last executing test programs: 7m50.935504928s ago: executing program 4 (id=181): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000d40)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x10}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f01000000000000009ba624dc1a00000008241c00401707000905810340000000000904010000020d00000904010102"], 0x0) 7m47.417371551s ago: executing program 4 (id=196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r0}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='gid', &(0x7f0000000140)='udf\x00', 0x0) 7m47.195263508s ago: executing program 4 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000002400048020000180070001006374000014000280080001400000000808000240000000050900010073797a3000000000140000001100010000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket(0xa, 0x3, 0xff) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x10142, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0xfffffffd, 0x5, 0x9, 0x9, 0x1, 0x1, 0x1ff}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xc18, 0x3, 0xc, 0x44104, 0x1, 0x287c, '\x00', 0x0, r2, 0x5, 0x0, 0x1}, 0x50) 7m45.799773744s ago: executing program 4 (id=201): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) r1 = io_uring_setup(0x3eaa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="080005010b1c1fbfdb4df9000000"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-160-generic\x00'}, 0xb0) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x801, 0x3) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x40000, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) recvmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}, 0x40000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fddbdf25040000000500050006000000321bedceef627cc9b2ddac7b0b9c0b3fd10459f48dbaa74e29d17cafa73d81e8a5c8be775beafeaabfb13f"], 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) mprotect(&(0x7f0000b33000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d032, 0xffffffffffffffff, 0x0) 7m42.66080168s ago: executing program 4 (id=214): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x851ee000) unshare(0x22020600) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000068000100000000000000000002000400000000000600070008000000180008801400050000000000000000000000ffff6401010208000500", @ANYRES32=r4], 0x40}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='4..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)={0x44, 0x25, 0x101, 0x70bd22, 0xfffffffc, {0xa}, [@typed={0x2e, 0x10d, 0x0, 0x0, @str='\x00>\x05\xea\x9f\xf7]F=\x0e\x0fbv\x9e]n\xcf\x01\x00\x00\x00\xf3\xd7R\x03\xcf\x00'/42}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040)=0x7, 0xc) 7m41.462376215s ago: executing program 4 (id=224): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2, &(0x7f00000002c0)="ab", 0x1, 0x6ed}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x89, r2, 0x0, 0x0, 0x1}]) io_setup(0x222, &(0x7f0000000180)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) (async) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2, &(0x7f00000002c0)="ab", 0x1, 0x6ed}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x89, r2, 0x0, 0x0, 0x1}]) (async) 7m41.068396694s ago: executing program 32 (id=224): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2, &(0x7f00000002c0)="ab", 0x1, 0x6ed}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x89, r2, 0x0, 0x0, 0x1}]) io_setup(0x222, &(0x7f0000000180)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) (async) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2, &(0x7f00000002c0)="ab", 0x1, 0x6ed}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x89, r2, 0x0, 0x0, 0x1}]) (async) 10.652717205s ago: executing program 0 (id=2007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = fsopen(&(0x7f00000003c0)='befs\x00', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a000100000000000000000000000000000000000000000059db5f49543f2deec7a6de2b1203db447ba0ed7bf12304cc5e57e8baf4c77c89852ee6f12401d114d6"], 0x1c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f00000002c0)=""/96, 0x60, 0x0, &(0x7f0000000340)=""/76, 0x4c}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf06712", 0x15}, {&(0x7f00000001c0)="c082", 0x2}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], &(0x7f0000000200)='syzkaller\x00', 0xe0b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) 9.405612782s ago: executing program 2 (id=2015): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x713, 0x0, 0x0, 0x0, 0x8, 0x461, 0x4e72, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x10, 0x7f, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0xc, {0x9, 0x21, 0xe, 0x1, 0x1, {0x22, 0x1a7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ef, 0xb, 0x8, 0x3}}}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x1, 0x1}]}}) 7.991383245s ago: executing program 2 (id=2029): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0x940, 0x1000, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) pread64(r4, &(0x7f0000000180)=""/33, 0x21, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000002a80)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xd1}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) 7.746651108s ago: executing program 0 (id=2031): r0 = socket(0x2, 0x3, 0x6) keyctl$restrict_keyring(0x10, 0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="940200001900010000000000fcdbdf2500000000000023000000000040000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000049e9835b00000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000087070000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000102"], 0x294}, 0x1, 0x0, 0x0, 0x20008000}, 0x40014) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="0503162ed3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 7.580171674s ago: executing program 5 (id=2035): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000440)={0x1, 0x400, 0x0, 0x1, 0x1000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x2204803, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) 7.293552377s ago: executing program 5 (id=2041): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) fsetxattr$security_ima(r0, &(0x7f0000000040), 0x0, 0xa, 0x0) 7.001035239s ago: executing program 5 (id=2043): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r1 = msgget$private(0x0, 0x1c0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "051000"}, @local=@item_012={0x1, 0x2, 0x9, "d3"}]}}, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="2818020001000666"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgsnd(r1, &(0x7f0000000080)={0x3}, 0x8, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x2, 0x1a1880) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83}) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x3, 0xfffffbfe, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) read$FUSE(r8, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r8, &(0x7f0000000340)=""/133, 0x85) 6.399682947s ago: executing program 1 (id=2048): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket(0x28, 0x80000, 0xfffff801) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtaction={0x58, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x44, 0x1, [@m_sample={0x40, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7fff}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x58}}, 0x0) mount_setattr(r0, &(0x7f0000000000)='./file0\x00', 0x4100, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x8, 0x3c3bc2, 0x2af9bc}) syz_usb_connect$uac1(0x6, 0x92, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0xaf, 0x40, 0x14, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x7}, [@selector_unit={0x7, 0x24, 0x5, 0x3, 0x3b, 'd>'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x8, "", "76c410"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xf0, 0x9, {0x7, 0x25, 0x1, 0x0, 0xd, 0xa4a6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x1, 0x7, "dd8319eb4c2a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfe, 0x7, 0x9, {0x7, 0x25, 0x1, 0x1, 0x6, 0xa09b}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x201, 0x1, 0x40, 0x40, 0x8, 0xdc}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x1, [{0xfb, &(0x7f0000000740)=@string={0xfb, 0x3, "407ce0e2b3d5ec98fe20b9c87e68e21bf1dbc2f52dd5076ef227dedbae17c319cbab166b8cea025444964291c554d09e4d3d49aa76c66fa21a2054281bdc29f4b49be9b0c044f65b00adc87c001f43ea1bced2aecc516caa81f1b1e0ab5190664b6620e370581394257225bd4386b7e2021cbd205ec7b38237da63fa6d0e51b33e33b795cb289c4b791ab9c14b49fcbd4177d739909af3d9b4f30dab2a63feec4d1640a6bc9f3347ba581e8d9d841527795d97d17b43941737e8ca657e0da749d316161961c30bdb421e4cc5538c70cf8b0d31cb97d07e6da7300e75416ea10bfefd20f1577ba951172f43f22f5d09782cb7508ce3cc9a062d"}}]}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000006c0)={0x18, &(0x7f0000000500)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x15, 0x2, 'Pn'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000140)={0x14, &(0x7f0000000f00)=ANY=[@ANYBLOB="20234a0000004a07e2fc87d2083c1121bea2aab7296ef4de02f7b9ec6aa2254de32899ae0c6ff261b400004abe4dd8402e4f9439d9863a60dc4f0687e99bfc096044343f02e78e1150966fcc71f9d561d891d0579a6c508d89c62bb02ff0c8611cdcf738445d992988efed8200e502b4ef12c882f2e3e6ceb94a0de0ce5d7ad8c78161b8269301172a0fd77de2a301d2ae4ea5f9a73a16f4d6f3df2512154212ea1f968a218cfd11"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x0, 0x0, 0xd4, "d38d48b849b6ecac9175eeec222f422a0945a5eb3c55bdd72a5a5f48c20b0eead1bf4432294c683432073e5b2246227346e12b086e7098d1dcac9d96c8c3d9f4ff185e7929551362445b5619b530525269b2d2cbcaccac8f4a1d2b649fea245f3cf6fa8e6a8eb41754c5ea6fd394b6e824ea9d044bcb814767cd9d466caba2b812be804299ba409eb094b71daa546734d4d2d55414db495b5a6b5964b07932e322160d091ae5b172f1b8e35ba629ab1c32aafbe53c88c21aae6dcbee72547f867b4a4acd52f7cb2943f8334fd6cb447edc1bf1aa"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x3ff, 0x9, 0x6, 0xb, 0xfff4, 0x30f, 0x78, 0x1, 0x8000, 0x1, 0x1, 0x6}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0xb7e}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) syz_usb_control_io$sierra_net(r2, &(0x7f00000009c0)={0x14, &(0x7f0000000900)={0x40, 0x3, 0x3e, {0x3e, 0x4, "2abc61a0584cd70d40a04f3efcba3789bbe9d7af88383a450f3ec2603764bfd038d4843300065e544fadbdb487f54f859d2d09ef57d5ab65a5818b14"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f0000000ec0)={0x1c, &(0x7f0000000a00)={0x20, 0xf, 0x12, "8e7f4ec1d1c56a3c7850ece4dc733675f56e"}, &(0x7f0000000a40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000e80)={0x21, 0x0, 0x3, "a7db4c"}}) 6.166621361s ago: executing program 0 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.953217001s ago: executing program 0 (id=2052): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) r1 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000200)=0x7fffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/172) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0xda7f, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x8a, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0x8, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x4001000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x7, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) read$FUSE(r0, &(0x7f000001b700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) get_robust_list(r6, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f0000000280)={&(0x7f0000000240)}, 0x0, &(0x7f0000000340)={&(0x7f0000000300)}}, &(0x7f0000000880)=0x18) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 4.653577024s ago: executing program 0 (id=2058): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0x940, 0x1000, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/33, 0x21, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f0000002a80)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}, 0x40000000) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) 4.231495581s ago: executing program 2 (id=2061): r0 = socket(0x2, 0x3, 0x6) keyctl$restrict_keyring(0x10, 0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="940200001900010000000000fcdbdf2500000000000023000000000040000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000049e9835b00000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000087070000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000102"], 0x294}, 0x1, 0x0, 0x0, 0x20008000}, 0x40014) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="0503162ed3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 3.788173434s ago: executing program 5 (id=2065): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1ef", 0x23}], 0x1, 0x0, 0x0, 0x20040800}], 0x1, 0x4000040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 3.375423794s ago: executing program 1 (id=2069): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) r1 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000200)=0x7fffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/172) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0xda7f, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x8a, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0x8, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x4001000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x7, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) read$FUSE(r0, &(0x7f000001b700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) get_robust_list(r6, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f0000000280)={&(0x7f0000000240)}, 0x0, &(0x7f0000000340)={&(0x7f0000000300)}}, &(0x7f0000000880)=0x18) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 3.241929733s ago: executing program 5 (id=2071): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) poll(&(0x7f0000000180)=[{r0, 0x80}], 0x1, 0x7a0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2", 0x2a}, {&(0x7f0000000140)="907c15c13f120164321383c7", 0xc}, {&(0x7f0000000200)="673079cdb7ac3ba0d86b15977e918c0e1e788524ad72b22a8bbca62b44428b842af3e4943aacd2c70acf6028ce05b8ecb26d5ea1751d791172d31ffd6110", 0x3e}], 0x4) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1032025, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3c05, [{{0x9, 0x2, 0xfffffe04}}]}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r3, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001800)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0cff3c20"], 0xf) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x2000000000002, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)={0x3ff, 0x1bb, 0x0, 0x1, 0x9, 0x1, 0x7ffffffc, 0x2}, 0x0, 0x0) 2.968836758s ago: executing program 1 (id=2073): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0, r1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'ip_vti0\x00', {0x2, 0x4e23, @empty}}) 2.849349441s ago: executing program 1 (id=2075): sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc66, &(0x7f0000002240)=ANY=[@ANYBLOB="ddf9", @ANYBLOB="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"]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 2.734770103s ago: executing program 2 (id=2077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0xd2}, 0x24000845) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb53"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x2b8}, 0x1, 0x0, 0x0, 0x8045}, 0x4040093) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x1f) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) syz_emit_ethernet(0x23, &(0x7f0000002840)=ANY=[@ANYBLOB="aaaaaaaa93aa0fb16b4fdbdd8100400000114242db84e624d4dd79e42b8787ef52a0cd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[], &(0x7f0000000280), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000080)='console\x00', r2, 0x0, 0xfffffff7fffffffe}, 0xffffffffffffff96) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.49183629s ago: executing program 3 (id=2079): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket(0x28, 0x80000, 0xfffff801) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7fff}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x50}}, 0x0) mount_setattr(r0, &(0x7f0000000000)='./file0\x00', 0x4100, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x8, 0x3c3bc2, 0x2af9bc}) syz_usb_connect$uac1(0x6, 0x92, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0xaf, 0x40, 