 [ 919.758479][T10286] usb 2-1: unable to get BOS descriptor or descriptor too short [ 919.763287][T16838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.782949][T10286] usb 2-1: not running at top speed; connect to a high speed hub [ 919.792780][T10286] usb 2-1: config 11 has an invalid interface number: 16 but max is 1 [ 919.802696][T10286] usb 2-1: config 11 has an invalid interface number: 3 but max is 1 [ 919.811063][T10286] usb 2-1: config 11 has no interface number 0 [ 919.817886][T10286] usb 2-1: config 11 has no interface number 1 [ 919.833099][T10286] usb 2-1: config 11 interface 16 has no altsetting 0 [ 919.834912][T16838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 919.840386][T10286] usb 2-1: config 11 interface 3 has no altsetting 0 [ 919.872167][T10286] usb 2-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice=9c.cd [ 919.872472][T16838] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 919.883048][T10286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.898927][T10286] usb 2-1: Product: syz [ 919.903864][T10286] usb 2-1: Manufacturer: syz [ 919.909169][T10286] usb 2-1: SerialNumber: syz [ 919.945954][T13422] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 919.968847][T16838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.988115][T16838] usb 4-1: Product: syz [ 920.001470][T16838] usb 4-1: Manufacturer: syz [ 920.008871][T16838] usb 4-1: SerialNumber: syz [ 920.037805][T16838] usb 4-1: config 0 descriptor?? [ 920.064179][T16838] hub 4-1:0.0: bad descriptor, ignoring hub [ 920.070330][T16838] hub 4-1:0.0: probe with driver hub failed with error -5 [ 920.116300][T16838] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 920.160364][ T9599] usb 4-1: Failed to submit usb control message: -71 [ 920.169097][ T9599] usb 4-1: unable to send the bmi data to the device: -71 [ 920.177086][ T9599] usb 4-1: unable to get target info from device [ 920.183727][T13422] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.194914][T13422] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 920.204233][T13422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.212897][ T9599] usb 4-1: could not get target info (-71) [ 920.219032][ T9599] usb 4-1: could not probe fw (-71) [ 920.229875][T13422] usb 3-1: config 0 descriptor?? [ 920.241357][T13422] pwc: Askey VC010 type 2 USB webcam detected. [ 920.396557][ T977] usb 4-1: USB disconnect, device number 15 [ 921.025947][ T977] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 921.118947][T13422] pwc: recv_control_msg error -32 req 02 val 2700 [ 921.128842][T13422] pwc: recv_control_msg error -32 req 02 val 2c00 [ 921.141841][T13422] pwc: recv_control_msg error -32 req 04 val 1000 [ 921.142108][T17039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.181546][T17039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.196514][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 921.209491][ T977] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 921.221920][T13422] pwc: recv_control_msg error -32 req 04 val 1300 [ 921.233195][ T977] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 921.244912][T13422] pwc: recv_control_msg error -32 req 04 val 1400 [ 921.258645][ T977] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 921.267254][T13422] pwc: recv_control_msg error -32 req 02 val 2000 [ 921.276275][ T977] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 921.291999][T13422] pwc: recv_control_msg error -32 req 02 val 2100 [ 921.302274][ T977] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 921.316122][T13422] pwc: recv_control_msg error -32 req 04 val 1500 [ 921.326421][ T977] usb 5-1: config 0 has no interface number 0 [ 921.333535][ T977] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 921.358687][ T977] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 921.383392][ T977] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 921.403177][ T977] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 921.428654][ T977] usb 5-1: config 0 interface 125 has no altsetting 0 [ 921.435771][ T977] usb 5-1: config 0 interface 125 has no altsetting 2 [ 921.447199][ T977] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 921.465990][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.474475][ T977] usb 5-1: Product: syz [ 921.480303][ T977] usb 5-1: Manufacturer: syz [ 921.485309][ T977] usb 5-1: SerialNumber: syz [ 921.495072][ T977] usb 5-1: config 0 descriptor?? [ 921.512759][ T977] usb 5-1: selecting invalid altsetting 2 [ 921.535030][T13422] pwc: recv_control_msg error -71 req 02 val 2400 [ 921.548187][T13422] pwc: recv_control_msg error -71 req 02 val 2600 [ 921.555395][T13422] pwc: recv_control_msg error -71 req 02 val 2900 [ 921.564359][T13422] pwc: recv_control_msg error -71 req 02 val 2800 [ 921.577855][T13422] pwc: recv_control_msg error -71 req 04 val 1100 [ 921.589952][T13422] pwc: recv_control_msg error -71 req 04 val 1200 [ 921.601666][T13422] pwc: Registered as video103. [ 921.626815][T13422] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input150 [ 921.691132][T13422] usb 3-1: USB disconnect, device number 8 [ 922.230393][T10286] usb 2-1: USB disconnect, device number 18 [ 922.447730][ T6016] udevd[6016]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:11.