last executing test programs: 5.713542994s ago: executing program 0 (id=3308): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r1}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r2) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002007c1040206402d14e0102030109021b000100b23400090400000190f19c00090584"], 0x0) 4.835927821s ago: executing program 2 (id=3316): r0 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000720ab5b2509b86803000aab087a0400000001e2bb93210001c0", 0x20) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d800800"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000340)={r4, r4, r4}, &(0x7f0000000040)=""/94, 0x5e, &(0x7f0000000240)={&(0x7f00000000c0)={'crc32c\x00'}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e967c540b1134200f48c0102030109021b0001000000000904571ccc49f9710009050235bc"], 0x0) r6 = fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)=')\x00', &(0x7f0000000280)='cbq\x00', 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001400)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4c, 0x2, [@TCA_FW_POLICE={0x48, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x20000000, 0x7fffffff, 0x101, 0x7, {0x21, 0x1, 0x2, 0xc0, 0x9}, {0xfb, 0x2, 0x7ff, 0x3, 0xfff2, 0x8}, 0x4, 0x1e, 0x8}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_route_sched_retired(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=@deltclass={0x548, 0x29, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff2, 0xd}, {0xf, 0x5}, {0xf, 0xfff3}}, [@c_cbq={{0x8}, {0x4b0, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xf9, 0x2, 0x7, 0x1, 0x3ff, 0x73e7}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x80, 0x6, 0x0, 0x8, 0x1, 0x7}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xd7, 0x1, 0x5, 0x3, 0x0, 0x80000001}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x18, 0x2b, 0x700, 0x401, 0x7fff, 0x5, 0xa, 0x2, 0x548f, 0xdcb1, 0x4, 0x8, 0x4, 0x2, 0x4, 0x4, 0x3c21ab3e, 0x0, 0x5, 0x80000000, 0x4, 0x4, 0x8, 0xfffffffc, 0x1, 0x1, 0xff, 0x6, 0x9, 0x8db, 0x0, 0x2, 0x0, 0x4ac, 0xb3, 0x9, 0xfffffffe, 0xc3b7, 0x0, 0x7, 0x48, 0xae3, 0x200, 0x8, 0x5, 0x10, 0x7, 0x6, 0x8001, 0x2, 0x7fffffff, 0x10001, 0x1, 0x8001, 0x6, 0x4, 0x4, 0xed6b21d, 0x9, 0x9, 0x7fff, 0x80000001, 0x83d, 0x3ff, 0xfffffff7, 0xffffdbf3, 0x27, 0x3, 0xffffff00, 0x1, 0x80000001, 0xffffff80, 0xaa, 0x6, 0x50260bb6, 0x80000000, 0x7, 0x6, 0x0, 0x5, 0x1, 0x10001, 0x8, 0xfffffff6, 0x9, 0x7ff, 0x81, 0x3, 0x8, 0x401, 0xd2, 0xd6, 0x800, 0x1ff, 0x9, 0x400, 0x81, 0x8, 0x2, 0xffffffff, 0x4, 0x2, 0x3, 0x9, 0x57e9, 0x400, 0x4, 0x7f, 0x9c, 0x8, 0x1, 0x109233a6, 0xc2, 0x3, 0x0, 0x10, 0x2, 0x7, 0x4, 0x8, 0x27d, 0x6, 0x8, 0x3, 0x341d, 0x1, 0x4, 0x8a, 0xe862, 0x91, 0x1, 0x9950, 0x0, 0x100, 0x2, 0x3, 0xc, 0x4, 0x1, 0x5, 0x8000, 0x800, 0x8, 0x10001, 0x0, 0x8, 0x0, 0x7f, 0x8, 0x5, 0x10, 0x0, 0x3, 0x7, 0x8, 0x2, 0x1ff, 0xffff, 0x4, 0x2, 0x5, 0x9, 0x5, 0x6, 0x8, 0x5, 0x6, 0x5, 0x6, 0x400, 0xad64, 0x9, 0x100, 0xe8, 0xfffffffe, 0x2, 0x1ff, 0x8, 0xfffffff7, 0x775e823f, 0x47c, 0x5, 0x5, 0xf, 0x21f, 0x1, 0x2, 0x0, 0x5, 0xd4, 0xfffffffe, 0xffffbe76, 0xff, 0x131d, 0x5e, 0x1, 0x0, 0x4, 0x10000, 0x80, 0xffffff01, 0x4, 0xdbe, 0x200, 0x2, 0x9, 0x5b12, 0xff, 0x80000000, 0x3, 0xffffff18, 0xfffffffe, 0x800, 0x3, 0x4, 0xa, 0x2, 0x10, 0x7, 0x0, 0x7, 0x0, 0x9, 0x3, 0x3, 0x8, 0x7d04, 0xfc, 0x81, 0x0, 0xf13, 0x3, 0x3, 0x2, 0x7f, 0x6, 0x8b, 0x0, 0xfffffff8, 0x401, 0x2a5d, 0x1, 0x4, 0x8, 0xff, 0x3, 0x3ff, 0x7fffffff, 0x200, 0xffff, 0x8, 0xf7b, 0x1, 0x4, 0x1ff, 0x7]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xe, 0x2, 0x1b, 0x3, 0xd79b, 0x7, 0x0, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x3, 0x9, 0x1, 0x401, 0x7fffffff, 0x6, 0xfffffffd}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xe, 0xfff2}, 0x0, 0x5}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2f, 0x0, 0x1f, 0x0, 0x7, 0x9bc, 0x0, 0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0xe, 0x2, 0x7, 0xc3a, 0x7, 0xae2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x3, 0x7}, 0x6ea, 0x5}}]}}, @c_cbq={{0x8}, {0x64, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x21, 0x1, 0x1f, 0x34, 0x9, 0x8000, 0xfffffd3c, 0xfff}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x11, 0x3, 0xb, 0x4, 0x3, 0x3ff, 0x9, 0xf}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xfa, 0x6, 0x3, 0x8, 0xa51, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff2, 0xa}, 0x18f, 0x1}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf7, 0x7, 0xfd, 0x5, 0x3, 0x1a0000}}]}}]}, 0x548}, 0x1, 0x0, 0x0, 0x10004840}, 0x880) 4.646152837s ago: executing program 1 (id=3319): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e40)}], 0x1, &(0x7f00000006c0)=[@assoc={0x10, 0x117, 0x4, 0x1}], 0x10, 0x20002885}], 0x1, 0x4020010) 4.609733953s ago: executing program 1 (id=3320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) capset(0x0, &(0x7f0000000000)={0x200000, 0x200002, 0x2, 0x0, 0x1, 0x4}) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38dcb98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b32abc3e09213da84b36698e5c67dbd76342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440fd7f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb52898362ddf0335810c70a4838faf8fff16301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd43749704829f54c5d93637aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63955df0591f52ef3ef5e6f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee6ae6eafa7144758fabbaa60debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6e17f0bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f20fee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc8a4240c75529dfe1c2fb75aa42d67e6b6c9a44c575738725815a9af1ced5", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x5, 0x0, {0xfffffffffffffffc, 0x8e, 0x9, 0x0, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x7, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = io_uring_setup(0x5396, &(0x7f0000000080)={0x0, 0xe8eb, 0x100, 0x3, 0x9d}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f00000008c0)=[{0x7, 0x1, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f00000001c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000540)=""/98, 0x62}, {&(0x7f00000005c0)=""/69, 0x45}], &(0x7f0000000680)=[0x9, 0x6, 0xfffffffffffff801, 0xfffffffffffffffa]}, {0x2, 0x1, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/187, 0xbb}, {&(0x7f0000000780)=""/137, 0x89}], &(0x7f0000000880)=[0x6, 0x74, 0x5, 0x0, 0x0, 0x3, 0x502f]}], 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) listen(r0, 0xfff) 3.743326947s ago: executing program 1 (id=3322): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = dup3(r3, r2, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x3ca9, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x8, &(0x7f0000000540)=0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x6, r7, &(0x7f0000000440), 0x0, 0x2a1f, 0x0, 0x5, r4}]) writev(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000130a0101000000000000000003000005090041"], 0x20}, 0x1, 0x0, 0x0, 0x2000c844}, 0x0) 3.275541164s ago: executing program 3 (id=3327): socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 3.22064113s ago: executing program 2 (id=3328): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x47c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x430, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x394, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x34c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x47c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r5, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r4, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251f97e5584ebd3ff587b283d03906d281f7415474f511d7bd3b6159af04f9d050b4f710795bfc2c1ea233becef734750a252bd481c71cc8707e125a34602a37f26929c13ad3fa7e3a8a9bfe4b8bd4a30ff136001b125d672f402474b3d4284693e01b8cd8d92008674d46b4d873a274bd2aeec93157b0c9049bdb947149d4729bb6fd749cbc87e3aeb00"/162, 0xffffffffffffffac, 0x14008885, 0x0, 0x0) 3.177721296s ago: executing program 3 (id=3329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000700)={0x0, 0x0, 0x1}, &(0x7f0000000fc0)=[{}]) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000100)={0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000006340)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup2(r5, r8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000140)={r7}, 0x8) 2.669645732s ago: executing program 4 (id=3330): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x32315241}}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000140)) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r6 = openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r10, r8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r10, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r7, 0x3b8d, &(0x7f0000000280)={0x20, r12, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r7, 0x3b80, &(0x7f0000000300)={0x8, r12}) ioctl$IOMMU_DESTROY$hwpt(r7, 0x3b80, &(0x7f0000000340)={0x8, r11}) ioctl$IOMMU_GET_HW_INFO(r7, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r10, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, &(0x7f0000000400)={0x8, r9}) ioctl$IOMMU_DESTROY$ioas(r7, 0x3b80, &(0x7f0000000440)={0x8, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x1, r8, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x8000, 0x0, 0x7, 0x2, 0x0, 0x6, 0x800001}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f00000002c0)) move_pages(0x0, 0xffffffffffffffc0, 0x0, &(0x7f0000000300), 0x0, 0x0) r13 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x40) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000e, 0x10, r13, 0xe60) 2.656348084s ago: executing program 0 (id=3331): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000009000000"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.565949549s ago: executing program 1 (id=3332): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) capset(0x0, &(0x7f0000000000)={0x200000, 0x200002, 0x2, 0x0, 0x1, 0x4}) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x5, 0x0, {0xfffffffffffffffc, 0x8e, 0x9, 0x0, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x7, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = io_uring_setup(0x5396, &(0x7f0000000080)={0x0, 0xe8eb, 0x100, 0x3, 0x9d}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f00000008c0)=[{0x7, 0x1, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f00000001c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000540)=""/98, 0x62}, {&(0x7f00000005c0)=""/69, 0x45}], &(0x7f0000000680)=[0x9, 0x6, 0xfffffffffffff801, 0xfffffffffffffffa]}, {0x2, 0x1, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/187, 0xbb}, {&(0x7f0000000780)=""/137, 0x89}], &(0x7f0000000880)=[0x6, 0x74, 0x5, 0x0, 0x0, 0x3, 0x502f]}], 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) listen(r0, 0xfff) 2.426951582s ago: executing program 0 (id=3333): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_io_uring_setup(0x1ffc, &(0x7f00000000c0)={0x0, 0xdffd, 0x10800, 0x0, 0x2e9}, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) unshare(0x2c020400) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) 2.189717057s ago: executing program 2 (id=3334): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000000500)="52d0eadef9b1160cefbb46b97f4c3822bfa38f71fa2938de2fed4e133e9b62a771398aad71d96f99c73bad4e2a2ec78fcf72aff3247df79a95c2fd1dde61c23b925e8a4b53bc26368ca1adcef241bda4ef7b4e6947e09716595eeb5ba730b661981e49fa28e797c163c71fa3ec8b5b21587f2c7a107e678201c734a2d568f845adc4abd0b690764b1ff94e3cd6dd08572f618f45f446f76f7a4a1e877091a1618348e40fe504d9f5c7a47b815a8731e9414560c33285c64c251f0a65dd06801e2073c2f72459d54ed5c7e805b472f8fae858d9656e", 0xd5}], 0x2, &(0x7f00000006c0)=[@assoc={0x10, 0x117, 0x4, 0x1}], 0x10, 0x20002885}], 0x1, 0x4020010) 2.163427379s ago: executing program 3 (id=3335): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x1, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.910472971s ago: executing program 2 (id=3336): r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x48e400, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r1 = open(&(0x7f0000000080)='./file0\x00', 0x28000, 0x100) r2 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x80) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x7, 0x0, 0xfff, 0x9, 0x1]}, &(0x7f0000000180)=0x54) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') linkat(r2, &(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x400) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x30, r1, 0x7a7cc000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe) inotify_init1(0x80000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x810, r1, 0x0) syz_io_uring_setup(0x1a2e, &(0x7f00000002c0)={0x0, 0xede2, 0x4000, 0x2, 0x1bc}, &(0x7f0000000340), &(0x7f0000000380)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) r6 = openat$nvram(0xffffff9c, &(0x7f0000000400), 0x40, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xa800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd8, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000640)) r8 = openat$vmci(0xffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r8, 0x7ac, &(0x7f0000000b00)={&(0x7f00000006c0)={{@my=0x0, 0x2}, {@hyper, 0x5}, 0x400, "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"}, 0x418, 0x2}) 1.864532764s ago: executing program 3 (id=3337): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8d69cdbd9d470f56c7ae4218d32c5d7fe44d5f0272890f24383fe450fb26ea7dcefadfa5e48e3bcf5"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x40) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, 0x0, 0x4c004) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24, 0x4}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x102, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.821927007s ago: executing program 2 (id=3338): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, 0x0, 0x0, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2207, 0x4) 1.769128588s ago: executing program 4 (id=3339): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="a32a61defe0b000000000004aa006fb073b2601d"], 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000680)={r5, 0x4, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xac, 0x3ff, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0xb29d], [0xffffffff], [0x0, 0x0, 0x0, 0x9]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000480)=r8) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x129400, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x5) ioctl$KVM_TPR_ACCESS_REPORTING(r11, 0xc028ae92, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000440)={0x9, 0x4, 0x8000, 0xffffffff, 0x6, "6b5a62a7878307bc5434a115fc7a21d43a4b71"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}}, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r13, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f0000000300)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x40020}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002d80)={'wlan1\x00'}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r13) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2001c4c0}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00', @ANYRES16=r15, @ANYBLOB="080027bd7000ffdbdf250200000008002600000000000800690004000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40c0) 1.723820619s ago: executing program 2 (id=3340): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007ada2008340312e726b23"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040961b0900000000000001090224000100004000090400d1813ca40b"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000180)="b6", 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.658803094s ago: executing program 1 (id=3341): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r1}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r2) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002007c1040206402d14e0102030109021b000100b23400090400000190f19c00090584"], 0x0) 1.570877033s ago: executing program 4 (id=3342): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = dup3(r3, r2, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x3ca9, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x8, &(0x7f0000000540)=0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x6, r7, &(0x7f0000000440), 0x0, 0x2a1f, 0x0, 0x5, r4}]) writev(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000130a0101000000000000000003000005090041"], 0x20}, 0x1, 0x0, 0x0, 0x2000c844}, 0x0) 1.461644938s ago: executing program 0 (id=3343): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0xe8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) unshare(0x2040400) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r6 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={r5, 0x2, 0x1, "fa"}, 0x9) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x10000}, &(0x7f0000000080)=0x8) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000003d00)={'NETMAP\x00'}, &(0x7f0000003d40)=0x1e) 805.46897ms ago: executing program 0 (id=3344): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES32=r3], 0x7c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x7c2}) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x20, 0xc, 0xb}, [@NDA_LLADDR={0x6, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x20000060) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x13) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 467.910627ms ago: executing program 0 (id=3345): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x47c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x430, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x394, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x34c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x47c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r5, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r4, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251f97e5584ebd3ff587b283d03906d281f7415474f511d7bd3b6159af04f9d050b4f710795bfc2c1ea233becef734750a252bd481c71cc8707e125a34602a37f26929c13ad3fa7e3a8a9bfe4b8bd4a30ff136001b125d672f402474b3d4284693e01b8cd8d92008674d46b4d873a274bd2aeec93157b0c9049bdb947149d4729bb6fd749cbc87e3aeb00"/162, 0xffffffffffffffac, 0x14008885, 0x0, 0x0) 421.122541ms ago: executing program 3 (id=3346): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_create(0x5, &(0x7f0000000080)={0x0, 0x26, 0x0, @thr={&(0x7f0000000000)="cd7e163760b50a0c4edb1d7356072ca4ace4e2c240fd25adf9f5f74e47150722dc0429bda5c2df9d7dcba1940a29f6c199b5676304", &(0x7f0000000100)="48aaf8f4199ca24b4663f1474e18715fa6157dd3141bfb98bc8636cf21b31ad1c10524ac1f46c3889f24a48bdd6c8cd52f73a8fae12f2e1a5ed8d9d57c26f1a26907645405cce8439863ea49d9318b15d64e52f92260f129b603f6dfdb6885df1cd16601ea9c3b55d9834545109b66f8714cd4991039f4215716e037321ce825ebea093480fe335ead6bbe54"}}, &(0x7f0000000240)=0x0) timer_gettime(r1, &(0x7f0000000280)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_newvlan={0x40, 0x70, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x6dc}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}]}, 0x40}}, 0x804) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x4945, 0x0, 0x2, 0x0, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x1020, 0x0, 0x0, "dd0400", 0x0, 