0x14, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x7}, [@selector_unit={0x7, 0x24, 0x5, 0x3, 0x3b, 'd>'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x8, "", "76c410"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xf0, 0x9, {0x7, 0x25, 0x1, 0x0, 0xd, 0xa4a6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x1, 0x7, "dd8319eb4c2a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfe, 0x7, 0x9, {0x7, 0x25, 0x1, 0x1, 0x6, 0xa09b}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x201, 0x1, 0x40, 0x40, 0x8, 0xdc}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x1, [{0xfb, &(0x7f0000000740)=@string={0xfb, 0x3, "407ce0e2b3d5ec98fe20b9c87e68e21bf1dbc2f52dd5076ef227dedbae17c319cbab166b8cea025444964291c554d09e4d3d49aa76c66fa21a2054281bdc29f4b49be9b0c044f65b00adc87c001f43ea1bced2aecc516caa81f1b1e0ab5190664b6620e370581394257225bd4386b7e2021cbd205ec7b38237da63fa6d0e51b33e33b795cb289c4b791ab9c14b49fcbd4177d739909af3d9b4f30dab2a63feec4d1640a6bc9f3347ba581e8d9d841527795d97d17b43941737e8ca657e0da749d316161961c30bdb421e4cc5538c70cf8b0d31cb97d07e6da7300e75416ea10bfefd20f1577ba951172f43f22f5d09782cb7508ce3cc9a062d"}}]}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000006c0)={0x18, &(0x7f0000000500)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x15, 0x2, 'Pn'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000140)={0x14, &(0x7f0000000f00)=ANY=[@ANYBLOB="20234a0000004a07e2fc87d2083c1121bea2aab7296ef4de02f7b9ec6aa2254de32899ae0c6ff261b400004abe4dd8402e4f9439d9863a60dc4f0687e99bfc096044343f02e78e1150966fcc71f9d561d891d0579a6c508d89c62bb02ff0c8611cdcf738445d992988efed8200e502b4ef12c882f2e3e6ceb94a0de0ce5d7ad8c78161b8269301172a0fd77de2a301d2ae4ea5f9a73a16f4d6f3df2512154212ea1f968a218cfd11"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x0, 0x0, 0xd4, "d38d48b849b6ecac9175eeec222f422a0945a5eb3c55bdd72a5a5f48c20b0eead1bf4432294c683432073e5b2246227346e12b086e7098d1dcac9d96c8c3d9f4ff185e7929551362445b5619b530525269b2d2cbcaccac8f4a1d2b649fea245f3cf6fa8e6a8eb41754c5ea6fd394b6e824ea9d044bcb814767cd9d466caba2b812be804299ba409eb094b71daa546734d4d2d55414db495b5a6b5964b07932e322160d091ae5b172f1b8e35ba629ab1c32aafbe53c88c21aae6dcbee72547f867b4a4acd52f7cb2943f8334fd6cb447edc1bf1aa"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x3ff, 0x9, 0x6, 0xb, 0xfff4, 0x30f, 0x78, 0x1, 0x8000, 0x1, 0x1, 0x6}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0xb7e}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) syz_usb_control_io$sierra_net(r2, &(0x7f00000009c0)={0x14, &(0x7f0000000900)={0x40, 0x3, 0x3e, {0x3e, 0x4, "2abc61a0584cd70d40a04f3efcba3789bbe9d7af88383a450f3ec2603764bfd038d4843300065e544fadbdb487f54f859d2d09ef57d5ab65a5818b14"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f0000000ec0)={0x1c, &(0x7f0000000a00)={0x20, 0xf, 0x12, "8e7f4ec1d1c56a3c7850ece4dc733675f56e"}, &(0x7f0000000a40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000e80)={0x21, 0x0, 0x3, "a7db4c"}}) 1.990576959s ago: executing program 3 (id=2080): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4", 0x1b}], 0x1, 0x0, 0x0, 0x20040800}], 0x1, 0x4000040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 1.776586108s ago: executing program 2 (id=2081): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1040, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000f8458ecce0956c5811dd65076e9ba7563828a67a8f909eb685fca9a1932de88f48614a9acc9699329fffeeb844c41d0d8af9537ff6b4660b41338041c0a796204746fa42835f31f6c808512f55efbdc308b57bae", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r3, @ANYBLOB="08005e8000000100"], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x4004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x10000000, 0xfffffffc, 0xfffffffe}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xd8a0}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x4000080) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x24040880}, 0x20000000) r12 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r12, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) socket$inet6(0xa, 0x2, 0x0) io_uring_enter(r0, 0x6f25, 0xa180, 0x0, 0x0, 0x0) 1.653376833s ago: executing program 3 (id=2082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000250001030200002000000000010000000800038004"], 0x1c}, 0x1, 0x0, 0x0, 0x20000018}, 0x4004000) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) setsockopt(r2, 0x9a4, 0x8, &(0x7f0000000240)="3c46765ee7a5250204255908", 0xc) r5 = syz_open_dev$hiddev(&(0x7f0000000180), 0x100000000, 0x8000) ioctl$HIDIOCGCOLLECTIONINFO(r5, 0xc0104811, &(0x7f00000001c0)={0x1, 0x101, 0x3, 0xff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="07000000010001", 0x7) 1.33547967s ago: executing program 3 (id=2083): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000440)=ANY=[@ANYBLOB="060371"], 0xa, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (fail_nth: 11) 790.081924ms ago: executing program 3 (id=2084): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/219, 0xdb}, {&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000140)=""/116, 0x74}, {&(0x7f00000002c0)=""/82, 0x52}], 0x5) 668.397707ms ago: executing program 1 (id=2085): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) pread64(r1, &(0x7f0000000180)=""/33, 0x21, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000002a80)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}, 0x40000000) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) 304.534266ms ago: executing program 3 (id=2086): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x8}}}, 0x24}}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0xffffffff, 0x0, 0x0, 0x81, 0xfffffffb, 0x5}) (async) r5 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_netlabel(r5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) (async) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r6, 0x0, 0x0) (async) syz_usb_connect(0xb000000, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000012c35b400304106098c6000000010902120001000000000904"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) 199.142642ms ago: executing program 1 (id=2087): r0 = socket(0x2, 0x3, 0x6) keyctl$restrict_keyring(0x10, 0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="940200001900010000000000fcdbdf2500000000000023000000000040000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000049e9835b00000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000087070000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000102"], 0x294}, 0x1, 0x0, 0x0, 0x20008000}, 0x40014) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="0503162ed3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 90.759859ms ago: executing program 0 (id=2088): r0 = syz_open_procfs(0x0, &(0x7f0000001300)='net/raw\x00') socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x401, 0x0) (rerun: 32) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x8, 0xffff, 0x6, 0x8}}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) (async, rerun: 32) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000002c0)={'comedi_parport\x00', [0x1610, 0x0, 0x41, 0x0, 0x3, 0x1, 0x9, 0xaab, 0xa, 0xfc, 0x2, 0x1, 0x8, 0x1, 0x6, 0x9, 0x1, 0x1a449, 0x3, 0x40000003, 0x86, 0x2, 0xf27, 0x6, 0x800b, 0xca8, 0x5, 0x4, 0x10000401, 0x10000, 0xfffffff7]}) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0xfffffffe, 0x2018, 0x0, 0x0, 0x0, 0x1, 0x6}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x8e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000001340)={0xa, 0xffffffff, {0x29, 0x800, 0xff, {0x8, 0x2}, {0x9, 0x2}, @cond=[{0xe8f0, 0x7b, 0x4, 0xa, 0x80, 0x8}, {0x1000, 0x2, 0x7, 0x0, 0xd3, 0xff90}]}, {0x52, 0x1, 0x9, {0x2, 0x8}, {0x9d4, 0x67ff}, @period={0x5c, 0x4, 0x3, 0xd, 0xffff, {0x0, 0x0, 0x7fff, 0x7}, 0x5, &(0x7f00000012c0)=[0x0, 0xce, 0xfff1, 0x3, 0x4]}}}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000130a01"], 0x7c}}, 0xc8000) preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/174, 0xae}, {&(0x7f00000011c0)=""/154, 0x9a}, {&(0x7f0000000080)=""/19, 0x13}], 0x4, 0x8, 0x6) (async, rerun: 64) move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, &(0x7f0000000000)='./mnt\x00', 0x177) (rerun: 64) io_uring_enter(r0, 0xb96, 0xdde7, 0x1, &(0x7f0000000040)={[0x5e0]}, 0x8) 49.581124ms ago: executing program 2 (id=2089): timer_create(0x0, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000280)={{&(0x7f00003cb000/0x1000)=nil, 0x1000}}) 0s ago: executing program 5 (id=2090): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket(0x28, 0x80000, 0xfffff801) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7fff}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x50}}, 0x0) mount_setattr(r0, &(0x7f0000000000)='./file0\x00', 0x4100, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x8, 0x3c3bc2, 0x2af9bc}) syz_usb_connect$uac1(0x6, 0x92, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0xaf, 0x40, 0x14, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x7}, [@selector_unit={0x7, 0x24, 0x5, 0x3, 0x3b, 'd>'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x8, "", "76c410"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xf0, 0x9, {0x7, 0x25, 0x1, 0x0, 0xd, 0xa4a6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x1, 0x7, "dd8319eb4c2a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfe, 0x7, 0x9, {0x7, 0x25, 0x1, 0x1, 0x6, 0xa09b}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x201, 0x1, 0x40, 0x40, 0x8, 0xdc}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x1, [{0xfb, &(0x7f0000000740)=@string={0xfb, 0x3, "407ce0e2b3d5ec98fe20b9c87e68e21bf1dbc2f52dd5076ef227dedbae17c319cbab166b8cea025444964291c554d09e4d3d49aa76c66fa21a2054281bdc29f4b49be9b0c044f65b00adc87c001f43ea1bced2aecc516caa81f1b1e0ab5190664b6620e370581394257225bd4386b7e2021cbd205ec7b38237da63fa6d0e51b33e33b795cb289c4b791ab9c14b49fcbd4177d739909af3d9b4f30dab2a63feec4d1640a6bc9f3347ba581e8d9d841527795d97d17b43941737e8ca657e0da749d316161961c30bdb421e4cc5538c70cf8b0d31cb97d07e6da7300e75416ea10bfefd20f1577ba951172f43f22f5d09782cb7508ce3cc9a062d"}}]}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000006c0)={0x18, &(0x7f0000000500)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x15, 0x2, 'Pn'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000140)={0x14, &(0x7f0000000f00)=ANY=[@ANYBLOB="20234a0000004a07e2fc87d2083c1121bea2aab7296ef4de02f7b9ec6aa2254de32899ae0c6ff261b400004abe4dd8402e4f9439d9863a60dc4f0687e99bfc096044343f02e78e1150966fcc71f9d561d891d0579a6c508d89c62bb02ff0c8611cdcf738445d992988efed8200e502b4ef12c882f2e3e6ceb94a0de0ce5d7ad8c78161b8269301172a0fd77de2a301d2ae4ea5f9a73a16f4d6f3df2512154212ea1f968a218cfd11"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x0, 0x0, 0xd4, "d38d48b849b6ecac9175eeec222f422a0945a5eb3c55bdd72a5a5f48c20b0eead1bf4432294c683432073e5b2246227346e12b086e7098d1dcac9d96c8c3d9f4ff185e7929551362445b5619b530525269b2d2cbcaccac8f4a1d2b649fea245f3cf6fa8e6a8eb41754c5ea6fd394b6e824ea9d044bcb814767cd9d466caba2b812be804299ba409eb094b71daa546734d4d2d55414db495b5a6b5964b07932e322160d091ae5b172f1b8e35ba629ab1c32aafbe53c88c21aae6dcbee72547f867b4a4acd52f7cb2943f8334fd6cb447edc1bf1aa"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x3ff, 0x9, 0x6, 0xb, 0xfff4, 0x30f, 0x78, 0x1, 0x8000, 0x1, 0x1, 0x6}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0xb7e}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) syz_usb_control_io$sierra_net(r2, &(0x7f00000009c0)={0x14, &(0x7f0000000900)={0x40, 0x3, 0x3e, {0x3e, 0x4, "2abc61a0584cd70d40a04f3efcba3789bbe9d7af88383a450f3ec2603764bfd038d4843300065e544fadbdb487f54f859d2d09ef57d5ab65a5818b14"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f0000000ec0)={0x1c, &(0x7f0000000a00)={0x20, 0xf, 0x12, "8e7f4ec1d1c56a3c7850ece4dc733675f56e"}, &(0x7f0000000a40)={0xa1, 0x1, 0x400, "51dbcdb5661acd0ecf3bdf4f0bdb4732797b3b514c97da2d2761e753b7c16eb4ad9d2630e25af91c8457a2e72b0ea7b7b9616f3b75b2eb7a21730a7fe4c550659332840112fa22e938c790aa1e1f18dc6376363ea0202e6060229c20d6f103c523648509790faa0d1bac07f7752752b0e84828c50ada6451561eb21793f85633bb956fd74ebb08e1aa3d74d894484e1f88e68b34b34867e9b3a5203a98f8fda926b6f543fdde813affacfad99e6ff7c439a06bd7dab2727d66104d7e31ea3e1213d79451a0304a6c934957a3f153f718bba4563c7a4738024c72d4489bac687c04317c9734565c524c0b507aea9cb92bfa86013e5491f32e76a83539004072b271bbcddf9b5304bfe48e888994fedc068ed793afb883d7ee6c96ef6286e63f429f88cdee8f7f4f6ff850fe32ccd17b2f00f79ae371593132ad1f4a7c9b1f1c53e21c605c898bf39136c0a6523a3de4de031847ab7b6f92f4647c5ca7e107ea7e5a701e7f12b63747c2242d7863f53ec818b0d55595874175a4ec2b759fa535c7f256ea34c408fb55a9d2c7032ec33c4863199fe704060c95c577d87a05248140230079b02d6357706275b96ca2b6aa240aa00711aa35445f421ae0860a8d6f1a2c4b7b7941a0b62bd799c3d9ae78c6a725af18c096a0d53c6363e11deefe16f8bb18903b7478536c4af4336094395a208d2feedd388ca333608dac9fb8e757f1b5b56fd8eedcca2e7486e6f89a38a43283a99051139c596214333c463e1bf42c8b2b049c9f1058835412187b76dbce949542088861310b16c9173bed237ccbe2ee54305d04f00488fb3b9e983d6de5868f5b6c4d4066fe29072b2f3209838835bad0cdaec6497e623044cb6783293963f996c26a17ece45ea9a977e539d2a9ec663fe0b7af8fa3c5cc47d35783475dee2961925fe6af821cc8b352acc97e28cf7be71bb1e227ef455c5521f69a1e00e4b6593f19d15bc4b892ff968f5da67bce8990aa80205443600b4a1255ad5c3d576354108653a5f10d498ab057d204ac823d9487677b9e81807ad83b75663d1d9fdf474c4483dc6207116b2ecb5892e281d68372ebbcb9c6a2df5a664a0eb0ab9092218c4a8a605a303ec10418e2d84bb80918fb30815d09ecac6bd72d9a3634b0d0e1677ee4d812a5f6285ab427df58d2c611d93cdfbe8358221a922589dda8c568ef9284eef81f7b3031759fd8b01f57425c3a08a04426e2b88fb5c331e689170d4d8086319e38ebf81fa6524dc36bd9ecc68552ea665cdcafa8db44b6b501a9e300235211e1c151e417c36e779f9a3f0b89be1ceada41b8dd6e058de9ad5d2be8c3939620741c53c1b8fd03fd849c5b55d5d951d008a386dcc077f9859b6f947e5ee53f0861c9e74c37bfb1fbe3242fae4d88d48e4ffb9ae0118dde1a0f4c0f9bdc7b8c6d883447f752524199e77d40"}, &(0x7f0000000e80)={0x21, 0x0, 0x3, "a7db4c"}}) kernel console output (not intermixed with test programs): : config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 420.673821][ T6143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 420.673870][ T6143] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 420.673896][ T6143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.699900][ T6143] usb 2-1: config 0 descriptor?? [ 420.708938][ T9438] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 420.746063][ T6143] hub 2-1:0.0: USB hub found [ 420.835943][ T50] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 420.933345][ T6143] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 420.960855][ T6143] usbhid 2-1:0.0: can't add hid device: -71 [ 420.960999][ T6143] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 420.988302][ T6143] usb 2-1: USB disconnect, device number 48 [ 421.047295][ T50] usb 3-1: Using ep0 maxpacket: 32 [ 421.049838][ T50] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 421.051046][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 421.051081][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 421.051132][ T50] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 421.051157][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.121581][ T50] usb 3-1: config 0 descriptor?? [ 421.123191][ T9446] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 421.145916][ T50] hub 3-1:0.0: USB hub found [ 421.359300][ T50] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 421.395812][ T50] usbhid 3-1:0.0: can't add hid device: -71 [ 421.395950][ T50] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 421.439699][ T50] usb 3-1: USB disconnect, device number 33 [ 421.907989][ T9468] binder: 9461:9468 ioctl 4018620d 0 returned -22 [ 423.361526][ T9481] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 423.527648][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 424.798546][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 424.798579][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 424.798599][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 424.798620][ T10] usb 2-1: config 220 has no interface number 2 [ 424.798680][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 424.798701][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 424.798714][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 424.798728][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 