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 922.726680][T13422] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 922.851894][T10286] usb 5-1: USB disconnect, device number 19 [ 922.896173][ T977] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 922.903932][T13422] usb 2-1: device descriptor read/64, error -71 [ 923.096601][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 923.103616][ T977] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 923.116623][ T977] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 923.128153][ T977] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 923.142010][ T977] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 923.155151][ T977] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 923.164549][T13422] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 923.172851][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.306341][T13422] usb 2-1: device descriptor read/64, error -71 [ 923.416804][T13422] usb usb2-port1: attempt power cycle [ 923.472619][ T977] usb 4-1: GET_CAPABILITIES returned 0 [ 923.483972][ T977] usbtmc 4-1:16.0: can't read capabilities [ 923.766046][T13422] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 923.816800][T13422] usb 2-1: device descriptor read/8, error -71 [ 924.066153][T13422] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 924.096792][T13422] usb 2-1: device descriptor read/8, error -71 [ 924.216389][T13422] usb usb2-port1: unable to enumerate USB device [ 924.277774][T17090] fuse: Bad value for 'fd' [ 924.746050][T13422] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 924.916012][T13422] usb 5-1: Using ep0 maxpacket: 8 [ 924.934781][T13422] usb 5-1: unable to get BOS descriptor or descriptor too short [ 924.945661][T13422] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 924.954392][T13422] usb 5-1: config 7 has no interface number 0 [ 924.973618][T13422] usb 5-1: string descriptor 0 read error: -22 [ 924.980539][T13422] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 924.991803][T13422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.824244][T13422] usb 4-1: USB disconnect, device number 16 [ 926.506024][T13422] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 926.685993][T13422] usb 3-1: device descriptor read/64, error -71 [ 926.945967][T13422] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 927.147338][T13422] usb 3-1: device descriptor read/64, error -71 [ 927.277637][T13422] usb usb3-port1: attempt power cycle [ 927.645961][T13422] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 927.686671][T13422] usb 3-1: device descriptor read/8, error -71 [ 927.745676][ T5879] usb 5-1: USB disconnect, device number 20 [ 927.926950][T13422] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 927.966754][T13422] usb 3-1: device descriptor read/8, error -71 [ 928.034298][T17133] FAULT_INJECTION: forcing a failure. [ 928.034298][T17133] name failslab, interval 1, probability 0, space 0, times 0 [ 928.050216][T17133] CPU: 1 UID: 0 PID: 17133 Comm: syz.0.2542 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 928.050248][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 928.050262][T17133] Call Trace: [ 928.050270][T17133] [ 928.050280][T17133] dump_stack_lvl+0x189/0x250 [ 928.050319][T17133] ? __pfx____ratelimit+0x10/0x10 [ 928.050351][T17133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 928.050386][T17133] ? __pfx__printk+0x10/0x10 [ 928.050414][T17133] ? __pfx___might_resched+0x10/0x10 [ 928.050435][T17133] ? fs_reclaim_acquire+0x7d/0x100 [ 928.050467][T17133] should_fail_ex+0x414/0x560 [ 928.050506][T17133] should_failslab+0xa8/0x100 [ 928.050533][T17133] __kmalloc_noprof+0xcb/0x4f0 [ 928.050555][T17133] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 928.050594][T17133] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 928.050645][T17133] genl_family_rcv_msg_doit+0xb8/0x300 [ 928.050685][T17133] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 928.050717][T17133] ? __pfx___mutex_lock+0x10/0x10 [ 928.050751][T17133] ? __pfx_genl_get_cmd+0x10/0x10 [ 928.050779][T17133] ? __pfx_tipc_nl_bearer_add+0x10/0x10 [ 928.050831][T17133] genl_rcv_msg+0x60e/0x790 [ 928.050869][T17133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 928.050899][T17133] ? __pfx_tipc_nl_bearer_add+0x10/0x10 [ 928.050951][T17133] netlink_rcv_skb+0x208/0x470 [ 928.050977][T17133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 928.051008][T17133] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 928.051053][T17133] ? down_read+0x1ad/0x2e0 [ 928.051077][T17133] genl_rcv+0x28/0x40 [ 928.051105][T17133] netlink_unicast+0x75b/0x8d0 [ 928.051140][T17133] netlink_sendmsg+0x805/0xb30 [ 928.051176][T17133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.051206][T17133] ? aa_sock_msg_perm+0x94/0x160 [ 928.051240][T17133] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 928.051269][T17133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.051296][T17133] __sock_sendmsg+0x219/0x270 [ 928.051333][T17133] ____sys_sendmsg+0x505/0x830 [ 928.051367][T17133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 928.051404][T17133] ? import_iovec+0x74/0xa0 [ 928.051436][T17133] ___sys_sendmsg+0x21f/0x2a0 [ 