last executing test programs: 3m14.978597491s ago: executing program 3 (id=3078): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xddc, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3m13.376819465s ago: executing program 3 (id=3084): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x9, 0x8, 0x1, 0x6, 0x7, 0x7fffffff, 0x3, 0x9, 0x7, 0x4, 0x6, 0x7, 0x24, 0x4, 0x3, 0x3], 0x70000, 0x101000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32=r4, @ANYBLOB="1400020000000000000000000000df812fdc9262dbff000000008800"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 3m13.019834804s ago: executing program 3 (id=3086): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x6, 0x12) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x3, 0x1, 0x0, 0x2, 0x8, 0x0, 0x6, 0x0, 0x0, 0x7, 0x6, 0x7, 0x3], 0x8000000, 0x59352}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x1) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r8, &(0x7f0000000780)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x8, {0xa, 0x4e22, 0x2, @remote, 0x6}}}, 0x80, 0x0, 0x0, &(0x7f0000000700), 0x18}, 0x4000080) 3m12.145254908s ago: executing program 3 (id=3092): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) chroot(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x114) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRESDEC=r0], 0x1c8}, 0x4000c010) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000000700000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xffffff0a) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x4d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="05c38c886b60", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "a200fffffff5000000000000"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x5}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}, 0x1000}], 0x1, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000180)="4288df08603d30fe1fa1f1116e7a3905588dfb3b6a1a6d5e2206414b6285822c47c545ea6e86df2354", &(0x7f0000002ec0)="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"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 2m55.090089462s ago: executing program 3 (id=3142): r0 = memfd_secret(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup(r3) r5 = syz_io_uring_setup(0x118d, &(0x7f0000000640)={0x0, 0x8d2dc, 0x80, 0xffffffff, 0x400003c8}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 13.235548492s ago: executing program 2 (id=3697): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 12.594115235s ago: executing program 5 (id=3700): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x13a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_create(0xd) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 11.911094937s ago: executing program 0 (id=3702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002740)=""/4077, 0xfed, 0x1, 0x0}, &(0x7f0000002700)=0x40) r2 = io_uring_setup(0x131f, &(0x7f00000002c0)={0x0, 0x9db9, 0x10, 0x3, 0x226}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x20010, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x6, r5}, 0x14) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x0, 0xc, 0x1, '.'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="201406000000239331"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f00000000c0)=0xffffffff, 0x4) 11.226723818s ago: executing program 5 (id=3703): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 10.101009267s ago: executing program 2 (id=3706): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffec2, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{0x0}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x0) close(r3) 9.482914258s ago: executing program 5 (id=3708): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r2 = syz_io_uring_setup(0x88d, &(0x7f0000000340)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$vim2m(0x0, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3d, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f063096244fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0f", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x50) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r5, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x8044, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e2f, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r2, 0x75fa, 0xe475, 0x1000000, 0x0, 0x0) 8.775301413s ago: executing program 0 (id=3710): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000007c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x20000000) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/106, 0x6a}, {0x0}], 0x2}, 0xffffffff}], 0x1, 0x0, 0x0) 7.78278033s ago: executing program 0 (id=3713): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x0, 0xd0, 0x1b8, 0x1b8, 0x0, 0x470, 0x470, 0x1b8, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000003f80)) 7.617015151s ago: executing program 1 (id=3714): syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffffbe0000000001, 0xfb0d, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/binder1\x00', 0x4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x2100, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r8}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r6}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder1\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, 0x0, &(0x7f0000000040)) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.30946588s ago: executing program 0 (id=3715): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x5, 0x43, 0x8001, 0x0, 0xf, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) r2 = syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x100809, &(0x7f0000000600)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@default_permissions}], [{@subj_type}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x37, 0x35, 0x37, 0x32, 0x35, 0x66, 0x34], 0x2d, [0x37, 0x62, 0x38, 0x37], 0x2d, [0x31, 0x63, 0x64, 0xf6d70af54b35891c], 0x2d, [0x64, 0x62, 0x39, 0x38], 0x2d, [0x36, 0x31, 0x37, 0x39, 0x0, 0x62, 0x30, 0x31]}}}, {@obj_type={'obj_type', 0x3d, '/dev/audio#\x00'}}]}}, 0x1, 0x0, &(0x7f0000000300)="11eb7621eb5dc4b38a4b818d1aab099259038740c7eda50af7c05c61fa8a838a") mkdirat(r2, 0x0, 0x29) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0x18) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x670, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x2e, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) pipe2$watch_queue(&(0x7f0000000240), 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x73}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r7, 0x402, 0x20) r8 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r8, 0x8040942d, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 7.309088989s ago: executing program 2 (id=3716): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 6.841766629s ago: executing program 5 (id=3717): r0 = memfd_secret(0x80000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, 0x0) landlock_restrict_self(r0, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x48, &(0x7f0000000bc0)=@generic={0x0, 0x0, 0x40, "8abee0a7", "e209b36d30c708f850ff1413f5a9e80f91a27071f36a000fc2eaa227436d5d4defe6658a34e3807a2730b0315f3edd3772fc80f5e4aff9cb99fe3baa33f6b84e"}) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r6) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000000)) 5.935661747s ago: executing program 1 (id=3718): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[]) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000040)=0x6, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x40, r1, 0x1, 0xfffffffe, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x22008840) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) 5.770974768s ago: executing program 4 (id=3719): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x0, 0xa00100}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 5.517495572s ago: executing program 4 (id=3720): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x401, 0x12, r1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/sync_on_suspend', 0x40, 0x0) sendfile(r1, r0, &(0x7f0000000180), 0x9) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000dc0)={0x0, 0xfb, 0x1015, 0x2, 0x6, "c188d9cbc87957f8b3e70e833e4fb3a7", "ff2969c58bb5ef18c729feaa10af4622bf465b34cadaa22f5384792416eddc2498f22c2ae7a81e261b9213f29e196c945d864d85cb37b736d0dcfff84fee6f046052e4ad53a1dd75f81b999f909582decc3ce1b192fde08ca2243b86c9bf79dae26cc99034e07ecdbc51a5a4d46c9cbb546e7e477e6193ef33d19e6e1392c5f576df4aeb7ec1284aa2f87f6c4f29d23f1a8a49d3e80192c62c94521c16d951574eabacb1504291f21b56af2549f07715a76051eeb559f7ffe5242c430a632815f02f979c5122b2386f97344a7729bb406e35ac41dd3c41f25cf19b692fd869687f5d94d14f0d27b4353e32eaf7a193f873754fa5428d62418e66cd62962be696433f5ef9354254b22f8208cee5101a7c663c4ef24ada213b8f1a68e3cd0307a72cc9d90c8753d5cb05f3d58d3cfe9d75e5d7e6edf0095fd343bf42463835e1d2f87441720e792be35da5f822e922457db234a70fb711e0159e7d0d2b2e055abb7729e9b493a557acb8ef6f37e92479dd0ab384a5b381a95fdc51a66ae4de08ec3b9223fd12fc10e3eecc4949c2c16243a963e4e7d2d9fd7bf74d0df8bc4cd5e72a688db291b22024d565ea1aa3da7fcc3d87a59ea3aface82ff4cbd51eaeb5c05f5d73537068e1aba5db833f68cd2af244954352dfa664346c22d3c4e606b8f1a405378ff193d4fa76a8651856d0a0688cbf1d3e33a4e9051a994b748003891eb4f6edb72036e130d3c816c31dbab1919d0ea2ac0fe1aaf7377786cdff3ba7b7ae06fbf54fcc2ee6bfb894996abc9d97c557e674a79bc755731311df11b6125971cf50a75afca1f99d220016d2fabeba9ec1ee986ac16139669bf5accabc0c45a71bf932c5a62aa83e9d281dda74271902d35db38f36d4aa3131138525c54811d036de6b4dd1a8c4f2ef444583507366728818ef35ca33e0c0eec4993731c5c3958e113889b04ff59691ed9d8d3e2ba1230c1a20af723fc24810ecb3d91cb462390618d97e227d683ad598a041bb6a092fdea4f1b50358157c434996d12ec3a1d28f80c21408f0072dec8f23eeb945d37cedd82090845a018ec8c47bf1a728ee1439706d80c597055bcabf9465f819317f06e5a2111735c655ff0c202645cfa2c135abf3cec11a198e6bc2fef7ba7b16ec5b47d93191bf8bd75a22c372d4241df55a293582ce50fc94a5fe0981a5ae85cfc1759335bc3e30606a849741b99001fafdba23dbbf7390bc6f69dbbde5397281f50e440ce6e2bac2a681f521e11c54e2dbdfe5076401da9e07bf4f84c33b2ee8b724ce75ada5ec8435367d7b64236cdab4fb266860ad9086b811adbc7daf77f73d9dc8496ac5ee73a3bc1ba2e7faa3ca0cc0adc6071ff7b2b748d5d753fabf16beaccb5b28815abae03f7c7f49a8a59c52dbb7eec6e747e1c68d0c5733716d05b677529b1183e7553ae44b70c3a16f3c0a9f6ad2b1a82f6678e3685571746575b9d7141d2cadc7f9279fdd431ab9798ef25a550bf3c3daa1d83e74ee5138133704878a9933f6873c6230a904afab201c23ea396d068b36333c737894123cb0dc12995cda6bd46a96df1a7e0d0ac3637cbc7895c916ed11f8762ea251f34a2e109ca9ca0585b7ab08433c6816659ce7797deb5d113bcda1725740ebb2bf79e1abc9508781ceba74edafe7d105961dacfe395e7eca17a6420e854b0977391fc12dc84d66e7ca9a132b7c64dc6ac8c25793f16f626f7412048c9bc19690ca01fd7628c050e39bb25029c53d6e9b2065caf5f42af99d04ec7449fe25c3cdf3af1a2eb441118121a7a735a65fc43e1cf707fb16ee0003eb07197842d8728a9c65c57b562b4fdc1174f03f522cbd850ad3ae6c8e9356369a95e79c92c7e199ad24e85733e410596408401eeb6e0fa3b1f20aa2b7c69c928a3a2373cb851e634a83280df5437bbdc70719fff8b86420bc0051e94c7f192271702f3555737f77263c4369625f8aadfedd4210059755e821950b63bb90788b1f9f4516cb413323927b8943c1571ceed1c6a4fc951ab2bfd7dc6e3cd5ffd256d1cb4e1aebb96876b41ced6d73cc933b084706ac931c8dc2083a19bfe8ec28265b5a5783955721c1a33b434ca1367c49522ed4ab0d91e378ac1fe4d8560ec7b5e5755057e815c132d64e4d811ac29fa742f171a9807ca127f05f8acf29daaa712fb12d5f46541b41ee94ee4498df386bc8d97bbd355d7b5a853f2fd23c04f157fb0926a88828041080c9e96c185aee7eb8f450c8db0e462a4153c03b33ead2d640abea07abf7c643141ef7c0190a62ae1572905e5817f6e204b9bf32ad5f162c65f66e92e2610ed59522760ac1619c46cf396a57d433b799309fca35c3b86a7d71d97e1a4f7a86a62035cc10eb4629ab81a6dba8467446e3ceb298ad2dfac4237a07fae16f0eaec5fc88b880d531d93d2a3c612d346ac6733a1799a9e60896aa2919407ddb356e800d364ab568b3f1aedd06639abffd6d865e8bb4c137ff47b816f3a12becf843a2f28ecaae28dd8f966f5a63003eb91b584f834c87e0998db74e85fff6f58af3da47b28d521c90c2740c42dda9c422bee4044527e0b4fb4eac7dcd65167fcbee465b82b658928ce88d094b32ece6f6c424754abfde9712f7f36b2d3e4fee9edc3ada5c81757c446cf47de8e090666f36e33a1c1a0eae1a0d4eb62febd237caa29247c935155efc3b28a15636c1be9fe719a9438e059d189737dcb7d5fc1eb5cc64be18f6fe19d311ce85b2f76a895e1d37992bd784d788d9b4e6a51aa72e65d79066f7bf8df0a9b78b2b9306f399d42e6bc64d720500ef534bae5a71b7a1b3e1ecaf7d80fb0970b695876b2a4515301d9016199a0646e03e114d231d2edcf320ff02e8ce751854ee187ebbf037469fb81a7e61cba0adfa346161bd744fb9a630cf743cf1bf5473d495fe55329313834dfb146071763f45b61dcf63c67200e5e4621f4792c9173045a1db527973a863449b65405b0c665a41cd025aa31b01a8289a73c3ccdaa037ba3ae4dcd7bfcb8fc6cd99642bab4f27b69ba6ab4726e582b124782960b3ede685d62731ed2030b22427d2779b72194f543731c7ffbee9c3af67e393b0a75f8c96502b2d80b00a65e00db77f5329e9ecaa527970b9a26250a2325691ecf18e3936ee27760472be2447db4a252a6cec07d51d829926e854a8aac38d3d5833669c36238418b146ea584d118b7ab244b373ed286e058679bf9bd63ec5e329864c6f8cc0b829cb63a222d6efb19a95fc6fdc77681f799c6045f564b4a237e1a0d187385e9dc2eba8b97f196be60de6d7c8ea1dfdaf3ed20dc982035a325f16da2930f3932433fe85706e6c42edd408cac95ee95b947d7e656bec05362930ef84eaf6f0b127665be2d51c00781ec04aac732dee08bfe4d3cc49bf6a0d7f27b7473b119cc2de83540c49a367b5699f0a15ae3c9303a48d486dec1ef880aa88cf2dff01dd5d8363b4e5b5ade725b2a27147ba577f027d6a7c6f4fe79fba6a39f4d06e56e0273a5a001f129834dc4e719f9b0c9c87ec1e12493b3c61b68ea5803b8869282f7673b85ae5873cc153071c42f54bfed312db5914d0fcb6bd0c2a8178cc18c54273da667010d8ddd3706a9c67000e25247265d2d0f9c97ab23de7712886a52768a2fc266c363574602a02143ce29025d3e7b90f798d5c9b6cc9e86609ef487f80a569d983e83de7121a74cc655cbb684241b64161da78916d6f2bbc49211eb777671785b4c40524068497f4d09c7f1e57516e9cb5158805ec75b50f809e2047c3ec5ef177e74f96ba7e6ef19ef68df12f6c26a4f655f12d0586fdfb692145f3dd6f551d00f0d030b95dc00694368841cfe0b8267fb68dde485be87e7c127e749164de542948fe16b4391f95e444f824f186d38280e6a2c3bcac06af248d819273af1e0c3379ee6089880640f255d8be60613e727744a837a3a4e7b7c3a182e24eff3f5c0a1f35dcc4758b7eab62b8c218bce39308d2607a0f2901568ef63a45144be96a458f1e1056fd6211de158d7b44ea3c220ec1dedf38ed675a48a37ec64957006a5563e6aaacf7439babbd6336a7eeaaf05243831425d7fd9d53b2cc4728fa6b82a504fd4f801f09c0b8b9fd962097e1b3e6f9ba69d8a9bc7995a224b77df5135a446e95a270d2829ce749893e45722a31fe416953f1ecde84ccc8278185539f252a66c35e70f35b06c532802e4f72ecd4836cdcd666e38daf8a7f2c78f2f746130954d38d57661b322bf0406c7d5148b221720768233461d6dd205694e7d00a278fca890a79254b10c4d3ca1595183d66791f97e6e03311d56ef157b51be3c5f3582cf2905c554758ff7ef902e4cc69bccb5a07d4972faf7f4e1ab899ea5316e4b31b6a94575d9ba1f19a93c232335e32a681f0d49ffb7d9e9a483dbdf2b8a3970896fda0333f09aa4f94a152d924b1153a511aa3b6d779bc68c382a5a982551b002b2156848f74649e61d8f0ba8ecd3c7c6e7fb08c689032465de066391cbd4dea1b6d1a94dabef85b26c7f79f36048de7a10a016c59398c8b2fc809e3af4cae193c287b6d65b944e0873069c33b950100a3f731cd9bafa427e4eaf79666f8a0998890e35afed75e4c099d84c96193fc29915abf030c769bd14c370459db43c0997109c1e79226ffcc6a1185010d74007d80f88f917621b5320ac7a884ea353d5749505144a13aa50cf6332695d40a44a9e50b3aeb45d4c46b7ef28a66c3209304ca70bb0db6c493c3473eaa1fbdd697ca55df27405d0cbf2f732d0672503f91ab94e27a5da53c70f372069e1f312b1adbb0cea1441af7cd4bd276ef521981bc35702edf194155251e20869b618d155eed61a5308086e6035bd9a7ed3ca3f812cc9a7fd5adef796e47d4d92550763fcb0fc9faa507fc34069bdaec114f9fa159f1cd4bb7f9aff4e449ef6670f88e9f9ff29c504e536b030cf6adce58642ebe3b05fdf27850d75c675e257a0a8e781ade9a53f2698c16776d0071c11a79ddbbd86bbe34ca9185a95ee45a8b7d76830c420103c4fbaec516f2c7f3eb97d9a0339f6641df6983ec7ce6e7b238161b70bfb9aa331fb734d251c425396f251ddce813987c7362a1077800b4abea6fdcaf7642060b3394f06e8da2b419db267a29e56561545f584d8c6ed092fa88c21eafb6b8b1437ac3ad6e7bab624a282282e4248347cd402bf78b73f64b44d45bbbbbd54c163c44c60ec8c1a43fd7b971ee7871c87958f6fd8e1b28d79eee9cd9209ad69e94bd6f1ed12a8d13b68591cbddf30d47620d692ee511a6849a3d2dc63501b5dcab0c71028e726b5ca8cb950ff24da9a0ca13f3d4ddc8d0a26ecf9e89e7316b3aa984ad7fe0e009a2c53e8bb4274bc505f9076d86444a0fd393c76860517d6ba37975c0a023ca11358dad646f2dc332257e297f3260680af779f85daed26fa133425d72ac053290a4cad1a9cf7d131158423a167ab50c309ecdc2bd3987b1d811a5f23b766f18a3494decb0434b206f0fb30fcd1a26166e5a0cc69fdd34ef2962e65ae4f0cf6e42a0da59a20dad54ed0d020195bf65e81487a29571bef68d29cd6952082c70cc50de743ecf3a1fdc4fda1687f8527dd35c85eb7e81d92ec40f3b1e587f365a9bdb574acbf50f2a602c81327737cdc30e9b8186bc23b1fc090ee8f830aead48dcdef257112d7fdfb6beea4cdaec8b43e4978a7d2f67f79c07ac97017043745ac3cb2b7c15bdda2ddf4437d4285a5b6e5a4f51779f64db2a6717d5cef4ad74837951abae80d8b800f2d75d70c52cb95018af5b24"}, 0x1015, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa5) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 5.451369126s ago: executing program 1 (id=3721): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24060400) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x6, 0x207d8c, 0x2b928e}) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0x25}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001500), 0x200) unshare(0x2c020400) socket(0x15, 0x5, 0x0) 5.093186365s ago: executing program 5 (id=3722): prctl$PR_GET_FPEXC(0xb, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) fspick(0xffffffffffffffff, 0x0, 0x1) clock_getres(0x3, 0x0) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x6ec8, 0x80, 0x2000007, 0x3ce}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r2, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x20, 0x0, 0x0) 4.397649481s ago: executing program 1 (id=3723): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000007c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x48}}, 0x20000000) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/106, 0x6a}, {0x0}], 0x2}, 0xffffffff}], 0x1, 0x0, 0x0) 4.173674853s ago: executing program 4 (id=3724): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0xfffffffc, 0xfffffffd}}, 0x10) r1 = syz_io_uring_setup(0x50a1, &(0x7f0000000140)={0x0, 0x8aee2, 0x80, 0x5, 0x1f5}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) io_uring_enter(r1, 0x47f2, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x802, @mcast1, 0x1}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x81}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) syz_io_uring_setup(0x10b, &(0x7f00000003c0)={0x0, 0x334b, 0x80, 0x3, 0x805}, 0x0, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000f10002000600000000000000000002"], 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000f5ff000000050000000000000000", @ANYRES64=r9, @ANYRES64=r10/1000+10000, @ANYRES64=r11, @ANYRES64=r12/1000+60000, @ANYBLOB="0300008001000000040000003a03000019cb1edf8049074e3ed14247c42ccef10e6d92a0ea2390db6a3a84a15198d21c6ad50eecfa2a7dd2a7e41a27484acf13c2fdaa58a6e5b9c82cd12727cbf66024"], 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x30000010) r13 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r14 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r14, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x2, 0x7, 0x20363159, 0x2, 0x8, [{0x10001, 0x5}, {0xfffffffe, 0x2}, {0x5, 0x5}, {0x8, 0x492b}, {0x9, 0x9}, {0x5, 0x5}, {0xddd, 0xc}, {0x10000, 0x7}], 0x70, 0x1, 0x3, 0x1, 0x4}}) ioctl$KVM_GET_PIT(r13, 0xc048ae65, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000500)=0x8000) r15 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r15, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r15, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}}}, 0x72) 4.062985795s ago: executing program 2 (id=3725): r0 = socket$inet6(0xa, 0x3, 0x3c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001240)=ANY=[@ANYBLOB="09283f3876104eac27f783d7a34e7000000080000500010004006604"], 0x16) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffde, 0xfffffffc}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000180)=0xfff, 0x7ff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r4, 0x10000) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) 4.043921598s ago: executing program 5 (id=3726): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000200), 0x5, 0x41) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @private}, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000340)=0xe8) r2 = getgid() r3 = syz_mount_image$fuse(0x0, 0x0, 0x14181b, &(0x7f0000000a00)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}], [{@subj_type={'subj_type', 0x3d, 'T\xcc{;\xa9$\xe9Z\xb9\x8f\xea5\xa0*\x8e\xf9\xf0\xe0}\xc5\x97\xd2\x03\xb3\x98\xb1\x8c!]