424.802106][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 424.802139][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.802161][ T10] usb 2-1: Product: syz [ 424.802178][ T10] usb 2-1: Manufacturer: syz [ 424.802193][ T10] usb 2-1: SerialNumber: syz [ 425.183419][ T9475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.184017][ T9475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.829570][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 426.679433][ T10] usb 2-1: selecting invalid altsetting 0 [ 426.714291][ T10] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 426.714337][ T10] uvcvideo 2-1:220.0: No valid video chain found. [ 426.746612][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 426.773558][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.773593][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 426.773613][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 426.773658][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 426.773675][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.847053][ T9] usb 1-1: config 0 descriptor?? [ 426.857246][ T10] usb 2-1: selecting invalid altsetting 0 [ 426.858373][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 426.864755][ T9497] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 426.903025][ T9] hub 1-1:0.0: USB hub found [ 426.917345][ T10] usb 2-1: USB disconnect, device number 49 [ 427.120737][ T9497] loop2: detected capacity change from 0 to 7 [ 427.127674][ T9497] Dev loop2: unable to read RDB block 7 [ 427.127724][ T9497] loop2: AHDI p1 p2 p3 [ 427.127766][ T9497] loop2: partition table partially beyond EOD, truncated [ 427.128073][ T9497] loop2: p1 start 1818582900 is beyond EOD, truncated [ 427.128096][ T9497] loop2: p3 start 335544320 is beyond EOD, truncated [ 427.147347][ T9] hub 1-1:0.0: 1 port detected [ 427.877415][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 428.039802][ T10] usb 3-1: config index 0 descriptor too short (expected 65028, got 72) [ 428.041318][ T10] usb 3-1: config index 1 descriptor too short (expected 65028, got 72) [ 428.043243][ T10] usb 3-1: config index 2 descriptor too short (expected 65028, got 72) [ 428.087506][ T10] usb 3-1: config index 3 descriptor too short (expected 65028, got 72) [ 428.101769][ T10] usb 3-1: config index 4 descriptor too short (expected 65028, got 72) [ 428.109839][ T9] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 428.125698][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 428.125734][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.125757][ T10] usb 3-1: Product: syz [ 428.125774][ T10] usb 3-1: Manufacturer: syz [ 428.125791][ T10] usb 3-1: SerialNumber: syz [ 428.188760][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 428.230246][ T5982] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 428.258818][ T9] usb 1-1: reset high-speed USB device number 41 using dummy_hcd [ 428.348469][ T9497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.359747][ T9497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.242558][ T7422] usb 1-1: USB disconnect, device number 41 [ 429.297597][ T5982] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 429.317469][ T5982] ath9k_htc: Failed to initialize the device [ 429.395250][ T5982] usb 3-1: ath9k_htc: USB layer deinitialized [ 431.137313][ T6143] usb 3-1: USB disconnect, device number 34 [ 431.640411][ T6143] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 431.847616][ T6143] usb 1-1: Using ep0 maxpacket: 32 [ 432.253472][ T6143] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.253512][ T6143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 432.253542][ T6143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 432.253590][ T6143] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 432.253617][ T6143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.454144][ T6143] usb 1-1: config 0 descriptor?? [ 432.473729][ T9556] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 432.491654][ T6143] hub 1-1:0.0: USB hub found [ 432.684339][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.685562][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.714654][ T6143] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 432.737306][ T6143] usbhid 1-1:0.0: can't add hid device: -71 [ 432.737447][ T6143] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 432.768364][ T6143] usb 1-1: USB disconnect, device number 42 [ 433.358484][ T6143] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 433.469433][ T9588] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 433.691384][ T6143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.691420][ T6143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.691460][ T6143] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 433.691484][ T6143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.745728][ T6143] usb 2-1: config 0 descriptor?? [ 433.897389][ T7422] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 434.047328][ T7422] usb 1-1: Using ep0 maxpacket: 32 [ 434.061217][ T7422] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.061256][ T7422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 434.061285][ T7422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 434.061334][ T7422] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 434.061360][ T7422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.069634][ T7422] usb 1-1: config 0 descriptor?? [ 434.071048][ T9590] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 434.082770][ T7422] hub 1-1:0.0: USB hub found [ 434.200901][ T6143] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 434.229654][ T6143] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 434.337447][ T7422] hub 1-1:0.0: 1 port detected [ 434.382153][ T6143] arvo 0003:1E7D:30D4.0007: couldn't init struct arvo_device [ 434.382213][ T6143] arvo 0003:1E7D:30D4.0007: couldn't install keyboard [ 434.408343][ T6143] arvo 0003:1E7D:30D4.0007: probe with driver arvo failed with error -5 [ 434.534134][ T7422] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 434.534174][ T7422] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 434.576832][ T7422] usbhid 1-1:0.0: can't add hid device: -71 [ 434.576966][ T7422] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 434.621979][ T7422] usb 1-1: USB disconnect, device number 43 [ 436.489294][ T10] usb 2-1: USB disconnect, device number 50 [ 436.506421][ T9616] Debayer B: ================= START STATUS ================= [ 436.506445][ T9616] Debayer B: Debayer Mean Window Size: 3 [ 436.506496][ T9616] Debayer B: ================== END STATUS ================== [ 436.807287][ T7422] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 436.968203][ T7422] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 436.968229][ T7422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.968245][ T7422] usb 1-1: Product: syz [ 436.968255][ T7422] usb 1-1: Manufacturer: syz [ 436.968266][ T7422] usb 1-1: SerialNumber: syz [ 438.062784][ T7422] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 438.062832][ T7422] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 438.062849][ T7422] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 438.125659][ T7422] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 438.177722][ T7422] usb 1-1: USB disconnect, device number 44 [ 438.442976][ T9646] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 438.646830][ T9650] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1286'. [ 438.666069][ T9650] vivid-001: disconnect [ 439.057879][ T50] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 439.851273][ T50] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 439.851306][ T50] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 439.851327][ T50] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 439.851347][ T50] usb 3-1: config 220 has no interface number 2 [ 439.851461][ T50] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 439.851491][ T50] usb 3-1: config 220 interface 0 has no altsetting 0 [ 439.851518][ T50] usb 3-1: config 220 interface 76 has no altsetting 0 [ 439.851538][ T50] usb 3-1: config 220 interface 1 has no altsetting 0 [ 439.854999][ T50] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 439.855030][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.855052][ T50] usb 3-1: Product: syz [ 439.855068][ T50] usb 3-1: Manufacturer: syz [ 439.855084][ T50] usb 3-1: SerialNumber: syz [ 440.128794][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'. [ 440.211433][ T9659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.212016][ T9659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.430605][ T50] usb 3-1: selecting invalid altsetting 0 [ 440.443364][ T50] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 440.443408][ T50] uvcvideo 3-1:220.0: No valid video chain found. [ 440.556548][ T50] usb 3-1: selecting invalid altsetting 0 [ 440.556594][ T50] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 440.599690][ T50] usb 3-1: USB disconnect, device number 35 [ 441.054031][ T9685] FAULT_INJECTION: forcing a failure. [ 441.054031][ T9685] name failslab, interval 1, probability 0, space 0, times 0 [ 441.054146][ T9685] CPU: 0 UID: 0 PID: 9685 Comm: syz.1.1298 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 441.054174][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.054195][ T9685] Call Trace: [ 441.054205][ T9685] [ 441.054216][ T9685] dump_stack_lvl+0x189/0x250 [ 441.054256][ T9685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.054332][ T9685] should_fail_ex+0x46c/0x600 [ 441.054374][ T9685] should_failslab+0xa8/0x100 [ 441.054418][ T9685] __kmalloc_cache_noprof+0x84/0x6d0 [ 441.054451][ T9685] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 441.054478][ T9685] ? __vmalloc_noprof+0xd2/0x120 [ 441.054507][ T9685] ? bpf_prog_alloc_no_stats+0xdb/0x4d0 [ 441.054540][ T9685] bpf_prog_alloc_no_stats+0xdb/0x4d0 [ 441.054573][ T9685] bpf_prog_alloc+0x3c/0x1a0 [ 441.054603][ T9685] bpf_prog_load+0x735/0x1a10 [ 441.054645][ T9685] ? __pfx_bpf_prog_load+0x10/0x10 [ 441.054698][ T9685] ? bpf_lsm_bpf+0x9/0x20 [ 441.054717][ T9685] ? security_bpf+0x7e/0x300 [ 441.054743][ T9685] __sys_bpf+0x507/0x860 [ 441.054772][ T9685] ? __pfx___sys_bpf+0x10/0x10 [ 441.054795][ T9685] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 441.054838][ T9685] ? ksys_write+0x230/0x260 [ 441.054884][ T9685] __x64_sys_bpf+0x7c/0x90 [ 441.054908][ T9685] do_syscall_64+0xfa/0xf80 [ 441.054937][ T9685] ? rcu_is_watching+0x15/0xb0 [ 441.054959][ T9685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.054982][ T9685] ? clear_bhb_loop+0x60/0xb0 [ 441.055010][ T9685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.055032][ T9685] RIP: 0033:0x7ff06067f749 [ 441.055053][ T9685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.055074][ T9685] RSP: 002b:00007ff05e89c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.055098][ T9685] RAX: ffffffffffffffda RBX: 00007ff0608d6180 RCX: 00007ff06067f749 [ 441.055116][ T9685] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 441.055131][ T9685] RBP: 00007ff05e89c090 R08: 0000000000000000 R09: 0000000000000000 [ 441.055146][ T9685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.055160][ T9685] R13: 00007ff0608d6218 R14: 00007ff0608d6180 R15: 00007ffcb3729178 [ 441.055198][ T9685] [ 442.035753][ T9653] vivid-001: reconnect [ 442.207364][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 442.226034][ T9697] binder_alloc: 9696: binder_alloc_buf, no vma [ 442.227997][ T9697] binder: 9696:9697 ioctl c0306201 0 returned -14 [ 442.228384][ T9697] binder: 9696:9697 ioctl c0306201 0 returned -14 [ 442.358398][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 442.364779][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 442.365860][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 442.365895][ T10] usb 2-1: can't read configurations, error -71 [ 444.921585][ T5982] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 445.521764][ T5982] usb 4-1: Using ep0 maxpacket: 8 [ 445.555837][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.558306][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.809401][ T5982] usb 4-1: device descriptor read/all, error -71 [ 449.376416][ T9752] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 449.734976][ T37] kauditd_printk_skb: 113 callbacks suppressed [ 449.734998][ T37] audit: type=1326 audit(1765046885.700:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9761 comm="syz.2.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 449.735297][ T37] audit: type=1326 audit(1765046885.700:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9761 comm="syz.2.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 449.735618][ T37] audit: type=1326 audit(1765046885.700:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9761 comm="syz.2.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 449.736084][ T37] audit: type=1326 audit(1765046885.700:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9761 comm="syz.2.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 449.736418][ T37] audit: type=1326 audit(1765046885.700:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9761 comm="syz.2.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 449.736769][ T37] audit: type=1326 audit(1765046885.700:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9761 comm="syz.2.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 449.737058][ T37] audit: type=1326 audit(1765046885.700:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9761 comm="syz.2.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 449.737434][ T37] audit: type=1326 audit(1765046885.710:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9761 comm="syz.2.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 449.737822][ T37] audit: type=1326 audit(1765046885.710:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9761 comm="syz.2.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 449.738150][ T37] audit: type=1326 audit(1765046885.710:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9761 comm="syz.2.