928.051465][T17133] ? __pfx____sys_sendmsg+0x10/0x10 [ 928.051534][T17133] ? __fget_files+0x2a/0x420 [ 928.051558][T17133] ? __fget_files+0x3a0/0x420 [ 928.051596][T17133] __x64_sys_sendmsg+0x19b/0x260 [ 928.051626][T17133] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 928.051671][T17133] ? __pfx_ksys_write+0x10/0x10 [ 928.051690][T17133] ? rcu_is_watching+0x15/0xb0 [ 928.051716][T17133] ? do_syscall_64+0xbe/0x3b0 [ 928.051754][T17133] do_syscall_64+0xfa/0x3b0 [ 928.051785][T17133] ? lockdep_hardirqs_on+0x9c/0x150 [ 928.051815][T17133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.051837][T17133] ? clear_bhb_loop+0x60/0xb0 [ 928.051863][T17133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.051885][T17133] RIP: 0033:0x7f79d9d8e929 [ 928.051905][T17133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.051924][T17133] RSP: 002b:00007f79dabbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.051947][T17133] RAX: ffffffffffffffda RBX: 00007f79d9fb5fa0 RCX: 00007f79d9d8e929 [ 928.051963][T17133] RDX: 0000000020000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 928.051978][T17133] RBP: 00007f79dabbf090 R08: 0000000000000000 R09: 0000000000000000 [ 928.051992][T17133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.052006][T17133] R13: 0000000000000000 R14: 00007f79d9fb5fa0 R15: 00007f79da0dfa28 [ 928.052040][T17133] [ 928.414020][T13422] usb usb3-port1: unable to enumerate USB device [ 928.566658][ T5879] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 928.719455][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 928.798179][ T5879] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 928.819974][ T5879] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 928.900207][ T5879] usb 5-1: config 166 has no interface number 0 [ 928.927797][ T5879] usb 5-1: config 166 has no interface number 1 [ 928.974212][ T5879] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 929.026213][ T5879] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 929.082811][ T5879] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 929.199314][ T5879] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 929.323417][ T5879] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 929.395206][ T5879] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 929.421915][ T5879] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 929.470915][ T5879] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 929.528066][ T5879] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 929.573483][ T5879] usb 5-1: config 166 interface 177 has no altsetting 0 [ 929.592660][ T5879] usb 5-1: config 166 interface 34 has no altsetting 0 [ 929.619383][ T5879] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 929.633637][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.661742][ T5879] usb 5-1: Product: syz [ 929.678414][ T5879] usb 5-1: Manufacturer: syz [ 929.693058][ T5879] usb 5-1: SerialNumber: syz [ 929.926484][ T977] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 929.962426][ T5879] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 929.975780][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 930.115917][ T977] usb 3-1: device descriptor read/64, error -32 [ 930.211697][ T5879] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 930.374317][ T977] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 930.467936][ T5879] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 930.598865][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 930.615616][ T977] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 930.686113][ T977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 930.696951][ T977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 930.707692][ T977] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 930.836285][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 930.863891][ T977] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 930.902152][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.002428][ T5879] usb 5-1: Found UVC 0.00 device syz (0bda:0138) [ 931.007320][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 931.019782][ T5879] usb 5-1: No valid video chain found. [ 931.053874][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.085460][ T5879] usb 5-1: USB disconnect, device number 21 [ 931.091004][ T24] usb 4-1: config 0 has no interfaces? [ 931.125506][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 931.178832][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.220953][ T24] usb 4-1: Product: syz [ 931.255938][ T24] usb 4-1: Manufacturer: syz [ 931.280172][ T24] usb 4-1: SerialNumber: syz [ 931.408105][ T24] usb 4-1: config 0 descriptor?? [ 931.501767][ T977] usb 3-1: GET_CAPABILITIES returned 0 [ 931.542702][ T977] usbtmc 3-1:16.0: can't read capabilities [ 931.692610][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.699210][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.739598][T17178] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2551'. [ 931.749215][T17178] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2551'. [ 933.396322][ T977] usb 3-1: USB disconnect, device number 14 [ 933.714515][ T977] usb 4-1: USB disconnect, device number 17 [ 934.225603][T17212] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 