0xffff9832}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) preadv(r11, &(0x7f0000000280)=[{&(0x7f0000000140)=""/102, 0x66}, {&(0x7f00000001c0)=""/49, 0x31}], 0x2, 0x40, 0x6) accept4(r2, &(0x7f00000002c0)=@nl, &(0x7f0000000340)=0x80, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_hci(r13, 0x0, 0x1a, &(0x7f0000001800)=""/2, &(0x7f0000001840)=0x2) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x894, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r12, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x7, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3ff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x10000, 0x86, 0x9, 0x6, 0x5, 0x9, 0xa, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95f, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x7fd, 0x3ff, 0x8, 0x4, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0xfffffffc, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x7, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2, 0x10000, 0xd, 0xffffffff, 0x9, 0x9, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x5, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0xe, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x1, 0x2, 0x6, 0x400, 0x5, 0x80, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xfff, 0x8, 0x8c, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0x8, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x3, 0xdb2, 0x0, 0xdfe, 0x1, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x8, 0x1, 0x7f, 0x8, 0x6, 0x4, 0x3, 0x0, 0x803, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x7e, 0x4, 0x4, 0xfeffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x3, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x7, 0x3, 0x6, 0x10000001, 0xfffffffb, 0xb839, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0x0, 0x5, 0xf0, 0x2490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x5, 0x4, 0xffffff95, 0x5, 0x0, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x2, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x7, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0x7fff, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xfffffffb, 0xe000000, 0x1, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}]}, 0x894}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @x25={0x3, 0x4, 0x23, "e810ff8119588629c68c13f58ae0751e955272fd1833e918c36537edec8ebb169c4f81d83284c33685f015847df77810383c54"}}, 0xd) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 210.352476ms ago: executing program 4 (id=3347): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r0, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000000500)="52d0eadef9b1160cefbb46b97f4c3822bfa38f71fa2938de2fed4e133e9b62a771398aad71d96f99c73bad4e2a2ec78fcf72aff3247df79a95c2fd1dde61c23b925e8a4b53bc26368ca1adcef241bda4ef7b4e6947e09716595eeb5ba730b661981e49fa28e797c163c71fa3ec8b5b21587f2c7a107e678201c734a2d568f845adc4abd0b690764b1ff94e3cd6dd08572f618f45f446f76f7a4a1e877091a1618348e40fe504d9f5c7a47b815a8731e9414560c33285c64c251f0a65dd06801e2073c2f72459d54ed5c7e805b472f8fae858d9656e", 0xd5}], 0x2, &(0x7f00000006c0)=[@assoc={0x10, 0x117, 0x4, 0x1}], 0x10, 0x20002885}], 0x1, 0x4020010) 141.001626ms ago: executing program 3 (id=3348): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380140002"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x1, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 80.254641ms ago: executing program 4 (id=3349): r0 = openat$vmci(0xffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000b00)={&(0x7f00000006c0)={{@my=0x0, 0x2}, {@hyper, 0x5}, 0x400, "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"}, 0x418, 0x2}) 65.692202ms ago: executing program 4 (id=3350): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 1 (id=3351): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, 0x0, 0x0, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2207, 0x4) kernel console output (not intermixed with test programs): 7.718768][T15663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 677.729393][T15663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 677.740375][T15663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 677.863963][T15663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.887937][T15663] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.917508][ T7590] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.924685][ T7590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.941343][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.948459][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.022498][T15663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.073503][T15663] veth0_vlan: entered promiscuous mode [ 678.086799][T15663] veth1_vlan: entered promiscuous mode [ 678.125185][T15663] veth0_macvtap: entered promiscuous mode [ 678.138727][T15663] veth1_macvtap: entered promiscuous mode [ 678.173566][T15663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.198463][T15663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.213297][ T5916] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 678.222165][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.231975][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.241517][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.254414][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.342170][ T7590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.350500][ T7590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.365383][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 678.377421][ T812] usb 4-1: USB disconnect, device number 86 [ 678.386655][ T5916] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 678.416100][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.434269][ T5916] usb 5-1: Product: syz [ 678.438539][ T5916] usb 5-1: Manufacturer: syz [ 678.443456][ T5916] usb 5-1: SerialNumber: syz [ 678.449882][ T5916] usb 5-1: config 0 descriptor?? [ 678.538221][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.551112][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.676657][ T5916] em28xx 5-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 678.687570][ T5916] em28xx 5-1:0.0: Device initialization failed. [ 678.697040][ T5916] em28xx 5-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 678.728227][ T5916] usb 5-1: USB disconnect, device number 69 [ 678.734414][ T5832] Bluetooth: hci4: command tx timeout [ 678.803774][T15726] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2861'. [ 679.567679][T15737] vti0: entered promiscuous mode [ 679.572652][T15737] vti0: entered allmulticast mode [ 680.128820][T15747] binder: 15741:15747 ioctl c0306201 0 returned -14 [ 680.376988][T15749] binder: 15741:15749 ioctl c0306201 0 returned -14 [ 680.414080][ T812] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 680.575465][ T812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.585899][ T812] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 680.595419][ T812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.611188][ T812] usb 4-1: config 0 descriptor?? [ 680.618265][ T812] option 4-1:0.0: GSM modem (1-port) converter detected [ 680.812918][ T5832] Bluetooth: hci4: command tx timeout [ 682.649249][T15779] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2876'. [ 682.692965][ T5916] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 682.714407][T15780] binder: 15775:15780 ioctl c0306201 0 returned -14 [ 682.725699][T15780] binder: 15775:15780 ioctl c0306201 0 returned -14 [ 682.812892][ T918] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 682.893150][ T5832] Bluetooth: hci4: command tx timeout [ 682.973267][ T918] usb 5-1: Using ep0 maxpacket: 32 [ 682.980346][ T918] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 682.997835][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.015150][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.024524][ T5916] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 683.035941][ T5916] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 683.049764][ T43] usb 4-1: USB disconnect, device number 87 [ 683.051018][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 683.064619][ T5916] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 683.088272][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.105320][ T43] option 4-1:0.0: device disconnected [ 683.114298][ T918] usb 5-1: config 0 descriptor?? [ 683.130340][ T918] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 683.199493][ T5916] usb 3-1: config 0 descriptor?? [ 683.793392][T15772] Cannot find add_set index 2 as target [ 683.803905][T15772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.833123][T15772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.897600][ T918] gspca_vc032x: reg_w err -71 [ 683.902331][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 683.908649][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 683.920337][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 683.926467][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 683.931848][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 683.952077][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 683.957461][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 683.963288][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 683.968577][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 683.977852][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 683.996901][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 684.009083][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 684.022824][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 684.036318][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 684.044810][T15796] binder: 15788:15796 ioctl c0306201 0 returned -14 [ 684.052986][T15796] binder: 15788:15796 ioctl c0306201 0 returned -14 [ 684.082185][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 684.101429][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 684.110248][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 684.117180][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 684.122695][ T918] gspca_vc032x: Unknown sensor... [ 684.131234][ T918] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 684.148334][ T918] usb 5-1: USB disconnect, device number 70 [ 684.181749][T15799] vti0: entered promiscuous mode [ 684.187787][T15799] vti0: entered allmulticast mode [ 684.292893][T15361] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 684.523960][T15361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 684.634975][T15361] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 684.645568][T15361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.654712][T15361] usb 4-1: Product: syz [ 684.659031][T15361] usb 4-1: Manufacturer: syz [ 684.667344][T15361] usb 4-1: SerialNumber: syz [ 684.673704][T15361] usb 4-1: config 0 descriptor?? [ 684.690694][T15800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.706674][T15800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.897687][T15361] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 684.929628][T15361] em28xx 4-1:0.0: Device initialization failed. [ 684.953044][T15361] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 685.022517][T15361] usb 4-1: USB disconnect, device number 88 [ 685.124068][T15805] kvm: kvm [15804]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 685.697377][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.703778][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.972997][T15240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 685.983587][T15240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 686.001257][T15240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 686.034015][T15240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 686.050505][T15240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 686.313128][ T30] audit: type=1326 audit(1761192984.119:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15819 comm="syz.3.2891" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63539 code=0x0 [ 686.391358][T15827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 686.590668][ T5916] usb 3-1: USB disconnect, device number 66 [ 686.746354][ T7657] syz_tun (unregistering): left allmulticast mode [ 686.791528][T15817] chnl_net:caif_netlink_parms(): no params data found [ 687.200479][T15817] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.210368][T15817] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.220755][T15817] bridge_slave_0: entered allmulticast mode [ 687.227963][T15817] bridge_slave_0: entered promiscuous mode [ 687.264228][T15817] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.271434][T15817] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.296648][T15817] bridge_slave_1: entered allmulticast mode [ 687.306855][T15817] bridge_slave_1: entered promiscuous mode [ 687.337275][T15817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.348544][T15817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.386261][T15817] team0: Port device team_slave_0 added [ 687.397019][T15817] team0: Port device team_slave_1 added [ 687.422360][T15817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.430055][T15817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.458227][T15849] binder: 15843:15849 ioctl c0306201 0 returned -14 [ 687.468319][T15849] binder: 15843:15849 ioctl c0306201 0 returned -14 [ 687.476772][T15817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.500639][T15817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.518165][T15817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.572810][T15817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.829680][T15817] hsr_slave_0: entered promiscuous mode [ 687.846275][T15817] hsr_slave_1: entered promiscuous mode [ 687.873323][T15817] debugfs: 'hsr0' already exists in 'hsr' [ 687.896337][T15817] Cannot create hsr debugfs directory [ 688.102909][T15240] Bluetooth: hci1: command tx timeout [ 688.166600][T15817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.177835][T15817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.213002][ T43] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 688.263941][T15817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.275712][T15817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.320252][T15817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.330743][T15817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.374904][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 688.391655][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 688.400942][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.412688][ T43] usb 5-1: Product: syz [ 688.418542][ T43] usb 5-1: Manufacturer: syz [ 688.424141][ T43] usb 5-1: SerialNumber: syz [ 688.442228][ T43] usb 5-1: config 0 descriptor?? [ 688.445201][T15860] kvm: kvm [15859]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 688.455222][T15817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.466413][T15817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.668984][ T43] em28xx 5-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 688.680485][T15817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 688.688227][ T43] em28xx 5-1:0.0: Device initialization failed. [ 688.692557][T15817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 688.706447][ T43] em28xx 5-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 688.718826][ T43] usb 5-1: USB disconnect, device number 71 [ 688.729105][T15817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 688.748220][T15817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 688.873828][T15817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.908017][T15817] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.923470][ T7590] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.930663][ T7590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.957334][ T7590] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.964552][ T7590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.061324][T15817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.117262][T15817] veth0_vlan: entered promiscuous mode [ 689.130756][T15817] veth1_vlan: entered promiscuous mode [ 689.169347][T15817] veth0_macvtap: entered promiscuous mode [ 689.185461][T15817] veth1_macvtap: entered promiscuous mode [ 689.224131][T15817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.277255][T15817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.321584][ T7590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.352350][ T7590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.383722][ T7590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.401988][ T7590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.467526][T15873] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2902'. [ 689.679119][ T30] audit: type=1326 audit(1761192987.489:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15877 comm="syz.3.2906" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63539 code=0x0 [ 690.187025][T15240] Bluetooth: hci1: command tx timeout [ 690.236712][ T7592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.253285][ T7592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.372324][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.380861][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.543431][T15893] kvm: kvm [15889]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 690.927809][T15901] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2912'. [ 691.306845][T15908] pimreg: entered allmulticast mode [ 691.321461][T15908] pimreg: left allmulticast mode [ 691.608327][T15361] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 691.762921][T15361] usb 4-1: Using ep0 maxpacket: 32 [ 691.772647][T15361] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 691.784370][T15361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.954967][T15361] usb 4-1: config 0 descriptor?? [ 692.032219][T15361] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 692.253999][T15240] Bluetooth: hci1: command tx timeout [ 692.372211][T15918] kvm: kvm [15916]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 692.632846][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 692.715520][T15921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.738927][T15921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.753675][T15909] Cannot find add_set index 2 as target [ 692.786369][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.821155][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 692.837374][T15361] gspca_vc032x: reg_w err -71 [ 692.842075][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 692.847623][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 692.858981][ T24] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 692.859040][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 692.890695][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 692.904435][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 692.917568][ T24] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 692.933211][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 692.938515][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 