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 449.847481][ T5982] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 450.007452][ T5982] usb 6-1: Using ep0 maxpacket: 32 [ 450.011872][ T5982] usb 6-1: config 0 has an invalid interface number: 206 but max is 1 [ 450.011919][ T5982] usb 6-1: config 0 has no interface number 1 [ 450.011985][ T5982] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 450.012008][ T5982] usb 6-1: config 0 interface 206 has no altsetting 0 [ 450.019487][ T5982] usb 6-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 450.019526][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.019552][ T5982] usb 6-1: Product: syz [ 450.019571][ T5982] usb 6-1: Manufacturer: syz [ 450.019597][ T5982] usb 6-1: SerialNumber: syz [ 450.093931][ T5982] usb 6-1: config 0 descriptor?? [ 451.634077][ T9787] FAULT_INJECTION: forcing a failure. [ 451.634077][ T9787] name failslab, interval 1, probability 0, space 0, times 0 [ 451.634118][ T9787] CPU: 0 UID: 0 PID: 9787 Comm: syz.3.1336 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 451.634146][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.634162][ T9787] Call Trace: [ 451.634171][ T9787] [ 451.634182][ T9787] dump_stack_lvl+0x189/0x250 [ 451.634220][ T9787] ? __pfx____ratelimit+0x10/0x10 [ 451.634250][ T9787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.634281][ T9787] ? __pfx__printk+0x10/0x10 [ 451.634323][ T9787] should_fail_ex+0x46c/0x600 [ 451.634368][ T9787] should_failslab+0xa8/0x100 [ 451.634409][ T9787] __kmalloc_noprof+0xe0/0x7e0 [ 451.634443][ T9787] ? nsim_fib_event_nb+0x29d/0x10b0 [ 451.634465][ T9787] ? nsim_fib_event_nb+0x18a/0x10b0 [ 451.634495][ T9787] nsim_fib_event_nb+0x29d/0x10b0 [ 451.634534][ T9787] notifier_call_chain+0x19d/0x3a0 [ 451.634572][ T9787] ? atomic_notifier_call_chain+0x26/0x180 [ 451.634608][ T9787] atomic_notifier_call_chain+0xda/0x180 [ 451.634644][ T9787] call_fib_notifiers+0x31/0x60 [ 451.634670][ T9787] fib6_del+0x104d/0x1550 [ 451.634701][ T9787] ? fib6_del+0x5a1/0x1550 [ 451.634756][ T9787] ? __pfx_fib6_del+0x10/0x10 [ 451.634779][ T9787] ? rcu_is_watching+0x15/0xb0 [ 451.634805][ T9787] ? rt_spin_lock+0x1f4/0x3e0 [ 451.634847][ T9787] ? __ip6_del_rt+0x8b/0x1a0 [ 451.634877][ T9787] __ip6_del_rt+0xab/0x1a0 [ 451.634909][ T9787] ip6_del_rt+0xb3/0x100 [ 451.634946][ T9787] ? __pfx_ip6_del_rt+0x10/0x10 [ 451.634978][ T9787] ? addrconf_leave_solict+0x110/0x190 [ 451.635026][ T9787] ? rt_spin_unlock+0x161/0x200 [ 451.635053][ T9787] __ipv6_dev_ac_dec+0x5bf/0x690 [ 451.635078][ T9787] ? __ipv6_dev_ac_dec+0x2b/0x690 [ 451.635114][ T9787] __ipv6_sock_ac_close+0x24e/0x430 [ 451.635146][ T9787] inet6_release+0x4f/0x70 [ 451.635182][ T9787] sock_close+0xc3/0x240 [ 451.635211][ T9787] ? __pfx_sock_close+0x10/0x10 [ 451.635239][ T9787] __fput+0x45b/0xa80 [ 451.635282][ T9787] fput_close_sync+0x113/0x220 [ 451.635309][ T9787] ? __pfx_fput_close_sync+0x10/0x10 [ 451.635352][ T9787] __x64_sys_close+0x7f/0x110 [ 451.635381][ T9787] do_syscall_64+0xfa/0xf80 [ 451.635413][ T9787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.635450][ T9787] ? clear_bhb_loop+0x60/0xb0 [ 451.635495][ T9787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.635518][ T9787] RIP: 0033:0x7fec11dff749 [ 451.635539][ T9787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.635559][ T9787] RSP: 002b:00007fec1005e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 451.635584][ T9787] RAX: ffffffffffffffda RBX: 00007fec12055fa0 RCX: 00007fec11dff749 [ 451.635601][ T9787] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 451.635615][ T9787] RBP: 00007fec1005e090 R08: 0000000000000000 R09: 0000000000000000 [ 451.635630][ T9787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.635644][ T9787] R13: 00007fec12056038 R14: 00007fec12055fa0 R15: 00007ffde876edf8 [ 451.635685][ T9787] [ 451.715090][ T9789] FAULT_INJECTION: forcing a failure. [ 451.715090][ T9789] name failslab, interval 1, probability 0, space 0, times 0 [ 451.715136][ T9789] CPU: 0 UID: 0 PID: 9789 Comm: syz.0.1335 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 451.715165][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.715183][ T9789] Call Trace: [ 451.715192][ T9789] [ 451.715203][ T9789] dump_stack_lvl+0x189/0x250 [ 451.715242][ T9789] ? __pfx____ratelimit+0x10/0x10 [ 451.715274][ T9789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.715314][ T9789] ? __pfx__printk+0x10/0x10 [ 451.715349][ T9789] ? __pfx___might_resched+0x10/0x10 [ 451.715373][ T9789] ? fs_reclaim_acquire+0x7d/0x100 [ 451.715418][ T9789] should_fail_ex+0x46c/0x600 [ 451.715461][ T9789] should_failslab+0xa8/0x100 [ 451.715503][ T9789] __kmalloc_noprof+0xe0/0x7e0 [ 451.715538][ T9789] ? sock_kmalloc+0xd6/0x160 [ 451.715573][ T9789] sock_kmalloc+0xd6/0x160 [ 451.715602][ T9789] ____sys_sendmsg+0x1b5/0x810 [ 451.715633][ T9789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.715670][ T9789] ? import_iovec+0x74/0xa0 [ 451.715711][ T9789] ___sys_sendmsg+0x21f/0x2a0 [ 451.715745][ T9789] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.715766][ T9789] ? __lock_acquire+0x6b6/0x2cf0 [ 451.715860][ T9789] ? __might_fault+0xb0/0x130 [ 451.715901][ T9789] __sys_sendmmsg+0x22d/0x430 [ 451.715933][ T9789] ? __pfx___sys_sendmmsg+0x10/0x10 [ 451.715973][ T9789] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 451.716017][ T9789] ? ksys_write+0x230/0x260 [ 451.716055][ T9789] ? __pfx_ksys_write+0x10/0x10 [ 451.716098][ T9789] __x64_sys_sendmmsg+0xa0/0xc0 [ 451.716124][ T9789] do_syscall_64+0xfa/0xf80 [ 451.716159][ T9789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.716185][ T9789] ? clear_bhb_loop+0x60/0xb0 [ 451.716215][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.716241][ T9789] RIP: 0033:0x7f95a968f749 [ 451.716262][ T9789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.716284][ T9789] RSP: 002b:00007f95a78ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 451.716312][ T9789] RAX: ffffffffffffffda RBX: 00007f95a98e5fa0 RCX: 00007f95a968f749 [ 451.716331][ T9789] RDX: 0000000000000002 RSI: 0000200000000980 RDI: 0000000000000003 [ 451.716348][ T9789] RBP: 00007f95a78ee090 R08: 0000000000000000 R09: 0000000000000000 [ 451.716365][ T9789] R10: 000000000000c044 R11: 0000000000000246 R12: 0000000000000002 [ 451.716379][ T9789] R13: 00007f95a98e6038 R14: 00007f95a98e5fa0 R15: 00007ffcb0ffb638 [ 451.716421][ T9789] [ 451.968905][ T7422] usb 6-1: USB disconnect, device number 19 [ 452.927938][ T10] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 453.269899][ T10] usb 1-1: config index 0 descriptor too short (expected 69, got 36) [ 453.269934][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.303007][ T10] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 453.303042][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.303066][ T10] usb 1-1: Product: syz [ 453.303082][ T10] usb 1-1: Manufacturer: syz [ 453.303098][ T10] usb 1-1: SerialNumber: syz [ 453.346820][ T10] usb 1-1: config 0 descriptor?? [ 453.376423][ T10] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 453.878261][ T10] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 453.878378][ T10] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 453.913180][ T10] usb 1-1: USB disconnect, device number 45 [ 454.007709][ T50] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 454.157315][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 454.160193][ T50] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 454.160240][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 454.160273][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 454.160323][ T50] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 454.160350][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.683582][ T50] usb 6-1: config 0 descriptor?? [ 455.346997][ T9807] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 455.365522][ T50] hub 6-1:0.0: USB hub found [ 455.417295][ T31] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 455.492571][ T9836] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 455.857415][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 455.866771][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 455.866807][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 455.866892][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 455.866939][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 455.866965][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.944230][ T31] usb 2-1: config 0 descriptor?? [ 455.953939][ T9822] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 455.978731][ T9848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.985059][ T9848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.987393][ T31] hub 2-1:0.0: USB hub found [ 455.988338][ T50] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 456.161998][ T50] usbhid 6-1:0.0: can't add hid device: -71 [ 456.162257][ T50] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 456.229452][ T31] hub 2-1:0.0: 1 port detected [ 456.274461][ T50] usb 6-1: USB disconnect, device number 20 [ 456.439138][ T31] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 456.439170][ T31] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 456.468524][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 456.468662][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 456.529778][ T31] usb 2-1: USB disconnect, device number 53 [ 456.756496][ T9860] fuse: Bad value for 'group_id' [ 456.756556][ T9860] fuse: Bad value for 'group_id' [ 457.217931][ T5935] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 457.377491][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 457.580918][ T5935] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 457.580954][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.580978][ T5935] usb 4-1: Product: syz [ 457.580995][ T5935] usb 4-1: Manufacturer: syz [ 457.581011][ T5935] usb 4-1: SerialNumber: syz [ 457.639422][ T5935] usb 4-1: config 0 descriptor?? [ 457.672170][ T5935] gspca_main: sq905-2.14.0 probing 2770:9120 [ 458.000604][ T37] kauditd_printk_skb: 131 callbacks suppressed [ 458.000626][ T37] audit: type=1326 audit(1765046893.970:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 458.000682][ T37] audit: type=1326 audit(1765046893.970:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 458.000732][ T37] audit: type=1326 audit(1765046893.970:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 458.000781][ T37] audit: type=1326 audit(1765046893.970:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 458.000831][ T37] audit: type=1326 audit(1765046893.970:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 458.000883][ T37] audit: type=1326 audit(1765046893.970:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 458.000933][ T37] audit: type=1326 audit(1765046893.970:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 458.000982][ T37] audit: type=1326 audit(1765046893.970:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 458.001187][ T37] audit: type=1326 audit(1765046893.970:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 458.001492][ T37] audit: type=1326 audit(1765046893.970:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 458.109455][ T9853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.110256][ T9853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.044109][ T5935] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 459.044230][ T5935] sq905 4-1:0.0: probe with driver sq905 failed with error -110 [ 459.237994][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1364'. [ 459.240155][ T9877] fuse: Unknown parameter 'appraise' [ 459.471639][ T31] usb 4-1: USB disconnect, device number 17 [ 459.767796][ T7422] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 459.919498][ T7422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.919536][ T7422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.919579][ T7422] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 459.919604][ T7422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.925476][ T7422] usb 3-1: config 0 descriptor?? [ 460.037289][ T5935] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 460.390144][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 461.268585][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.268622][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 461.268649][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 461.268690][ T5935] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 461.268711][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.350391][ T5935] usb 2-1: config 0 descriptor?? [ 461.351646][ T9887] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 461.372064][ T7422] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 461.372641][ T5935] hub 2-1:0.0: USB hub found [ 461.390403][ T7422] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 461.472232][ T7422] arvo 0003:1E7D:30D4.0008: couldn't init struct arvo_device [ 461.472290][ T7422] arvo 0003:1E7D:30D4.0008: couldn't install keyboard [ 461.476740][ T7422] arvo 0003:1E7D:30D4.0008: probe with driver arvo failed with error -5 [ 461.973465][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.030697][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.348125][ T5935] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 462.522698][ T5935] usbhid 2-1:0.0: can't add hid device: -71 [ 462.523594][ T5935] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 462.880746][ T5935] usb 2-1: USB disconnect, device number 54 [ 463.962691][ T9926] FAULT_INJECTION: forcing a failure. [ 463.962691][ T9926] name failslab, interval 1, probability 0, space 0, times 0 [ 463.962731][ T9926] CPU: 0 UID: 0 PID: 9926 Comm: syz.3.1383 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 463.962758][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.962772][ T9926] Call Trace: [ 463.962781][ T9926] [ 463.962791][ T9926] dump_stack_lvl+0x189/0x250 [ 463.962828][ T9926] ? __pfx____ratelimit+0x10/0x10 [ 463.962856][ T9926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.962886][ T9926] ? __pfx__printk+0x10/0x10 [ 463.962916][ T9926] ? __pfx___might_resched+0x10/0x10 [ 463.962947][ T9926] should_fail_ex+0x46c/0x600 [ 463.962992][ T9926] should_failslab+0xa8/0x100 [ 463.963031][ T9926] __kmalloc_cache_noprof+0x84/0x6d0 [ 463.963065][ T9926] ? __kthread_create_on_node+0xef/0x3e0 [ 463.963095][ T9926] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 463.963123][ T9926] __kthread_create_on_node+0xef/0x3e0 [ 463.963157][ T9926] ? __pfx___kthread_create_on_node+0x10/0x10 [ 463.963184][ T9926] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 463.963224][ T9926] ? static_key_slow_inc+0x12/0x30 [ 463.963249][ T9926] ? __pfx_hlock_conflict+0x10/0x10 [ 463.963272][ T9926] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 463.963297][ T9926] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 463.963324][ T9926] kthread_create_on_node+0xdd/0x130 [ 463.963351][ T9926] ? rt_spin_lock+0x1c1/0x3e0 [ 463.963379][ T9926] ? __pfx_kthread_create_on_node+0x10/0x10 [ 463.963411][ T9926] ? rt_spin_unlock+0x150/0x200 [ 463.963446][ T9926] rxrpc_lookup_local+0xf10/0x14d0 [ 463.963485][ T9926] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 463.963513][ T9926] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 463.963536][ T9926] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 463.963568][ T9926] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 463.963605][ T9926] ? rt_spin_unlock+0x161/0x200 [ 463.963628][ T9926] ? lock_sock_nested+0x5f/0x130 [ 463.963677][ T9926] ? lock_sock_nested+0xdd/0x130 [ 463.963709][ T9926] rxrpc_sendmsg+0x399/0x710 [ 463.963738][ T9926] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 463.963763][ T9926] __sock_sendmsg+0x21c/0x270 [ 463.963795][ T9926] ____sys_sendmsg+0x508/0x810 [ 463.963825][ T9926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.963860][ T9926] ? import_iovec+0x74/0xa0 [ 463.963891][ T9926] ___sys_sendmsg+0x21f/0x2a0 [ 463.963916][ T9926] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.963983][ T9926] ? __fget_files+0x2a/0x420 [ 463.964006][ T9926] ? __fget_files+0x3a6/0x420 [ 463.964042][ T9926] __x64_sys_sendmsg+0x1a1/0x260 [ 463.964074][ T9926] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.964109][ T9926] ? __pfx_ksys_write+0x10/0x10 [ 463.964145][ T9926] ? do_syscall_64+0xbe/0xf80 [ 463.964179][ T9926] do_syscall_64+0xfa/0xf80 [ 463.964209][ T9926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.964231][ T9926] ? clear_bhb_loop+0x60/0xb0 [ 463.964260][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.964283][ T9926] RIP: 0033:0x7fec11dff749 [ 463.964304][ T9926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.964324][ T9926] RSP: 002b:00007fec1005e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.964349][ T9926] RAX: ffffffffffffffda RBX: 00007fec12055fa0 RCX: 00007fec11dff749 [ 463.964366][ T9926] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 463.964381][ T9926] RBP: 00007fec1005e090 R08: 0000000000000000 R09: 0000000000000000 [ 463.964395][ T9926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.964410][ T9926] R13: 00007fec12056038 R14: 00007fec12055fa0 R15: 00007ffde876edf8 [ 463.964448][ T9926] [ 464.493417][ T5935] usb 3-1: USB disconnect, device number 36 [ 464.794203][ T9949] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 464.846050][ T9952] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 465.896753][ T5935] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 466.050195][ T5935] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 466.050231][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.083334][ T5935] usb 2-1: config 0 descriptor?? [ 468.370397][ T9973] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1397'. [ 468.411985][ T5935] usbhid 2-1:0.0: can't add hid device: -71 [ 468.412132][ T5935] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 468.442980][ T5935] usb 2-1: USB disconnect, device number 55 [ 469.927741][ T9991] fuse: Unknown parameter '& [ 469.927741][ T9991] 0xffffffffffffffff' [ 471.415971][T10012] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 472.626236][T10026] fuse: Unknown parameter '& [ 472.626236][T10026] 0xffffffffffffffff' [ 472.767390][ T5935] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 473.750517][ T31] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 474.001353][ T5935] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 474.001388][ T5935] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 474.001410][ T5935] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 474.001432][ T5935] usb 3-1: config 220 has no interface number 2 [ 474.001524][ T5935] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 474.001554][ T5935] usb 3-1: config 220 interface 0 has no altsetting 0 [ 474.001575][ T5935] usb 3-1: config 220 interface 76 has no altsetting 0 [ 474.001596][ T5935] usb 3-1: config 220 interface 1 has no altsetting 0 [ 474.004231][ T5935] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 474.004263][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.004285][ T5935] usb 3-1: Product: syz [ 474.004302][ T5935] usb 3-1: Manufacturer: syz [ 474.004319][ T5935] usb 3-1: SerialNumber: syz [ 474.101606][ T37] kauditd_printk_skb: 50 callbacks suppressed [ 474.101631][ T37] audit: type=1326 audit(1765046910.070:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10039 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 474.101691][ T37] audit: type=1326 audit(1765046910.070:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10039 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 474.101750][ T37] audit: type=1326 audit(1765046910.070:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10039 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 474.101807][ T37] audit: type=1326 audit(1765046910.070:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10039 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 474.101861][ T37] audit: type=1326 audit(1765046910.070:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10039 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 474.101910][ T37] audit: type=1326 audit(1765046910.070:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10039 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 474.101963][ T37] audit: type=1326 audit(1765046910.070:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10039 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 474.102346][ T37] audit: type=1326 audit(1765046910.070:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10039 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 474.105889][ T37] audit: type=1326 audit(1765046910.070:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10039 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 474.106692][ T37] audit: type=1326 audit(1765046910.070:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10039 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff06067f749 code=0x7ffc0000 [ 474.110026][ T31] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 474.110050][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.379021][ T31] usb 6-1: config 0 descriptor?? [ 474.708677][T10017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.709261][T10017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.063425][ T5935] usb 3-1: selecting invalid altsetting 0 [ 476.092178][ T5935] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 476.092220][ T5935] uvcvideo 3-1:220.0: No valid video chain found. [ 476.140102][ T5935] usb 3-1: selecting invalid altsetting 0 [ 476.142236][ T5935] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 476.165693][ T5935] usb 3-1: USB disconnect, device number 37 [ 476.219094][ T31] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 476.219655][ T31] [drm:udl_init] *ERROR* Selecting channel failed [ 476.256604][ T31] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 476.256633][ T31] [drm] Initialized udl on minor 2 [ 476.273983][ T31] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 476.275467][ T31] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 476.276471][ T50] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 476.292664][T10057] fuse: Unknown parameter '& [ 476.292664][T10057] 0xffffffffffffffff' [ 476.309168][ T50] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 476.309444][ T50] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 476.334478][ T31] usb 6-1: USB disconnect, device number 21 [ 476.583752][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1438'. [ 476.691494][T10067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.828129][T10066] binder: BINDER_SET_CONTEXT_MGR already set [ 476.828146][T10066] binder: 10064:10066 ioctl 4018620d 200000004a80 returned -16 [ 484.240409][T10091] fuse: Bad value for 'fd' [ 488.195756][T10097] fuse: Unknown parameter '& [ 488.195756][T10097] 0xffffffffffffffff' [ 488.217232][ T31] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 488.485308][T10103] FAULT_INJECTION: forcing a failure. [ 488.485308][T10103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.485346][T10103] CPU: 0 UID: 0 PID: 10103 Comm: syz.1.1451 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 488.485370][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 488.485384][T10103] Call Trace: [ 488.485393][T10103] [ 488.485402][T10103] dump_stack_lvl+0x189/0x250 [ 488.485437][T10103] ? __pfx____ratelimit+0x10/0x10 [ 488.485463][T10103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.485491][T10103] ? __pfx__printk+0x10/0x10 [ 488.485523][T10103] should_fail_ex+0x46c/0x600 [ 488.485571][T10103] _copy_to_user+0x31/0xb0 [ 488.485598][T10103] video_usercopy+0xd93/0x13f0 [ 488.485631][T10103] ? __pfx___video_do_ioctl+0x10/0x10 [ 488.485650][T10103] ? __pfx_video_usercopy+0x10/0x10 [ 488.485682][T10103] ? smack_file_ioctl+0x2ac/0x340 [ 488.485730][T10103] ? __fget_files+0x3a6/0x420 [ 488.485757][T10103] v4l2_ioctl+0x190/0x1e0 [ 488.485791][T10103] ? __pfx_v4l2_ioctl+0x10/0x10 [ 488.485823][T10103] __se_sys_ioctl+0xff/0x170 [ 488.485854][T10103] do_syscall_64+0xfa/0xf80 [ 488.485882][T10103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.485903][T10103] ? clear_bhb_loop+0x60/0xb0 [ 488.485929][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.485950][T10103] RIP: 0033:0x7ff06067f749 [ 488.485970][T10103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.485989][T10103] RSP: 002b:00007ff05e8de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.486013][T10103] RAX: ffffffffffffffda RBX: 00007ff0608d5fa0 RCX: 00007ff06067f749 [ 488.486030][T10103] RDX: 00002000000011c0 RSI: 00000000c0405602 RDI: 0000000000000003 [ 488.486045][T10103] RBP: 00007ff05e8de090 R08: 0000000000000000 R09: 0000000000000000 [ 488.486059][T10103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.486072][T10103] R13: 00007ff0608d6038 R14: 00007ff0608d5fa0 R15: 00007ffcb3729178 [ 488.486109][T10103] [ 488.555394][T10108] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 488.873977][T10118] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 489.107242][ T50] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 489.261199][T10141] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 489.274688][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 489.276844][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.276902][ T50] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 489.276927][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.315481][ T50] usb 3-1: config 0 descriptor?? [ 489.328606][ T50] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 489.593236][T10153] fuse: Unknown parameter 'grou00000000000000000000' [ 490.427465][ T50] gspca_vc032x: reg_w err -110 [ 490.427574][ T50] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 492.182070][ T9] usb 3-1: USB disconnect, device number 38 [ 492.367331][ T5949] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 492.453892][T10194] fuse: Invalid rootmode [ 492.957589][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 493.253466][ T5949] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.253507][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 493.253539][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 493.253589][ T5949] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 493.253616][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.351850][ T5949] usb 2-1: config 0 descriptor?? [ 493.398273][T10179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 493.456271][ T5949] hub 2-1:0.0: USB hub found [ 493.631334][T10202] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 493.867335][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 493.867698][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 493.983108][T10179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.985919][T10179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.004137][ T5949] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 495.199979][ T5949] usbhid 2-1:0.0: can't add hid device: -71 [ 495.200130][ T5949] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 495.202353][ T9] usb 6-1: device descriptor read/64, error -32 [ 495.264495][ T5949] usb 2-1: USB disconnect, device number 56 [ 495.437326][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 496.521750][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 496.523912][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.523976][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 496.524003][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.567533][ T9] usb 6-1: config 0 descriptor?? [ 496.669996][ T9] usb 6-1: can't set config #0, error -71 [ 496.675470][ T9] usb 6-1: USB disconnect, device number 24 [ 496.717346][ T5949] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 496.789318][T10240] fuse: Unknown parameter '& [ 496.789318][T10240] 0xffffffffffffffff' [ 496.867534][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 496.870735][ T5949] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 496.870774][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 496.870804][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 496.870861][ T5949] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 496.870888][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.935995][ T5949] usb 2-1: config 0 descriptor?? [ 496.939364][T10224] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 496.954559][ T5949] hub 2-1:0.0: USB hub found [ 497.030929][ T50] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 497.057291][ T31] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 497.151187][T10224] loop2: detected capacity change from 0 to 7 [ 497.168918][T10224] loop2: [ 497.168960][T10224] loop2: partition table partially beyond EOD, truncated [ 497.190845][ T5949] hub 2-1:0.0: 1 port detected [ 497.193075][ T50] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 497.193105][ T50] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 497.193125][ T50] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 497.193148][ T50] usb 3-1: config 220 has no interface number 2 [ 497.193258][ T50] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 497.193289][ T50] usb 3-1: config 220 interface 0 has no altsetting 0 [ 497.193303][ T50] usb 3-1: config 220 interface 76 has no altsetting 0 [ 497.193325][ T50] usb 3-1: config 220 interface 1 has no altsetting 0 [ 497.198606][ T50] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 497.198639][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.198664][ T50] usb 3-1: Product: syz [ 497.198681][ T50] usb 3-1: Manufacturer: syz [ 497.198699][ T50] usb 3-1: SerialNumber: syz [ 497.318587][ T31] usb 1-1: No LPM exit latency info found, disabling LPM. [ 497.321238][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 497.321330][ T31] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 497.321352][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 497.337317][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 497.337353][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.337378][ T31] usb 1-1: Product: ဉ [ 497.337395][ T31] usb 1-1: Manufacturer: ᰁ [ 497.338185][ T31] usb 1-1: SerialNumber: ည [ 497.556210][T10237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.559091][T10237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.703149][ T5935] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 497.739260][ T50] usb 3-1: selecting invalid altsetting 0 [ 497.743699][ T50] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 497.743736][ T50] uvcvideo 3-1:220.0: No valid video chain found. [ 497.847996][ T50] usb 3-1: selecting invalid altsetting 0 [ 497.848028][ T50] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 497.860969][ T50] usb 3-1: USB disconnect, device number 39 [ 497.882001][ T5935] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 497.882026][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.898780][ T31] usb 1-1: 0:2 : does not exist [ 497.953544][ T5935] usb 6-1: config 0 descriptor?? [ 498.083085][ T31] usb 1-1: USB disconnect, device number 46 [ 498.187233][ T5935] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 498.281332][ T5949] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 498.395291][T10254] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1514'. [ 498.408262][ T5949] usb 2-1: reset high-speed USB device number 57 using dummy_hcd [ 498.444815][T10254] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.465739][T10272] fuse: Unknown parameter '& [ 498.465739][T10272] 0xffffffffffffffff' [ 498.476160][T10254] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.529671][T10224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.530666][T10224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.929183][ T5935] [drm:udl_init] *ERROR* Selecting channel failed [ 500.011447][ T9] usb 2-1: USB disconnect, device number 57 [ 500.140565][ T5935] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 500.140593][ T5935] [drm] Initialized udl on minor 2 [ 500.152673][ T5935] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 500.153669][ T5935] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 500.155134][ T31] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 500.155401][ T31] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 500.167763][ T5935] usb 6-1: USB disconnect, device number 25 [ 500.321485][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'. [ 501.640256][T10295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.747632][T10314] Debayer B: ================= START STATUS ================= [ 501.747659][T10314] Debayer B: Debayer Mean Window Size: 3 [ 501.747689][T10314] Debayer B: ================== END STATUS ================== [ 502.048460][ T5982] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 506.639636][ T5982] usb 6-1: device descriptor read/all, error -71 [ 507.869015][ T31] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 510.691351][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.691433][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.895516][ T31] usb 2-1: device descriptor read/all, error -71 [ 511.589719][ T5935] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 512.195601][ T5935] usb 1-1: config index 0 descriptor too short (expected 65028, got 72) [ 512.206291][ T5935] usb 1-1: config index 1 descriptor too short (expected 65028, got 72) [ 512.302213][ T5935] usb 1-1: config index 2 descriptor too short (expected 65028, got 72) [ 512.357788][ T5935] usb 1-1: config index 3 descriptor too short (expected 65028, got 72) [ 512.359897][ T5935] usb 1-1: config index 4 descriptor too short (expected 65028, got 72) [ 512.389872][ T5935] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 512.389903][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.389925][ T5935] usb 1-1: Product: syz [ 512.389940][ T5935] usb 1-1: Manufacturer: syz [ 512.389955][ T5935] usb 1-1: SerialNumber: syz [ 512.449564][ T5935] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 512.496089][ T31] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 512.509697][T10376] Debayer B: ================= START STATUS ================= [ 512.509722][T10376] Debayer B: Debayer Mean Window Size: 3 [ 512.509750][T10376] Debayer B: ================== END STATUS ================== [ 512.897212][ T5982] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 513.510345][ T5982] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 513.510380][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.510402][ T5982] usb 2-1: Product: syz [ 513.510418][ T5982] usb 2-1: Manufacturer: syz [ 513.510434][ T5982] usb 2-1: SerialNumber: syz [ 513.617545][ T31] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 513.617932][ T31] ath9k_htc: Failed to initialize the device [ 513.684314][ T31] usb 1-1: ath9k_htc: USB layer deinitialized [ 513.761295][ T5982] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 513.761358][ T5982] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 513.761381][ T5982] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 513.812757][ T5982] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 513.851832][ T5982] usb 2-1: USB disconnect, device number 60 [ 514.132966][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 514.228161][ T31] usb 1-1: USB disconnect, device number 47 [ 514.235138][T10401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.707256][ T31] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 514.857194][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 514.861334][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 514.861372][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 514.861403][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 514.861451][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 514.861476][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.926725][ T31] usb 1-1: config 0 descriptor?? [ 514.935076][T10409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 514.960993][ T31] hub 1-1:0.0: USB hub found [ 515.097352][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 515.154600][T10409] loop2: detected capacity change from 0 to 7 [ 515.158014][T10409] loop2: [ 515.158051][T10409] loop2: partition table partially beyond EOD, truncated [ 515.164600][ T31] hub 1-1:0.0: 1 port detected [ 515.257584][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1576'. [ 515.268556][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.268597][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.268647][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 515.268676][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.333943][ T10] usb 3-1: config 0 descriptor?? [ 515.601236][T10434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.746489][ T10] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 515.868811][ T10] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 515.945587][ T10] arvo 0003:1E7D:30D4.0009: couldn't init struct arvo_device [ 515.945652][ T10] arvo 0003:1E7D:30D4.0009: couldn't install keyboard [ 515.948983][ T10] arvo 0003:1E7D:30D4.0009: probe with driver arvo failed with error -5 [ 516.600911][ T31] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 516.640508][T10409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.641073][T10409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.724133][ T37] kauditd_printk_skb: 54 callbacks suppressed [ 516.724155][ T37] audit: type=1326 audit(1765047208.686:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9a8f749 code=0x7ffc0000 [ 516.724492][ T37] audit: type=1326 audit(1765047208.686:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9a8f749 code=0x7ffc0000 [ 516.724856][ T37] audit: type=1326 audit(1765047208.686:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9a8f749 code=0x7ffc0000 [ 516.732838][ T37] audit: type=1326 audit(1765047208.686:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9a8f749 code=0x7ffc0000 [ 516.733257][ T37] audit: type=1326 audit(1765047208.696:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f1ef9a8f749 code=0x7ffc0000 [ 516.733660][ T37] audit: type=1326 audit(1765047208.696:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9a8f749 code=0x7ffc0000 [ 516.733984][ T37] audit: type=1326 audit(1765047208.696:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9a8f749 code=0x7ffc0000 [ 516.734749][ T37] audit: type=1326 audit(1765047208.696:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9a8f749 code=0x7ffc0000 [ 516.734798][ T37] audit: type=1326 audit(1765047208.696:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9a8f749 code=0x7ffc0000 [ 516.735243][ T37] audit: type=1326 audit(1765047208.696:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.5.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ef9a8f749 code=0x7ffc0000 [ 516.918042][ T31] usb 1-1: USB disconnect, device number 48 [ 518.138299][ T5935] usb 3-1: USB disconnect, device number 40 [ 525.167311][ T5982] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 525.330014][ T5982] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 525.330048][ T5982] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 525.330070][ T5982] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 525.330091][ T5982] usb 6-1: config 220 has no interface number 2 [ 525.330175][ T5982] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 525.330205][ T5982] usb 6-1: config 220 interface 0 has no altsetting 0 [ 525.330224][ T5982] usb 6-1: config 220 interface 76 has no altsetting 0 [ 525.330244][ T5982] usb 6-1: config 220 interface 1 has no altsetting 0 [ 525.333591][ T5982] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 525.333625][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.333648][ T5982] usb 6-1: Product: syz [ 525.333664][ T5982] usb 6-1: Manufacturer: syz [ 525.333680][ T5982] usb 6-1: SerialNumber: syz [ 525.670744][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.671334][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.716520][ T5982] usb 6-1: selecting invalid altsetting 0 [ 525.717203][ T5982] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 525.717235][ T5982] uvcvideo 6-1:220.0: No valid video chain found. [ 525.753726][ T5982] usb 6-1: selecting invalid altsetting 0 [ 525.753766][ T5982] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 525.787434][ T5982] usb 6-1: USB disconnect, device number 28 [ 525.883752][T10523] netlink: 408 bytes leftover after parsing attributes in process `syz.0.1606'. [ 526.127285][ T7709] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 526.279805][ T7709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.279845][ T7709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.279870][ T7709] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 526.279916][ T7709] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 526.279941][ T7709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.285688][ T7709] usb 1-1: config 0 descriptor?? [ 526.990878][ T7709] usbhid 1-1:0.0: can't add hid device: -71 [ 526.991009][ T7709] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 527.047750][ T7709] usb 1-1: USB disconnect, device number 49 [ 527.358251][T10556] fuse: Unknown parameter 'user_id00000000000000000000' [ 527.492327][T10554] netlink: 408 bytes leftover after parsing attributes in process `syz.2.1618'. [ 528.615021][ T50] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 529.316175][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.316215][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.316242][ T50] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 529.316289][ T50] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.316315][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.477000][ T50] usb 3-1: config 0 descriptor?? [ 530.822699][ T50] usbhid 3-1:0.0: can't add hid device: -71 [ 530.822836][ T50] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 530.847400][ T50] usb 3-1: USB disconnect, device number 41 [ 531.180181][T10607] Debayer B: ================= START STATUS ================= [ 531.180204][T10607] Debayer B: Debayer Mean Window Size: 3 [ 531.180253][T10607] Debayer B: ================== END STATUS ================== [ 531.207379][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 531.368854][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 531.372271][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 531.372310][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 531.372342][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 531.372391][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 531.372416][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.427244][ T5949] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 531.448995][ T10] usb 6-1: config 0 descriptor?? [ 531.450024][T10599] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 531.453502][ T10] hub 6-1:0.0: USB hub found [ 531.626171][ T5949] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 531.626267][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.626292][ T5949] usb 1-1: Product: syz [ 531.626308][ T5949] usb 1-1: Manufacturer: syz [ 531.626325][ T5949] usb 1-1: SerialNumber: syz [ 531.664142][ T10] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 531.874747][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 531.875619][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 532.138951][ T10] usb 6-1: USB disconnect, device number 29 [ 532.375710][ T5949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 532.375775][ T5949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 532.375798][ T5949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 532.429493][ T5949] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 532.488276][ T5949] usb 1-1: USB disconnect, device number 50 [ 532.620373][T10631] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1647'. [ 533.425482][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 533.425531][ T37] audit: type=1326 audit(1765047225.386:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10636 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 533.485808][ T37] audit: type=1326 audit(1765047225.446:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10636 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 533.824890][ T37] audit: type=1326 audit(1765047225.486:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10636 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 533.930375][ T37] audit: type=1326 audit(1765047225.896:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10636 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 533.930434][ T37] audit: type=1326 audit(1765047225.896:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10636 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e445f749 code=0x7ffc0000 [ 534.529828][ T5982] hid-generic 0048:0006:0007.000A: unknown main item tag 0x0 [ 534.529872][ T5982] hid-generic 0048:0006:0007.000A: unknown main item tag 0x0 [ 534.529902][ T5982] hid-generic 0048:0006:0007.000A: unknown main item tag 0x0 [ 534.529931][ T5982] hid-generic 0048:0006:0007.000A: unknown main item tag 0x0 [ 534.529960][ T5982] hid-generic 0048:0006:0007.000A: unknown main item tag 0x0 [ 534.529989][ T5982] hid-generic 0048:0006:0007.000A: unknown main item tag 0x0 [ 534.530018][ T5982] hid-generic 0048:0006:0007.000A: unknown main item tag 0x0 [ 534.530046][ T5982] hid-generic 0048:0006:0007.000A: unknown main item tag 0x0 [ 534.530074][ T5982] hid-generic 0048:0006:0007.000A: unknown main item tag 0x0 [ 534.530102][ T5982] hid-generic 0048:0006:0007.000A: unknown main item tag 0x0 [ 534.621397][T10661] FAULT_INJECTION: forcing a failure. [ 534.621397][T10661] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.621439][T10661] CPU: 1 UID: 0 PID: 10661 Comm: syz.5.1661 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 534.621465][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 534.621481][T10661] Call Trace: [ 534.621490][T10661] [ 534.621501][T10661] dump_stack_lvl+0x189/0x250 [ 534.621538][T10661] ? __pfx____ratelimit+0x10/0x10 [ 534.621566][T10661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.621597][T10661] ? __pfx__printk+0x10/0x10 [ 534.621622][T10661] ? fs_reclaim_acquire+0x7d/0x100 [ 534.621667][T10661] should_fail_ex+0x46c/0x600 [ 534.621708][T10661] prepare_alloc_pages+0x22b/0x6c0 [ 534.621753][T10661] __alloc_frozen_pages_noprof+0x123/0x370 [ 534.621780][T10661] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 534.621817][T10661] ? mtree_range_walk+0x6aa/0x840 [ 534.621852][T10661] alloc_pages_mpol+0xd1/0x380 [ 534.621892][T10661] alloc_pages_noprof+0xcf/0x1e0 [ 534.621931][T10661] __pud_alloc+0x3a/0x470 [ 534.621970][T10661] handle_mm_fault+0xdf7/0x1330 [ 534.622011][T10661] ? handle_mm_fault+0xd1/0x1330 [ 534.622044][T10661] ? __pfx_handle_mm_fault+0x10/0x10 [ 534.622098][T10661] ? lock_mm_and_find_vma+0x9c/0x300 [ 534.622138][T10661] do_user_addr_fault+0x764/0x1380 [ 534.622187][T10661] exc_page_fault+0x82/0x100 [ 534.622220][T10661] asm_exc_page_fault+0x26/0x30 [ 534.622241][T10661] RIP: 0010:__put_user_4+0xd/0x20 [ 534.622269][T10661] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 51 04 00 90 90 90 90 90 90 90 90 90 90 [ 534.622289][T10661] RSP: 0018:ffffc900123a76d8 EFLAGS: 00050206 [ 534.622311][T10661] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000007c0 [ 534.622327][T10661] RDX: dffffc0000000000 RSI: ffffffff8cfd3ade RDI: ffffffff8b3ede60 [ 534.622344][T10661] RBP: ffffc900123a7850 R08: ffffffff820b2970 R09: ffff88802617b6b0 [ 534.622362][T10661] R10: dffffc0000000000 R11: fffffbfff1db4c2f R12: 0000000000000000 [ 534.622378][T10661] R13: ffffffff8eac56c8 R14: 1ffff92002474ee0 R15: ffff888038e3e300 [ 534.622413][T10661] ? __might_fault+0xb0/0x130 [ 534.622455][T10661] sk_ioctl+0x406/0x600 [ 534.622491][T10661] ? __pfx_sk_ioctl+0x10/0x10 [ 534.622528][T10661] ? is_bpf_text_address+0x292/0x2b0 [ 534.622557][T10661] ? is_bpf_text_address+0x26/0x2b0 [ 534.622586][T10661] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 534.622623][T10661] ? kernel_text_address+0xa5/0xe0 [ 534.622670][T10661] ? __kernel_text_address+0xd/0x40 [ 534.622703][T10661] ? unwind_get_return_address+0x4d/0x90 [ 534.622732][T10661] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 534.622770][T10661] inet_ioctl+0x416/0x4c0 [ 534.622796][T10661] ? __pfx_inet_ioctl+0x10/0x10 [ 534.622813][T10661] ? stack_trace_save+0x9c/0xe0 [ 534.622843][T10661] ? stack_depot_save_flags+0x40/0x850 [ 534.622876][T10661] ? format_decode+0xb0/0xe10 [ 534.622921][T10661] ? security_file_ioctl+0xcb/0x2d0 [ 534.622953][T10661] ? __se_sys_ioctl+0x47/0x170 [ 534.622979][T10661] ? do_syscall_64+0xfa/0xf80 [ 534.623005][T10661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.623038][T10661] sock_do_ioctl+0xdc/0x300 [ 534.623068][T10661] ? __pfx_sock_do_ioctl+0x10/0x10 [ 534.623113][T10661] sock_ioctl+0x579/0x790 [ 534.623142][T10661] ? __pfx_sock_ioctl+0x10/0x10 [ 534.623166][T10661] ? lockdep_hardirqs_on+0x98/0x140 [ 534.623204][T10661] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 534.623240][T10661] ? __pfx_sock_ioctl+0x10/0x10 [ 534.623264][T10661] do_vfs_ioctl+0xe7c/0x1440 [ 534.623293][T10661] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 534.623328][T10661] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 534.623364][T10661] ? lockdep_hardirqs_on+0x98/0x140 [ 534.623415][T10661] ? __asan_memset+0x22/0x50 [ 534.623443][T10661] ? smack_file_ioctl+0x24d/0x340 [ 534.623478][T10661] ? __pfx_smack_file_ioctl+0x10/0x10 [ 534.623521][T10661] ? __fget_files+0x3a6/0x420 [ 534.623542][T10661] ? __fget_files+0x2a/0x420 [ 534.623574][T10661] ? bpf_lsm_file_ioctl+0x9/0x20 [ 534.623611][T10661] __se_sys_ioctl+0x82/0x170 [ 534.623643][T10661] do_syscall_64+0xfa/0xf80 [ 534.623672][T10661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.623693][T10661] ? clear_bhb_loop+0x60/0xb0 [ 534.623721][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.623743][T10661] RIP: 0033:0x7f1ef9a8f749 [ 534.623761][T10661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.623780][T10661] RSP: 002b:00007f1ef7cf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.623802][T10661] RAX: ffffffffffffffda RBX: 00007f1ef9ce5fa0 RCX: 00007f1ef9a8f749 [ 534.623818][T10661] RDX: 00002000000007c0 RSI: 000000000000541b RDI: 0000000000000003 [ 534.623833][T10661] RBP: 00007f1ef7cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 534.623846][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.623860][T10661] R13: 00007f1ef9ce6038 R14: 00007f1ef9ce5fa0 R15: 