936.150608][T17232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.161756][T17232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.525980][ T24] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 936.694367][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 936.707239][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 936.717208][ T24] usb 5-1: can't read configurations, error -71 [ 937.467072][T17262] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 937.513926][T17263] trusted_key: encrypted_key: insufficient parameters specified [ 937.577445][T17266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 937.584763][T17266] IPv6: NLM_F_CREATE should be set when creating new route [ 937.592153][T17266] IPv6: NLM_F_CREATE should be set when creating new route [ 937.821176][T17276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2577'. [ 938.097313][T17280] tipc: Enabling of bearer rejected, already enabled [ 940.063974][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 940.063994][ T30] audit: type=1326 audit(1749073656.683:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.0.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d9d8e929 code=0x7ffc0000 [ 940.136794][ T30] audit: type=1326 audit(1749073656.723:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.0.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f79d9d8e929 code=0x7ffc0000 [ 940.227713][ T30] audit: type=1326 audit(1749073656.743:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.0.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d9d8e929 code=0x7ffc0000 [ 940.250175][ C1] vkms_vblank_simulate: vblank timer overrun [ 940.376300][ T30] audit: type=1326 audit(1749073656.793:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.0.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79d9d8e929 code=0x7ffc0000 [ 940.490174][ T30] audit: type=1326 audit(1749073656.843:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.0.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d9d8e929 code=0x7ffc0000 [ 940.629073][ T30] audit: type=1326 audit(1749073656.843:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.0.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d9d8e929 code=0x7ffc0000 [ 940.651467][ C1] vkms_vblank_simulate: vblank timer overrun [ 940.667835][ T30] audit: type=1326 audit(1749073657.293:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.0.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79d9d8e929 code=0x7ffc0000 [ 940.690946][ T30] audit: type=1326 audit(1749073657.313:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.0.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d9d8e929 code=0x7ffc0000 [ 940.713921][ T30] audit: type=1326 audit(1749073657.333:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.0.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d9d8e929 code=0x7ffc0000 [ 940.736277][ C1] vkms_vblank_simulate: vblank timer overrun [ 940.875911][ T977] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 941.107814][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 941.134953][ T977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 941.209414][ T977] usb 5-1: no configurations [ 941.214118][ T977] usb 5-1: can't read configurations, error -22 [ 941.276466][T17321] trusted_key: encrypted_key: insufficient parameters specified [ 941.385958][ T977] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 941.546045][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 941.616171][ T977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 941.636542][ T977] usb 5-1: no configurations [ 941.654248][ T977] usb 5-1: can't read configurations, error -22 [ 941.679466][ T977] usb usb5-port1: attempt power cycle [ 942.047469][T17338] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 942.091872][ T977] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 942.124980][T17340] loop8: detected capacity change from 0 to 7 [ 942.126823][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 942.144876][T17340] Dev loop8: unable to read RDB block 7 [ 942.153181][ T977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 942.166274][ T977] usb 5-1: no configurations [ 942.170981][ T977] usb 5-1: can't read configurations, error -22 [ 942.240890][T17340] loop8: AHDI p1 p3 p4 [ 942.245380][T17340] loop8: partition table partially beyond EOD, truncated [ 942.266162][T17340] loop8: p1 start 975770946 is beyond EOD, truncated [ 942.266327][T10286] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 942.272928][T17340] loop8: p3 start 6514546 is beyond EOD, truncated [ 942.346074][ T977] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 942.387078][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 942.401050][ T977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 942.409859][ T977] usb 5-1: no configurations [ 942.414480][ T977] usb 5-1: can't read configurations, error -22 [ 942.775608][ T977] usb usb5-port1: unable to enumerate USB device [ 942.795956][T10286] usb 4-1: Using ep0 maxpacket: 8 [ 942.803234][T10286] usb 4-1: unable to get BOS descriptor or descriptor too short [ 942.812688][T10286] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 942.885068][T10286] usb 4-1: config 7 has no