\xa6\x7f\'o\xc1P\xe3\x93\fx\x8es\x02G\xcf.\xa64\x90Q\xef]\xdd\x065\xaf\xca\x16+\v\xc7\xeb\x83\xa2v\x8f\xea\xeb\x92\t\\d\xeen}\xb7\x02\xd0\x98\xb2\xc55\xfd'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_type={'obj_type', 0x3d, '/dev/audio#\x00\xf2\x7f\xf3\x99\x17E\x88\x88\xa8\xf7\x1d\xfbe\xee\x98*n\xbdgqoX\xa6\x18\xe5\xfa\xd7R\xcd\xe8\x14)\x90=\x16\xbc=R\xb2\xccr\xd3\xd0\xe2+l\xa3\x82k\xc6\x15\xac\x04\xd8K\xc3#'}}]}}, 0x0, 0x0, &(0x7f0000000240)="11ab7629eb5db8b38a4b818d1ac5099259038740c7eda50a80c05c61fa8a838a") mkdirat(r3, 0x0, 0x29) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) socket$xdp(0x2c, 0x3, 0x0) r5 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r5, 0x0) ftruncate(r5, 0x8000000) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r7, 0x402, 0x20) syz_open_procfs(0x0, 0x0) 3.966392827s ago: executing program 0 (id=3727): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x404c000}, 0x24000850) 3.187418351s ago: executing program 0 (id=3728): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfb, 0xc0, 0xc3, 0x20, 0xc72, 0xd, 0x92f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x53, 0x0, 0x0, 0xf3, 0x20, 0x38}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x2, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0xfe, 0x3, 0x2, 0x6, 0x0, 0x4, {{0xb, 0x24, 0x6, 0x0, 0x0, "8c0000000075"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x100, 0x9, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xf9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x80, 0xb6, 0x94}}}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$packet(0x11, 0x3, 0x300) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.165514321s ago: executing program 1 (id=3729): r0 = memfd_secret(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x84, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x48, 0x16, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x6fb, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0xe39, 0x3f, 0xd, 0x8100}}, {0x14, 0x1, {0x6, 0x6af, 0x7, 0x88a8}}]}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x30ec, 0x36, 0x300, 0x70bd28, 0x25dfdbfe, {0xc}, [@generic="19783e8eee75110e9951ae950e2ebe386564", @generic="d747aa6760ffa920773b577eae731d2849483f694a1077ea3865aef431478e95bdf671f9d6e384b0963a13105c6b5428869f224da8eeac24a1656f9ac66313b3998f3e51470d1fa7491df639077bf239d3fdd05ae64871214d439e7fcaea732e8fd7d585a400086805a700497b411b0db86cc0a575972641bbec2dd156400f7ac034dbba8c7a5d811b6733d7429ab46354728c316f01505c7b4aec3c8bffcaf81832c33b95cdd9511c0cfa4a2268a6ae2e150b05139297dc1f77813d7fa7a7120ad2d1141838140680cb51d94df496264ecd7bc41225515f930c2fb8137555a8faf36f17ebdba9f350c6ee702631d07c3bb9dbf0617f9f", @nested={0x135, 0x129, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x1a}, @typed={0x8, 0x21, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x14f}, @generic="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", @generic="5fe11ee6c400206147c99c7568c9726b", @typed={0xc, 0x45, 0x0, 0x0, @u64=0x3}]}, @nested={0x21cf, 0x10f, 0x0, 0x1, [@nested={0x1075, 0x102, 0x0, 0x1, [@nested={0x4, 0x56}, @typed={0x8, 0x134, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@private0}, @generic="4a4ccfcc1312a15d842f06a5085dd8bd46e03f5b250eecd1f6a5c595c84e1462cb9d496973f437542b498cffbe108c817ad693988a73a6b87f191c11c58f739d49e45a2d16662df26ef9901f9bc821bd5b5a", @generic="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"]}, @generic="1de2f0b2cd0b81f0a65240771a47bcd409821748c50f6337441f3043e922d9ac83f3a20a44e1d1e689677271fd1dbcb3e7dbdd2985be3f8ebc37ebeb280ceb89ee51975bdcbde8227d486aa4d8430f59dffd922a792d3f73d53df5c727341def9689dbc2b65ca883941d10d4e70a55746471ccf67c2281dc124bc4b657af01", @nested={0x10c8, 0x2, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @uid=r4}, @nested={0x10ba, 0xe0, 0x0, 0x1, [@typed={0x4, 0x107}, @nested={0x4, 0x157}, @nested={0x4, 0x31}, @generic="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", @nested={0x4, 0x14f}, @generic="041e802c8b7cd1e6030a8f21c029092c735b7e9f3b19c6ec0bdadae499c704e4ea505e9a69855deef983db4580fbf42534db42fbc181c3ffa3eb79c11fa86ca9480342eefa060b1c20c05da7a4973657ee6c50ff8472e7363a2455027a0731e3246624ba8bf859c31e3164b136cfceececce82fed93e97c1f07d388502952ac50c8da935b98552ae705bc07ce7ec9014360a3931d932cb05c2f1c2013faa01fc2f974418b9cd"]}]}, @typed={0xc, 0x81, 0x0, 0x0, @u64=0xfffffffffffffff7}]}, @nested={0x2e9, 0x18, 0x0, 0x1, [@generic="1c43e3b58ae032b68c7315339d86d2a36eb78daa66312484d8ce2cf46cfe9d25c9f7fc8ddcb869442f5d5a9fa0f181e1e7b84f1c405a64c6992674c67ada5c9d6d1203fd4400ff50e4b8b748efe5c6", @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x2}, @nested={0x22c, 0xf6, 0x0, 0x1, [@nested={0x225, 0x12, 0x0, 0x1, [@nested={0xd5, 0x16, 0x0, 0x1, [@typed={0xc, 0x42, 0x0, 0x0, @u64}, @generic="f1d82e9422b5da11fcb2faa925159f343d251259fa44c0d589903865e75046687e273c88a15938eb04a50d82e86a73a986d846848f47f0a88a8230286f332344b8b7ce91bef6f77ffd342c8509bef8cc1a50dcfe9e73974a55b16769ac7113ad69fe4c85fbedd7492db4091cbd34ccd278225aa19f79a6f30c75b10241097bda738764834d0c2eb81ec1040677dc80d4bf2aae156fb2989d13d2ec56883f90956e526ff3613fe93275b1e569897b99a6ed0cc7a68457e012f2db033ced3360bd636fbf6880"]}, @nested={0x89, 0x3e, 0x0, 0x1, [@nested={0x4, 0x19}, @generic="8791c24ccd7cf51fc9911053398cd0bd2a718d5f221fb817b26fce734f6c6e676f54e834a1ddb5a5f6f6f68f44c3715d988b0d2c3f453d85fcf130c77aa82cd477e8ae59c0446f22dea925297943d1e17491b5c5ee729071ab19d2605432", @generic="665102660ea010642bc122dabe18880f1163230cccde76", @typed={0x8, 0x4a, 0x0, 0x0, @fd}, @nested={0x4, 0x12}]}, @generic="65b327d36b052675d62d47c87794ece473e82b2eb31c37b91e9d9918b1e44079fc1cd976db13d3e8c66ab9100205ecd3473f9587ab2fa0691ca1c2e758ff2d9cf2a9192dee8cca49a7c3b1db9b57b37c74324cc6eefeb32290782ba086ae7db0c6397dbf4c6630a6a93e57699f2d356c1d53e3fa5ab997944e228d4cc5ad4046290dccac68d6579654e6790edfb19b9750ef97c66ad23e7750bddbd9a314a6b03f99c7d8fad575c7b38f801e5456e0f01b", @typed={0xc, 0x140, 0x0, 0x0, @u64=0x6}]}]}, @nested={0x4, 0x111}, @nested={0x4, 0x34}, @nested={0x4, 0xd3}, @generic="e735af0302cdd7b2703b7a44c7bb6eab1f73d20cb4633ae5891d6e8a18f244a47609f75c0f04a65918ca52ef79aace02d76ac28a3d0c3e08e2eadfd0b0d010092b5b", @typed={0x14, 0xa0, 0x0, 0x0, @ipv6=@empty}]}, @nested={0x1c9, 0x5d, 0x0, 0x1, [@generic="ea933f50842276920ca296e80a53a779d21f9c2c4f91af77f0527fa42d0a4cf1a4525941c6fed55f1b6de23123bd6670f0ae76418aba1c0e3096cfaea85583bc8b6f9174bb6e0bb33fb100ea507ea467a8f680e8c0d6db0f97d94070e391e19a00574c0be306", @nested={0x4, 0x5f}, @generic="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", @nested={0x4, 0x82}, @typed={0x6, 0x42, 0x0, 0x0, @str='.\x00'}, @generic="a3f699e58bfbc378adf5829db50e4c11ee6b54874621b65890b7d8eb25d172f4e0376bc5dad2f93c8b9dd39ef032d6fd5df027feb9c3f2cfa9a898fbd7727922a0707b02f31efc257f39bbdebffa37fbb7"]}, @generic="7d7b6573ce026b80e62fb60255b9d013245572de722de9abafd95a21312fb61df4b74b249b90af7bb345969f265a961ffcf41bcd1c6b784a5ead2aa76df7c292b6dab36be24fad217a304381cdf9e6ae128a5fc5873876194304401df0d54386980e74d34f06a882cafe4757b30959f6746c5da748ad9f75a742505402278dc3", @nested={0x789, 0x50, 0x0, 0x1, [@typed={0x38, 0x126, 0x0, 0x0, @binary="cd16907eb7c2853f6e2fb10fe3668ddc49125f48f7c560fc03502f62724add3234ada62b8dae834794834b4a4527d2c2b5760e42"}, @typed={0x4, 0xae}, @typed={0xc, 0x12b, 0x0, 0x0, @u64=0xffffffffffffffff}, @generic="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"]}]}, 0x30ec}, 0x1, 0x0, 0x0, 0x800}, 0xc880) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r5 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r5, r5, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x2, 0x3, 0x0, 0x3, 0x2f, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "b1e5c2aeb6b3a515e65fddda00ee3baa8efb059124a9703c734ff35c9150bdcf987ebc5125908ebb57d0778484f7350ad14ed9a0588394fe7147eeee179a5714063b479865d37bae3678e31115bcec31a5dd85adc10067f4ab8cfd7b993d71fce3f7b1b21b5ffe460d7f8f7e5bbdace570c25132eddc3ffdfbe83d8307e381f241feec9b6a6fbbb75645cdda6f498c4a21767494734c0b9d11c201e296d3442738edc12068da976e5a02314bd92b836335ee032e9ab02514773ae64122c2441f404f7c4744cf04df3024906600687a2e6aec7eacd71f366e12fe729d5f8819332cba664c7ab8bd821f47183776c9edfb"}]}, 0x178}, 0x1, 0x7}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x3, 0x0, 0x40, 0x8}, 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x4c, 0xac, 0x20, 0x10, 0x458, 0x7005, 0x6d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x0, 0xe9fc732c90d681f3, 0x0, [{{0x9, 0x4, 0xd5, 0x7, 0x0, 0x85, 0xa1, 0xf2}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000003c0)={0x0, 0x17, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r8, &(0x7f0000000140)={0x14, &(0x7f00000003c0)={0x40, 0xf, 0x90, {0x90, 0x3, "97a4e334700cd86327259ae1ad91f71e0299f4b1a5af681cb7b44ce6ca56d70d33998bdebcd61973e8ee24ce35278f789e9586a29daf964e6fc1d0eb23711dc700e0be997dabc3a6312b2808105ee7304720629618bd614df81955c4c01fa874847275f0fc80b265f7874b28d157760e80e8d29797ae11a6e86fae75180549719eebd642aefbc0eb272bde8124ad"}}, &(0x7f0000000a80)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "c0d570044a2a14b341870923a344dcf8be02b6f8e0660e10bd696bc0e1ccd78304772eb8f2c084f372cd498041cc3faae4145a3a8da598d0cb0e5b38afa8124766aa6137b49d29e4f8500a497a0b34cc8d6264d5d44f57f4b637032377d2f252a5f3d0ae85adae6c0cc74075d610591aa52eedf1ee84a6df0f9545c892535e2cc1aa600253f29e044b3720b582bd65707222575ae25f54cf2443fe6f6e651ea42e6c66f3bd65b3761269ed03c8eca55910"}}}, &(0x7f0000000b80)={0x34, &(0x7f0000000500)={0x20, 0x14, 0x4d, "8da6403dcf612701dc9d7723842bbcd5757cbc970fad9f81c1f01181b3e3ff2590958d9711bd2855ceadf4b235ae9edac068f17b5d402ed846810dd00798650cc7d84fe12013bbb45c44f5bf35"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000700)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000b40)={0xc0, 0xa2, 0x2f, "91a65f746da90517e7e0f812c362279af2027bd5dc7b588b0cb8bef99a77e67c72081ba49bb977e63d05687cdd042e"}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)={0x20, 0x31, 0x1d, "1294e83664a3568896931aa3b557594721d8ce1a0e7ff7560db1beb5a5"}, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x100, 0x8, [0xf00]}}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0xb, 0x2, "ea43"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x3}, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x19, 0x2, "2af2"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0xd, 0x10, 0x6, 0x10, 0x10, 0x4, 0x10, 0x10, 0x11, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.944931668s ago: executing program 4 (id=3731): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0xe2803, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00'}) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x2, 0x4, 0xff7ffff9, 0x5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000de2000/0x4000)=nil, 0x4000, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r7, {0xada838c2a60a980, 0xfff3}, {0x3, 0xfff9}, {0xf}}}, 0x24}}, 0x0) syz_usb_disconnect(r0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYBLOB="04020000130a050000000000000000000000000708000340000000010900020073797a3000000000090001"], 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x24048084) 1.001573516s ago: executing program 1 (id=3732): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @loopback}, 0x10) listen(r0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x12, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r3, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x2f) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff0800044000000081080008400000000320"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b80"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) unshare(0x40000000) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 359.556822ms ago: executing program 4 (id=3733): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000380)={'team_slave_1', 0x32, 0x32}, 0xf) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x6b06}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e21, 0xd9a2, @local}}, 0xfffffff7, 0x55, 0x40, 0x8, 0xce, 0x4, 0x4}, 0x9c) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0xfffffff8, 0x9, 0x200b, 0x2, 0xc, 0x4, 0x2, 0x2}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000200)) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0xf030000, 0x1, 0xae49, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f906, 0x0, '\x00', @p_u8=0x0}}) 0s ago: executing program 4 (id=3734): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x4018) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x9, 0x5, 0xfffffffc}, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r7 = open(&(0x7f0000000300)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x7, 0x5, 0x100, 0x7cf4, 0x1, 0x10001, 0xd, 0x1000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x1}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080)=0x2, 0x7f03) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x8000) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4048aecb, &(0x7f00000034c0)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xec, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x9c, 0x11, [{@in=@empty, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}]}]}, 0xec}}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4048aecb, &(0x7f0000001440)) kernel console output (not intermixed with test programs): 64576][T21454] snd_pcm_oss_poll+0x851/0x9a0 [ 1381.164593][T21454] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1381.164604][T21454] ? io_rw_init_file+0x790/0xb50 [ 1381.164622][T21454] __io_read+0x4c8/0x1520 [ 1381.164641][T21454] ? rcu_is_watching+0x15/0xb0 [ 1381.164656][T21454] ? __pfx___io_read+0x10/0x10 [ 1381.164674][T21454] io_read+0x4a/0x1c0 [ 1381.164689][T21454] __io_issue_sqe+0x180/0x4b0 [ 1381.164706][T21454] ? io_file_get_normal+0xe9/0x2d0 [ 1381.164726][T21454] io_issue_sqe+0x165/0x1060 [ 1381.164748][T21454] io_submit_sqes+0xbf3/0x2130 [ 1381.164784][T21454] __se_sys_io_uring_enter+0x2f7/0x2c30 [ 1381.164813][T21454] ? ksys_write+0x1e6/0x270 [ 1381.164838][T21454] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1381.164855][T21454] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1381.164872][T21454] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1381.164887][T21454] ? __fget_files+0x3a0/0x420 [ 1381.164905][T21454] ? fput+0xa0/0xd0 [ 1381.164932][T21454] ? ksys_write+0x242/0x270 [ 1381.164949][T21454] ? __pfx_ksys_write+0x10/0x10 [ 1381.164970][T21454] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1381.164990][T21454] do_syscall_64+0xe2/0xf80 [ 1381.165002][T21454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.165013][T21454] ? trace_irq_disable+0x37/0x100 [ 1381.165025][T21454] ? clear_bhb_loop+0x60/0xb0 [ 1381.165039][T21454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.165051][T21454] RIP: 0033:0x7f2ae019aeb9 [ 1381.165064][T21454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1381.165074][T21454] RSP: 002b:00007f2ae10a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1381.165089][T21454] RAX: ffffffffffffffda RBX: 00007f2ae0416090 