692.948549][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.972208][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 692.974992][ T24] usb 5-1: config 0 descriptor?? [ 693.010778][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.029878][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.055938][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.061232][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.067745][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.082780][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.088074][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.103207][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.108501][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.124059][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.129353][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.184910][T15361] gspca_vc032x: Unknown sensor... [ 693.190018][T15361] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 693.278135][T15361] usb 4-1: USB disconnect, device number 89 [ 693.607130][ T5916] IPVS: starting estimator thread 0... [ 693.721109][T15932] IPVS: using max 27 ests per chain, 64800 per kthread [ 693.746370][T15931] pimreg: entered allmulticast mode [ 693.764637][T15920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.779277][T15920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.839608][T15931] pimreg: left allmulticast mode [ 693.955261][T15939] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2922'. [ 694.335022][T15240] Bluetooth: hci1: command tx timeout [ 694.704467][T15943] kvm: kvm [15942]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 694.987849][T15953] net_ratelimit: 30 callbacks suppressed [ 694.987864][T15953] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 695.000020][T15953] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 695.223122][ T5916] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 695.249846][ T43] usb 5-1: USB disconnect, device number 72 [ 695.382834][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 695.580361][ T5916] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 695.588662][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 695.613864][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.637328][ T5916] usb 4-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.00 [ 695.659847][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.739049][T15966] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 695.745519][T15966] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 695.752980][ T5916] usb 4-1: config 0 descriptor?? [ 695.962954][ T43] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 696.135865][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.149808][ T43] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 696.187208][ T43] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 696.220962][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 696.238995][ T43] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 696.254066][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.265587][ T43] usb 5-1: config 0 descriptor?? [ 696.297879][ T5916] usb 4-1: string descriptor 0 read error: -71 [ 696.312520][ T5916] usbhid 4-1:0.0: can't add hid device: -71 [ 696.333182][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 696.363137][ T5916] usb 4-1: USB disconnect, device number 90 [ 696.391990][T15970] kvm: kvm [15969]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 696.839242][T15976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.858746][T15976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.994435][T15982] binder: 15972:15982 ioctl c0306201 0 returned -14 [ 697.004460][T15982] binder: 15972:15982 ioctl c0306201 0 returned -14 [ 697.068550][T15985] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2934'. [ 697.313372][T15988] kvm: kvm [15987]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 698.148626][ T30] audit: type=1326 audit(1761192995.959:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.1.2941" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f15539 code=0x0 [ 698.222839][ T43] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 698.379713][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.390278][ T43] usb 4-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 698.401974][ T43] usb 4-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 698.416292][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 698.427091][ T43] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 698.436725][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.447510][ T43] usb 4-1: config 0 descriptor?? [ 698.711065][T15361] usb 5-1: USB disconnect, device number 73 [ 699.027090][T16006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.063205][T16006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.407051][T16016] binder: 16013:16016 ioctl c0306201 0 returned -14 [ 699.420422][T16016] binder: 16013:16016 ioctl c0306201 0 returned -14 [ 699.693867][T16020] kvm: kvm [16019]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 700.541131][T16023] kvm: kvm [16022]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 700.848026][T16035] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2951'. [ 700.917800][ T43] usb 4-1: USB disconnect, device number 91 [ 701.062850][T15361] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 701.302847][T15361] usb 3-1: Using ep0 maxpacket: 16 [ 701.318138][T15361] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.358919][T15361] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.405090][T15361] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 701.443030][T15361] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 701.523089][ T43] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 701.668444][T15361] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 701.686657][T15361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 701.719794][T15361] usb 3-1: SerialNumber: syz [ 701.747858][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.760363][ T43] usb 4-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 701.790471][T15361] hub 3-1:1.0: bad descriptor, ignoring hub [ 701.800987][T15361] hub 3-1:1.0: probe with driver hub failed with error -5 [ 701.818334][T15361] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 701.902852][ T43] usb 4-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 701.918621][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 701.998003][ T43] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 702.031524][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.052283][ T43] usb 4-1: config 0 descriptor?? [ 702.308280][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2955'. [ 702.460016][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2953'. [ 702.646899][T16053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.664262][T16053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.245222][T16063] kvm: kvm [16062]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 703.794012][T16068] kvm: kvm [16067]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 703.923475][ T5915] usb 3-1: USB disconnect, device number 67 [ 704.153905][ T30] audit: type=1326 audit(1761193001.969:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.4.2966" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb3539 code=0x0 [ 704.203104][T15361] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 704.272865][ T5915] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 704.287024][ T812] usb 4-1: USB disconnect, device number 92 [ 704.364271][T15361] usb 2-1: Using ep0 maxpacket: 32 [ 704.373982][T15361] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 704.383871][T15361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.397737][T15361] usb 2-1: config 0 descriptor?? [ 704.406926][T15361] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 704.454105][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.465751][ T5915] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 704.484965][ T5915] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 704.498582][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 704.505579][ T5915] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 704.515705][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.540706][ T5915] usb 3-1: config 0 descriptor?? [ 705.034504][T16073] Cannot find add_set index 2 as target [ 705.084349][T16073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.093598][T16073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.118867][T15361] gspca_vc032x: reg_w err -71 [ 705.123825][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.129106][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.142938][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.153296][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.166303][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.174983][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.187585][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.213080][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.218563][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.228724][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.237791][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.243738][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.249137][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.259265][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.269413][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.275417][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.285151][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.290695][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.298238][T15361] gspca_vc032x: Unknown sensor... [ 705.303630][T15361] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 705.327133][T15361] usb 2-1: USB disconnect, device number 107 [ 705.332876][ T5887] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 705.383419][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2970'. [ 705.482816][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 705.492098][ T5887] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 705.501219][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.514353][ T5887] usb 5-1: config 0 descriptor?? [ 705.553805][ T5887] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 705.570328][T16093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.580317][T16093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.928621][T15361] IPVS: starting estimator thread 0... [ 706.032908][T16099] IPVS: using max 32 ests per chain, 76800 per kthread [ 706.646737][ T5887] gspca_sonixj: reg_r err -110 [ 706.657261][ T5887] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 706.711651][T16109] kvm: kvm [16108]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 707.034819][ T24] usb 3-1: USB disconnect, device number 68 [ 707.450415][ T30] audit: type=1326 audit(1761193005.259:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.0.2982" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 707.913206][ T5915] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 708.065310][T15361] usb 5-1: USB disconnect, device number 74 [ 708.077575][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 708.101920][ T5915] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 708.116383][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.124586][ T5915] usb 3-1: Product: syz [ 708.128763][ T5915] usb 3-1: Manufacturer: syz [ 708.136271][ T5915] usb 3-1: SerialNumber: syz [ 708.143885][ T5915] usb 3-1: config 0 descriptor?? [ 708.358377][ T5915] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 708.368191][ T5915] em28xx 3-1:0.0: Device initialization failed. [ 708.374670][ T5915] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 708.396013][ T5915] usb 3-1: USB disconnect, device number 69 [ 708.592625][T16141] pimreg: entered allmulticast mode [ 708.709671][T16141] pimreg: left allmulticast mode [ 710.067731][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'. [ 710.336501][T16160] netlink: 'syz.1.3002': attribute type 21 has an invalid length. [ 710.344811][T16160] netlink: 'syz.1.3002': attribute type 1 has an invalid length. [ 710.391896][T16160] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3002'. [ 710.643600][ T30] audit: type=1326 audit(1761193008.459:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16167 comm="syz.0.2994" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 710.664998][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.822851][ T5887] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 711.102810][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 711.139154][ T5887] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 711.177692][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.216732][ T5887] usb 2-1: config 0 descriptor?? [ 711.238719][ T5887] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 711.372922][ T918] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 711.523551][ T918] usb 5-1: Using ep0 maxpacket: 16 [ 711.538911][ T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.550613][ T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.561203][ T918] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 711.570978][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.588864][ T918] usb 5-1: config 0 descriptor?? [ 711.652866][ T43] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 711.847540][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.863398][T16166] Cannot find add_set index 2 as target [ 711.878779][ T918] usbhid 5-1:0.0: can't add hid device: -71 [ 711.879570][T16166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.885926][ T43] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 711.894223][T16166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.906094][ T918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 711.926074][ T43] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 711.947358][ T918] usb 5-1: USB disconnect, device number 75 [ 711.959938][ T5887] gspca_vc032x: reg_w err -71 [ 711.966972][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 711.972247][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 711.983174][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 711.997811][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.004191][ T43] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 712.013482][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.019472][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.028740][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.034173][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.039454][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.046650][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.053712][ T43] usb 3-1: config 0 descriptor?? [ 712.058868][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.069291][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.076307][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.081592][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.086917][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.092191][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.097624][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.103164][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.108431][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.113851][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 712.119128][ T5887] gspca_vc032x: Unknown sensor... [ 712.124288][ T5887] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 712.134050][ T5887] usb 2-1: USB disconnect, device number 108 [ 712.628261][T16189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.639332][T16189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.792939][ T5887] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 712.954618][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.981627][ T5887] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 713.015441][ T5887] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 713.029057][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.038048][ T5887] usb 5-1: Product: syz [ 713.042221][ T5887] usb 5-1: Manufacturer: syz [ 713.047720][ T5887] usb 5-1: SerialNumber: syz [ 713.276582][T16184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.297651][T16184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.322806][ T5887] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 713.370977][ T5887] usb 5-1: USB disconnect, device number 76 [ 713.922896][ T5887] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 714.052971][ T43] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 714.142799][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 714.149575][ T5887] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 714.158433][ T5887] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 714.170017][ T5887] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 714.180281][ T5887] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 714.191503][ T5887] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 714.204128][ T5887] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.204426][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.226089][ T5887] usb 5-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.239595][ T43] usb 2-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 714.250794][ T5887] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 714.259993][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.268250][ T43] usb 2-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 714.284721][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 714.291709][ T43] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 714.303623][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.316802][ T43] usb 2-1: config 0 descriptor?? [ 714.358286][ T5915] usb 3-1: USB disconnect, device number 70 [ 714.472701][T16204] netlink: 'syz.3.3005': attribute type 21 has an invalid length. [ 714.481393][T16204] netlink: 'syz.3.3005': attribute type 1 has an invalid length. [ 714.489410][T16204] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3005'. [ 714.516889][ T5887] usb 5-1: usb_control_msg returned -32 [ 714.522842][ T5887] usbtmc 5-1:16.0: can't read capabilities [ 714.533057][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.539091][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.545104][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.551110][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.557153][ C1] usbtmc 5-1:16.0: invalid notification: 11 [ 714.563435][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.569625][ C1] usbtmc 5-1:16.0: invalid notification: 2 [ 714.575772][ C1] usbtmc 5-1:16.0: invalid notification: 5 [ 714.582044][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.589797][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.597084][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.603802][ C1] usbtmc 5-1:16.0: invalid notification: 40 [ 