00007fff33cbbac8 [ 534.623896][T10661] [ 534.752773][ T5982] hid-generic 0048:0006:0007.000A: hidraw0: HID v0.0b Device [syz1] on syz1 [ 535.222119][T10662] fido_id[10662]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 535.507892][ T50] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 536.569814][ T5888] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 536.607365][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 536.655675][ T50] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 536.655720][ T50] usb 2-1: can't read configurations, error -61 [ 536.762258][ T5888] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 536.762293][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.797975][ T50] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 536.817509][ T5888] usb 3-1: config 0 descriptor?? [ 536.947282][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 536.950641][ T50] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 536.950685][ T50] usb 2-1: can't read configurations, error -61 [ 536.951520][ T50] usb usb2-port1: attempt power cycle [ 537.032649][T10675] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 537.054648][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1666'. [ 538.251363][ T50] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 538.316651][ T50] usb 2-1: device descriptor read/8, error -71 [ 538.343294][ T5888] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 538.343916][ T5888] [drm:udl_init] *ERROR* Selecting channel failed [ 538.461807][ T5888] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 538.461839][ T5888] [drm] Initialized udl on minor 2 [ 538.463521][ T5888] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 538.464018][ T5888] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 538.495713][ T7709] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 538.496929][ T7709] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 538.514203][ T7709] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 538.526918][ T5888] usb 3-1: USB disconnect, device number 42 [ 541.164767][T10728] FAULT_INJECTION: forcing a failure. [ 541.164767][T10728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.164808][T10728] CPU: 0 UID: 0 PID: 10728 Comm: syz.5.1687 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 541.164835][T10728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.164849][T10728] Call Trace: [ 541.164858][T10728] [ 541.164868][T10728] dump_stack_lvl+0x189/0x250 [ 541.164903][T10728] ? __pfx____ratelimit+0x10/0x10 [ 541.164931][T10728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.164962][T10728] ? __pfx__printk+0x10/0x10 [ 541.164985][T10728] ? __might_fault+0xb0/0x130 [ 541.165030][T10728] should_fail_ex+0x46c/0x600 [ 541.165078][T10728] _copy_from_user+0x2d/0xb0 [ 541.165104][T10728] ___sys_sendmsg+0x158/0x2a0 [ 541.165131][T10728] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.165195][T10728] ? __fget_files+0x2a/0x420 [ 541.165218][T10728] ? __fget_files+0x3a6/0x420 [ 541.165254][T10728] __sys_sendmmsg+0x22d/0x430 [ 541.165284][T10728] ? __pfx___sys_sendmmsg+0x10/0x10 [ 541.165318][T10728] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 541.165361][T10728] ? ksys_write+0x230/0x260 [ 541.165395][T10728] ? __pfx_ksys_write+0x10/0x10 [ 541.165433][T10728] __x64_sys_sendmmsg+0xa0/0xc0 [ 541.165459][T10728] do_syscall_64+0xfa/0xf80 [ 541.165489][T10728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.165512][T10728] ? clear_bhb_loop+0x60/0xb0 [ 541.165540][T10728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.165563][T10728] RIP: 0033:0x7f1ef9a8f749 [ 541.165583][T10728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.165604][T10728] RSP: 002b:00007f1ef7cf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 541.165629][T10728] RAX: ffffffffffffffda RBX: 00007f1ef9ce5fa0 RCX: 00007f1ef9a8f749 [ 541.165646][T10728] RDX: 0000000000000003 RSI: 0000200000007240 RDI: 0000000000000003 [ 541.165660][T10728] RBP: 00007f1ef7cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 541.165675][T10728] R10: 000000000001c000 R11: 0000000000000246 R12: 0000000000000001 [ 541.165689][T10728] R13: 00007f1ef9ce6038 R14: 00007f1ef9ce5fa0 R15: 00007fff33cbbac8 [ 541.165727][T10728] [ 542.693235][ T5949] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 542.873323][ T5949] usb 6-1: No LPM exit latency info found, disabling LPM. [ 542.875876][ T5949] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 542.875915][ T5949] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 542.875938][ T5949] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.882182][ T5949] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 542.882216][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.882239][ T5949] usb 6-1: Product: ဉ [ 542.882255][ T5949] usb 6-1: Manufacturer: ᰁ [ 542.882271][ T5949] usb 6-1: SerialNumber: ည [ 544.007518][ T5949] usb 6-1: 0:2 : does not exist [ 544.056983][ T5949] usb 6-1: USB disconnect, device number 30 [ 544.223969][T10524] udevd[10524]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.371455][T10765] fuse: Unknown parameter '0x0000000000000006' [ 545.383525][T10769] fuse: Unknown parameter '& [ 545.383525][T10769] 0xffffffffffffffff' [ 547.609434][ T50] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 547.782545][ T5949] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 547.857194][ T50] usb 2-1: Using ep0 maxpacket: 8 [ 548.079406][ T5949] usb 1-1: No LPM exit latency info found, disabling LPM. [ 548.082834][ T5949] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 548.082862][ T5949] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 548.082884][ T5949] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 548.089686][ T5949] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 548.089724][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.089746][ T5949] usb 1-1: Product: ဉ [ 548.089762][ T5949] usb 1-1: Manufacturer: ᰁ [ 548.089778][ T5949] usb 1-1: SerialNumber: ည [ 548.140975][ T50] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.141044][ T50] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 548.141069][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.351760][ T50] usb 2-1: config 0 descriptor?? [ 548.904722][ T50] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 549.227432][ T50] gspca_vc032x: reg_r err -71 [ 549.227543][ T50] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 549.295841][ T50] usb 2-1: USB disconnect, device number 65 [ 549.317901][ T5949] usb 1-1: 0:2 : does not exist [ 549.379158][ T5949] usb 1-1: USB disconnect, device number 51 [ 549.523671][T10804] fuse: Unknown parameter '0x0000000000000006' [ 550.105277][T10500] udevd[10500]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.556339][T10808] fuse: Unknown parameter '& [ 550.556339][T10808] 0xffffffffffffffff' [ 554.747191][ T50] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 554.907312][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 554.909885][ T50] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 554.909922][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 554.909953][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 554.910001][ T50] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 554.910027][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.978928][ T50] usb 1-1: config 0 descriptor?? [ 554.980467][T10832] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 555.002873][ T50] hub 1-1:0.0: USB hub found [ 555.189276][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1729'. [ 555.378555][T10832] loop2: detected capacity change from 0 to 7 [ 556.064054][T10832] loop2: [ 556.064097][T10832] loop2: partition table partially beyond EOD, truncated [ 557.421942][ T50] hub 1-1:0.0: 1 port detected [ 557.471970][ T50] hub 1-1:0.0: config failed, can't get hub status (err -5) [ 557.520629][ T50] usbhid 1-1:0.0: can't add hid device: -71 [ 557.523011][ T50] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 557.658270][ T50] usb 1-1: USB disconnect, device number 52 [ 558.985496][T10864] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1738'. [ 563.876919][T10902] netlink: 408 bytes leftover after parsing attributes in process `syz.2.1746'. [ 565.223704][ T5982] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 565.277247][ T5949] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 565.718339][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 565.718819][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 565.719233][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 565.719397][ T5982] usb 6-1: device descriptor read/all, error -32 [ 566.590882][ T5949] usb 3-1: device descriptor read/all, error -71 [ 567.757572][T10942] fuse: Invalid rootmode [ 568.837999][T10950] fuse: Unknown parameter '& [ 568.837999][T10950] 0xffffffffffffffff' [ 568.888713][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1765'. [ 568.917183][ T50] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 568.965536][ T5949] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 569.097205][ T50] usb 1-1: Using ep0 maxpacket: 8 [ 569.102039][ T50] usb 1-1: config 1 interface 0 has no altsetting 0 [ 569.105640][ T50] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.40 [ 569.105672][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.105694][ T50] usb 1-1: Product: syz [ 569.105710][ T50] usb 1-1: Manufacturer: syz [ 569.105725][ T50] usb 1-1: SerialNumber: syz [ 569.112987][ T5949] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 569.113018][ T5949] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 569.113039][ T5949] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 569.113062][ T5949] usb 3-1: config 220 has no interface number 2 [ 569.113159][ T5949] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 569.113188][ T5949] usb 3-1: config 220 interface 0 has no altsetting 0 [ 569.113208][ T5949] usb 3-1: config 220 interface 76 has no altsetting 0 [ 569.113227][ T5949] usb 3-1: config 220 interface 1 has no altsetting 0 [ 569.124185][ T5949] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 569.124218][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.124241][ T5949] usb 3-1: Product: syz [ 569.124257][ T5949] usb 3-1: Manufacturer: syz [ 569.124273][ T5949] usb 3-1: SerialNumber: syz [ 569.371575][ T50] usbhid 1-1:1.0: can't add hid device: -71 [ 569.371734][ T50] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 569.407901][ T50] usb 1-1: USB disconnect, device number 53 [ 569.473295][T10940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.473900][T10940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.528444][ T5949] usb 3-1: selecting invalid altsetting 0 [ 569.529027][ T5949] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 569.529059][ T5949] uvcvideo 3-1:220.0: No valid video chain found. [ 569.600793][ T5949] usb 3-1: selecting invalid altsetting 0 [ 569.600838][ T5949] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 569.624292][ T5949] usb 3-1: USB disconnect, device number 45 [ 569.961926][T10979] fuse: Invalid rootmode [ 571.352647][T10987] fuse: Unknown parameter '& [ 571.352647][T10987] 0xffffffffffffffff' [ 571.727948][T10997] fuse: Unknown parameter '0x0000000000000006' [ 573.427282][ T50] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 573.555932][T11018] fuse: Unknown parameter '& [ 573.555932][T11018] 0xffffffffffffffff' [ 573.587375][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 573.590157][ T50] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.590193][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 573.590224][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 573.590272][ T50] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 573.590298][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.674118][ T50] usb 1-1: config 0 descriptor?? [ 573.684261][T11007] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 573.703743][ T50] hub 1-1:0.0: USB hub found [ 574.211965][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.212043][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.266929][T11007] loop2: detected capacity change from 0 to 7 [ 574.273699][T11007] loop2: [ 574.273733][T11007] loop2: partition table partially beyond EOD, truncated [ 574.295609][ T50] hub 1-1:0.0: 1 port detected [ 574.791668][ T5170] loop2: [ 574.791698][ T5170] loop2: partition table partially beyond EOD, truncated [ 576.358646][ T50] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 576.798604][ T50] usb 1-1: reset high-speed USB device number 54 using dummy_hcd [ 576.799587][ T50] usb 1-1: device reset changed ep0 maxpacket size! [ 576.806902][ T7709] usb 1-1: USB disconnect, device number 54 [ 578.772290][T11062] fuse: Unknown parameter 'fd0x0000000000000006' [ 579.507378][ T7709] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 579.897178][ T7709] usb 1-1: device not accepting address 55, error -71 [ 580.067420][T11077] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 580.218124][T11078] fuse: Unknown parameter 'fd0x0000000000000006' [ 581.164071][T11094] fuse: Bad value for 'rootmode' [ 582.447470][ T9] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 582.527334][ T5949] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 582.783945][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.783978][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 582.784039][ T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 582.784102][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.857198][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 582.858163][ T9] usb 2-1: config 0 descriptor?? [ 582.865427][ T5949] usb 6-1: config 1 interface 0 has no altsetting 0 [ 582.894658][ T5949] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.40 [ 582.894692][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.894713][ T5949] usb 6-1: Product: syz [ 582.894728][ T5949] usb 6-1: Manufacturer: syz [ 582.894744][ T5949] usb 6-1: SerialNumber: syz [ 584.403851][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 584.403916][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 585.418476][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 585.810272][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 585.810574][ T9] usb 2-1: media controller created [ 585.880411][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 585.966083][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 585.966399][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 586.111608][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 586.146879][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 586.146908][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 586.171375][ T5949] usbhid 6-1:1.0: can't add hid device: -71 [ 586.171513][ T5949] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 586.176490][ T5949] usb 6-1: USB disconnect, device number 33 [ 587.146030][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 587.146096][ T9] dvb-usb: error while querying for an remote control event. [ 587.301122][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 587.301162][ T9] dvb-usb: error while querying for an remote control event. [ 587.457269][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 587.457306][ T9] dvb-usb: error while querying for an remote control event. [ 587.458772][T11155] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1836'. [ 587.490217][ T5949] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 587.539260][ T7709] usb 2-1: USB disconnect, device number 66 [ 587.637299][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 587.639417][ T5949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.639479][ T5949] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 587.639504][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.650596][ T5949] usb 6-1: config 0 descriptor?? [ 587.701350][ T5949] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 587.786358][ T7709] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 587.961462][T11174] CUSE: info not properly terminated [ 587.967375][ T5888] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 