RCX: 00007f2ae019aeb9 [ 1381.165098][T21454] RDX: 0000000000000000 RSI: 00000000000048e9 RDI: 0000000000000004 [ 1381.165106][T21454] RBP: 00007f2ae10a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1381.165113][T21454] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1381.165121][T21454] R13: 00007f2ae0416128 R14: 00007f2ae0416090 R15: 00007f2ae053fa48 [ 1381.165140][T21454] [ 1381.694240][T14405] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1381.823598][ T5896] usb 3-1: USB disconnect, device number 32 [ 1381.864321][T14405] usb 1-1: Using ep0 maxpacket: 32 [ 1381.875301][T12639] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1382.057850][T12639] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1382.087789][T14405] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1382.104141][T12639] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.113487][T14405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.124029][T12639] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.137467][T14405] usb 1-1: Product: syz [ 1382.141867][T14405] usb 1-1: Manufacturer: syz [ 1382.147568][T12639] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1382.155000][T14405] usb 1-1: SerialNumber: syz [ 1382.174788][T12639] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.187225][T14405] usb 1-1: config 0 descriptor?? [ 1382.196396][T12639] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.216275][T14405] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1382.225709][T12639] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1382.233130][T14405] dvb-usb: bulk message failed: -22 (2/0) [ 1382.273194][T12639] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.286319][T12639] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.298198][T14405] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1382.308201][T12639] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1382.325355][T14405] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1382.345697][T14405] usb 1-1: media controller created [ 1382.351214][T12639] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.360729][T12639] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.381474][T14405] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1382.394131][T12639] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1382.405186][T12639] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.427926][T21451] dvb-usb: bulk message failed: -22 (3/0) [ 1382.444893][T12639] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.483754][T12639] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1382.503075][T14405] usb 1-1: selecting invalid altsetting 7 [ 1382.519881][T14405] cxusb: set interface failed [ 1382.525247][T14405] dvb-usb: bulk message failed: -22 (1/0) [ 1382.532217][T12639] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.541804][T12639] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.553440][T12639] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1382.562914][T12639] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.582335][T12639] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.606105][T12639] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1382.626082][T21474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.647533][T12639] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.686594][T21474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.694626][T12639] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.729059][T12639] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1382.747745][T12639] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1382.758476][T12639] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1382.775710][T12639] usb 5-1: Product: syz [ 1382.809133][T12639] usb 5-1: Manufacturer: syz [ 1382.829122][T12639] usb 5-1: SerialNumber: syz [ 1382.846564][T14405] DVB: Unable to find symbol lgdt330x_attach() [ 1382.852976][T14405] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1382.866101][T12639] usb 5-1: config 0 descriptor?? [ 1382.878701][T12639] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1383.161485][ T10] usb 5-1: USB disconnect, device number 125 [ 1383.183707][ T10] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1383.217354][T14405] rc_core: IR keymap rc-dvico-portable not found [ 1383.223803][T14405] Registered IR keymap rc-empty [ 1383.270556][T14405] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1383.308921][T14405] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input158 [ 1383.529782][T14405] dvb-usb: schedule remote query interval to 100 msecs. [ 1383.571903][T14405] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1383.676554][T14405] dvb-usb: bulk message failed: -22 (1/0) [ 1383.754077][T12639] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1383.844134][T14405] dvb-usb: bulk message failed: -22 (1/0) [ 1383.937871][T12639] usb 6-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 1383.949320][T12639] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1383.967926][T12639] usb 6-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 1383.977371][T14405] dvb-usb: bulk message failed: -22 (1/0) [ 1383.993401][T12639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.087259][T12639] usb 6-1: config 0 descriptor?? [ 1384.094125][T14405] dvb-usb: bulk message failed: -22 (1/0) [ 1384.247089][T12639] dvb-usb: bulk message failed: -22 (1/0) [ 1384.384439][T12639] dvb-usb: bulk message failed: -22 (1/0) [ 1384.723212][ T9] usb 1-1: USB disconnect, device number 30 [ 1385.127762][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1385.170321][T21501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1385.179611][T21501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1385.359630][T21503] batadv_slave_1: entered promiscuous mode [ 1385.628664][T21502] batadv_slave_1: left promiscuous mode [ 1386.166432][ T10] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1386.428267][ T10] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1386.443454][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1386.459555][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1386.480837][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.550337][ T10] usb 3-1: config 0 descriptor?? [ 1386.578745][T21511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1386.738384][T14405] usb 6-1: USB disconnect, device number 3 [ 1386.884255][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1387.008673][ T10] ryos 0003:1E7D:3138.002B: hidraw0: USB HID v0.04 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 1387.066660][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1387.113655][ T9] usb 1-1: config 0 has no interface number 0 [ 1387.134933][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1387.174870][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.194519][T14405] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1387.210439][ T10] usb 3-1: USB disconnect, device number 33 [ 1387.218063][ T9] usb 1-1: config 0 descriptor?? [ 1387.258210][ T9] cp210x 1-1:0.1: cp210x converter detected [ 1387.367837][T21521] fido_id[21521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1387.414124][T14405] usb 6-1: Using ep0 maxpacket: 32 [ 1387.423737][T14405] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1387.446675][T14405] usb 6-1: config 0 has no interface number 0 [ 1387.470003][T14405] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1387.494581][T14405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.517240][T14405] usb 6-1: Product: syz [ 1387.533378][T14405] usb 6-1: Manufacturer: syz [ 1387.541439][T14405] usb 6-1: SerialNumber: syz [ 1387.571851][T14405] usb 6-1: config 0 descriptor?? [ 1387.585863][T14405] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1387.628210][ T9] cp210x 1-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 1387.668073][T21530] fuse: Unknown parameter 'E÷á|¸õ 0;nR, priority 0 [ 1387.872137][T21533] syzkaller0: entered promiscuous mode [ 1387.879737][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1387.886545][T21533] syzkaller0: entered allmulticast mode [ 1387.907878][T14405] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1387.962517][T14405] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1388.052742][ T9] usb 1-1: USB disconnect, device number 31 [ 1388.114010][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1388.122355][ T9] cp210x 1-1:0.1: device disconnected [ 1388.171155][T21537] tipc: Resetting bearer [ 1388.215670][T21532] tipc: Resetting bearer [ 1388.243313][T21532] tipc: Disabling bearer [ 1388.380055][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1388.380484][T13589] usb 6-1: USB disconnect, device number 4 [ 1388.533461][T13589] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1388.566101][T13589] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1388.626111][T13589] quatech2 6-1:0.51: device disconnected [ 1388.748839][T21544] fuse: Bad value for 'fd' [ 1389.292423][T21558] binder: 21555:21558 ioctl 4018620d 0 returned -22 [ 1389.300351][T21558] binder: 21555:21558 ioctl c018620c 200000000380 returned -1 [ 1389.394040][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1390.271391][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1390.285862][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1390.353837][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1390.440144][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1390.592830][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.611560][ T9] usb 6-1: Product: syz [ 1390.623435][ T9] usb 6-1: Manufacturer: syz [ 1390.649367][ T9] usb 6-1: SerialNumber: syz [ 1390.672322][ T9] usb 6-1: config 0 descriptor?? [ 1390.799257][T21554] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1391.063398][T21574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3252'. [ 1391.081289][T21554] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1391.304978][T21554] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1391.661651][T21581] bridge0: port 3(erspan0) entered blocking state [ 1391.748858][T21581] bridge0: port 3(erspan0) entered disabled state [ 1391.812307][T21581] erspan0: entered allmulticast mode [ 1391.829161][T21581] erspan0: entered promiscuous mode [ 1391.841259][T21581] bridge0: port 3(erspan0) entered blocking state [ 1391.848172][T21581] bridge0: port 3(erspan0) entered forwarding state [ 1392.477733][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1392.481130][ T30] audit: type=1326 audit(1770126416.298:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21582 comm="syz.1.3254" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b6079aeb9 code=0x0 [ 1394.163144][ T5937] usb 6-1: USB disconnect, device number 5 [ 1394.410388][T21609] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1394.604154][ T5937] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1394.785242][ T5937] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1394.796100][ T5937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1394.813137][ T5937] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1394.913251][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1394.960610][ T5937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1394.970895][ T5937] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1394.984429][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1394.991543][T21614] fuse: Invalid rootmode [ 1395.012779][ T5937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1395.022309][ T5937] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1395.045502][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1395.063770][ T5937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1395.074695][ T5937] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1395.087435][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1395.101756][ T5937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1395.111318][ T5937] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1395.126188][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1395.162424][ T5937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1395.183147][ T5937] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1395.202293][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1395.246561][ T5937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1395.274165][ T5937] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1395.286250][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1395.295003][ T5937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1395.305292][ T5937] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1395.317330][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1395.340945][ T5937] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1395.355256][ T5937] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1395.374014][ T5937] usb 3-1: Product: syz [ 1395.429692][ T5937] usb 3-1: Manufacturer: syz [ 1395.438424][ T5937] usb 3-1: SerialNumber: syz [ 1395.458414][ T5937] usb 3-1: config 0 descriptor?? [ 1395.618590][ T5937] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1395.863101][T21628] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000005' [ 1395.880983][T21628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.893554][T21628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.907503][ T9] usb 3-1: USB disconnect, device number 34 [ 1395.923797][ T9] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1396.981531][T21643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3269'. [ 1397.184111][ T9] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1397.335918][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1397.364038][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1397.397471][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1397.436627][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1397.454052][T14410] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1397.464078][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1397.492397][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.542272][ T9] usb 5-1: config 0 descriptor?? [ 1397.634256][T14410] usb 1-1: Using ep0 maxpacket: 16 [ 1397.644295][T14410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1397.667308][T14410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1397.718729][T14410] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1397.729374][T14410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.747227][T14410] usb 1-1: config 0 descriptor?? [ 1397.993500][ T9] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1398.084082][ T5896] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1398.187230][T21642] input: syz1 as /devices/virtual/input/input160 [ 1398.195517][T14410] corsair 0003:1B1C:1B02.002D: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 1398.238983][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1398.260701][ T5896] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1398.282522][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.296980][ T5896] usb 3-1: config 0 descriptor?? [ 1398.375047][T14410] corsair 0003:1B1C:1B02.002D: Read invalid backlight brightness: f0. [ 1398.470687][T21662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.482064][T21662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.510440][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 1398.517643][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1398.531042][ T5896] usb 3-1: USB disconnect, device number 35 [ 1398.587651][ T9] usb 1-1: USB disconnect, device number 32 [ 1398.673176][T21663] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3270'. [ 1398.911355][T21669] fuse: Bad value for 'rootmode' [ 1398.955350][ T5896] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1399.185381][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 1399.194960][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.207481][ T5896] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1399.265295][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.293713][ T5896] usb 3-1: config 0 descriptor?? [ 1399.310953][ T5896] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1399.322938][ T5896] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 1399.582031][T21680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1399.747557][T21681] netlink: 182 bytes leftover after parsing attributes in process `syz.1.3281'. [ 1399.854142][T13589] usb 5-1: reset high-speed USB device number 126 using dummy_hcd [ 1400.724989][T13589] usb 5-1: device descriptor read/64, error -71 [ 1400.887831][ T5937] usb 3-1: USB disconnect, device number 36 [ 1400.898387][ T5937] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 1400.964070][T13589] usb 5-1: reset high-speed USB device number 126 using dummy_hcd [ 1401.008955][T21695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.038933][T21695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.101923][T21695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.163073][T21695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.173379][T13589] usb 5-1: device firmware changed [ 1401.190818][ T5896] usb 5-1: USB disconnect, device number 126 [ 1401.231900][T21695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.241531][T21695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.394056][ T5896] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1401.467501][T21695] usb usb9: usbfs: process 21695 (syz.1.3285) did not claim interface 0 before use [ 1401.612572][T21704] netlink: 'syz.2.3287': attribute type 2 has an invalid length. [ 