interface number 0 [ 943.093575][T10286] usb 4-1: string descriptor 0 read error: -22 [ 943.100310][T10286] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 943.116162][T10286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.501045][T17348] netlink: 'syz.1.2593': attribute type 2 has an invalid length. [ 943.512999][T17348] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2593'. [ 943.726232][ T5883] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 943.888191][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.898682][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 943.910350][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 943.920304][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 943.936095][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 943.945413][ T5883] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 943.953594][ T24] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 943.961403][ T5883] usb 3-1: Manufacturer: syz [ 943.969057][ T5883] usb 3-1: config 0 descriptor?? [ 944.096081][ T24] usb 5-1: device descriptor read/64, error -71 [ 944.240055][ T5883] rc_core: IR keymap rc-hauppauge not found [ 944.250694][ T5883] Registered IR keymap rc-empty [ 944.255757][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 944.276072][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 944.297167][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 944.312084][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input151 [ 944.330448][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 944.356286][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 944.375934][ T24] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 944.408080][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 944.436227][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 944.456657][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 944.486251][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 944.506967][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 944.516038][ T24] usb 5-1: device descriptor read/64, error -71 [ 944.529323][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 944.556132][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 944.577569][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 944.600189][ T5883] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 944.612564][ T5883] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 944.646595][ T24] usb usb5-port1: attempt power cycle [ 944.714963][ T5883] usb 4-1: USB disconnect, device number 19 [ 944.823688][T10286] usb 3-1: USB disconnect, device number 15 [ 945.006193][ T24] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 945.047209][ T24] usb 5-1: device descriptor read/8, error -71 [ 945.166179][ T5883] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 945.296785][ T24] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 945.346090][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 945.358164][ T24] usb 5-1: device descriptor read/8, error -71 [ 945.368082][ T5883] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.396142][ T5883] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 945.431378][ T5883] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 945.461579][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.473349][ T24] usb usb5-port1: unable to enumerate USB device [ 945.504261][ T5883] usb 4-1: Product: syz [ 945.524092][ T5883] usb 4-1: Manufacturer: syz [ 945.545853][ T5883] usb 4-1: SerialNumber: syz [ 945.617761][T17368] trusted_key: encrypted_key: insufficient parameters specified [ 945.804453][T17358] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2596'. [ 946.021115][ T5883] usb 4-1: 0:2 : does not exist [ 946.755502][ T24] usb 4-1: USB disconnect, device number 20 [ 948.036194][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 948.077456][ T9599] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.095986][T17407] FAULT_INJECTION: forcing a failure. [ 948.095986][T17407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.106181][ T9599] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 948.121536][T17407] CPU: 1 UID: 0 PID: 17407 Comm: syz.0.2611 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 948.121567][T17407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 948.121580][T17407] Call Trace: [ 948.121590][T17407] [ 948.121599][T17407] dump_stack_lvl+0x189/0x250 [ 948.121640][T17407] ? __pfx____ratelimit+0x10/0x10 [ 948.121672][T17407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 948.121705][T17407] ? __pfx__printk+0x10/0x10 [ 948.121730][T17407] ? __might_fault+0xb0/0x130 [ 948.121765][T17407] should_fail_ex+0x414/0x560 [ 948.121802][T17407] _copy_from_user+0x2d/0xb0 [ 948.121830][T17407] snd_pcm_oss_write+0x84f/0x11a0 [ 948.121883][T17407] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 948.121917][T17407] ? bpf_lsm_file_permission+0x9/0x20 [ 948.121955][T17407] ? security_file_permission+0x75/0x290 [ 948.121986][T17407] ? rw_verify_area+0x258/0x650 [ 948.122020][T17407] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 948.122054][T17407] vfs_write+0x27b/0xa90 [ 948.122085][T17407] ? __pfx_vfs_write+0x10/0x10 [ 948.122107][T17407] ? __fget_files+0x2a/0x420 [ 