714.610438][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.616454][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.622458][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.628611][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.634656][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.640676][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.646687][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.652674][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.658876][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.665430][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.671677][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.677774][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.683819][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.689825][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.695867][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.701877][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.711231][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.717602][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.723594][ C1] usbtmc 5-1:16.0: invalid notification: 10 [ 714.729680][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.735811][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.742265][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.748302][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.754353][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.760363][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.766379][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.772374][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.778364][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.784411][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.790405][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.796405][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.802392][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.813249][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.819552][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.825552][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.831548][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.837621][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.843656][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.849655][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.855750][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.861792][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.868559][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.874634][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.880666][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.886693][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.897665][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.903850][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.910180][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.916629][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.922625][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.928670][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.934729][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.940734][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.946760][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.952875][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.958886][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.966196][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.972205][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.978616][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.984589][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.990576][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 714.996585][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.002569][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.008609][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.015101][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.021368][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.027808][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.034126][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.040124][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.046126][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.052124][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.058892][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.064886][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.070931][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.076953][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.083002][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.089004][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.095025][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.101034][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.106499][T16201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.107032][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.121915][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.128214][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.132268][T16201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.134201][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.148827][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.154822][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.160816][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.166834][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.172891][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.178890][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.184913][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.191060][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.197101][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.203108][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.209128][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.215146][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.222076][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.228124][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.234117][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.240108][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.246099][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.252104][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.258112][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.264123][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.270128][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.276131][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.279989][ T30] audit: type=1326 audit(1761193013.089:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16214 comm="syz.2.3009" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d539 code=0x0 [ 715.282134][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.309455][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.315452][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.321701][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.327955][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.333941][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.339949][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.345923][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.351926][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.357963][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.363954][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.369954][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.376108][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.382199][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.388210][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.394281][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.400296][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.406286][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.412305][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.418319][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.424821][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.430817][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.436789][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.442794][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.448775][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.454945][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.460951][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.466934][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.473023][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.478994][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.484998][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.490991][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.496980][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.502992][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.508988][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.514979][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.520974][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.527528][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.533600][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.539627][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.545635][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.551650][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.557924][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.564318][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.570667][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.576681][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.582686][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.588722][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.594732][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.600737][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.606772][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.612954][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.619018][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.625037][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.631596][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.637600][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.644051][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.650070][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.656098][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.662107][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.668160][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.674171][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.680160][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.686184][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.692194][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.698194][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.704240][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.710244][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.716233][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.722254][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.728272][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.734776][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.740757][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.746727][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.752728][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.758772][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.764756][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 715.845111][T16221] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3010'. [ 716.065065][ T5887] usb 5-1: USB disconnect, device number 77 [ 716.492919][ T5887] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 716.645704][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.658137][ T5887] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 716.668330][ T5915] usb 2-1: USB disconnect, device number 109 [ 716.680749][ T5887] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 716.730320][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 716.762817][ T5887] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 716.772541][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.789724][ T5887] usb 5-1: config 0 descriptor?? [ 716.818466][T16231] binder: 16228:16231 ioctl c0306201 0 returned -14 [ 716.826637][T16231] binder: 16228:16231 ioctl c0306201 0 returned -14 [ 717.133201][ T5887] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 717.303488][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.322823][ T5887] usb 2-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 717.342838][ T5887] usb 2-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 717.373791][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 717.398964][ T5887] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 717.433556][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.439089][T16244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.452136][T16244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.476894][ T5887] usb 2-1: config 0 descriptor?? [ 717.796323][T16246] netlink: 'syz.3.3018': attribute type 21 has an invalid length. [ 717.804438][T16246] netlink: 'syz.3.3018': attribute type 1 has an invalid length. [ 717.812163][T16246] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3018'. [ 717.947145][T16252] binder: 16247:16252 ioctl c0306201 0 returned -14 [ 717.960193][T16252] binder: 16247:16252 ioctl c0306201 0 returned -14 [ 718.049341][T16255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.059575][T16255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.483182][T15361] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 718.634857][T15361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 718.733763][T15361] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 718.743136][T15361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.752683][T15361] usb 4-1: Product: syz [ 718.757102][T15361] usb 4-1: Manufacturer: syz [ 718.761748][T15361] usb 4-1: SerialNumber: syz [ 718.815993][T15361] usb 4-1: config 0 descriptor?? [ 719.031186][T15361] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 719.143196][ T5887] usb 5-1: USB disconnect, device number 78 [ 719.202672][ T30] audit: type=1326 audit(1761193017.009:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.4.3024" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb3539 code=0x0 [ 719.229414][T15361] em28xx 4-1:0.0: Device initialization failed. [ 719.245979][T15361] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 719.258163][T15361] usb 4-1: USB disconnect, device number 93 [ 719.581851][T16276] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3028'. [ 719.887558][ T5915] usb 2-1: USB disconnect, device number 110 [ 720.930208][T16308] binder: 16299:16308 ioctl c0306201 0 returned -14 [ 720.943501][T16308] binder: 16299:16308 ioctl c0306201 0 returned -14 [ 721.240705][T16318] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3043'. [ 721.854133][T16327] binder: 16322:16327 ioctl c0306201 0 returned -14 [ 721.865575][T16327] binder: 16322:16327 ioctl c0306201 0 returned -14 [ 722.184516][ T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 722.595729][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.614408][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 722.645263][ T24] usb 4-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 722.695624][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 722.702289][ T24] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 722.776730][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.823325][ T24] usb 4-1: config 0 descriptor?? [ 723.245868][T16354] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3054'. [ 723.285080][T16355] binder: 16348:16355 ioctl c0306201 0 returned -14 [ 723.295239][T16355] binder: 16348:16355 ioctl c0306201 0 returned -14 [ 723.474889][T16329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.496882][T16329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.917653][T16360] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3066'. [ 724.607758][T16365] usb usb8: usbfs: process 16365 (syz.4.3057) did not claim interface 0 before use [ 724.768989][T15361] usb 4-1: USB disconnect, device number 94 [ 724.938913][T16369] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3058'. [ 725.485243][ T5915] IPVS: starting estimator thread 0... [ 725.502826][ T24] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 725.572969][T16393] IPVS: using max 29 ests per chain, 69600 per kthread [ 725.664774][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.696460][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 725.714484][ T30] audit: type=1326 audit(1761193023.529:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16394 comm="syz.3.3070" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63539 code=0x0 [ 725.746389][ T24] usb 2-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 725.851855][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 725.869569][ T24] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 725.889890][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.913808][ T24] usb 2-1: config 0 descriptor?? [ 726.196465][T16406] binder: 16403:16406 ioctl c0306201 0 returned -14 [ 726.204288][T16406] binder: 16403:16406 ioctl c0306201 0 returned -14 [ 726.538426][T16407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.575438][T16407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.632108][T16409] netlink: 'syz.3.3074': attribute type 21 has an invalid length. [ 726.640882][T16409] netlink: 'syz.3.3074': attribute type 1 has an invalid length. [ 726.649607][T16409] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3074'. [ 727.235895][T16430] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3080'. [ 727.311254][T16432] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3082'. [ 728.110152][ T918] usb 2-1: USB disconnect, device number 111 [ 728.208838][ T30] audit: type=1326 audit(1761193026.019:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16438 comm="syz.4.3085" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb3539 code=0x0 [ 728.230234][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.734495][ T5915] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 728.893549][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 728.900713][ T5915] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 728.910130][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.953356][ T5915] usb 4-1: config 0 descriptor?? [ 728.967660][ T5915] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 729.049398][T16468] netlink: 'syz.1.3096': attribute type 21 has an invalid length. [ 729.063042][T16468] netlink: 'syz.1.3096': attribute type 1 has an invalid length. [ 729.070951][T16468] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3096'. [ 729.186671][T16469] binder: 16462:16469 ioctl c0306201 0 returned -14 [ 729.194902][T16469] binder: 16462:16469 ioctl c0306201 0 returned -14 [ 729.207609][T16469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3094'. [ 729.271397][T16475] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3097'. [ 729.342832][ T5887] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 