1401.648536][T21704] : entered promiscuous mode [ 1401.684691][ T5896] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1401.735246][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1401.744822][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1401.757669][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1401.793667][T21705] GUP no longer grows the stack in syz.2.3287 (21705): 200000005000-200000008000 (200000004000) [ 1401.814373][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1401.826842][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1401.843777][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1401.855197][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1401.863112][T21705] CPU: 0 UID: 0 PID: 21705 Comm: syz.2.3287 Tainted: G L syzkaller #0 PREEMPT(full) [ 1401.863146][T21705] Tainted: [L]=SOFTLOCKUP [ 1401.863154][T21705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1401.863165][T21705] Call Trace: [ 1401.863174][T21705] [ 1401.863183][T21705] dump_stack_lvl+0xe8/0x150 [ 1401.863213][T21705] fixup_user_fault+0x637/0x6f0 [ 1401.863247][T21705] fault_in_user_writeable+0x71/0xd0 [ 1401.863273][T21705] futex_lock_pi+0x800/0xb00 [ 1401.863306][T21705] ? __pfx_futex_lock_pi+0x10/0x10 [ 1401.863356][T21705] ? __pfx_futex_wake_mark+0x10/0x10 [ 1401.863381][T21705] ? __pfx_futex_wake+0x10/0x10 [ 1401.863396][T21705] ? userfaultfd_unmap_complete+0x29e/0x320 [ 1401.863425][T21705] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1401.863454][T21705] do_futex+0x292/0x420 [ 1401.863485][T21705] ? __pfx_do_futex+0x10/0x10 [ 1401.863513][T21705] ? __vm_munmap+0x2e6/0x3d0 [ 1401.863544][T21705] __se_sys_futex+0x3a8/0x450 [ 1401.863576][T21705] ? __pfx___se_sys_futex+0x10/0x10 [ 1401.863602][T21705] ? rcu_is_watching+0x15/0xb0 [ 1401.863638][T21705] ? __x64_sys_futex+0x21/0xf0 [ 1401.863669][T21705] do_syscall_64+0xe2/0xf80 [ 1401.863692][T21705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.863709][T21705] ? trace_irq_disable+0x37/0x100 [ 1401.863729][T21705] ? clear_bhb_loop+0x60/0xb0 [ 1401.863753][T21705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.863774][T21705] RIP: 0033:0x7f908039aeb9 [ 1401.863794][T21705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1401.863811][T21705] RSP: 002b:00007f90812aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1401.863833][T21705] RAX: ffffffffffffffda RBX: 00007f9080616270 RCX: 00007f908039aeb9 [ 1401.863847][T21705] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 1401.863861][T21705] RBP: 00007f9080408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1401.863873][T21705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1401.863886][T21705] R13: 00007f9080616308 R14: 00007f9080616270 R15: 00007f908073fa48 [ 1401.863923][T21705] [ 1402.097309][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.106577][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.117596][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1402.131850][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.140999][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.152038][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1402.162847][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.175776][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1402.238513][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.267371][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1402.275878][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1402.286481][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1402.296273][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1402.306309][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1402.319381][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1402.333996][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.344085][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1402.361819][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.394619][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.466522][T21709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.489959][T21709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.576459][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 1402.600551][ T10] usbtmc 1-1:16.0: can't read capabilities [ 1402.607116][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1402.616154][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.628190][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.651230][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1402.674339][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1402.686199][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1402.702224][T21711] program syz.5.3290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1402.720770][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1402.756081][ T5896] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1402.765356][ T5896] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1402.775938][ T5896] usb 5-1: Product: syz [ 1402.780325][ T5896] usb 5-1: Manufacturer: syz [ 1402.786137][ T5896] usb 5-1: SerialNumber: syz [ 1402.800614][ T5896] usb 5-1: config 0 descriptor?? [ 1402.861050][ T5896] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 1402.923852][T21702] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 1402.928018][ T5896] usb 1-1: USB disconnect, device number 33 [ 1402.974609][T21713] usb 1-1: usbtmc_ioctl_clear_out_halt returned -19 [ 1403.093988][ T5937] usb 5-1: USB disconnect, device number 127 [ 1403.168348][ T5937] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 1403.465949][T21725] fuse: Bad value for 'rootmode' [ 1403.832920][ T30] audit: type=1326 audit(1770126427.658:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1403.903778][ T30] audit: type=1326 audit(1770126427.658:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1403.911804][T21731] [U]  [ 1404.040386][ T30] audit: type=1326 audit(1770126427.658:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1404.254230][ T30] audit: type=1326 audit(1770126427.658:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1404.306739][ T30] audit: type=1326 audit(1770126427.658:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1404.356592][ T30] audit: type=1326 audit(1770126427.658:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f210dd9ac22 code=0x7ffc0000 [ 1404.556209][ T30] audit: type=1326 audit(1770126427.658:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f210dd9ac22 code=0x7ffc0000 [ 1404.600570][ T30] audit: type=1326 audit(1770126427.658:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1404.661417][ T30] audit: type=1326 audit(1770126427.658:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1404.858634][ T30] audit: type=1326 audit(1770126427.658:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1406.187793][T21765] fuse: Unknown parameter '0x0000000000000003' [ 1407.241074][T21784] FAULT_INJECTION: forcing a failure. [ 1407.241074][T21784] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.318357][T21786] [U]  [ 1407.342354][T21784] CPU: 1 UID: 0 PID: 21784 Comm: syz.4.3305 Tainted: G L syzkaller #0 PREEMPT(full) [ 1407.342388][T21784] Tainted: [L]=SOFTLOCKUP [ 1407.342396][T21784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1407.342408][T21784] Call Trace: [ 1407.342417][T21784] [ 1407.342426][T21784] dump_stack_lvl+0xe8/0x150 [ 1407.342460][T21784] should_fail_ex+0x412/0x560 [ 1407.342488][T21784] should_failslab+0xa8/0x100 [ 1407.342513][T21784] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1407.342553][T21784] ? __alloc_skb+0x193/0x390 [ 1407.342576][T21784] ? __alloc_skb+0x1d7/0x390 [ 1407.342596][T21784] ? __local_bh_enable_ip+0xd0/0x130 [ 1407.342616][T21784] ? __alloc_skb+0x193/0x390 [ 1407.342640][T21784] __alloc_skb+0x1d7/0x390 [ 1407.342667][T21784] netlink_sendmsg+0x5d4/0xb40 [ 1407.342697][T21784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1407.342722][T21784] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1407.342748][T21784] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1407.342771][T21784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1407.342788][T21784] ____sys_sendmsg+0xa68/0xad0 [ 1407.342813][T21784] ? __might_fault+0xaf/0x130 [ 1407.342848][T21784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1407.342884][T21784] ? import_iovec+0x73/0xa0 [ 1407.342914][T21784] ___sys_sendmsg+0x2a5/0x360 [ 1407.342939][T21784] ? __lock_acquire+0x6b5/0x2cf0 [ 1407.342971][T21784] ? __pfx____sys_sendmsg+0x10/0x10 [ 1407.343033][T21784] ? __fget_files+0x2a/0x420 [ 1407.343054][T21784] ? __fget_files+0x3a0/0x420 [ 1407.343087][T21784] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1407.343116][T21784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1407.343152][T21784] ? __pfx_ksys_write+0x10/0x10 [ 1407.343192][T21784] do_syscall_64+0xe2/0xf80 [ 1407.343213][T21784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.343233][T21784] ? trace_irq_disable+0x37/0x100 [ 1407.343252][T21784] ? clear_bhb_loop+0x60/0xb0 [ 1407.343276][T21784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.343295][T21784] RIP: 0033:0x7f013779aeb9 [ 1407.343314][T21784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1407.343338][T21784] RSP: 002b:00007f01385fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1407.343360][T21784] RAX: ffffffffffffffda RBX: 00007f0137a15fa0 RCX: 00007f013779aeb9 [ 1407.343375][T21784] RDX: 0000000024044080 RSI: 0000200000000240 RDI: 0000000000000003 [ 1407.343389][T21784] RBP: 00007f01385fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1407.343401][T21784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1407.343414][T21784] R13: 00007f0137a16038 R14: 00007f0137a15fa0 R15: 00007f0137b3fa48 [ 1407.343447][T21784] [ 1407.984059][T21791] netlink: 'syz.1.3306': attribute type 2 has an invalid length. [ 1408.004450][T21791] : entered promiscuous mode [ 1408.424273][ T5937] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1408.504504][T21802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3310'. [ 1408.616223][ T5937] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1408.701380][ T5937] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1408.720412][ T5937] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1408.775530][ T5937] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1408.809418][T21797] batadv_slave_1: entered promiscuous mode [ 1409.012555][T21796] batadv_slave_1: left promiscuous mode [ 1409.092173][ T5937] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1409.149446][ T5937] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1409.234825][ T5937] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1409.455609][ T5937] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1409.464971][ T5937] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1409.476122][ T5937] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1409.485618][ T5937] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1409.513095][ T5937] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1409.539881][ T5937] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1409.616992][ T5937] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1409.634065][ T5937] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1409.657561][ T5937] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1409.744643][T14410] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1409.770729][ T5937] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1409.795818][ T5937] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1409.820246][ T5937] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1410.074029][T14410] usb 3-1: Using ep0 maxpacket: 8 [ 1410.094202][T14410] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1410.115863][T21809] fuse: Bad value for 'rootmode' [ 1410.245818][ T5937] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1410.276988][ T5937] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1410.360985][ T5937] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1410.384757][T14410] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1410.425627][T14410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.469442][ T5937] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1410.483556][T14410] usb 3-1: Product: syz [ 1410.506004][ T5937] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1410.530528][T14410] usb 3-1: Manufacturer: syz [ 1410.550612][T14410] usb 3-1: SerialNumber: syz [ 1410.586649][ T5937] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1410.595238][T14410] usb 3-1: config 0 descriptor?? [ 1410.613305][ T5937] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1410.661181][ T5937] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1410.670138][T14410] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1410.716024][ T5937] usb 6-1: Product: syz [ 1410.735601][ T5937] usb 6-1: Manufacturer: syz [ 1410.740348][ T5937] usb 6-1: SerialNumber: syz [ 1410.770577][ T5937] usb 6-1: config 0 descriptor?? [ 1410.796860][ T5937] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1411.140999][T14410] usb 6-1: USB disconnect, device number 6 [ 1411.180062][T14410] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1411.396807][T21821] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1411.892122][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1411.892144][ T30] audit: type=1326 audit(1770126435.718:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21827 comm="syz.5.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1411.972109][T21828] [U]  [ 1412.093265][ T30] audit: type=1326 audit(1770126435.718:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21827 comm="syz.5.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1412.202458][ T30] audit: type=1326 audit(1770126435.718:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21827 comm="syz.5.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1412.378075][ T30] audit: type=1326 audit(1770126435.718:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21827 comm="syz.5.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1412.426060][ T30] audit: type=1326 audit(1770126435.718:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21827 comm="syz.5.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1412.519216][ T30] audit: type=1326 audit(1770126435.718:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21827 comm="syz.5.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1412.583519][T21836] fuse: Unknown parameter '0x0000000000000003' [ 1412.751976][ T5937] usb 3-1: USB disconnect, device number 37 [ 1412.841943][ T30] audit: type=1326 audit(1770126435.718:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21827 comm="syz.5.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ae019ac22 code=0x7ffc0000 [ 1412.884769][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1412.957013][ T30] audit: type=1326 audit(1770126435.718:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21827 comm="syz.5.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ae019ac22 code=0x7ffc0000 [ 1413.021537][ T30] audit: type=1326 audit(1770126435.718:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21827 comm="syz.5.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1413.054496][ T30] audit: type=1326 audit(1770126435.778:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21827 comm="syz.5.