948.122136][T17407] ? __fget_files+0x2a/0x420 [ 948.122160][T17407] ? __fget_files+0x3a0/0x420 [ 948.122183][T17407] ? __fget_files+0x2a/0x420 [ 948.122218][T17407] ksys_write+0x145/0x250 [ 948.122243][T17407] ? __pfx_ksys_write+0x10/0x10 [ 948.122261][T17407] ? rcu_is_watching+0x15/0xb0 [ 948.122287][T17407] ? do_syscall_64+0xbe/0x3b0 [ 948.122325][T17407] do_syscall_64+0xfa/0x3b0 [ 948.122356][T17407] ? lockdep_hardirqs_on+0x9c/0x150 [ 948.122387][T17407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.122409][T17407] ? clear_bhb_loop+0x60/0xb0 [ 948.122437][T17407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.122458][T17407] RIP: 0033:0x7f79d9d8e929 [ 948.122477][T17407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.122498][T17407] RSP: 002b:00007f79dabbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 948.122521][T17407] RAX: ffffffffffffffda RBX: 00007f79d9fb5fa0 RCX: 00007f79d9d8e929 [ 948.122542][T17407] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 948.122557][T17407] RBP: 00007f79dabbf090 R08: 0000000000000000 R09: 0000000000000000 [ 948.122570][T17407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 948.122583][T17407] R13: 0000000000000000 R14: 00007f79d9fb5fa0 R15: 00007f79da0dfa28 [ 948.122617][T17407] [ 948.246964][T10286] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 948.247353][ C1] vkms_vblank_simulate: vblank timer overrun [ 948.325957][ C0] ------------[ cut here ]------------ [ 948.332688][ C1] vkms_vblank_simulate: vblank timer overrun [ 948.340927][ C0] refcount_t: addition on 0; use-after-free. [ 948.399482][ C0] WARNING: CPU: 0 PID: 977 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 948.408760][ C0] Modules linked in: [ 948.412902][ C0] CPU: 0 UID: 0 PID: 977 Comm: kworker/0:2 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 948.424564][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 948.434658][ C0] Workqueue: events drain_vmap_area_work [ 948.440321][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 948.446414][ C0] Code: 00 00 e8 a9 76 00 fd 5b 41 5e e9 d1 a3 a7 06 cc e8 9b 76 00 fd c6 05 9a 09 cb 0a 01 90 48 c7 c7 c0 27 e2 8b e8 37 24 c4 fc 90 <0f> 0b 90 90 eb d7 e8 7b 76 00 fd c6 05 7b 09 cb 0a 01 90 48 c7 c7 [ 948.448921][ C1] vkms_vblank_simulate: vblank timer overrun [ 948.466134][ C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010246 [ 948.472169][ C1] vkms_vblank_simulate: vblank timer overrun [ 948.478191][ C0] RAX: d598c6137ec2fc00 RBX: 0000000000000002 RCX: ffff888025c55a00 [ 948.492218][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 948.500275][ C0] RBP: ffffc900000079b0 R08: ffffc90000007547 R09: 1ffff92000000ea8 [ 948.508401][ C0] R10: dffffc0000000000 R11: fffff52000000ea9 R12: ffff8880286bc100 [ 948.508513][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 948.516425][ C0] R13: dffffc0000000000 R14: ffff8880286bc26c R15: ffff8880468bf000 [ 948.516450][ C0] FS: 0000000000000000(0000) GS:ffff888125c5c000(0000) knlGS:0000000000000000 [ 948.516470][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.516485][ C0] CR2: 00007f79dab9ed58 CR3: 000000007e560000 CR4: 00000000003526f0 [ 948.516507][ C0] DR0: 00000000000000f8 DR1: 0000000000000000 DR2: 0000000000000000 [ 948.516522][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 948.516538][ C0] Call Trace: [ 948.516549][ C0] [ 948.516561][ C0] tipc_crypto_xmit+0x1820/0x22c0 [ 948.516615][ C0] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 948.516679][ C0] tipc_bearer_xmit_skb+0x245/0x400 [ 948.539808][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 948.545691][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 948.562353][ T24] usb 2-1: config 7 has an invalid interface number: 67 but max is 0 [ 948.569754][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 948.569811][ C0] tipc_disc_timeout+0x580/0x6d0 [ 948.569850][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 948.569901][ C1] ------------[ cut here ]------------ [ 948.569901][ C0] call_timer_fn+0x17e/0x5f0 [ 948.569913][ C1] refcount_t: saturated; leaking memory. [ 948.569935][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 948.569968][ C0] ? call_timer_fn+0xbe/0x5f0 [ 948.570001][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 948.570044][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 948.570076][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 948.570109][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 948.570145][ C0] __run_timer_base+0x61a/0x860 [ 948.570175][ C0] ? ktime_get+0x3e/0x1f0 [ 948.570214][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 948.570243][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 948.570289][ C0] run_timer_softirq+0xb7/0x180 [ 948.570321][ C0] handle_softirqs+0x283/0x870 [ 948.570362][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 948.570405][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 948.570447][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 948.570481][ C0] __irq_exit_rcu+0xca/0x1f0 [ 948.570517][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 948.570564][ C0] irq_exit_rcu+0x9/0x30 [ 948.570597][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 948.570639][ C0] [ 948.570650][ C0] [ 