729.452962][T15361] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 729.520595][ T5887] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 729.540534][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.574073][ T5887] usb 2-1: config 0 descriptor?? [ 729.640335][T15361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 729.675736][T15361] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 729.685184][T15361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.693845][T15361] usb 5-1: Product: syz [ 729.698136][T15361] usb 5-1: Manufacturer: syz [ 729.703344][T15361] usb 5-1: SerialNumber: syz [ 729.719790][T15361] usb 5-1: config 0 descriptor?? [ 729.940589][T15361] em28xx 5-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 729.964685][T15361] em28xx 5-1:0.0: Device initialization failed. [ 729.998274][T15361] em28xx 5-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 730.077785][T15361] usb 5-1: USB disconnect, device number 79 [ 730.103126][ T5915] gspca_sonixj: reg_r err -110 [ 730.108060][ T5915] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 730.516535][T16487] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3100'. [ 730.623297][ T5887] usbhid 2-1:0.0: can't add hid device: -71 [ 730.633245][ T5887] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 730.652656][ T5887] usb 2-1: USB disconnect, device number 112 [ 730.687430][T16492] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3101'. [ 731.050393][ T30] audit: type=1326 audit(1761193028.859:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.1.3105" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f15539 code=0x0 [ 731.681923][T16510] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3106'. [ 731.809876][T16513] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3107'. [ 732.132891][ T918] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 732.223781][ T5887] usb 4-1: USB disconnect, device number 95 [ 732.284788][ T918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.310760][ T918] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 732.336482][ T918] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 732.368797][ T918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 732.399112][ T918] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 732.453953][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.505886][ T918] usb 5-1: config 0 descriptor?? [ 733.043960][T16527] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3109'. [ 733.123536][T16528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.140341][T16528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.272819][ T5887] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 733.424878][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 733.437537][ T5887] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 733.452019][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.466345][ T5887] usb 4-1: Product: syz [ 733.472324][ T5887] usb 4-1: Manufacturer: syz [ 733.477116][ T5887] usb 4-1: SerialNumber: syz [ 733.485753][ T5887] usb 4-1: config 0 descriptor?? [ 733.699189][ T5887] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 733.710365][ T5887] em28xx 4-1:0.0: Device initialization failed. [ 733.717161][ T5887] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 733.730139][ T5887] usb 4-1: USB disconnect, device number 96 [ 734.112845][ T5915] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 734.265171][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 734.274376][ T5915] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 734.284091][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.296125][ T5915] usb 2-1: config 0 descriptor?? [ 734.314373][ T5915] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 734.340420][T15240] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 734.466626][T16554] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3122'. [ 734.656592][T15361] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 734.799057][ T5887] usb 5-1: USB disconnect, device number 80 [ 734.912347][T16542] Cannot find add_set index 2 as target [ 734.926206][T16542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.936963][T16542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.952317][ T5915] gspca_vc032x: reg_w err -71 [ 734.966585][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.972537][T15361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.001765][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.014743][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.021500][T15361] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 735.030823][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.036455][T15361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.045087][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.052109][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.097148][T15361] usb 3-1: config 0 descriptor?? [ 735.103685][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.109100][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.114638][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.120049][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.125546][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.131109][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.137295][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.142921][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.160307][T16559] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3123'. [ 735.170035][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.175691][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.198464][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.223155][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 735.236601][ T5915] gspca_vc032x: Unknown sensor... [ 735.252027][ T5915] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 735.291849][T15361] option 3-1:0.0: GSM modem (1-port) converter detected [ 735.341309][ T5915] usb 2-1: USB disconnect, device number 113 [ 736.568506][T16575] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3127'. [ 736.726830][T16583] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3130'. [ 736.792824][T13366] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 736.954235][T13366] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.965709][T13366] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 736.997171][T13366] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 737.012007][T13366] usb 5-1: config 0 interface 0 has no altsetting 0 [ 737.019248][T13366] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 737.080725][T13366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.092349][T13366] usb 5-1: config 0 descriptor?? [ 737.154478][T16588] kvm: kvm [16587]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 737.687637][T16590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.719833][T16590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.938974][T16590] 8021q: VLANs not supported on ip6_vti0 [ 738.128483][T15361] usb 3-1: USB disconnect, device number 71 [ 738.140138][T15361] option 3-1:0.0: device disconnected [ 738.225588][T16594] netlink: 'syz.0.3134': attribute type 21 has an invalid length. [ 738.240592][T16594] netlink: 'syz.0.3134': attribute type 1 has an invalid length. [ 738.249608][T16594] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3134'. [ 738.432843][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 738.613051][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 738.623971][ T9] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 738.633163][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.644414][ T9] usb 4-1: config 0 descriptor?? [ 738.672570][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 738.712878][T13366] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 738.863012][T13366] usb 3-1: Using ep0 maxpacket: 32 [ 738.886169][T13366] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 738.897125][T13366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.909398][T13366] usb 3-1: config 0 descriptor?? [ 738.919609][T13366] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 739.293179][T16592] Cannot find add_set index 2 as target [ 739.334639][T16592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.373369][T16592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.416056][ T9] gspca_vc032x: reg_w err -71 [ 739.431452][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.443211][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.460855][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.475765][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.489394][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.502420][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.514702][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.523723][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.529774][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.541657][ T5887] usb 5-1: USB disconnect, device number 81 [ 739.544779][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.556393][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.561785][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.575651][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.581181][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.587277][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.622952][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.648611][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.664155][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.679683][ T9] gspca_vc032x: Unknown sensor... [ 739.689868][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 739.730323][ T9] usb 4-1: USB disconnect, device number 97 [ 739.762057][T16603] Cannot find add_set index 2 as target [ 739.779830][T16603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.854522][T16618] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3145'. [ 739.909312][T16603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.934765][T13366] gspca_vc032x: reg_w err -71 [ 739.939476][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.955865][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.970751][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.977899][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.984334][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.989715][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 739.992836][ T5915] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 739.996267][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.018467][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.029679][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.047263][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.070313][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.087364][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.104775][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.111379][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.117519][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.125672][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.131041][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.137007][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 740.143188][T13366] gspca_vc032x: Unknown sensor... [ 740.148561][T13366] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 740.164151][T13366] usb 3-1: USB disconnect, device number 72 [ 740.225788][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.243867][ T5915] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 740.280970][ T5915] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 740.297489][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 740.308963][ T5915] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 740.319364][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.330227][ T5915] usb 5-1: config 0 descriptor?? [ 740.339767][T16623] FAULT_INJECTION: forcing a failure. [ 740.339767][T16623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.363554][T16623] CPU: 1 UID: 0 PID: 16623 Comm: syz.0.3147 Not tainted syzkaller #0 PREEMPT(full) [ 740.363577][T16623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 740.363588][T16623] Call Trace: [ 740.363596][T16623] [ 740.363605][T16623] dump_stack_lvl+0x189/0x250 [ 740.363632][T16623] ? __pfx____ratelimit+0x10/0x10 [ 740.363661][T16623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.363684][T16623] ? __pfx__printk+0x10/0x10 [ 740.363702][T16623] ? __might_fault+0xb0/0x130 [ 740.363736][T16623] should_fail_ex+0x414/0x560 [ 740.363765][T16623] _copy_from_user+0x2d/0xb0 [ 740.363788][T16623] get_compat_msghdr+0xad/0x4a0 [ 740.363812][T16623] ? __pfx_get_compat_msghdr+0x10/0x10 [ 740.363841][T16623] ___sys_sendmsg+0x193/0x2a0 [ 740.363862][T16623] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.363912][T16623] ? __fget_files+0x2a/0x420 [ 740.363928][T16623] ? __fget_files+0x3a0/0x420 [ 740.363954][T16623] __sys_sendmsg+0x164/0x220 [ 740.363974][T16623] ? __pfx___sys_sendmsg+0x10/0x10 [ 740.364000][T16623] ? __pfx_ksys_write+0x10/0x10 [ 740.364024][T16623] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 740.364046][T16623] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.364069][T16623] __do_fast_syscall_32+0xb6/0x2b0 [ 740.364093][T16623] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.364117][T16623] do_fast_syscall_32+0x34/0x80 [ 740.364138][T16623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 740.364158][T16623] RIP: 0023:0xf707d539 [ 740.364174][T16623] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 740.364189][T16623] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 740.364208][T16623] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008000c2c0 [ 740.364221][T16623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 740.364232][T16623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 740.364242][T16623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 740.364253][T16623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 740.364280][T16623] [ 740.583366][T15361] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 740.774779][T15361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.785147][T15361] usb 4-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 740.836791][T15361] usb 4-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 740.855256][T15361] usb 4-1: config 0 interface 0 has no altsetting 0 [ 740.862170][T15361] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 740.883727][T15361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.934284][T15361] usb 4-1: config 0 descriptor?? [ 741.038670][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.048497][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.261376][T16635] 8021q: VLANs not supported on ip6_vti0 [ 741.514031][T16645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.522641][T16645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.523693][T15361] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 741.695184][T15361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.706576][T15361] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 741.717912][T15361] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 741.731345][T15361] usb 3-1: config 0 interface 0 has no altsetting 0 [ 741.739808][T15361] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 741.749425][T15361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.762166][T15361] usb 3-1: config 0 descriptor?? [ 742.359840][T16646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.368659][T16646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.579411][T16646] 8021q: VLANs not supported on ip6_vti0 [ 742.711421][T15361] usb 5-1: USB disconnect, device number 82 [ 742.779584][T16650] netlink: 'syz.4.3156': attribute type 21 has an invalid length. [ 742.788168][T16650] netlink: 'syz.4.3156': attribute type 1 has an invalid length. [ 742.797170][T16650] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3156'. [ 742.808105][ T30] audit: type=1326 audit(1761193040.619:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.0.3166" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 743.102352][ T5916] usb 4-1: USB disconnect, device number 98 [ 743.193284][T15361] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 743.353035][T15361] usb 5-1: Using ep0 maxpacket: 32 [ 743.359894][T15361] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 743.369911][T15361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.381900][T15361] usb 5-1: config 0 descriptor?? [ 743.390624][T15361] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 743.473697][ T5916] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 743.635099][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.647677][ T5916] usb 4-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 743.658931][ T5916] usb 4-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 743.672647][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 743.679542][ T5916] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 743.691533][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.712642][ T5916] usb 4-1: config 0 descriptor?? [ 743.972205][T16667] binder: 16664:16667 ioctl c0306201 0 returned -14 [ 743.980118][T16667] binder: 16664:16667 ioctl c0306201 0 returned -14 [ 744.003151][T16653] Cannot find add_set index 2 as target [ 744.024302][T16653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.039936][T16653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.079136][T15361] gspca_vc032x: reg_w err -71 [ 744.093991][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.112058][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.117561][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.126904][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.132250][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.138070][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.143581][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.149171][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.155438][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.160818][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.167504][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.172999][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.178413][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.183986][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.189408][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.195238][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.202064][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.208199][T15361] gspca_vc032x: I2c Bus Busy Wait 00 [ 744.214538][T15361] gspca_vc032x: Unknown sensor... [ 744.228352][T15361] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 744.276901][T15361] usb 5-1: USB disconnect, device number 83 [ 744.307408][ T5916] usb 3-1: USB disconnect, device number 73 [ 744.332208][T16668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.346235][T16668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.927786][T16682] fuse: Bad value for 'fd' [ 