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1413.149860][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1413.173253][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1413.275696][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.292668][ T9] usb 1-1: config 0 has no interface number 0 [ 1413.306212][ T9] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1413.319458][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.334625][ T9] usb 1-1: Product: syz [ 1413.362670][ T9] usb 1-1: Manufacturer: syz [ 1413.369220][ T9] usb 1-1: SerialNumber: syz [ 1413.406382][ T9] usb 1-1: config 0 descriptor?? [ 1413.425950][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1413.545565][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input161 [ 1413.815524][T14410] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1413.998223][T14410] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1414.017414][T14410] usb 3-1: config 0 has no interface number 0 [ 1414.038041][T14410] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1414.064196][T14410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.080201][T14410] usb 3-1: config 0 descriptor?? [ 1414.093517][T14410] cp210x 3-1:0.1: cp210x converter detected [ 1414.504768][T21867] fuse: Unknown parameter 'use00000000000000000000' [ 1414.526425][T14410] cp210x 3-1:0.1: failed to get vendor val 0x370b size 1: -121 [ 1414.553100][T14410] cp210x 3-1:0.1: querying part number failed [ 1414.589039][T14410] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1414.808888][T21873] [U]  [ 1415.998435][ T9] usb 1-1: USB disconnect, device number 34 [ 1416.621523][T14410] usb 3-1: USB disconnect, device number 38 [ 1416.633785][T14410] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1416.665848][T14410] cp210x 3-1:0.1: device disconnected [ 1416.715404][ T5896] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1416.871175][T21909] macvlan0: entered allmulticast mode [ 1416.884696][T21909] veth1_vlan: entered allmulticast mode [ 1416.898513][T21909] veth1_vlan: left allmulticast mode [ 1416.906478][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 1416.917073][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1417.068253][ T5896] usb 6-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 1417.078324][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.119707][T21909] macvlan0 (unregistering): left allmulticast mode [ 1417.306988][ T5896] usb 6-1: config 0 descriptor?? [ 1417.964684][ T5896] apple 0003:05AC:026C.002E: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.5-1/input0 [ 1418.085103][T21898] IPv6: addrconf: prefix option has invalid lifetime [ 1418.096216][T21898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.105276][T21898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.171847][ T5896] usb 6-1: USB disconnect, device number 7 [ 1418.499435][T21923] fido_id[21923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1418.799128][T21929] fuse: Unknown parameter 'use00000000000000000000' [ 1419.334090][ T5896] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1419.536432][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1419.551616][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1419.563810][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1419.581610][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1419.595542][ T5896] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1419.664821][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.677970][ T5896] usb 3-1: config 0 descriptor?? [ 1420.122744][ T5896] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1420.676652][T14410] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1420.781435][T21962] program syz.2.3347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1420.887538][T21965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3347'. [ 1420.907001][T14410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1420.917365][T14410] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1420.917374][T21965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3347'. [ 1420.981493][T14410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.376517][T14410] usb 6-1: config 0 descriptor?? [ 1421.985689][T12639] usb 3-1: reset high-speed USB device number 39 using dummy_hcd [ 1422.124540][T14410] logitech-djreceiver 0003:046D:C71F.0030: item fetching failed at offset 5/7 [ 1422.179690][T14410] logitech-djreceiver 0003:046D:C71F.0030: logi_dj_probe: parse failed [ 1422.221750][T14410] logitech-djreceiver 0003:046D:C71F.0030: probe with driver logitech-djreceiver failed with error -22 [ 1422.540097][T21980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.564308][T21980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.610549][T21957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.681332][T21957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.044098][T12639] usb 3-1: device descriptor read/64, error -71 [ 1423.150924][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.158353][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.284258][T12639] usb 3-1: reset high-speed USB device number 39 using dummy_hcd [ 1423.531036][T12639] usb 3-1: device firmware changed [ 1423.536874][ T5937] usb 3-1: USB disconnect, device number 39 [ 1423.928473][ T5937] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1424.148022][ T5937] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1424.160055][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1424.209935][ T5937] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1424.253437][ T5937] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1424.263102][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.271313][ T5937] usb 3-1: Product: syz [ 1424.291161][ T5937] usb 3-1: Manufacturer: syz [ 1424.337576][ T5937] usb 3-1: SerialNumber: syz [ 1424.415663][ T5937] usb 3-1: config 0 descriptor?? [ 1424.439228][T21983] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1424.651954][T21983] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1424.943210][T21983] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1425.389747][ T10] usb 6-1: USB disconnect, device number 8 [ 1426.763198][ T5937] usb 3-1: USB disconnect, device number 40 [ 1427.600887][T22050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3376'. [ 1428.187534][T22063] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1429.800679][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1429.800700][ T30] audit: type=1326 audit(1770126453.628:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1430.004251][ T30] audit: type=1326 audit(1770126453.658:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1430.061703][ T30] audit: type=1326 audit(1770126453.658:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1430.086788][ T30] audit: type=1326 audit(1770126453.658:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1430.111253][ T30] audit: type=1326 audit(1770126453.658:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1430.222310][ T30] audit: type=1326 audit(1770126453.658:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1430.274589][ T30] audit: type=1326 audit(1770126453.658:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1430.299295][ T30] audit: type=1326 audit(1770126453.658:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1430.350883][ T30] audit: type=1326 audit(1770126453.658:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1430.612153][ T30] audit: type=1326 audit(1770126453.658:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1431.525614][T22118] netlink: 'syz.4.3395': attribute type 2 has an invalid length. [ 1431.544226][T22118] : entered promiscuous mode [ 1432.180084][T22126] tap0: tun_chr_ioctl cmd 1074025677 [ 1432.197012][T22126] tap0: linktype set to 774 [ 1432.208440][T22126] tap0: tun_chr_ioctl cmd 1074025672 [ 1432.218655][T22126] tap0: ignored: set checksum enabled [ 1432.382055][T22126] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3399'. [ 1434.630393][T22151] binder: 22150:22151 ioctl c018937d 200000002000 returned -22 [ 1434.684881][T22151] binder_alloc: 22150: binder_alloc_buf, no vma [ 1434.763755][T22152] binder: 22150:22152 unknown command 1466971714 [ 1434.827587][T22152] binder: 22150:22152 ioctl c0306201 200000004a40 returned -22 [ 1435.143794][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1435.217548][T22160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.254486][T22160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.305150][ T10] usb 1-1: device descriptor read/64, error -71 [ 1435.561308][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1435.772097][ T10] usb 1-1: device descriptor read/64, error -71 [ 1435.804122][T22176] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3414'. [ 1435.818626][T22176] input: syz0 as /devices/virtual/input/input163 [ 1435.852780][T22178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3415'. [ 1435.924429][ T10] usb usb1-port1: attempt power cycle [ 1435.945135][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1436.264180][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1436.317122][T14405] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1436.333134][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1436.352303][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1436.369058][ T10] usb 1-1: device descriptor read/8, error -71 [ 1436.381945][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1436.410084][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1436.430119][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.448227][ T9] usb 6-1: Product: syz [ 1436.461586][ T9] usb 6-1: Manufacturer: syz [ 1436.473193][ T9] usb 6-1: SerialNumber: syz [ 1436.484244][T14405] usb 5-1: Using ep0 maxpacket: 8 [ 1436.492028][T14405] usb 5-1: config 162 has an invalid interface number: 253 but max is 0 [ 1436.500824][T14405] usb 5-1: config 162 has no interface number 0 [ 1436.508429][T14405] usb 5-1: config 162 interface 253 has no altsetting 0 [ 1436.520546][ T9] usb 6-1: config 0 descriptor?? [ 1436.521285][T14405] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 1436.536992][T14405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.547362][T14405] usb 5-1: Product: syz [ 1436.552051][T22174] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1436.559358][ T5896] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1436.560067][T14405] usb 5-1: Manufacturer: syz [ 1436.572471][T14405] usb 5-1: SerialNumber: syz [ 1436.644137][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1436.676608][ T10] usb 1-1: device descriptor read/8, error -71 [ 1436.738570][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1436.770185][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1436.800866][T22174] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1436.808739][ T10] usb usb1-port1: unable to enumerate USB device [ 1436.820935][ T5896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1436.865680][ T5896] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1436.895946][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.930307][ T5896] usb 3-1: Product: syz [ 1436.939759][ T5896] usb 3-1: Manufacturer: syz [ 1436.955560][ T5896] usb 3-1: SerialNumber: syz [ 1436.967308][ T5896] usb 3-1: config 0 descriptor?? [ 1436.973748][T22186] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1437.154367][T22174] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1437.187454][T22186] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1437.245218][T22188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.419028][T14405] go7007 5-1:162.253: probe with driver go7007 failed with error -12 [ 1437.509459][T14405] usb 5-1: USB disconnect, device number 2 [ 1437.625860][T22151] binder: 22150:22151 ioctl c0306201 200000000180 returned -14 [ 1438.486047][ T5896] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1438.649844][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.661300][ T5896] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1438.671361][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.709204][ T5896] usb 1-1: config 0 descriptor?? [ 1438.927427][ T5896] usbhid 1-1:0.0: can't add hid device: -71 [ 1438.936917][ T5896] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1438.950433][ T5896] usb 1-1: USB disconnect, device number 39 [ 1439.233992][ T9] usb 3-1: USB disconnect, device number 41 [ 1439.294465][ T10] usb 6-1: USB disconnect, device number 9 [ 1439.454201][ T5896] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1439.634758][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 1439.644333][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.656400][ T5896] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1439.666138][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.694647][ T5896] usb 1-1: config 0 descriptor?? [ 1439.764148][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1439.917931][T22216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'. [ 1439.953989][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1439.965269][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1439.978376][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1439.988514][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1440.005619][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1440.019520][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1440.038592][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1440.051728][T22219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.064310][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.073317][T22219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.084716][ T10] usb 6-1: config 0 descriptor?? [ 1440.091496][T22205] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1440.102460][T22220] netlink: 'syz.2.3426': attribute type 23 has an invalid length. [ 1440.113416][T22202] xt_socket: unknown flags 0x50 [ 1440.137934][ T5896] kye 0003:0458:5016.0031: control desc unexpectedly large [ 1440.172957][ T5896] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0031/input/input164 [ 1440.390482][ T5896] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0031/input/input165 [ 1440.465286][ T5896] kye 0003:0458:5016.0031: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 1440.711370][T22229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.726153][T22229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.532248][ T5838] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1441.551116][ T10] usb 6-1: USB disconnect, device number 10 [ 1441.826772][T14405] usb 1-1: USB disconnect, device number 40 [ 1442.364955][T14405] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1442.553870][T14405] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1442.624823][T14405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1442.646843][T22258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3438'. [ 1442.663818][T14405] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1442.716580][T14405] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1442.727721][T14405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.738210][T14405] usb 1-1: Product: syz [ 1442.748423][T14405] usb 1-1: Manufacturer: syz [ 1442.760783][T14405] usb 1-1: SerialNumber: syz [ 1442.853033][T14405] usb 1-1: config 0 descriptor?? [ 1442.884570][T22246] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1443.096924][T22246] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1443.164612][T13589] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1443.377482][T13589] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.389495][T13589] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 1443.404197][T13589] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1443.415254][T13589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.424139][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1443.584108][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1443.608321][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1443.618700][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.649481][ T10] usb 6-1: Product: syz [ 1443.661953][ T10] usb 6-1: Manufacturer: syz [ 1443.675292][ T10] usb 6-1: SerialNumber: syz [ 1443.679774][T22270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.712973][T13589] usb 5-1: string descriptor 0 read error: -71 [ 1443.731039][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1443.751143][T22270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.760856][T13589] usb 5-1: USB disconnect, device number 3 [ 1443.766798][ T10] r8152-cfgselector 6-1: config 0 descriptor?? [ 1444.194138][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1444.207735][ T10] r8152-cfgselector 6-1: bad CDC descriptors [ 1444.242678][ T10] r8152-cfgselector 6-1: USB disconnect, device number 11 [ 1444.953717][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'. [ 1445.068007][T13589] usb 1-1: USB disconnect, device number 41 [ 1445.194169][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1445.453378][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1445.463614][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.525247][ T10] usb 6-1: config 0 descriptor?? [ 1445.538609][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1445.538630][ T30] audit: type=1326 audit(1770126469.358:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22296 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013779aeb9 code=0x7ffc0000 [ 1445.580180][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1445.621731][ T30] audit: type=1326 audit(1770126469.358:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22296 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013779aeb9 code=0x7ffc0000 [ 1445.686928][ T30] audit: type=1326 audit(1770126469.438:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22296 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f013779aeb9 code=0x7ffc0000 [ 1445.722220][ T30] audit: type=1326 audit(1770126469.438:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22296 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013779aeb9 code=0x7ffc0000 [ 1445.815903][ T30] audit: type=1326 audit(1770126469.438:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22296 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013779aeb9 code=0x7ffc0000 [ 1445.938283][T22284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.947165][ T30] audit: type=1326 audit(1770126469.438:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22296 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f013779aeb9 code=0x7ffc0000 [ 1446.180617][T22284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.190649][ T30] audit: type=1326 audit(1770126469.438:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22296 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f013779ac22 code=0x7ffc0000 [ 1446.333669][ T30] audit: type=1326 audit(1770126469.438:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22296 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f013779ac22 code=0x7ffc0000 [ 1446.359818][T22303] FAULT_INJECTION: forcing a failure. [ 1446.359818][T22303] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.377639][T22303] CPU: 0 UID: 0 PID: 22303 Comm: syz.1.3454 Tainted: G L syzkaller #0 PREEMPT(full) [ 1446.377669][T22303] Tainted: [L]=SOFTLOCKUP [ 1446.377673][T22303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1446.377681][T22303] Call Trace: [ 1446.377687][T22303] [ 1446.377693][T22303] dump_stack_lvl+0xe8/0x150 [ 1446.377719][T22303] should_fail_ex+0x412/0x560 [ 1446.377737][T22303] should_failslab+0xa8/0x100 [ 1446.377753][T22303] __kvmalloc_node_noprof+0x166/0x8d0 [ 1446.377766][T22303] ? rcu_is_watching+0x15/0xb0 [ 1446.377778][T22303] ? snd_pcm_oss_change_params_locked+0x2afc/0x3e00 [ 1446.377796][T22303] snd_pcm_oss_change_params_locked+0x2afc/0x3e00 [ 1446.377827][T22303] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1446.377845][T22303] ? __pfx_stack_trace_save+0x10/0x10 [ 1446.377864][T22303] ? do_raw_spin_lock+0x12b/0x2f0 [ 1446.377881][T22303] snd_pcm_oss_set_trigger+0x517/0xdc0 [ 1446.377899][T22303] snd_pcm_oss_poll+0x851/0x9a0 [ 1446.377917][T22303] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1446.377927][T22303] ? io_rw_init_file+0x790/0xb50 [ 1446.377945][T22303] __io_read+0x4c8/0x1520 [ 1446.377965][T22303] ? rcu_is_watching+0x15/0xb0 [ 1446.377979][T22303] ? __pfx___io_read+0x10/0x10 [ 1446.377997][T22303] io_read+0x4a/0x1c0 [ 1446.378012][T22303] __io_issue_sqe+0x180/0x4b0 [ 1446.378030][T22303] ? io_file_get_normal+0xe9/0x2d0 [ 1446.378049][T22303] io_issue_sqe+0x165/0x1060 [ 1446.378072][T22303] io_submit_sqes+0xbf3/0x2130 [ 1446.378108][T22303] __se_sys_io_uring_enter+0x2f7/0x2c30 [ 1446.378138][T22303] ? ksys_write+0x1e6/0x270 [ 1446.378157][T22303] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1446.378174][T22303] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1446.378194][T22303] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1446.378211][T22303] ? __fget_files+0x3a0/0x420 [ 1446.378229][T22303] ? fput+0xa0/0xd0 [ 1446.378243][T22303] ? ksys_write+0x242/0x270 [ 1446.378261][T22303] ? __pfx_ksys_write+0x10/0x10 [ 1446.378281][T22303] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1446.378301][T22303] do_syscall_64+0xe2/0xf80 [ 1446.378314][T22303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.378325][T22303] ? trace_irq_disable+0x37/0x100 [ 1446.378336][T22303] ? clear_bhb_loop+0x60/0xb0 [ 1446.378350][T22303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.378362][T22303] RIP: 0033:0x7f3b6079aeb9 [ 1446.378374][T22303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.378384][T22303] RSP: 002b:00007f3b615b8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1446.378398][T22303] RAX: ffffffffffffffda RBX: 00007f3b60a16090 RCX: 00007f3b6079aeb9 [ 1446.378407][T22303] RDX: 0000000000000000 RSI: 00000000000048e9 RDI: 0000000000000004 [ 1446.378415][T22303] RBP: 00007f3b615b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.378422][T22303] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1446.378430][T22303] R13: 00007f3b60a16128 R14: 00007f3b60a16090 R15: 00007f3b60b3fa48 [ 1446.378457][T22303] [ 1446.693463][ T30] audit: type=1326 audit(1770126469.438:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22296 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013779aeb9 code=0x7ffc0000 [ 1446.693523][ T30] audit: type=1326 audit(1770126469.438:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22296 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013779aeb9 code=0x7ffc0000 [ 1447.094216][T14405] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1447.493836][ T10] usb 6-1: USB disconnect, device number 12 [ 1447.586353][T14405] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.597484][T14405] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 1447.609297][T14405] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1447.622279][T14405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.223372][T14405] usb 3-1: string descriptor 0 read error: -71 [ 1448.254479][T14405] usb 3-1: USB disconnect, device number 42 [ 1448.328391][T22322] netlink: 'syz.4.3458': attribute type 4 has an invalid length. [ 1448.582032][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3461'. [ 1448.664206][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1448.754560][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1448.825092][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1449.073619][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1449.093655][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1449.139398][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1449.155578][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1449.170812][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1449.201080][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1449.215078][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1449.225273][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.237520][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1449.247905][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.256454][ T10] usb 1-1: Product: syz [ 1449.263841][ T9] usb 5-1: config 0 descriptor?? [ 1449.644384][ T10] usb 1-1: Manufacturer: syz [ 1449.650667][ T10] usb 1-1: SerialNumber: syz [ 1449.842264][ T10] usb 1-1: config 0 descriptor?? [ 1449.876650][T22327] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1450.130053][ T9] ryos 0003:1E7D:31CE.0032: unbalanced delimiter at end of report description [ 1450.155077][ T9] ryos 0003:1E7D:31CE.0032: parse failed [ 1450.201972][ T9] ryos 0003:1E7D:31CE.0032: probe with driver ryos failed with error -22 [ 1450.204479][T22327] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1450.262079][T22345] batadv_slave_1: entered promiscuous mode [ 1450.447179][T22344] batadv_slave_1: left promiscuous mode [ 1450.809032][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1450.809054][ T30] audit: type=1326 audit(1770126474.638:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1450.811721][T22348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.844435][ T30] audit: type=1326 audit(1770126474.638:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1450.877707][T22348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.964463][ T30] audit: type=1326 audit(1770126474.638:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1451.037987][ T30] audit: type=1326 audit(1770126474.638:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1451.099708][ T30] audit: type=1326 audit(1770126474.638:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1451.172228][ T30] audit: type=1326 audit(1770126474.638:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b6075b78e code=0x7ffc0000 [ 1451.326346][ T30] audit: type=1326 audit(1770126474.638:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b6079ab4b code=0x7ffc0000 [ 1451.577021][ T30] audit: type=1326 audit(1770126474.638:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b6079ab4b code=0x7ffc0000 [ 1451.646329][T14405] usb 1-1: USB disconnect, device number 42 [ 1451.764223][ T30] audit: type=1326 audit(1770126474.728:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1451.992415][ T30] audit: type=1326 audit(1770126474.738:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.1.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b6079aeb9 code=0x7ffc0000 [ 1452.050006][ T9] usb 5-1: USB disconnect, device number 4 [ 1452.128334][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3473'. [ 1452.305753][T22367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.324045][T14405] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1452.473812][T22367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.617011][T14405] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1452.634086][T14405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.668446][T14405] usb 1-1: config 0 descriptor?? [ 1452.861002][T14405] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1453.435825][T22361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.473353][T22361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.161465][T22388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.172096][T22388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.257382][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1454.393175][T14405] usb 1-1: USB disconnect, device number 43 [ 1454.652879][ T9] usb 6-1: config 128 has no interfaces? [ 1454.659334][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1454.819690][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.589036][T22406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1455.618615][T14405] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1455.888964][T14405] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1455.914761][T14405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.941019][T14405] usb 3-1: Product: syz [ 1455.948768][T14405] usb 3-1: Manufacturer: syz [ 1456.003983][T14405] usb 3-1: SerialNumber: syz [ 1456.521942][T14405] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1456.542851][T14405] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1456.588768][T14405] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1456.618148][T14405] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1456.693697][T14405] usb 3-1: USB disconnect, device number 43 [ 1456.952005][ T9] usb 6-1: USB disconnect, device number 13 [ 1457.089012][T22417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3491'. [ 1457.267964][T22422] fuse: Unknown parameter 'user_id00000000000000000000' [ 1459.233217][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1459.233231][ T30] audit: type=1326 audit(1770126483.058:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22445 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1459.281528][T22448] [U]  [ 1459.350528][ T30] audit: type=1326 audit(1770126483.088:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22445 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1459.483744][T22444] fuse: Bad value for 'fd' [ 1459.683973][ T30] audit: type=1326 audit(1770126483.098:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22445 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1460.063023][ T30] audit: type=1326 audit(1770126483.098:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22445 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1460.198691][ T30] audit: type=1326 audit(1770126483.098:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22445 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1460.537683][ T30] audit: type=1326 audit(1770126483.098:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22445 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f210dd9ac22 code=0x7ffc0000 [ 1460.659803][T22467] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3502'. [ 1460.663979][ T30] audit: type=1326 audit(1770126483.098:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22445 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f210dd9ac22 code=0x7ffc0000 [ 1460.755968][T22468] syzkaller1: entered promiscuous mode [ 1460.765403][T22468] syzkaller1: entered allmulticast mode [ 1460.824127][ T30] audit: type=1326 audit(1770126483.098:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22445 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1460.913520][ T30] audit: type=1326 audit(1770126483.098:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22445 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1461.001504][ T30] audit: type=1326 audit(1770126483.098:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22445 comm="syz.0.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210dd9aeb9 code=0x7ffc0000 [ 1461.154936][T22467] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1461.178778][T22467] bond3 (unregistering): Released all slaves [ 1461.544247][T14410] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1461.744425][T14410] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1461.915955][T14410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1462.049531][T14410] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1462.270962][T14410] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1462.288715][T14410] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.361226][T14410] usb 6-1: Product: syz [ 1462.376640][T14410] usb 6-1: Manufacturer: syz [ 1462.408952][T14410] usb 6-1: SerialNumber: syz [ 1462.455142][T14410] usb 6-1: config 0 descriptor?? [ 1462.463422][T22481] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1462.487335][T22500] tipc: Withdrawal distribution failure [ 1462.564124][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1462.712727][T22506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.726513][ T9] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1462.761422][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.806039][T22506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.834843][ T9] usb 5-1: config 0 descriptor?? [ 1462.853091][ T9] usb 5-1: bad CDC descriptors [ 1462.887327][T22507] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1463.036153][T12639] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1463.384864][T12639] usb 1-1: Using ep0 maxpacket: 32 [ 1463.393930][T12639] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.424867][T12639] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1463.442972][T12639] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.478698][T12639] usb 1-1: Product: syz [ 1463.492670][T12639] usb 1-1: Manufacturer: syz [ 1463.512012][T12639] usb 1-1: SerialNumber: syz [ 1463.532835][T12639] usb 1-1: config 0 descriptor?? [ 1463.549863][T12639] usb 1-1: bad CDC descriptors [ 1463.556891][T12639] usb 1-1: unsupported MDLM descriptors [ 1463.788381][T12639] usb 1-1: USB disconnect, device number 44 [ 1464.295839][ T10] usb 6-1: USB disconnect, device number 14 [ 1464.964409][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1465.276231][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1465.283800][ T10] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 1465.354056][ T10] usb 1-1: config 0 has no interface number 0 [ 1465.372524][ T10] usb 1-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=1b.10 [ 1465.404490][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.481033][ T10] usb 1-1: Product: syz [ 1465.494414][ T10] usb 1-1: Manufacturer: syz [ 1465.514602][ T10] usb 1-1: SerialNumber: syz [ 1465.540882][ T10] usb 1-1: config 0 descriptor?? [ 1465.570358][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614 [ 1465.585542][ T5937] usb 5-1: USB disconnect, device number 5 [ 1465.780981][ T10] gspca_sn9c20x: Write register 1000 failed -71 [ 1465.808086][ T10] gspca_sn9c20x: Device initialization failed [ 1465.838037][ T10] gspca_sn9c20x 1-1:0.250: probe with driver gspca_sn9c20x failed with error -71 [ 1465.908202][ T10] usb 1-1: USB disconnect, device number 45 [ 1465.947034][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3525'. [ 1466.395509][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1466.557152][ T10] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.583404][ T10] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 1466.595820][T22557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.605176][T22557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.619832][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1466.631995][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.764219][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1466.940307][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1466.950194][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.971452][ T10] usb 6-1: string descriptor 0 read error: -71 [ 1466.995588][ T9] usb 1-1: config 0 descriptor?? [ 1467.005185][ T10] usb 6-1: USB disconnect, device number 15 [ 1467.221537][ T9] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1467.460454][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 1467.572488][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1467.590740][ T9] [drm] Initialized udl on minor 2 [ 1467.626448][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1467.660896][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1467.687956][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1467.711918][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1467.742015][ T9] usb 1-1: USB disconnect, device number 46 [ 1467.946793][T22575] fuse: Unknown parameter 'user_id00000000000000000000' [ 1469.155953][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1469.155973][ T30] audit: type=1326 audit(1770126492.988:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22586 comm="syz.4.3541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f013779aeb9 code=0x0 [ 1469.184889][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1469.374708][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1469.390398][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1469.401441][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.451653][ T10] usb 3-1: Product: syz [ 1469.513977][ T10] usb 3-1: Manufacturer: syz [ 1469.518695][ T10] usb 3-1: SerialNumber: syz [ 1469.570657][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1469.577131][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 1469.791273][ T10] r8152-cfgselector 3-1: Unknown version 0x0030 [ 1469.808934][ T10] r8152-cfgselector 3-1: bad CDC descriptors [ 1469.864186][T12639] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1470.027748][ T10] r8152-cfgselector 3-1: USB disconnect, device number 44 [ 1470.048188][T12639] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1470.061422][T12639] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.086055][T12639] usb 1-1: config 0 descriptor?? [ 1470.113288][T12639] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1470.174222][T14410] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1470.346470][T14410] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1470.372905][T14410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1470.395953][T14410] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1470.433061][T14410] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1470.469567][T14410] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.489058][T14410] usb 