948.570661][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 948.570657][ C1] WARNING: CPU: 1 PID: 24 at lib/refcount.c:22 refcount_warn_saturate+0x17d/0x1d0 [ 948.570698][ C1] Modules linked in: [ 948.570688][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 948.570706][ C1] [ 948.570727][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 60 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 0b 74 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 f0 73 0b [ 948.570746][ C0] RSP: 0018:ffffc900038ff820 EFLAGS: 00000293 [ 948.570742][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 948.570763][ C0] [ 948.570771][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 948.570773][ C0] RAX: ffffffff81b4e880 RBX: ffff8880b863cb40 RCX: ffff888025c55a00 [ 948.570788][ C1] Workqueue: usb_hub_wq hub_event [ 948.570793][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 948.570811][ C1] [ 948.570808][ C0] RBP: ffffc900038ff978 R08: ffffffff8fa0f5f7 R09: 1ffffffff1f41ebe [ 948.570821][ C1] RIP: 0010:refcount_warn_saturate+0x17d/0x1d0 [ 948.570828][ C0] R10: dffffc0000000000 R11: fffffbfff1f41ebf R12: 1ffff110170e828d [ 948.570848][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b8741468 [ 948.570853][ C1] Code: 8b e8 d7 23 c4 fc 90 0f 0b 90 90 e9 74 ff ff ff e8 18 76 00 fd c6 05 16 09 cb 0a 01 90 48 c7 c7 60 27 e2 8b e8 b4 23 c4 fc 90 <0f> 0b 90 90 e9 51 ff ff ff e8 f5 75 00 fd c6 05 f7 08 cb 0a 01 90 [ 948.570900][ C1] RSP: 0018:ffffc90000a08828 EFLAGS: 00010246 [ 948.570895][ C0] ? smp_call_function_many_cond+0xf80/0x12d0 [ 948.570917][ C1] [ 948.570925][ C1] RAX: b1d614115ea71100 RBX: 0000000000000001 RCX: ffff88801d6f0000 [ 948.570945][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 948.570962][ C1] RBP: ffffc90000a089b0 R08: ffffffff8fa0f5f7 R09: 1ffffffff1f41ebe [ 948.570961][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 948.570981][ C1] R10: dffffc0000000000 R11: fffffbfff1f41ebf R12: ffff8880286bc100 [ 948.571002][ C1] R13: dffffc0000000000 R14: ffff8880286bc26c R15: ffff88806d90a400 [ 948.571021][ C1] FS: 0000000000000000(0000) GS:ffff888125d5c000(0000) knlGS:0000000000000000 [ 948.571022][ C0] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 948.571043][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.571061][ C1] CR2: 00007f79dab9bf70 CR3: 0000000029b0e000 CR4: 00000000003526f0 [ 948.571052][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 948.571082][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 948.571099][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 948.571094][ C0] flush_tlb_kernel_range+0x45f/0x470 [ 948.571116][ C1] Call Trace: [ 948.571128][ C1] [ 948.571131][ C0] __purge_vmap_area_lazy+0x4e3/0xb40 [ 948.571141][ C1] tipc_crypto_xmit+0x1820/0x22c0 [ 948.571172][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 948.571195][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 948.571214][ C0] drain_vmap_area_work+0x27/0x40 [ 948.571243][ C1] tipc_bearer_xmit_skb+0x245/0x400 [ 948.571246][ C0] process_scheduled_works+0xade/0x17b0 [ 948.571293][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 948.571327][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 948.571330][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 948.571379][ C1] tipc_disc_timeout+0x580/0x6d0 [ 948.571385][ C0] worker_thread+0x8a0/0xda0 [ 948.571421][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 948.571438][ C0] kthread+0x711/0x8a0 [ 948.571470][ C0] ? __pfx_worker_thread+0x10/0x10 [ 948.571474][ C1] call_timer_fn+0x17e/0x5f0 [ 948.571493][ C0] ? __pfx_kthread+0x10/0x10 [ 948.571507][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 948.571525][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 948.571540][ C1] ? call_timer_fn+0xbe/0x5f0 [ 948.571558][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 948.571572][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 948.571591][ C0] ? __pfx_kthread+0x10/0x10 [ 948.571616][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 948.571621][ C0] ret_from_fork+0x3f9/0x770 [ 948.571648][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 948.571666][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 948.571681][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 948.571708][ C0] ? __switch_to_asm+0x39/0x70 [ 948.571717][ C1] __run_timer_base+0x61a/0x860 [ 948.571735][ C0] ? __switch_to_asm+0x33/0x70 [ 948.571748][ C1] ? ktime_get+0x3e/0x1f0 [ 948.571759][ C0] ? __pfx_kthread+0x10/0x10 [ 948.571790][ C0] ret_from_fork_asm+0x1a/0x30 [ 948.571788][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 948.571818][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 948.571833][ C0] [ 948.571846][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 948.571862][ C0] CPU: 0 UID: 0 PID: 977 Comm: kworker/0:2 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 948.571888][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 948.571905][ C0] Workqueue: events drain_vmap_area_work [ 948.571936][ C0] Call Trace: [ 948.571946][ C0] [ 948.571955][ C0] dump_stack_lvl+0x99/0x250 [ 948.571992][ C0] ? __asan_memcpy+0x40/0x70 [ 948.572026][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 948.572062][ C0] ? __pfx__printk+0x10/0x10 [ 948.572102][ C0] panic+0x2db/0x790 [ 948.572144][ C0] ? __pfx_panic+0x10/0x10 [ 948.572175][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 948.572222][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 948.572253][ C0] __warn+0x31b/0x4b0 [ 948.572285][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 948.572316][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 948.572345][ C0] report_bug+0x2be/0x4f0 [ 948.572380][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 948.572408][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 948.572455][ C0] ? refcount_warn_saturate+0xfc/0x1d0 [ 948.572484][ C0] handle_bug+0x84/0x160 [ 948.572509][ C0] exc_invalid_op+0x1a/0x50 [ 948.572533][ C0] asm_exc_invalid_op+0x1a/0x20 [ 948.572555][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 948.572586][ C0] Code: 00 00 e8 a9 76 00 fd 5b 41 5e e9 d1 a3 a7 06 cc e8 9b 76 00 fd c6 05 9a 09 cb 0a 01 90 48 c7 c7 c0 27 e2 8b e8 37 24 c4 fc 90 <0f> 0b 90 90 eb d7 e8 7b 76 00 fd c6 05 7b 09 cb 0a 01 90 48 c7 c7 [ 948.572605][ C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010246 [ 948.572626][ C0] RAX: d598c6137ec2fc00 RBX: 0000000000000002 RCX: ffff888025c55a00 [ 948.572649][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 948.572664][ C0] RBP: ffffc900000079b0 R08: ffffc90000007547 R09: 1ffff92000000ea8 [ 948.572683][ C0] R10: dffffc0000000000 R11: fffff52000000ea9 R12: ffff8880286bc100 [ 948.572702][ C0] R13: dffffc0000000000 R14: ffff8880286bc26c R15: ffff8880468bf000 [ 948.572739][ C0] ? refcount_warn_saturate+0xf9/0x1d0 [ 948.572769][ C0] tipc_crypto_xmit+0x1820/0x22c0 [ 948.572820][ C0] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 948.572866][ C0] tipc_bearer_xmit_skb+0x245/0x400 [ 948.572902][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 948.572938][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 948.572987][ C0] tipc_disc_timeout+0x580/0x6d0 [ 948.573028][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 948.573081][ C0] call_timer_fn+0x17e/0x5f0 [ 948.573113][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 948.573146][ C0] ? call_timer_fn+0xbe/0x5f0 [ 948.573178][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 948.573222][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 948.573254][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 948.573286][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 948.573322][ C0] __run_timer_base+0x61a/0x860 [ 948.573352][ C0] ? ktime_get+0x3e/0x1f0 [ 948.573392][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 948.573419][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 948.573467][ C0] run_timer_softirq+0xb7/0x180 [ 948.573499][ C0] handle_softirqs+0x283/0x870 [ 948.573541][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 948.573584][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 948.573628][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 948.573668][ C0] __irq_exit_rcu+0xca/0x1f0 [ 948.573704][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 948.573752][ C0] irq_exit_rcu+0x9/0x30 [ 948.573785][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 948.573818][ C0] [ 948.573827][ C0] [ 948.573838][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 948.573864][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 948.573902][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 60 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 0b 74 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 f0 73 0b [ 948.573922][ C0] RSP: 0018:ffffc900038ff820 EFLAGS: 00000293 [ 948.573942][ C0] RAX: ffffffff81b4e880 RBX: ffff8880b863cb40 RCX: ffff888025c55a00 [ 948.573961][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 948.573975][ C0] RBP: ffffc900038ff978 R08: ffffffff8fa0f5f7 R09: 1ffffffff1f41ebe [ 948.573993][ C0] R10: dffffc0000000000 R11: fffffbfff1f41ebf R12: 1ffff110170e828d [ 948.574011][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b8741468 [ 948.574035][ C0] ? smp_call_function_many_cond+0xf80/0x12d0 [ 948.574095][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 948.574150][ C0] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 948.574187][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 948.574224][ C0] flush_tlb_kernel_range+0x45f/0x470 [ 948.574254][ C0] __purge_vmap_area_lazy+0x4e3/0xb40 [ 948.574293][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 948.574335][ C0] drain_vmap_area_work+0x27/0x40 [ 948.574367][ C0] process_scheduled_works+0xade/0x17b0 [ 948.574440][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 948.574498][ C0] worker_thread+0x8a0/0xda0 [ 948.574552][ C0] kthread+0x711/0x8a0 [ 948.574586][ C0] ? __pfx_worker_thread+0x10/0x10 [ 948.574608][ C0] ? __pfx_kthread+0x10/0x10 [ 948.574649][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 948.574682][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 948.574715][ C0] ? __pfx_kthread+0x10/0x10 [ 948.574745][ C0] ret_from_fork+0x3f9/0x770 [ 948.574785][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 948.574827][ C0] ? __switch_to_asm+0x39/0x70 [ 948.574852][ C0] ? __switch_to_asm+0x33/0x70 [ 948.574876][ C0] ? __pfx_kthread+0x10/0x10 [ 948.574905][ C0] ret_from_fork_asm+0x1a/0x30 [ 948.574950][ C0] [ 948.577833][ C0] Kernel Offset: disabled