744.953009][ T5916] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 745.051432][ T30] audit: type=1326 audit(1761193042.859:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.2.3171" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d539 code=0x0 [ 745.113076][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 745.121210][ T5916] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 745.130634][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.140898][ T5916] usb 2-1: config 0 descriptor?? [ 745.150121][ T5916] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 745.761787][T16675] Cannot find add_set index 2 as target [ 745.781254][T16675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.790376][T16675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.819258][ T5916] gspca_vc032x: reg_w err -71 [ 745.825689][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.831091][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.838520][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.844828][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.850356][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.860521][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.866910][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.873793][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.880255][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.886368][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.891756][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.897470][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.905200][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.910678][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.916574][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.922438][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.928132][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.935249][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.952845][ T5916] gspca_vc032x: Unknown sensor... [ 745.958597][ T5916] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 745.969260][ T5916] usb 2-1: USB disconnect, device number 114 [ 746.157308][T13366] usb 4-1: USB disconnect, device number 99 [ 746.443234][ T5916] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 746.518980][T16709] binder: 16704:16709 ioctl c0306201 0 returned -14 [ 746.527005][T16709] binder: 16704:16709 ioctl c0306201 0 returned -14 [ 746.624424][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.634700][ T5916] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 746.642859][T13366] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 746.656388][ T5916] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 746.670837][ T5916] usb 5-1: config 0 interface 0 has no altsetting 0 [ 746.677670][ T5916] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 746.688012][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.703176][ T5916] usb 5-1: config 0 descriptor?? [ 746.822798][T13366] usb 2-1: Using ep0 maxpacket: 32 [ 746.829658][T13366] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 746.844971][T13366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.856204][T13366] usb 2-1: config 0 descriptor?? [ 746.884623][T13366] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 747.135678][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.142017][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.279789][T16711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.289055][T16711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.467015][T16716] fuse: Bad value for 'fd' [ 747.494188][T16707] Cannot find add_set index 2 as target [ 747.507060][T16711] 8021q: VLANs not supported on ip6_vti0 [ 747.518635][T16707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.537273][T16707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.558045][T13366] gspca_vc032x: reg_w err -71 [ 747.568384][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.574779][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.581808][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.587871][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.595647][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.600944][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.609694][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.615098][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.620411][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.625767][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.631045][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.636413][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.641697][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.647176][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.652467][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.657932][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.663304][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.668587][T13366] gspca_vc032x: I2c Bus Busy Wait 00 [ 747.673970][T13366] gspca_vc032x: Unknown sensor... [ 747.680237][T13366] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 747.690368][T13366] usb 2-1: USB disconnect, device number 115 [ 748.015548][ T30] audit: type=1326 audit(1761193045.829:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16726 comm="syz.0.3186" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 748.388159][T16736] FAULT_INJECTION: forcing a failure. [ 748.388159][T16736] name failslab, interval 1, probability 0, space 0, times 0 [ 748.401454][T16736] CPU: 1 UID: 0 PID: 16736 Comm: syz.3.3189 Not tainted syzkaller #0 PREEMPT(full) [ 748.401469][T16736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 748.401476][T16736] Call Trace: [ 748.401480][T16736] [ 748.401485][T16736] dump_stack_lvl+0x189/0x250 [ 748.401502][T16736] ? __pfx____ratelimit+0x10/0x10 [ 748.401515][T16736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 748.401528][T16736] ? __pfx__printk+0x10/0x10 [ 748.401542][T16736] ? __pfx___might_resched+0x10/0x10 [ 748.401552][T16736] ? fs_reclaim_acquire+0x7d/0x100 [ 748.401570][T16736] should_fail_ex+0x414/0x560 [ 748.401587][T16736] should_failslab+0xa8/0x100 [ 748.401599][T16736] kmem_cache_alloc_node_noprof+0x77/0x710 [ 748.401612][T16736] ? __alloc_skb+0x112/0x2d0 [ 748.401629][T16736] __alloc_skb+0x112/0x2d0 [ 748.401645][T16736] alloc_skb_with_frags+0xca/0x890 [ 748.401662][T16736] sock_alloc_send_pskb+0x84d/0x980 [ 748.401683][T16736] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 748.401696][T16736] ? dev_get_by_index+0x22/0x2e0 [ 748.401708][T16736] ? dev_get_by_index+0x22/0x2e0 [ 748.401723][T16736] packet_sendmsg+0x33a0/0x5080 [ 748.401742][T16736] ? aa_unix_listen_perm+0x98/0xcf0 [ 748.401766][T16736] ? __pfx___might_resched+0x10/0x10 [ 748.401775][T16736] ? __lock_acquire+0xab9/0xd20 [ 748.401793][T16736] ? __pfx_packet_sendmsg+0x10/0x10 [ 748.401805][T16736] ? aa_sk_perm+0x81e/0x950 [ 748.401821][T16736] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 748.401839][T16736] ? aa_sock_msg_perm+0xf1/0x1d0 [ 748.401861][T16736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 748.401876][T16736] ? __pfx_packet_sendmsg+0x10/0x10 [ 748.401900][T16736] __sock_sendmsg+0x21c/0x270 [ 748.401923][T16736] __sys_sendto+0x3bd/0x520 [ 748.401950][T16736] ? __pfx___sys_sendto+0x10/0x10 [ 748.401972][T16736] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 748.401993][T16736] ? __fget_files+0x3a0/0x420 [ 748.402009][T16736] ? ksys_write+0x22a/0x250 [ 748.402021][T16736] ? exc_page_fault+0x82/0x100 [ 748.402034][T16736] ? __pfx_ksys_write+0x10/0x10 [ 748.402050][T16736] __ia32_sys_sendto+0xdd/0x100 [ 748.402065][T16736] __do_fast_syscall_32+0xb6/0x2b0 [ 748.402079][T16736] ? lockdep_hardirqs_on+0x9c/0x150 [ 748.402093][T16736] do_fast_syscall_32+0x34/0x80 [ 748.402108][T16736] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 748.402121][T16736] RIP: 0023:0xf7f63539 [ 748.402131][T16736] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 748.402139][T16736] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 748.402151][T16736] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 748.402158][T16736] RDX: 000000000000fef2 RSI: 0000000000000000 RDI: 0000000080000a80 [ 748.402165][T16736] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 748.402170][T16736] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 748.402177][T16736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 748.402192][T16736] [ 748.698736][ T5916] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 748.852876][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 748.860058][ T5916] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 748.880884][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.905190][ T5916] usb 2-1: config 0 descriptor?? [ 748.940214][ T5916] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 749.197975][T16747] tipc: Started in network mode [ 749.199368][T13366] usb 5-1: USB disconnect, device number 84 [ 749.211409][T16747] tipc: Node identity 52ade32e5ba1, cluster identity 4711 [ 749.222943][T16747] tipc: Enabled bearer , priority 0 [ 749.232264][T16747] syzkaller0: entered promiscuous mode [ 749.240317][T16747] syzkaller0: entered allmulticast mode [ 749.305439][T16747] tipc: Resetting bearer [ 749.337838][T16746] tipc: Resetting bearer [ 749.384555][T16746] tipc: Disabling bearer [ 749.802885][ T5915] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 749.966640][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.977453][ T5915] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 749.989099][ T5915] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 750.003842][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 750.010532][ T5915] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 750.031242][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.043700][ T5916] gspca_sonixj: reg_r err -110 [ 750.049714][ T5916] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 750.071477][ T5915] usb 3-1: config 0 descriptor?? [ 750.112682][ T30] audit: type=1326 audit(1761193047.919:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16772 comm="syz.3.3203" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63539 code=0x0 [ 750.468216][T16780] FAULT_INJECTION: forcing a failure. [ 750.468216][T16780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.481628][T16780] CPU: 0 UID: 0 PID: 16780 Comm: syz.4.3205 Not tainted syzkaller #0 PREEMPT(full) [ 750.481643][T16780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 750.481649][T16780] Call Trace: [ 750.481654][T16780] [ 750.481659][T16780] dump_stack_lvl+0x189/0x250 [ 750.481677][T16780] ? __pfx____ratelimit+0x10/0x10 [ 750.481689][T16780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.481702][T16780] ? __pfx__printk+0x10/0x10 [ 750.481714][T16780] ? __might_fault+0xb0/0x130 [ 750.481732][T16780] should_fail_ex+0x414/0x560 [ 750.481749][T16780] _copy_from_user+0x2d/0xb0 [ 750.481762][T16780] copy_from_sockptr+0x5e/0xa0 [ 750.481773][T16780] do_tcp_getsockopt+0x1a9f/0x2680 [ 750.481789][T16780] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 750.481799][T16780] ? sock_common_getsockopt+0x10/0xb0 [ 750.481820][T16780] ? __might_fault+0xb0/0x130 [ 750.481834][T16780] ? _parse_integer_limit+0x1ae/0x1f0 [ 750.481849][T16780] ? aa_label_sk_perm+0x4cd/0x630 [ 750.481864][T16780] ? __lock_acquire+0xab9/0xd20 [ 750.481876][T16780] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 750.481898][T16780] ? __pfx___might_resched+0x10/0x10 [ 750.481910][T16780] ? rcu_read_lock_any_held+0xb3/0x120 [ 750.481922][T16780] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 750.481936][T16780] ? vfs_write+0x956/0xb30 [ 750.481952][T16780] ? aa_sk_perm+0x81e/0x950 [ 750.481967][T16780] ? __pfx_aa_sk_perm+0x10/0x10 [ 750.481983][T16780] tcp_getsockopt+0x83/0x130 [ 750.481992][T16780] ? sock_common_getsockopt+0x10/0xb0 [ 750.482005][T16780] ? sock_common_getsockopt+0x10/0xb0 [ 750.482017][T16780] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 750.482030][T16780] do_sock_getsockopt+0x372/0x450 [ 750.482042][T16780] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 750.482051][T16780] ? local_clock_noinstr+0xe0/0xe0 [ 750.482063][T16780] ? __fget_files+0x3a0/0x420 [ 750.482072][T16780] ? __fget_files+0x2a/0x420 [ 750.482085][T16780] __ia32_sys_getsockopt+0x1a5/0x250 [ 750.482094][T16780] ? local_clock_noinstr+0xe0/0xe0 [ 750.482107][T16780] ? local_clock_noinstr+0xe0/0xe0 [ 750.482120][T16780] __do_fast_syscall_32+0xb6/0x2b0 [ 750.482133][T16780] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.482148][T16780] do_fast_syscall_32+0x34/0x80 [ 750.482160][T16780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 750.482173][T16780] RIP: 0023:0xf7fb3539 [ 750.482182][T16780] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 750.482191][T16780] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 750.482203][T16780] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 750.482210][T16780] RDX: 0000000000000023 RSI: 0000000080000000 RDI: 0000000080000180 [ 750.482217][T16780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 750.482223][T16780] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 750.482233][T16780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 750.482259][T16780] [ 750.774747][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.860907][T16784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.875478][T16784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.100749][T16784] 8021q: VLANs not supported on ip6_vti0 [ 751.171324][ T5915] usb 2-1: USB disconnect, device number 116 [ 751.552960][ T5915] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 751.724387][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.734727][ T5915] usb 2-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 751.745753][ T5915] usb 2-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 751.759035][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 751.765898][ T5915] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 751.776575][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.787281][ T5915] usb 2-1: config 0 descriptor?? [ 752.365472][T16800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.374164][T16800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.390421][T13366] usb 3-1: USB disconnect, device number 74 [ 752.772859][T13366] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 752.922830][T13366] usb 3-1: Using ep0 maxpacket: 16 [ 752.929543][T13366] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 752.938954][T13366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.948745][T13366] usb 3-1: config 0 descriptor?? [ 752.957287][T13366] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 753.927581][ T30] audit: type=1326 audit(1761193051.739:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.4.3219" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb3539 code=0x0 [ 753.948967][ C0] vkms_vblank_simulate: vblank timer overrun [ 754.073655][T13366] gspca_sonixj: reg_r err -110 [ 754.078759][T13366] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 754.233816][T13366] usb 2-1: USB disconnect, device number 117 [ 754.623180][T13366] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 754.777703][T13366] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.791131][T13366] usb 2-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 754.803157][T13366] usb 2-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 754.816820][T13366] usb 2-1: config 0 interface 0 has no altsetting 0 [ 754.823690][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 754.831480][T13366] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 754.840880][T13366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.856324][T13366] usb 2-1: config 0 descriptor?? [ 754.902200][T16842] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3226'. [ 754.996412][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 755.006661][ T24] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 755.016888][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.028834][ T24] usb 4-1: config 0 descriptor?? [ 755.042189][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 755.482226][ T5887] usb 3-1: USB disconnect, device number 75 [ 755.493794][T16844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.503189][T16844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.649544][T16838] Cannot find add_set index 2 as target [ 755.664041][T16838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.681733][T16838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.698467][ T24] gspca_vc032x: reg_w err -71 [ 755.728538][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.734678][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.740105][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.746369][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.751664][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.758461][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.764064][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.770804][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.781684][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.790219][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.796206][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.801500][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.807249][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.812536][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.818332][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.823956][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.829245][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.835015][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.840303][ T24] gspca_vc032x: Unknown sensor... [ 755.845674][ T24] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 755.871522][ T24] usb 4-1: USB disconnect, device number 100 [ 756.283072][ T5887] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 756.435184][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.446368][ T5887] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 756.457636][ T5887] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 756.471123][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 756.477855][ T5887] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 756.487702][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.498547][ T5887] usb 3-1: config 0 descriptor?? [ 757.067967][T16865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.077202][T16865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.141245][ T30] audit: type=1326 audit(1761193054.949:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.0.3236" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 757.300500][ T5916] usb 2-1: USB disconnect, device number 118 [ 757.348762][T16865] 8021q: VLANs not supported on ip6_vti0 [ 757.742873][ T5916] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 757.902813][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 757.914290][ T5916] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 757.932882][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.954671][ T5916] usb 2-1: config 0 descriptor?? [ 757.975330][ T5916] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 758.632270][T16894] syzkaller0: entered promiscuous mode [ 758.638920][T16894] syzkaller0: entered allmulticast mode [ 758.648416][T16894] FAULT_INJECTION: forcing a failure. [ 758.648416][T16894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.662082][T16894] CPU: 1 UID: 0 PID: 16894 Comm: syz.3.3245 Not tainted syzkaller #0 PREEMPT(full) [ 758.662102][T16894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 758.662112][T16894] Call Trace: [ 758.662120][T16894] [ 758.662128][T16894] dump_stack_lvl+0x189/0x250 [ 758.662156][T16894] ? __pfx____ratelimit+0x10/0x10 [ 758.662176][T16894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.662198][T16894] ? __pfx__printk+0x10/0x10 [ 758.662216][T16894] ? __might_fault+0xb0/0x130 [ 758.662251][T16894] should_fail_ex+0x414/0x560 [ 758.662280][T16894] _copy_from_iter+0x404/0x1790 [ 758.662316][T16894] ? __pfx__copy_from_iter+0x10/0x10 [ 758.662341][T16894] ? dev_get_by_index+0x22/0x2e0 [ 758.662360][T16894] ? dev_get_by_index+0x22/0x2e0 [ 758.662377][T16894] packet_sendmsg+0x3072/0x5080 [ 758.662397][T16894] ? aa_umount+0x850/0xa60 [ 758.662422][T16894] ? __pfx___might_resched+0x10/0x10 [ 758.662457][T16894] ? __pfx_packet_sendmsg+0x10/0x10 [ 758.662480][T16894] ? aa_sk_perm+0x81e/0x950 [ 758.662508][T16894] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 758.662527][T16894] ? __asan_memset+0x22/0x50 [ 758.662540][T16894] ? __import_iovec+0x40e/0x7f0 [ 758.662551][T16894] ? aa_sock_msg_perm+0xf1/0x1d0 [ 758.662566][T16894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 758.662582][T16894] ? __pfx_packet_sendmsg+0x10/0x10 [ 758.662612][T16894] __sock_sendmsg+0x21c/0x270 [ 758.662639][T16894] ____sys_sendmsg+0x505/0x830 [ 758.662661][T16894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 758.662680][T16894] ___sys_sendmsg+0x21f/0x2a0 [ 758.662692][T16894] ? __pfx____sys_sendmsg+0x10/0x10 [ 758.662732][T16894] ? __fget_files+0x2a/0x420 [ 758.662749][T16894] ? __fget_files+0x3a0/0x420 [ 758.662776][T16894] __sys_sendmsg+0x164/0x220 [ 758.662797][T16894] ? __pfx___sys_sendmsg+0x10/0x10 [ 758.662825][T16894] ? __pfx_ksys_write+0x10/0x10 [ 758.662852][T16894] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 758.662877][T16894] ? lockdep_hardirqs_on+0x9c/0x150 [ 758.662902][T16894] __do_fast_syscall_32+0xb6/0x2b0 [ 758.662933][T16894] ? lockdep_hardirqs_on+0x9c/0x150 [ 758.662959][T16894] do_fast_syscall_32+0x34/0x80 [ 758.662982][T16894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 758.663003][T16894] RIP: 0023:0xf7f63539 [ 758.663020][T16894] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 758.663035][T16894] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 758.663053][T16894] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800000c0 [ 758.663066][T16894] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 758.663076][T16894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 758.663087][T16894] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 758.663098][T16894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 758.663124][T16894] [ 759.046339][ T5887] usb 3-1: USB disconnect, device number 76 [ 759.122827][ T5916] gspca_sonixj: reg_r err -110 [ 759.127687][ T5916] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 759.252836][ T918] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 759.412885][ T918] usb 5-1: Using ep0 maxpacket: 16 [ 759.419767][ T918] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 759.428958][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.439448][ T918] usb 5-1: config 0 descriptor?? [ 759.448365][ T918] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 759.473328][ T5916] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 759.634795][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.645058][ T5916] usb 4-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 759.656448][ T5916] usb 4-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 759.670924][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 759.677782][ T5916] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 759.687031][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.698288][ T5916] usb 4-1: config 0 descriptor?? [ 760.274930][T16913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.284151][T16913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.430070][ T5887] usb 2-1: USB disconnect, device number 119 [ 760.553254][ T918] gspca_sonixj: reg_r err -110 [ 760.561008][ T918] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 761.104946][T16929] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3256'. [ 761.943699][T16950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3265'. [ 762.234059][ T5915] usb 4-1: USB disconnect, device number 101 [ 762.394374][ T5916] usb 5-1: USB disconnect, device number 85 [ 762.583085][ T918] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 762.657886][T16967] IPVS: length: 149 != 8 [ 762.733678][ T918] usb 2-1: Using ep0 maxpacket: 32 [ 762.741065][ T918] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 762.750504][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.769953][ T918] usb 2-1: config 0 descriptor?? [ 762.781081][ T918] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 762.802160][T16973] binder: 16968:16973 ioctl c0306201 0 returned -14 [ 762.810433][T16973] binder: 16968:16973 ioctl c0306201 0 returned -14 [ 762.931947][T16975] binder: 16970:16975 ioctl c0306201 0 returned -14 [ 762.955131][T16975] binder: 16970:16975 ioctl c0306201 0 returned -14 [ 763.427436][T16954] Cannot find add_set index 2 as target [ 763.437585][T16954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.473908][T16954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.513053][ T918] gspca_vc032x: reg_w err -71 [ 763.517828][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.526291][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.571906][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.582986][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.600895][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.607945][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.628137][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.648736][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.678084][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.683601][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.688915][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.695168][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.700463][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.705823][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.711089][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.716415][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.721684][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.728014][ T918] gspca_vc032x: I2c Bus Busy Wait 00 [ 763.733453][ T918] gspca_vc032x: Unknown sensor... [ 763.738617][ T918] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 763.752967][ T918] usb 2-1: USB disconnect, device number 120 [ 764.053144][ T5916] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 764.126018][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3278'. [ 764.215333][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.240006][ T5916] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 764.255722][ T5916] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 764.287004][ T5916] usb 5-1: config 0 interface 0 has no altsetting 0 [ 764.294146][ T5916] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 764.303233][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.316880][ T5916] usb 5-1: config 0 descriptor?? [ 764.512876][ T918] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 764.662814][ T918] usb 4-1: Using ep0 maxpacket: 16 [ 764.669749][ T918] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 764.680014][ T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.691043][ T918] usb 4-1: config 0 descriptor?? [ 764.699562][ T918] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 764.892408][T17008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.902149][T17008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.832948][ T918] gspca_sonixj: reg_r err -110 [ 765.838585][ T918] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 766.336917][T17036] binder: 17033:17036 ioctl c0306201 0 returned -14 [ 766.346341][T17036] binder: 17033:17036 ioctl c0306201 0 returned -14 [ 766.496871][ T918] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 766.656966][ T918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.670657][ T918] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 766.697559][ T918] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 766.727764][ T918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 766.742847][ T918] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 766.764818][ T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.775553][ T918] usb 3-1: config 0 descriptor?? [ 766.804996][ T812] usb 5-1: USB disconnect, device number 86 [ 767.220917][ T30] audit: type=1326 audit(1761193065.029:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17040 comm="syz.1.3293" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f15539 code=0x0 [ 767.262958][ T812] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 767.302233][ T918] usb 4-1: USB disconnect, device number 102 [ 767.401233][ T30] audit: type=1326 audit(1761193065.209:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17047 comm="syz.3.3294" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63539 code=0x0 [ 767.423149][T17046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.429071][ T812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 767.434618][T17046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.448373][ T812] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 767.459361][ T812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.468720][ T812] usb 5-1: Product: syz [ 767.473251][ T812] usb 5-1: Manufacturer: syz [ 767.477945][ T812] usb 5-1: SerialNumber: syz [ 767.490590][ T812] usb 5-1: config 0 descriptor?? [ 767.501411][T17046] 8021q: VLANs not supported on ip6_vti0 [ 767.705943][ T812] em28xx 5-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 767.716022][ T812] em28xx 5-1:0.0: Device initialization failed. [ 767.722270][ T812] em28xx 5-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 767.734250][ T812] usb 5-1: USB disconnect, device number 87 [ 768.484083][T17069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3300'. [ 768.533063][T17073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'. [ 768.680818][T17080] binder: 17074:17080 ioctl c0306201 0 returned -14 [ 768.690432][T17080] binder: 17074:17080 ioctl c0306201 0 returned -14 [ 769.204553][ T5916] usb 3-1: USB disconnect, device number 77 [ 769.365452][ T30] audit: type=1326 audit(1761193067.179:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17083 comm="syz.4.3307" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb3539 code=0x0 [ 769.480070][ T30] audit: type=1326 audit(1761193067.279:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.1.3310" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f15539 code=0x0 [ 769.662112][T17103] FAULT_INJECTION: forcing a failure. [ 769.662112][T17103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.677449][T17103] CPU: 0 UID: 0 PID: 17103 Comm: syz.3.3311 Not tainted syzkaller #0 PREEMPT(full) [ 769.677473][T17103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 769.677484][T17103] Call Trace: [ 769.677492][T17103] [ 769.677500][T17103] dump_stack_lvl+0x189/0x250 [ 769.677529][T17103] ? __pfx____ratelimit+0x10/0x10 [ 769.677551][T17103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 769.677574][T17103] ? __pfx__printk+0x10/0x10 [ 769.677593][T17103] ? __might_fault+0xb0/0x130 [ 769.677627][T17103] should_fail_ex+0x414/0x560 [ 769.677657][T17103] copy_fpstate_to_sigframe+0xa18/0xce0 [ 769.677687][T17103] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 769.677717][T17103] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 769.677765][T17103] ? fpu__alloc_mathframe+0xad/0x130 [ 769.677792][T17103] get_sigframe+0x58d/0x7d0 [ 769.677823][T17103] ? __pfx_get_sigframe+0x10/0x10 [ 769.677855][T17103] ? posixtimer_deliver_signal+0x305/0x410 [ 769.677889][T17103] ia32_setup_rt_frame+0x106/0xb70 [ 769.677909][T17103] ? _raw_spin_unlock_irq+0x23/0x50 [ 769.677930][T17103] ? lockdep_hardirqs_on+0x9c/0x150 [ 769.677953][T17103] ? _raw_spin_unlock_irq+0x2e/0x50 [ 769.677972][T17103] ? get_signal+0x1150/0x1340 [ 769.677998][T17103] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 769.678021][T17103] ? arch_do_signal_or_restart+0x385/0x790 [ 769.678050][T17103] arch_do_signal_or_restart+0x429/0x790 [ 769.678078][T17103] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 769.678121][T17103] ? exit_to_user_mode_loop+0x40/0x130 [ 769.678142][T17103] exit_to_user_mode_loop+0x72/0x130 [ 769.678159][T17103] __do_fast_syscall_32+0x1f4/0x2b0 [ 769.678183][T17103] ? lockdep_hardirqs_on+0x9c/0x150 [ 769.678208][T17103] do_fast_syscall_32+0x34/0x80 [ 769.678231][T17103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 769.678252][T17103] RIP: 0023:0xf7f63539 [ 769.678268][T17103] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 769.678283][T17103] RSP: 002b:00000000f5456590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 769.678303][T17103] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00000000f5456610 [ 769.678315][T17103] RDX: 0000000000000001 RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 769.678327][T17103] RBP: 00000000f7424f80 R08: 0000000000000000 R09: 0000000000000000 [ 769.678338][T17103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 769.678348][T17103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 769.678375][T17103] [ 769.929792][ C0] vkms_vblank_simulate: vblank timer overrun [ 770.272940][ T5887] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 770.433244][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 770.440951][ T5887] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 770.449775][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 770.460118][ T5887] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 770.469121][ T5887] usb 4-1: config 1 has no interface number 1 [ 770.475416][ T5887] usb 4-1: too many endpoints for config 1 interface 4 altsetting 0: 145, using maximum allowed: 30 [ 770.486453][ T5887] usb 4-1: config 1 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 145 [ 770.499696][ T918] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 770.510129][ T5887] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 770.520249][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.528430][ T5887] usb 4-1: Product: 分ꓨ爩㖩骀햒皊턒뒥엙찅嚹䃜뎿맻뵋㬾ဖ舖坱⒞⒰覜촩Ѫ䳹敉㴬ᦳ害쥆鷒ລ蒖訟犗坡馺竎潁ﺍ廚⤒麽襫䈎┒儇뉢㈼૮젪焊펈秋嘜喟勓⠰菘䌊岜ℴꥨ쇄銍̬浙뇊饠凮삏뛵橴텣⌵᱘罘頟絃歇菴艠ō댈蛝얬껔뛰嘟Ç㓈핬贈嘥䥹㜨⋚ꇥ [ 770.561427][ T5887] usb 4-1: Manufacturer: ј [ 770.566050][ T5887] usb 4-1: SerialNumber: ড়貽㜷㢿䃝❜՝侎瘤ﰳ힍㡚蠉䴩ඐ澲鬄꫓䘆ㅒ齆 [ 770.664454][ T918] usb 3-1: config 0 has an invalid interface number: 87 but max is 0 [ 770.672673][ T918] usb 3-1: config 0 has no interface number 0 [ 770.678890][ T918] usb 3-1: too many endpoints for config 0 interface 87 altsetting 28: 204, using maximum allowed: 30 [ 770.689969][ T918] usb 3-1: config 0 interface 87 altsetting 28 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 770.700974][ T918] usb 3-1: config 0 interface 87 altsetting 28 has 1 endpoint descriptor, different from the interface descriptor's value: 204 [ 770.714298][ T918] usb 3-1: config 0 interface 87 has no altsetting 0 [ 770.725961][ T918] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 770.735207][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.743424][ T918] usb 3-1: Product: syz [ 770.747596][ T918] usb 3-1: Manufacturer: syz [ 770.752179][ T918] usb 3-1: SerialNumber: syz [ 770.761909][ T918] usb 3-1: config 0 descriptor?? [ 770.773001][ T918] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 770.802398][ T5887] usb 4-1: 0:2 : does not exist [ 770.828353][ T5887] usb 4-1: USB disconnect, device number 103 [ 770.852611][ T6586] udevd[6586]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.984395][ T13] usb 3-1: Failed to submit usb control message: -71 [ 770.984659][ T918] usb 3-1: USB disconnect, device number 78 [ 770.991557][ T13] usb 3-1: unable to send the bmi data to the device: -71 [ 771.005508][ T13] usb 3-1: unable to get target info from device [ 771.011918][ T13] usb 3-1: could not get target info (-71) [ 771.018440][ T13] usb 3-1: could not probe fw (-71) [ 771.322886][ T5887] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 771.437312][T17136] binder: 17130:17136 ioctl c0306201 0 returned -14 [ 771.445366][T17136] binder: 17130:17136 ioctl c0306201 0 returned -14 [ 771.474593][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.484846][ T5887] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 771.526981][ T5887] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 771.540941][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 771.547728][ T5887] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 771.557392][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.594004][ T5887] usb 5-1: config 0 descriptor?? [ 771.908676][ T30] audit: type=1326 audit(1761193069.719:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17145 comm="syz.2.3328" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d539 code=0x0 [ 771.992309][ T30] audit: type=1326 audit(1761193069.799:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17149 comm="syz.3.3329" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63539 code=0x0 [ 772.215795][ T918] usb 5-1: USB disconnect, device number 88 [ 773.395183][T17187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3337'. [ 773.631919][ T5916] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 773.666372][T17197] binder: 17190:17197 ioctl c0306201 0 returned -14 [ 773.674182][T17197] binder: 17190:17197 ioctl c0306201 0 returned -14 [ 773.784710][ T5887] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 773.817516][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.868235][ T5916] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 773.936629][ T5916] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 773.984866][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 774.000121][ T5887] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 774.018027][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 774.032846][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.041005][ T5916] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 774.059839][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.084741][ T5887] usb 2-1: Product: syz [ 774.092883][ T5887] usb 2-1: Manufacturer: syz [ 774.111048][ T5887] usb 2-1: SerialNumber: syz [ 774.138446][ T5887] usb 2-1: config 0 descriptor?? [ 774.152109][ T5916] usb 3-1: config 0 descriptor?? [ 774.375760][T17203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3344'. [ 774.386027][T17202] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3344'. [ 774.431454][ T5887] em28xx 2-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 774.462047][ T5887] em28xx 2-1:0.0: Device initialization failed. [ 774.487113][ T5887] em28xx 2-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 774.532311][ T5887] usb 2-1: USB disconnect, device number 121 [ 774.684285][ T30] audit: type=1326 audit(1761193072.499:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.0.3345" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 775.026884][T17225] [ 775.029246][T17225] ===================================================== [ 775.036173][T17225] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 775.043617][T17225] syzkaller #0 Not tainted [ 775.048014][T17225] ----------------------------------------------------- [ 775.054926][T17225] syz.4.3350/17225 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 775.062629][T17225] ffff88805e8f4d38 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 775.071326][T17225] [ 775.071326][T17225] and this task is already holding: [ 775.078670][T17225] ffff88802c22b028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 775.088401][T17225] which would create a new lock dependency: [ 775.094272][T17225] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 775.102360][T17225] [ 775.102360][T17225] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 775.111788][T17225] (&dev->event_lock#2){..