6-1: Product: syz [ 1470.500741][T14410] usb 6-1: Manufacturer: syz [ 1470.507691][T22598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.518042][T22598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.533348][T14410] usb 6-1: SerialNumber: syz [ 1470.572549][T14410] usb 6-1: config 0 descriptor?? [ 1470.606046][T22609] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1470.857131][T22609] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1471.127012][T22621] netlink: 'syz.4.3551': attribute type 13 has an invalid length. [ 1471.175214][T22621] netlink: 14589 bytes leftover after parsing attributes in process `syz.4.3551'. [ 1471.198111][T22609] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1471.551719][T12639] gspca_stv06xx: I2C: Read error writing address: -71 [ 1471.573471][T12639] usb 1-1: USB disconnect, device number 47 [ 1472.033484][T22629] netlink: 'syz.1.3553': attribute type 2 has an invalid length. [ 1473.361266][T14410] usb 6-1: USB disconnect, device number 16 [ 1474.624209][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1474.835169][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1474.851814][T22666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1474.902782][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1474.944066][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1474.973001][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.043082][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.058010][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.096191][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.141059][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.228250][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.240108][T22670] ======================================================= [ 1475.240108][T22670] WARNING: The mand mount option has been deprecated and [ 1475.240108][T22670] and is ignored by this kernel. Remove the mand [ 1475.240108][T22670] option from the mount to silence this warning. [ 1475.240108][T22670] ======================================================= [ 1475.291597][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.340818][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.349896][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.437197][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.446908][T22670] fuse: Invalid rootmode [ 1475.560882][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.584002][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.621538][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.653868][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.672364][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.689942][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.698332][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.716891][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.756572][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.792640][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.805033][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.842161][T22680] batadv_slave_1: entered promiscuous mode [ 1475.859923][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.883146][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1475.899709][ T10] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1475.913690][ T10] usb 3-1: Product: syz [ 1475.919607][ T10] usb 3-1: Manufacturer: syz [ 1475.928340][ T10] usb 3-1: SerialNumber: syz [ 1475.939032][ T10] usb 3-1: config 0 descriptor?? [ 1476.009737][T22679] batadv_slave_1: left promiscuous mode [ 1476.060755][ T10] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1476.389984][ T10] usb 3-1: USB disconnect, device number 45 [ 1476.403039][ T10] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1477.594050][T22698] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1478.759624][T22716] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3574'. [ 1478.769225][T22716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3574'. [ 1480.667413][T22736] batman_adv: batadv0: Adding interface: dummy0 [ 1480.674068][T22736] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.797844][T22736] batman_adv: batadv0: Interface activated: dummy0 [ 1480.908488][T22739] batadv0: mtu less than device minimum [ 1480.946053][T22739] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1480.959267][T22739] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1480.970691][T22739] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1480.982617][T22739] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1480.993853][T22739] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1481.005764][T22739] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1481.017260][T22739] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1481.028836][T22739] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1481.040034][T22739] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1482.324050][T13589] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1482.476141][T13589] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1482.486314][T13589] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1482.526582][T13589] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1482.558382][T13589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.813993][T13589] usb 3-1: usb_control_msg returned -32 [ 1482.829811][T13589] usbtmc 3-1:16.0: can't read capabilities [ 1483.232422][T22759] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3587'. [ 1483.367459][ T30] audit: type=1326 audit(1770126507.188:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22758 comm="syz.1.3587" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b6079aeb9 code=0x0 [ 1483.583569][T22781] binder: 22771:22781 ioctl 4018620d 0 returned -22 [ 1483.591280][T22781] binder: 22771:22781 ioctl c018620c 200000000380 returned -1 [ 1483.624287][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1483.824064][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1483.862085][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.884089][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.906285][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1483.918153][ T10] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1483.928530][ T10] usb 6-1: Product: syz [ 1483.943182][ T10] usb 6-1: Manufacturer: syz [ 1484.224005][ T10] hub 6-1:4.0: USB hub found [ 1484.433809][ T10] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1484.640295][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.646685][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.279068][T14405] usb 3-1: USB disconnect, device number 46 [ 1486.244351][ T10] usb 6-1: USB disconnect, device number 17 [ 1486.903031][T22821] batadv_slave_1: entered promiscuous mode [ 1487.047122][T22820] batadv_slave_1: left promiscuous mode [ 1487.895490][T22844] FAULT_INJECTION: forcing a failure. [ 1487.895490][T22844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1487.913345][T22843] net_ratelimit: 10 callbacks suppressed [ 1487.913359][T22843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1487.922383][T22844] CPU: 0 UID: 0 PID: 22844 Comm: syz.1.3611 Tainted: G L syzkaller #0 PREEMPT(full) [ 1487.922413][T22844] Tainted: [L]=SOFTLOCKUP [ 1487.922420][T22844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1487.922431][T22844] Call Trace: [ 1487.922438][T22844] [ 1487.922447][T22844] dump_stack_lvl+0xe8/0x150 [ 1487.922475][T22844] should_fail_ex+0x412/0x560 [ 1487.922501][T22844] _copy_from_iter+0x1d3/0x1670 [ 1487.922531][T22844] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1487.922561][T22844] ? __pfx__copy_from_iter+0x10/0x10 [ 1487.922583][T22844] ? __build_skb_around+0x22d/0x3c0 [ 1487.922606][T22844] ? __alloc_skb+0x193/0x390 [ 1487.922626][T22844] ? netlink_sendmsg+0x650/0xb40 [ 1487.922643][T22844] ? skb_put+0x11b/0x210 [ 1487.922674][T22844] netlink_sendmsg+0x6c0/0xb40 [ 1487.922701][T22844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.922722][T22844] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1487.922745][T22844] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1487.922767][T22844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.922784][T22844] ____sys_sendmsg+0xa68/0xad0 [ 1487.922807][T22844] ? __might_fault+0xaf/0x130 [ 1487.922837][T22844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1487.922867][T22844] ? import_iovec+0x73/0xa0 [ 1487.922895][T22844] ___sys_sendmsg+0x2a5/0x360 [ 1487.922916][T22844] ? __lock_acquire+0x6b5/0x2cf0 [ 1487.922944][T22844] ? __pfx____sys_sendmsg+0x10/0x10 [ 1487.922998][T22844] ? __fget_files+0x2a/0x420 [ 1487.923015][T22844] ? __fget_files+0x3a0/0x420 [ 1487.923044][T22844] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1487.923069][T22844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1487.923100][T22844] ? __pfx_ksys_write+0x10/0x10 [ 1487.923143][T22844] do_syscall_64+0xe2/0xf80 [ 1487.923162][T22844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.923179][T22844] ? trace_irq_disable+0x37/0x100 [ 1487.923195][T22844] ? clear_bhb_loop+0x60/0xb0 [ 1487.923217][T22844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.923234][T22844] RIP: 0033:0x7f3b6079aeb9 [ 1487.923251][T22844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.923266][T22844] RSP: 002b:00007f3b615d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.923286][T22844] RAX: ffffffffffffffda RBX: 00007f3b60a15fa0 RCX: 00007f3b6079aeb9 [ 1487.923300][T22844] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1487.923311][T22844] RBP: 00007f3b615d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.923323][T22844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1487.923334][T22844] R13: 00007f3b60a16038 R14: 00007f3b60a15fa0 R15: 00007f3b60b3fa48 [ 1487.923363][T22844] [ 1488.084046][T13589] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1488.128005][T22846] program syz.4.3610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1488.315517][T13589] usb 1-1: Using ep0 maxpacket: 32 [ 1488.329074][T13589] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.344664][T13589] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.366169][T13589] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1488.383350][T13589] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1488.469266][T22850] tipc: Enabled bearer , priority 0 [ 1488.479773][T22850] syzkaller0: entered promiscuous mode [ 1488.485577][T22850] syzkaller0: entered allmulticast mode [ 1488.519761][T13589] usb 1-1: Product: syz [ 1488.526513][T13589] usb 1-1: Manufacturer: syz [ 1488.567889][T13589] hub 1-1:4.0: USB hub found [ 1488.760084][T13589] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 1489.290656][T22847] tipc: Resetting bearer [ 1489.361782][T22847] tipc: Disabling bearer [ 1489.783912][T22860] batadv_slave_1: entered promiscuous mode [ 1489.793703][T22859] batadv_slave_1: left promiscuous mode [ 1489.981331][T22864] netlink: 'syz.1.3617': attribute type 1 has an invalid length. [ 1490.231747][T22864] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1490.339164][T22872] netlink: 'syz.2.3618': attribute type 6 has an invalid length. [ 1490.430939][T22872] netlink: 'syz.2.3618': attribute type 7 has an invalid length. [ 1490.515314][T22872] netlink: 'syz.2.3618': attribute type 11 has an invalid length. [ 1490.561220][T22872] netlink: 'syz.2.3618': attribute type 15 has an invalid length. [ 1490.610028][T22872] netlink: 'syz.2.3618': attribute type 16 has an invalid length. [ 1490.670934][T22872] netlink: 'syz.2.3618': attribute type 21 has an invalid length. [ 1490.841691][T22872] netlink: 'syz.2.3618': attribute type 25 has an invalid length. [ 1490.893207][ T30] audit: type=1326 audit(1770126514.708:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1490.955608][T22872] netlink: 'syz.2.3618': attribute type 27 has an invalid length. [ 1490.978901][ T30] audit: type=1326 audit(1770126514.708:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1491.003006][T13589] usb 1-1: USB disconnect, device number 48 [ 1491.080167][ T30] audit: type=1326 audit(1770126514.708:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1491.081889][T22872] netlink: 'syz.2.3618': attribute type 28 has an invalid length. [ 1491.192828][ T30] audit: type=1326 audit(1770126514.708:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1491.278474][ T30] audit: type=1326 audit(1770126514.708:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1491.341490][ T30] audit: type=1326 audit(1770126514.708:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1491.406529][ T30] audit: type=1326 audit(1770126514.708:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ae019ac22 code=0x7ffc0000 [ 1491.509700][ T30] audit: type=1326 audit(1770126514.708:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ae019ac22 code=0x7ffc0000 [ 1491.607014][ T30] audit: type=1326 audit(1770126514.708:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1491.690449][ T30] audit: type=1326 audit(1770126514.708:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae019aeb9 code=0x7ffc0000 [ 1491.784068][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 1491.829262][T22892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.873348][T22892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.222839][T22896] batadv_slave_1: entered promiscuous mode [ 1492.231170][T22895] batadv_slave_1: left promiscuous mode [ 1492.254244][T22881] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3621'. [ 1492.359390][T22881] [U]  [ 1493.324774][T13589] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1493.504731][T13589] usb 1-1: Using ep0 maxpacket: 32 [ 1493.517053][T13589] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1493.530968][T13589] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1493.549503][T13589] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1493.559175][T13589] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1493.576161][T13589] usb 1-1: Product: syz [ 1493.611648][T13589] usb 1-1: Manufacturer: syz [ 1493.635350][T13589] hub 1-1:4.0: USB hub found [ 1493.854625][T13589] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 1494.488453][T22934] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3636'. [ 1496.252158][T14405] usb 1-1: USB disconnect, device number 49 [ 1497.674002][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 1497.674026][ T30] audit: type=1400 audit(1770126521.488:987): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=22968 comm="syz.0.3646" [ 1497.853207][T22974] set match dimension is over the limit! [ 1498.450534][T22986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.451008][T22986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.965238][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3653'. [ 1499.044050][T13589] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1499.217000][T13589] usb 6-1: Using ep0 maxpacket: 32 [ 1499.282802][T13589] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.298868][T13589] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.315953][T13589] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1499.346980][T13589] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1499.364023][T13589] usb 6-1: Product: syz [ 1499.371656][T13589] usb 6-1: Manufacturer: syz [ 1499.396080][T13589] hub 6-1:4.0: USB hub found [ 1499.611647][T13589] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1499.819328][T23006] FAULT_INJECTION: forcing a failure. [ 1499.819328][T23006] name failslab, interval 1, probability 0, space 0, times 0 [ 1499.832272][T23006] CPU: 0 UID: 0 PID: 23006 Comm: syz.1.3657 Tainted: G L syzkaller #0 PREEMPT(full) [ 1499.832305][T23006] Tainted: [L]=SOFTLOCKUP [ 1499.832313][T23006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1499.832325][T23006] Call Trace: [ 1499.832333][T23006] [ 1499.832340][T23006] dump_stack_lvl+0xe8/0x150 [ 1499.832360][T23006] should_fail_ex+0x412/0x560 [ 1499.832378][T23006] should_failslab+0xa8/0x100 [ 1499.832393][T23006] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1499.832411][T23006] ? __alloc_skb+0x1d7/0x390 [ 1499.832424][T23006] ? __local_bh_enable_ip+0xd0/0x130 [ 1499.832436][T23006] ? __alloc_skb+0x193/0x390 [ 1499.832450][T23006] __alloc_skb+0x1d7/0x390 [ 1499.832466][T23006] qdisc_notify+0x110/0x440 [ 1499.832486][T23006] qdisc_graft+0x1148/0x15b0 [ 1499.832512][T23006] ? __pfx_qdisc_graft+0x10/0x10 [ 1499.832547][T23006] ? qdisc_create+0xa52/0xea0 [ 1499.832568][T23006] tc_modify_qdisc+0x18a4/0x2290 [ 1499.832587][T23006] ? trace_contention_end+0x39/0x100 [ 1499.832605][T23006] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1499.832623][T23006] ? __dev_queue_xmit+0x274/0x3850 [ 1499.832653][T23006] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1499.832670][T23006] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1499.832685][T23006] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1499.832698][T23006] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1499.832710][T23006] ? ref_tracker_free+0x693/0x840 [ 1499.832727][T23006] ? __copy_skb_header+0xa3/0x4a0 [ 1499.832743][T23006] ? __pfx_ref_tracker_free+0x10/0x10 [ 1499.832757][T23006] ? __skb_clone+0x63/0x7a0 [ 1499.832777][T23006] netlink_rcv_skb+0x232/0x4b0 [ 1499.832790][T23006] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1499.832805][T23006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1499.832823][T23006] ? netlink_deliver_tap+0x2e/0x1b0 [ 1499.832839][T23006] netlink_unicast+0x80f/0x9b0 [ 1499.832861][T23006] ? __pfx_netlink_unicast+0x10/0x10 [ 1499.832878][T23006] ? __alloc_skb+0x193/0x390 [ 1499.832892][T23006] ? netlink_sendmsg+0x650/0xb40 [ 1499.832903][T23006] ? skb_put+0x11b/0x210 [ 1499.832919][T23006] netlink_sendmsg+0x813/0xb40 [ 1499.832936][T23006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1499.832951][T23006] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1499.832973][T23006] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1499.832987][T23006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1499.832998][T23006] ____sys_sendmsg+0xa68/0xad0 [ 1499.833014][T23006] ? __might_fault+0xaf/0x130 [ 1499.833034][T23006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1499.833054][T23006] ? import_iovec+0x73/0xa0 [ 1499.833074][T23006] ___sys_sendmsg+0x2a5/0x360 [ 1499.833088][T23006] ? __lock_acquire+0x6b5/0x2cf0 [ 1499.833107][T23006] ? __pfx____sys_sendmsg+0x10/0x10 [ 1499.833142][T23006] ? __fget_files+0x2a/0x420 [ 1499.833154][T23006] ? __fget_files+0x3a0/0x420 [ 1499.833173][T23006] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1499.833190][T23006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1499.833211][T23006] ? __pfx_ksys_write+0x10/0x10 [ 1499.833235][T23006] do_syscall_64+0xe2/0xf80 [ 1499.833248][T23006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.833259][T23006] ? trace_irq_disable+0x37/0x100 [ 1499.833270][T23006] ? clear_bhb_loop+0x60/0xb0 [ 1499.833284][T23006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.833295][T23006] RIP: 0033:0x7f3b6079aeb9 [ 1499.833308][T23006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1499.833318][T23006] RSP: 002b:00007f3b615d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1499.833332][T23006] RAX: ffffffffffffffda RBX: 00007f3b60a15fa0 RCX: 00007f3b6079aeb9 [ 1499.833341][T23006] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 1499.833349][T23006] RBP: 00007f3b615d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1499.833358][T23006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1499.833369][T23006] R13: 00007f3b60a16038 R14: 00007f3b60a15fa0 R15: 00007f3b60b3fa48 [ 1499.833401][T23006] [ 1500.985641][ T50] wlan0: Trigger new scan to find an IBSS to join [ 1501.885610][T14410] usb 6-1: USB disconnect, device number 18 [ 1502.374044][T13589] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1502.635252][T13589] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1502.655808][T13589] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1502.665533][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1502.753623][T23049] binder: 23040:23049 ioctl 4018620d 0 returned -22 [ 1502.764247][T23049] binder: 23040:23049 ioctl c018620c 200000000380 returned -1 [ 1502.805241][T13589] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1502.814153][T13589] usb 1-1: Product: syz [ 1502.819369][T13589] usb 1-1: Manufacturer: syz [ 1502.828461][T13589] usb 1-1: SerialNumber: syz [ 1502.839518][T13589] usb 1-1: config 0 descriptor?? [ 1502.853575][T13589] usb 1-1: selecting invalid altsetting 0 [ 1502.884651][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1502.986207][ T10] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1503.006742][ T10] usb 3-1: config 0 has no interface number 0 [ 1503.041994][ T10] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1503.187759][ T10] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1503.418339][T23036] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1503.427243][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1503.443331][T23036] ip6tnl1: entered allmulticast mode [ 1503.457593][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.472851][ T10] usb 3-1: Product: syz [ 1503.477333][ T10] usb 3-1: Manufacturer: syz [ 1503.482021][ T10] usb 3-1: SerialNumber: syz [ 1503.495445][ T10] usb 3-1: config 0 descriptor?? [ 1503.514971][T23043] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1503.947235][T12694] wlan0: Trigger new scan to find an IBSS to join [ 1504.040020][T23056] input: syz0 as /devices/virtual/input/input166 [ 1504.192149][ T10] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 1504.272597][ T10] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 1504.300465][ T10] usb 3-1: USB disconnect, device number 47 [ 1504.394895][ T10] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1504.574187][T14410] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1504.824775][T14410] usb 6-1: Using ep0 maxpacket: 32 [ 1504.831706][T14410] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1504.889934][T14410] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1504.937153][T14410] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1504.947578][T14410] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1504.958948][T14410] usb 6-1: Product: syz [ 1504.963210][T14410] usb 6-1: Manufacturer: syz [ 1504.998054][T14410] hub 6-1:4.0: USB hub found [ 1505.118898][T13589] usb 1-1: USB disconnect, device number 50 [ 1505.240359][T14410] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1506.827933][ T5937] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1506.988100][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1507.018998][ T5937] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1507.175273][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.203480][ T5937] usb 3-1: config 0 descriptor?? [ 1507.435362][ T10] usb 6-1: USB disconnect, device number 19 [ 1507.597758][T23109] FAULT_INJECTION: forcing a failure. [ 1507.597758][T23109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1507.977922][T12694] wlan0: Trigger new scan to find an IBSS to join [ 1508.026221][T23109] CPU: 0 UID: 0 PID: 23109 Comm: syz.5.3687 Tainted: G L syzkaller #0 PREEMPT(full) [ 1508.026259][T23109] Tainted: [L]=SOFTLOCKUP [ 1508.026266][T23109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1508.026278][T23109] Call Trace: [ 1508.026287][T23109] [ 1508.026296][T23109] dump_stack_lvl+0xe8/0x150 [ 1508.026329][T23109] should_fail_ex+0x412/0x560 [ 1508.026360][T23109] _copy_from_user+0x2d/0xb0 [ 1508.026388][T23109] ucma_resolve_ip+0xb8/0x490 [ 1508.026412][T23109] ? __might_fault+0xaf/0x130 [ 1508.026437][T23109] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 1508.026477][T23109] ucma_write+0x24e/0x2f0 [ 1508.026501][T23109] ? __pfx_ucma_write+0x10/0x10 [ 1508.026520][T23109] ? security_file_permission+0x75/0x260 [ 1508.026541][T23109] ? rw_verify_area+0x255/0x4d0 [ 1508.026572][T23109] vfs_writev+0x4bd/0x990 [ 1508.026596][T23109] ? __pfx_ucma_write+0x10/0x10 [ 1508.026622][T23109] ? __pfx_vfs_writev+0x10/0x10 [ 1508.026666][T23109] ? __fget_files+0x2a/0x420 [ 1508.026692][T23109] ? __fget_files+0x3a0/0x420 [ 1508.026724][T23109] ? __fget_files+0x2a/0x420 [ 1508.026754][T23109] do_writev+0x154/0x2e0 [ 1508.026778][T23109] ? __pfx_do_writev+0x10/0x10 [ 1508.026810][T23109] do_syscall_64+0xe2/0xf80 [ 1508.026830][T23109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.026849][T23109] ? trace_irq_disable+0x37/0x100 [ 1508.026867][T23109] ? clear_bhb_loop+0x60/0xb0 [ 1508.026890][T23109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.026905][T23109] RIP: 0033:0x7f2ae019aeb9 [ 1508.026923][T23109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.026939][T23109] RSP: 002b:00007f2ae10c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1508.026962][T23109] RAX: ffffffffffffffda RBX: 00007f2ae0415fa0 RCX: 00007f2ae019aeb9 [ 1508.026976][T23109] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000c [ 1508.026989][T23109] RBP: 00007f2ae10c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1508.027001][T23109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1508.027013][T23109] R13: 00007f2ae0416038 R14: 00007f2ae0415fa0 R15: 00007f2ae053fa48 [ 1508.027044][T23109] [ 1509.302984][ T1524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.296074][ T5937] usbhid 3-1:0.0: can't add hid device: -71 [ 1510.316782][ T5937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1510.345598][ T5937] usb 3-1: USB disconnect, device number 48 [ 1510.360498][T23135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.389971][T23135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.514311][T13589] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1510.674524][T13589] usb 5-1: Using ep0 maxpacket: 16 [ 1510.696088][T13589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.724048][T13589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.750714][T13589] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1510.791426][T13589] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1510.794741][ T5937] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1510.818961][T13589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.862270][T13589] usb 5-1: config 0 descriptor?? [ 1510.996422][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 1511.010722][ T5937] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.036027][ T5937] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.071025][ T5937] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1511.084469][ T5937] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1511.093693][ T5937] usb 3-1: Product: syz [ 1511.098152][ T5937] usb 3-1: Manufacturer: syz [ 1511.141032][ T5937] hub 3-1:4.0: USB hub found [ 1511.294059][T14405] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1511.331290][T13589] microsoft 0003:045E:07DA.0033: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1511.345580][T13589] microsoft 0003:045E:07DA.0033: no inputs found [ 1511.351975][T13589] microsoft 0003:045E:07DA.0033: could not initialize ff, continuing anyway [ 1511.459673][T14405] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.494691][T14405] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1511.515383][T14405] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1511.534001][T14405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1511.542265][T14405] usb 6-1: SerialNumber: syz [ 1511.551558][ T5937] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 1511.780177][T14405] usb 6-1: 0:2 : does not exist [ 1511.866755][T14405] usb 6-1: USB disconnect, device number 20 [ 1513.281751][ T10] usb 5-1: USB disconnect, device number 6 [ 1513.586337][T14405] usb 3-1: USB disconnect, device number 49 [ 1514.942991][T23187] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3709'. [ 1516.931901][ T5896] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1517.124068][T13589] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1517.134022][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 1517.157385][ T5896] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.206539][ T5896] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.239486][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1517.258635][ T5896] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1517.281160][ T5896] usb 3-1: Product: syz [ 1517.289860][T13589] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1517.313915][ T5896] usb 3-1: Manufacturer: syz [ 1517.319650][T13589] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.341294][ T5896] hub 3-1:4.0: USB hub found [ 1517.349663][T13589] usb 6-1: Product: syz [ 1517.360584][T13589] usb 6-1: Manufacturer: syz [ 1517.381493][T13589] usb 6-1: SerialNumber: syz [ 1517.420676][T13589] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1517.442537][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1517.649495][ C0] usb 6-1: ath: unknown panic pattern! [ 1517.739589][ T5896] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 1517.940404][T13589] usb 6-1: USB disconnect, device number 21 [ 1517.961429][T23217] binder: 23216:23217 ioctl 4018620d 0 returned -22 [ 1517.977265][T23217] binder: 23216:23217 ioctl c018620c 200000000380 returned -1 [ 1518.303969][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1518.466133][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 1518.515109][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1518.537065][ T9] ath9k_htc: Failed to initialize the device [ 1518.543551][ T10] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 1518.554922][T13589] usb 6-1: ath9k_htc: USB layer deinitialized [ 1518.564010][ T10] usb 5-1: config 95 has no interface number 0 [ 1518.576337][ T10] usb 5-1: config 95 interface 1 has no altsetting 0 [ 1518.600408][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1518.610951][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.621092][ T10] usb 5-1: Product: syz [ 1518.625990][ T10] usb 5-1: Manufacturer: syz [ 1518.631057][ T10] usb 5-1: SerialNumber: syz [ 1518.926149][ T10] usb 5-1: USB disconnect, device number 7 [ 1518.962276][T12552] udevd[12552]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1519.600663][ T10] usb 3-1: USB disconnect, device number 50 [ 1520.474486][T14410] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1521.195554][T14410] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1521.226792][T14410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1521.295535][T14410] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1521.347316][T14410] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1521.369483][T14410] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.428237][T14410] usb 6-1: Product: syz [ 1521.464492][T14410] usb 6-1: Manufacturer: syz [ 1521.499596][T14410] usb 6-1: SerialNumber: syz [ 1521.537360][T14410] usb 6-1: config 0 descriptor?? [ 1521.573446][T23246] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1521.765266][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1521.792055][T23246] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1521.952533][T23257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3731'. [ 1521.988154][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1522.002637][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1522.202474][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1522.222706][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.238657][ T10] usb 3-1: Product: syz [ 1522.245748][ T10] usb 3-1: Manufacturer: syz [ 1522.251857][ T10] usb 3-1: SerialNumber: syz [ 1522.330949][T23258] netlink: 464 bytes leftover after parsing attributes in process `syz.4.3731'. [ 1522.544413][T23255] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1523.088184][T23264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.111407][T23264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.380264][T23264] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1523.558834][T21117] unregister_netdevice: waiting for syz_tun to become free. Usage count = 4 [ 1523.618321][ T10] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1523.745865][ T10] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 1523.788679][T21117] ref_tracker: netdev@ffff88807cbe8618 has 1/3 users at [ 1523.788679][T21117] dst_init+0xd9/0x480 [ 1523.788679][T21117] dst_alloc+0x12a/0x170 [ 1523.788679][T21117] ip6_rt_cache_alloc+0x3c3/0xa40 [ 1523.788679][T21117] rt6_do_redirect+0xc28/0x10c0 [ 1523.788679][T21117] ip6_redirect_no_header+0x2be/0x3a0 [ 1523.788679][T21117] ndisc_redirect_rcv+0x519/0x920 [ 1523.788679][T21117] icmpv6_rcv+0x1340/0x1cc0 [ 1523.788679][T21117] ip6_protocol_deliver_rcu+0xe2d/0x1600 [ 1523.788679][T21117] ip6_input_finish+0x191/0x370 [ 1523.788679][T21117] NF_HOOK+0x336/0x3c0 [ 1523.788679][T21117] ip6_input+0x16a/0x270 [ 1523.788679][T21117] ip6_mc_input+0x655/0xbd0 [ 1523.788679][T21117] NF_HOOK+0x336/0x3c0 [ 1523.788679][T21117] netif_receive_skb+0x278/0xbb0 [ 1523.788679][T21117] tun_rx_batched+0x1de/0x790 [ 1523.788679][T21117] tun_get_user+0x2a78/0x3dd0 [ 1523.788679][T21117] [ 1523.876611][T21117] ref_tracker: netdev@ffff88807cbe8618 has 1/3 users at [ 1523.876611][T21117] netdev_get_by_index+0x79/0xb0 [ 1523.876611][T21117] fib6_nh_init+0x1f7/0x2060 [ 1523.876611][T21117] ip6_route_info_create_nh+0x16a/0xad0 [ 1523.876611][T21117] ip6_route_add+0x6e/0x1b0 [ 1523.876611][T21117] rt6_add_route_info+0x326/0x3f0 [ 1523.876611][T21117] rt6_route_rcv+0x465/0x810 [ 1523.876611][T21117] ndisc_router_discovery+0x1471/0x40a0 [ 1523.876611][T21117] icmpv6_rcv+0x1340/0x1cc0 [ 1523.876611][T21117] ip6_protocol_deliver_rcu+0xe2d/0x1600 [ 1523.876611][T21117] ip6_input_finish+0x191/0x370 [ 1523.876611][T21117] NF_HOOK+0x336/0x3c0 [ 1523.876611][T21117] ip6_input+0x16a/0x270 [ 1523.876611][T21117] ip6_mc_input+0x655/0xbd0 [ 1523.876611][T21117] NF_HOOK+0x336/0x3c0 [ 1523.876611][T21117] netif_receive_skb+0x278/0xbb0 [ 1523.876611][T21117] tun_rx_batched+0x1de/0x790 [ 1523.876611][T21117] [ 1523.966254][T21117] ref_tracker: netdev@ffff88807cbe8618 has 1/3 users at [ 1523.966254][T21117] ipv6_add_dev+0x50f/0x13a0 [ 1523.966254][T21117] addrconf_notify+0x771/0x1050 [ 1523.966254][T21117] notifier_call_chain+0x19d/0x3a0 [ 1523.966254][T21117] register_netdevice+0x171a/0x1cd0 [ 1523.966254][T21117] tun_set_iff+0x844/0xf00 [ 1523.966254][T21117] __tun_chr_ioctl+0x7bb/0x1e10 [ 1523.966254][T21117] __se_sys_ioctl+0xfc/0x170 [ 1523.966254][T21117] do_syscall_64+0xe2/0xf80 [ 1523.966254][T21117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.966254][T21117] [ 1524.090200][ T10] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 1524.312584][T14405] usb 6-1: USB disconnect, device number 22 [ 1524.348657][T23279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.359159][T23279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.131384][ T10] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1525.202609][ T10] usb 3-1: USB disconnect, device number 51 [ 1525.233246][ T10] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)