-.}-{3:3} [ 775.111820][T17225] [ 775.111820][T17225] ... which became SOFTIRQ-irq-safe at: [ 775.124676][T17225] lock_acquire+0x120/0x360 [ 775.129258][T17225] _raw_spin_lock_irqsave+0xa7/0xf0 [ 775.134532][T17225] input_event+0x76/0xe0 [ 775.138856][T17225] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 775.144564][T17225] __usb_hcd_giveback_urb+0x376/0x540 [ 775.150009][T17225] dummy_timer+0x85f/0x44c0 [ 775.154581][T17225] __hrtimer_run_queues+0x52c/0xc60 [ 775.159848][T17225] hrtimer_run_softirq+0x187/0x2b0 [ 775.165029][T17225] handle_softirqs+0x286/0x870 [ 775.169867][T17225] __irq_exit_rcu+0xca/0x1f0 [ 775.174523][T17225] irq_exit_rcu+0x9/0x30 [ 775.178835][T17225] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 775.184538][T17225] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 775.190586][T17225] tomoyo_file_ioctl+0x0/0x30 [ 775.195330][T17225] security_file_ioctl+0xcb/0x2d0 [ 775.200424][T17225] __se_sys_ioctl+0x47/0x170 [ 775.205083][T17225] do_syscall_64+0xfa/0xfa0 [ 775.209657][T17225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.215621][T17225] [ 775.215621][T17225] to a SOFTIRQ-irq-unsafe lock: [ 775.222617][T17225] (tasklist_lock){.+.+}-{3:3} [ 775.222640][T17225] [ 775.222640][T17225] ... which became SOFTIRQ-irq-unsafe at: [ 775.235233][T17225] ... [ 775.235240][T17225] lock_acquire+0x120/0x360 [ 775.242366][T17225] _raw_read_lock+0x36/0x50 [ 775.246939][T17225] __do_wait+0xde/0x740 [ 775.251171][T17225] do_wait+0x1f8/0x510 [ 775.255310][T17225] kernel_wait+0xab/0x170 [ 775.259712][T17225] call_usermodehelper_exec_work+0xbe/0x230 [ 775.265670][T17225] process_scheduled_works+0xae1/0x17b0 [ 775.271316][T17225] worker_thread+0x8a0/0xda0 [ 775.275973][T17225] kthread+0x711/0x8a0 [ 775.280234][T17225] ret_from_fork+0x4bc/0x870 [ 775.284891][T17225] ret_from_fork_asm+0x1a/0x30 [ 775.289722][T17225] [ 775.289722][T17225] other info that might help us debug this: [ 775.289722][T17225] [ 775.299988][T17225] Chain exists of: [ 775.299988][T17225] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 775.299988][T17225] [ 775.313537][T17225] Possible interrupt unsafe locking scenario: [ 775.313537][T17225] [ 775.321833][T17225] CPU0 CPU1 [ 775.327176][T17225] ---- ---- [ 775.332518][T17225] lock(tasklist_lock); [ 775.336743][T17225] local_irq_disable(); [ 775.343478][T17225] lock(&dev->event_lock#2); [ 775.350663][T17225] lock(&client->buffer_lock); [ 775.358019][T17225] [ 775.361453][T17225] lock(&dev->event_lock#2); [ 775.366290][T17225] [ 775.366290][T17225] *** DEADLOCK *** [ 775.366290][T17225] [ 775.374412][T17225] 7 locks held by syz.4.3350/17225: [ 775.379588][T17225] #0: ffff8880290af118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 775.388714][T17225] #1: ffff88801eb23230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 775.398798][T17225] #2: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 775.408440][T17225] #3: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 775.417999][T17225] #4: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 775.427122][T17225] #5: ffff88802c22b028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 775.437282][T17225] #6: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 775.446319][T17225] [ 775.446319][T17225] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 775.456699][T17225] -> (&dev->event_lock#2){..-.}-{3:3} { [ 775.462334][T17225] IN-SOFTIRQ-W at: [ 775.466382][T17225] lock_acquire+0x120/0x360 [ 775.472689][T17225] _raw_spin_lock_irqsave+0xa7/0xf0 [ 775.479695][T17225] input_event+0x76/0xe0 [ 775.485751][T17225] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 775.493192][T17225] __usb_hcd_giveback_urb+0x376/0x540 [ 775.500369][T17225] dummy_timer+0x85f/0x44c0 [ 775.506711][T17225] __hrtimer_run_queues+0x52c/0xc60 [ 775.513714][T17225] hrtimer_run_softirq+0x187/0x2b0 [ 775.520632][T17225] handle_softirqs+0x286/0x870 [ 775.527199][T17225] __irq_exit_rcu+0xca/0x1f0 [ 775.533597][T17225] irq_exit_rcu+0x9/0x30 [ 775.539646][T17225] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 775.547085][T17225] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 775.554873][T17225] tomoyo_file_ioctl+0x0/0x30 [ 775.561358][T17225] security_file_ioctl+0xcb/0x2d0 [ 775.568191][T17225] __se_sys_ioctl+0x47/0x170 [ 775.574590][T17225] do_syscall_64+0xfa/0xfa0 [ 775.580903][T17225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.588600][T17225] INITIAL USE at: [ 775.592563][T17225] lock_acquire+0x120/0x360 [ 775.598784][T17225] _raw_spin_lock_irqsave+0xa7/0xf0 [ 775.605700][T17225] input_inject_event+0xa5/0x340 [ 775.612362][T17225] kbd_led_trigger_activate+0xbc/0x100 [ 775.619538][T17225] led_trigger_set+0x52d/0x950 [ 775.626018][T17225] led_trigger_set_default+0x260/0x2a0 [ 775.633194][T17225] led_classdev_register_ext+0x73d/0x930 [ 775.640545][T17225] input_leds_connect+0x517/0x790 [ 775.647287][T17225] input_register_device+0xd00/0x1140 [ 775.654385][T17225] atkbd_connect+0x72e/0xa00 [ 775.660698][T17225] serio_driver_probe+0x82/0xd0 [ 775.667264][T17225] really_probe+0x26d/0x9e0 [ 775.673488][T17225] __driver_probe_device+0x18c/0x2f0 [ 775.680504][T17225] driver_probe_device+0x4f/0x430 [ 775.687260][T17225] __driver_attach+0x452/0x700 [ 775.693748][T17225] bus_for_each_dev+0x233/0x2b0 [ 775.700321][T17225] serio_handle_event+0x1f9/0x8d0 [ 775.707063][T17225] process_scheduled_works+0xae1/0x17b0 [ 775.714328][T17225] worker_thread+0x8a0/0xda0 [ 775.720636][T17225] kthread+0x711/0x8a0 [ 775.726426][T17225] ret_from_fork+0x4bc/0x870 [ 775.732736][T17225] ret_from_fork_asm+0x1a/0x30 [ 775.739229][T17225] } [ 775.741806][T17225] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 775.750911][T17225] -> (&client->buffer_lock){....}-{3:3} { [ 775.756637][T17225] INITIAL USE at: [ 775.760517][T17225] lock_acquire+0x120/0x360 [ 775.766565][T17225] _raw_spin_lock_irq+0xa2/0xf0 [ 775.772968][T17225] evdev_read+0x370/0xca0 [ 775.778847][T17225] vfs_read+0x200/0xa30 [ 775.784553][T17225] ksys_read+0x145/0x250 [ 775.790345][T17225] __do_fast_syscall_32+0xb6/0x2b0 [ 775.797009][T17225] do_fast_syscall_32+0x34/0x80 [ 775.803411][T17225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 775.811286][T17225] } [ 775.813766][T17225] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 775.821911][T17225] ... acquired at: [ 775.825696][T17225] lock_acquire+0x120/0x360 [ 775.830360][T17225] _raw_spin_lock+0x2e/0x40 [ 775.835021][T17225] evdev_pass_values+0xb9/0xbd0 [ 775.840030][T17225] evdev_events+0x1e6/0x340 [ 775.844699][T17225] input_pass_values+0x288/0x890 [ 775.849795][T17225] input_event_dispose+0x330/0x6b0 [ 775.855068][T17225] input_inject_event+0x1dd/0x340 [ 775.860259][T17225] evdev_write+0x2fc/0x480 [ 775.864835][T17225] vfs_write+0x27e/0xb30 [ 775.869237][T17225] ksys_write+0x145/0x250 [ 775.873726][T17225] __do_fast_syscall_32+0xb6/0x2b0 [ 775.878997][T17225] do_fast_syscall_32+0x34/0x80 [ 775.884006][T17225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 775.890491][T17225] [ 775.892800][T17225] [ 775.892800][T17225] the dependencies between the lock to be acquired [ 775.892808][T17225] and SOFTIRQ-irq-unsafe lock: [ 775.906285][T17225] -> (tasklist_lock){.+.+}-{3:3} { [ 775.911573][T17225] HARDIRQ-ON-R at: [ 775.915710][T17225] lock_acquire+0x120/0x360 [ 775.922198][T17225] _raw_read_lock+0x36/0x50 [ 775.928682][T17225] __do_wait+0xde/0x740 [ 775.934823][T17225] do_wait+0x1f8/0x510 [ 775.940878][T17225] kernel_wait+0xab/0x170 [ 775.947199][T17225] call_usermodehelper_exec_work+0xbe/0x230 [ 775.955091][T17225] process_scheduled_works+0xae1/0x17b0 [ 775.962618][T17225] worker_thread+0x8a0/0xda0 [ 775.969190][T17225] kthread+0x711/0x8a0 [ 775.975240][T17225] ret_from_fork+0x4bc/0x870 [ 775.981810][T17225] ret_from_fork_asm+0x1a/0x30 [ 775.988555][T17225] SOFTIRQ-ON-R at: [ 775.992692][T17225] lock_acquire+0x120/0x360 [ 775.999176][T17225] _raw_read_lock+0x36/0x50 [ 776.005666][T17225] __do_wait+0xde/0x740 [ 776.011812][T17225] do_wait+0x1f8/0x510 [ 776.017866][T17225] kernel_wait+0xab/0x170 [ 776.024178][T17225] call_usermodehelper_exec_work+0xbe/0x230 [ 776.032054][T17225] process_scheduled_works+0xae1/0x17b0 [ 776.039581][T17225] worker_thread+0x8a0/0xda0 [ 776.046153][T17225] kthread+0x711/0x8a0 [ 776.052211][T17225] ret_from_fork+0x4bc/0x870 [ 776.058778][T17225] ret_from_fork_asm+0x1a/0x30 [ 776.065524][T17225] INITIAL USE at: [ 776.069577][T17225] lock_acquire+0x120/0x360 [ 776.075971][T17225] _raw_write_lock_irq+0xa2/0xf0 [ 776.082804][T17225] copy_process+0x224f/0x3c00 [ 776.089380][T17225] kernel_clone+0x21e/0x840 [ 776.095778][T17225] user_mode_thread+0xdd/0x140 [ 776.102440][T17225] rest_init+0x23/0x300 [ 776.108486][T17225] start_kernel+0x3ae/0x410 [ 776.114883][T17225] x86_64_start_reservations+0x24/0x30 [ 776.122234][T17225] x86_64_start_kernel+0x143/0x1c0 [ 776.129236][T17225] common_startup_64+0x13e/0x147 [ 776.136071][T17225] INITIAL READ USE at: [ 776.140554][T17225] lock_acquire+0x120/0x360 [ 776.147380][T17225] _raw_read_lock+0x36/0x50 [ 776.154216][T17225] __do_wait+0xde/0x740 [ 776.160704][T17225] do_wait+0x1f8/0x510 [ 776.167102][T17225] kernel_wait+0xab/0x170 [ 776.173763][T17225] call_usermodehelper_exec_work+0xbe/0x230 [ 776.181994][T17225] process_scheduled_works+0xae1/0x17b0 [ 776.189867][T17225] worker_thread+0x8a0/0xda0 [ 776.196785][T17225] kthread+0x711/0x8a0 [ 776.203187][T17225] ret_from_fork+0x4bc/0x870 [ 776.210102][T17225] ret_from_fork_asm+0x1a/0x30 [ 776.217199][T17225] } [ 776.219851][T17225] ... key at: [] tasklist_lock+0x18/0x40 [ 776.227725][T17225] ... acquired at: [ 776.231679][T17225] lock_acquire+0x120/0x360 [ 776.236335][T17225] _raw_read_lock+0x36/0x50 [ 776.240993][T17225] send_sigio+0x101/0x370 [ 776.245480][T17225] kill_fasync+0x24d/0x4d0 [ 776.250052][T17225] lease_break_callback+0x26/0x30 [ 776.255238][T17225] __break_lease+0x6a5/0x1620 [ 776.260081][T17225] vfs_truncate+0x428/0x520 [ 776.264742][T17225] do_sys_truncate+0xdb/0x190 [ 776.269576][T17225] __ia32_compat_sys_truncate+0x5b/0x70 [ 776.275280][T17225] __do_fast_syscall_32+0xb6/0x2b0 [ 776.280551][T17225] do_fast_syscall_32+0x34/0x80 [ 776.285561][T17225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.292046][T17225] [ 776.294351][T17225] -> (&f_owner->lock){....}-{3:3} { [ 776.299634][T17225] INITIAL USE at: [ 776.303597][T17225] lock_acquire+0x120/0x360 [ 776.309815][T17225] _raw_write_lock_irq+0xa2/0xf0 [ 776.316470][T17225] __f_setown+0x67/0x370 [ 776.322431][T17225] f_setown+0x23a/0x300 [ 776.328305][T17225] sock_ioctl+0x5c5/0x790 [ 776.334357][T17225] compat_sock_ioctl+0x285/0xc80 [ 776.341015][T17225] __ia32_compat_sys_ioctl+0x543/0x840 [ 776.348193][T17225] __do_fast_syscall_32+0xb6/0x2b0 [ 776.355026][T17225] do_fast_syscall_32+0x34/0x80 [ 776.361600][T17225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.369646][T17225] INITIAL READ USE at: [ 776.374044][T17225] lock_acquire+0x120/0x360 [ 776.380698][T17225] _raw_read_lock_irqsave+0xaf/0x100 [ 776.388135][T17225] send_sigio+0x38/0x370 [ 776.394534][T17225] kill_fasync+0x24d/0x4d0 [ 776.401102][T17225] lease_break_callback+0x26/0x30 [ 776.408287][T17225] __break_lease+0x6a5/0x1620 [ 776.415118][T17225] vfs_truncate+0x428/0x520 [ 776.421780][T17225] do_sys_truncate+0xdb/0x190 [ 776.428612][T17225] __ia32_compat_sys_truncate+0x5b/0x70 [ 776.436316][T17225] __do_fast_syscall_32+0xb6/0x2b0 [ 776.443590][T17225] do_fast_syscall_32+0x34/0x80 [ 776.450596][T17225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.459077][T17225] } [ 776.461646][T17225] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 776.470563][T17225] ... acquired at: [ 776.474433][T17225] lock_acquire+0x120/0x360 [ 776.479092][T17225] _raw_read_lock_irqsave+0xaf/0x100 [ 776.484532][T17225] send_sigio+0x38/0x370 [ 776.488932][T17225] kill_fasync+0x24d/0x4d0 [ 776.493505][T17225] lease_break_callback+0x26/0x30 [ 776.498696][T17225] __break_lease+0x6a5/0x1620 [ 776.503573][T17225] vfs_truncate+0x428/0x520 [ 776.508244][T17225] do_sys_truncate+0xdb/0x190 [ 776.513093][T17225] __ia32_compat_sys_truncate+0x5b/0x70 [ 776.518899][T17225] __do_fast_syscall_32+0xb6/0x2b0 [ 776.524172][T17225] do_fast_syscall_32+0x34/0x80 [ 776.529185][T17225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.535671][T17225] [ 776.537977][T17225] -> (&new->fa_lock){....}-{3:3} { [ 776.543087][T17225] INITIAL USE at: [ 776.546962][T17225] lock_acquire+0x120/0x360 [ 776.553042][T17225] _raw_write_lock_irq+0xa2/0xf0 [ 776.559532][T17225] fasync_remove_entry+0xf1/0x1c0 [ 776.566108][T17225] pipe_fasync+0xa9/0x1e0 [ 776.571993][T17225] __fput+0x8a2/0xa70 [ 776.577531][T17225] task_work_run+0x1d4/0x260 [ 776.583679][T17225] exit_to_user_mode_loop+0xe9/0x130 [ 776.590506][T17225] __do_fast_syscall_32+0x1f4/0x2b0 [ 776.597252][T17225] do_fast_syscall_32+0x34/0x80 [ 776.603651][T17225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.611529][T17225] INITIAL READ USE at: [ 776.615840][T17225] lock_acquire+0x120/0x360 [ 776.622322][T17225] _raw_read_lock_irqsave+0xaf/0x100 [ 776.629587][T17225] kill_fasync+0x199/0x4d0 [ 776.635987][T17225] anon_pipe_read+0xf06/0x1040 [ 776.642736][T17225] fifo_pipe_read+0x22/0xd0 [ 776.649230][T17225] vfs_read+0x55a/0xa30 [ 776.655370][T17225] ksys_read+0x145/0x250 [ 776.661595][T17225] __do_fast_syscall_32+0xb6/0x2b0 [ 776.668694][T17225] do_fast_syscall_32+0x34/0x80 [ 776.675530][T17225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.683840][T17225] } [ 776.686322][T17225] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 776.694980][T17225] ... acquired at: [ 776.698765][T17225] lock_acquire+0x120/0x360 [ 776.703424][T17225] _raw_read_lock_irqsave+0xaf/0x100 [ 776.708865][T17225] kill_fasync+0x199/0x4d0 [ 776.713442][T17225] evdev_pass_values+0x627/0xbd0 [ 776.718536][T17225] evdev_events+0x1e6/0x340 [ 776.723202][T17225] input_pass_values+0x288/0x890 [ 776.728295][T17225] input_event_dispose+0x330/0x6b0 [ 776.733597][T17225] input_inject_event+0x1dd/0x340 [ 776.738782][T17225] evdev_write+0x2fc/0x480 [ 776.743353][T17225] vfs_write+0x27e/0xb30 [ 776.747781][T17225] ksys_write+0x145/0x250 [ 776.752269][T17225] __do_fast_syscall_32+0xb6/0x2b0 [ 776.757539][T17225] do_fast_syscall_32+0x34/0x80 [ 776.762549][T17225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.769035][T17225] [ 776.771338][T17225] [ 776.771338][T17225] stack backtrace: [ 776.777206][T17225] CPU: 1 UID: 0 PID: 17225 Comm: syz.4.3350 Not tainted syzkaller #0 PREEMPT(full) [ 776.777224][T17225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 776.777232][T17225] Call Trace: [ 776.777239][T17225] [ 776.777245][T17225] dump_stack_lvl+0x189/0x250 [ 776.777266][T17225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.777284][T17225] ? __pfx__printk+0x10/0x10 [ 776.777301][T17225] validate_chain+0x1f05/0x2140 [ 776.777324][T17225] __lock_acquire+0xab9/0xd20 [ 776.777339][T17225] ? kill_fasync+0x199/0x4d0 [ 776.777355][T17225] lock_acquire+0x120/0x360 [ 776.777367][T17225] ? kill_fasync+0x199/0x4d0 [ 776.777386][T17225] _raw_read_lock_irqsave+0xaf/0x100 [ 776.777403][T17225] ? kill_fasync+0x199/0x4d0 [ 776.777418][T17225] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 776.777433][T17225] ? do_raw_spin_lock+0x121/0x290 [ 776.777453][T17225] kill_fasync+0x199/0x4d0 [ 776.777469][T17225] ? kill_fasync+0x53/0x4d0 [ 776.777485][T17225] evdev_pass_values+0x627/0xbd0 [ 776.777502][T17225] ? evdev_pass_values+0x621/0xbd0 [ 776.777519][T17225] evdev_events+0x1e6/0x340 [ 776.777533][T17225] ? evdev_events+0x79/0x340 [ 776.777548][T17225] ? input_pass_values+0x8d/0x890 [ 776.777562][T17225] input_pass_values+0x288/0x890 [ 776.777578][T17225] ? input_handle_event+0x70c/0xf30 [ 776.777597][T17225] input_event_dispose+0x330/0x6b0 [ 776.777618][T17225] input_inject_event+0x1dd/0x340 [ 776.777637][T17225] ? input_inject_event+0xb6/0x340 [ 776.777657][T17225] evdev_write+0x2fc/0x480 [ 776.777671][T17225] ? futex_private_hash_put+0x245/0x280 [ 776.777690][T17225] ? __pfx_evdev_write+0x10/0x10 [ 776.777705][T17225] ? bpf_lsm_file_permission+0x9/0x20 [ 776.777721][T17225] ? security_file_permission+0x75/0x290 [ 776.777737][T17225] ? rw_verify_area+0x255/0x4d0 [ 776.777754][T17225] ? __lock_acquire+0xab9/0xd20 [ 776.777766][T17225] ? __pfx_evdev_write+0x10/0x10 [ 776.777782][T17225] vfs_write+0x27e/0xb30 [ 776.777801][T17225] ? __pfx_vfs_write+0x10/0x10 [ 776.777820][T17225] ? __fget_files+0x2a/0x420 [ 776.777833][T17225] ? __fget_files+0x2a/0x420 [ 776.777845][T17225] ? __fget_files+0x3a0/0x420 [ 776.777857][T17225] ? __fget_files+0x2a/0x420 [ 776.777872][T17225] ksys_write+0x145/0x250 [ 776.777896][T17225] ? __pfx_ksys_write+0x10/0x10 [ 776.777915][T17225] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 776.777934][T17225] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.777952][T17225] __do_fast_syscall_32+0xb6/0x2b0 [ 776.777970][T17225] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.777987][T17225] do_fast_syscall_32+0x34/0x80 [ 776.778005][T17225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.778021][T17225] RIP: 0023:0xf7fb3539 [ 776.778033][T17225] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 776.778046][T17225] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 776.778062][T17225] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 776.778072][T17225] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 776.778082][T17225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 776.778090][T17225] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 776.778099][T17225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 776.778113][T17225] [ 777.148600][ T24] usb 3-1: USB disconnect, device number 79 [ 779.933801][T15240] Bluetooth: hci5: command 0x0406 tx timeout