588.127206][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 588.132577][ T5888] usb 3-1: config 1 interface 0 has no altsetting 0 [ 588.150462][ T5888] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.40 [ 588.150495][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.150518][ T5888] usb 3-1: Product: syz [ 588.150534][ T5888] usb 3-1: Manufacturer: syz [ 588.150549][ T5888] usb 3-1: SerialNumber: syz [ 588.412373][ T5888] usbhid 3-1:1.0: can't add hid device: -71 [ 588.412503][ T5888] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 588.421134][ T5888] usb 3-1: USB disconnect, device number 46 [ 590.091239][ T5949] gspca_vc032x: reg_r err -110 [ 590.091350][ T5949] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 590.292155][ T5949] usb 6-1: USB disconnect, device number 34 [ 593.175887][T11209] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 593.298833][T11209] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 593.299576][T11209] overlayfs: failed to look up (tracing) for ino (-66) [ 594.427325][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 595.738992][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 595.741957][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.742022][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 595.742049][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.797408][ T9] usb 2-1: config 0 descriptor?? [ 595.824541][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 596.821711][ T9] gspca_vc032x: reg_r err -110 [ 596.821818][ T9] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 597.017455][ T5888] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 598.142730][ T5888] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 598.142767][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.177366][ T9] usb 2-1: USB disconnect, device number 67 [ 598.249622][ T5888] usb 1-1: config 0 descriptor?? [ 599.739217][ T5888] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 599.739831][ T5888] [drm:udl_init] *ERROR* Selecting channel failed [ 599.757255][ T7709] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 601.007216][ T7709] usb 2-1: Using ep0 maxpacket: 8 [ 601.076023][ T7709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 601.076983][ T7709] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 601.077010][ T7709] usb 2-1: can't read configurations, error -71 [ 601.112711][ T5888] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 601.112741][ T5888] [drm] Initialized udl on minor 2 [ 601.114558][ T5888] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 601.115125][ T5888] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 601.116357][ T5935] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 601.160636][ T5935] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 601.160920][ T5935] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 601.161413][ T5888] usb 1-1: USB disconnect, device number 57 [ 602.917195][ T7709] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 603.197216][ T7709] usb 3-1: Using ep0 maxpacket: 8 [ 603.199951][ T7709] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.200009][ T7709] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 603.200032][ T7709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.243922][ T7709] usb 3-1: config 0 descriptor?? [ 603.256810][ T7709] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 604.255405][ T7709] gspca_vc032x: reg_r err -110 [ 604.255516][ T7709] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 604.557702][ T7709] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 604.715652][ T7709] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 604.715678][ T7709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.736864][ T7709] usb 1-1: config 0 descriptor?? [ 605.930622][ T9] usb 3-1: USB disconnect, device number 47 [ 606.137558][ T7709] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 606.138115][ T7709] [drm:udl_init] *ERROR* Selecting channel failed [ 606.191742][ T7709] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 606.191771][ T7709] [drm] Initialized udl on minor 2 [ 606.227902][ T7709] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 606.228476][ T7709] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 606.229588][ T5888] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 606.240392][ T5888] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 606.250471][ T5888] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 606.283429][ T7709] usb 1-1: USB disconnect, device number 58 [ 606.429620][T11357] fuse: Unknown parameter 'use00000000000000000000' [ 608.175556][ T5949] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 609.133773][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 609.471485][ T5949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.471551][ T5949] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 609.471578][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.509668][ T5949] usb 6-1: config 0 descriptor?? [ 609.539112][ T5949] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 609.703167][T11398] fuse: Unknown parameter 'user_i00000000000000000000' [ 612.647537][ T5949] gspca_vc032x: reg_w err -110 [ 612.647646][ T5949] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 612.857929][ T5982] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 613.093957][ T7709] usb 6-1: USB disconnect, device number 35 [ 613.225002][ T5982] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 613.225037][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.271935][ T5982] usb 2-1: config 0 descriptor?? [ 613.547189][ T5982] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 613.787080][T11448] fuse: Unknown parameter 'user_i00000000000000000000' [ 615.102709][T11416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1931'. [ 617.412278][ T5982] [drm:udl_init] *ERROR* Selecting channel failed [ 617.472230][ T5982] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 617.472261][ T5982] [drm] Initialized udl on minor 2 [ 617.477912][T11478] netlink: 408 bytes leftover after parsing attributes in process `syz.2.1949'. [ 617.527751][ T5982] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 617.528245][ T5982] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 617.530682][T11479] Debayer B: ================= START STATUS ================= [ 617.530702][T11479] Debayer B: Debayer Mean Window Size: 3 [ 617.530732][T11479] Debayer B: ================== END STATUS ================== [ 617.532756][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 617.536253][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 617.536533][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 617.551651][ T5982] usb 2-1: USB disconnect, device number 70 [ 618.015294][T11486] binder: 11483:11486 ioctl 4018620d 0 returned -22 [ 619.297495][ T5949] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 619.464907][ T5949] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 619.464939][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.464960][ T5949] usb 1-1: Product: syz [ 619.464974][ T5949] usb 1-1: Manufacturer: syz [ 619.464989][ T5949] usb 1-1: SerialNumber: syz [ 621.603934][ T5949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 621.603997][ T5949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 621.604020][ T5949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 621.680987][ T5949] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 621.717190][ T5949] usb 1-1: USB disconnect, device number 59 [ 622.227397][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 622.649745][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 622.649778][ T9] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 622.649798][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 622.649819][ T9] usb 3-1: config 220 has no interface number 2 [ 622.649894][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 622.649921][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 622.649939][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 622.649956][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 626.940340][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 626.940374][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.940396][ T9] usb 3-1: Product: syz [ 626.940411][ T9] usb 3-1: Manufacturer: syz [ 626.940426][ T9] usb 3-1: SerialNumber: syz [ 626.964351][ T9] usb 3-1: can't set config #220, error -71 [ 626.996693][ T9] usb 3-1: USB disconnect, device number 48 [ 627.895847][T11566] tipc: Started in network mode [ 627.895888][T11566] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 627.937817][T11566] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 628.026793][T11566] tipc: Enabled bearer , priority 10 [ 628.070259][T11566] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 628.561416][T11565] block nbd0: shutting down sockets [ 628.961778][ T5949] tipc: Node number set to 1 [ 630.817179][ T7709] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 631.887413][ T7709] usb 2-1: Using ep0 maxpacket: 32 [ 631.957618][ T7709] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.957656][ T7709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 631.957687][ T7709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 631.957734][ T7709] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 631.957760][ T7709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.240098][ T7709] usb 2-1: config 0 descriptor?? [ 632.241348][T11614] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 632.245776][ T7709] hub 2-1:0.0: USB hub found [ 632.274180][T11638] FAULT_INJECTION: forcing a failure. [ 632.274180][T11638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.274218][T11638] CPU: 0 UID: 0 PID: 11638 Comm: syz.2.2006 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 632.274245][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.274260][T11638] Call Trace: [ 632.274269][T11638] [ 632.274279][T11638] dump_stack_lvl+0x189/0x250 [ 632.274315][T11638] ? __pfx____ratelimit+0x10/0x10 [ 632.274344][T11638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.274374][T11638] ? __pfx__printk+0x10/0x10 [ 632.274413][T11638] should_fail_ex+0x46c/0x600 [ 632.274452][T11638] _copy_to_user+0x31/0xb0 [ 632.274481][T11638] simple_read_from_buffer+0xe1/0x170 [ 632.274530][T11638] proc_fail_nth_read+0x1b6/0x220 [ 632.274568][T11638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.274603][T11638] ? rw_verify_area+0x2ac/0x4e0 [ 632.274631][T11638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.274666][T11638] vfs_read+0x206/0xa30 [ 632.274706][T11638] ? __pfx_vfs_read+0x10/0x10 [ 632.274733][T11638] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 632.274782][T11638] ? mutex_lock_nested+0x154/0x1d0 [ 632.274803][T11638] ? fdget_pos+0x253/0x320 [ 632.274837][T11638] ksys_read+0x14b/0x260 [ 632.274871][T11638] ? __pfx_ksys_read+0x10/0x10 [ 632.274907][T11638] ? do_syscall_64+0xbe/0xf80 [ 632.274941][T11638] do_syscall_64+0xfa/0xf80 [ 632.274977][T11638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.275000][T11638] ? clear_bhb_loop+0x60/0xb0 [ 632.275030][T11638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.275053][T11638] RIP: 0033:0x7f35e445e15c [ 632.275074][T11638] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 632.275129][T11638] RSP: 002b:00007f35e26be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.275155][T11638] RAX: ffffffffffffffda RBX: 00007f35e46b5fa0 RCX: 00007f35e445e15c [ 632.275173][T11638] RDX: 000000000000000f RSI: 00007f35e26be0a0 RDI: 0000000000000004 [ 632.275188][T11638] RBP: 00007f35e26be090 R08: 0000000000000000 R09: 0000000000000000 [ 632.275203][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.275217][T11638] R13: 00007f35e46b6038 R14: 00007f35e46b5fa0 R15: 00007ffd33bec4e8 [ 632.275255][T11638] [ 632.554785][T11614] loop2: detected capacity change from 0 to 7 [ 632.555950][T11614] loop2: [ 632.555980][T11614] loop2: partition table partially beyond EOD, truncated [ 632.589100][ T7709] hub 2-1:0.0: 1 port detected [ 632.732591][ T5170] loop2: [ 632.732631][ T5170] loop2: partition table partially beyond EOD, truncated [ 633.074294][ T5170] loop2: [ 633.074332][ T5170] loop2: partition table partially beyond EOD, truncated [ 633.528634][ T5170] loop2: [ 633.528672][ T5170] loop2: partition table partially beyond EOD, truncated [ 633.570533][ T7709] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 633.699342][ T7709] usb 2-1: reset high-speed USB device number 71 using dummy_hcd [ 633.802028][T11614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.803150][T11614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.897347][ T5935] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 634.077156][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 634.080375][ T5935] usb 3-1: config 1 interface 0 has no altsetting 0 [ 634.083051][ T5935] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.40 [ 634.083084][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.083107][ T5935] usb 3-1: Product: syz [ 634.083123][ T5935] usb 3-1: Manufacturer: syz [ 634.083139][ T5935] usb 3-1: SerialNumber: syz [ 634.181881][T11668] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 634.399900][ T5935] usbhid 3-1:1.0: can't add hid device: -71 [ 634.400042][ T5935] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 634.412738][ T5935] usb 3-1: USB disconnect, device number 49 [ 634.578338][ T5888] usb 2-1: USB disconnect, device number 71 [ 634.992046][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.992123][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.119667][T11693] Debayer B: ================= START STATUS ================= [ 635.119691][T11693] Debayer B: Debayer Mean Window Size: 3 [ 635.119718][T11693] Debayer B: ================== END STATUS ================== [ 635.477208][ T7709] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 635.477421][ T5888] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 635.642767][ T5888] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 635.642802][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.642825][ T5888] usb 2-1: Product: syz [ 635.642840][ T5888] usb 2-1: Manufacturer: syz [ 635.642855][ T5888] usb 2-1: SerialNumber: syz [ 635.646789][ T7709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.646824][ T7709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.646850][ T7709] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 635.646894][ T7709] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 635.646919][ T7709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.706429][ T7709] usb 1-1: config 0 descriptor?? [ 635.886876][ T5888] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 635.886995][ T5888] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 635.888106][ T5888] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 635.953766][ T5888] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 636.009297][ T5888] usb 2-1: USB disconnect, device number 72 [ 636.141432][ T7709] usbhid 1-1:0.0: can't add hid device: -71 [ 636.141565][ T7709] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 636.157528][ T7709] usb 1-1: USB disconnect, device number 60 [ 636.217512][ T5935] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 636.369620][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.369659][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.369701][ T5935] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 636.369728][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.375302][ T5935] usb 6-1: config 0 descriptor?? [ 636.819303][ T5935] hid_parser_main: 43 callbacks suppressed [ 636.819330][ T5935] arvo 0003:1E7D:30D4.000B: unknown main item tag 0x0 [ 636.837283][ T7709] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 636.846820][ T5935] arvo 0003:1E7D:30D4.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 636.987201][ T7709] usb 2-1: Using ep0 maxpacket: 8 [ 636.991158][ T7709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.991222][ T7709] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 636.991249][ T7709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.017329][ T5935] arvo 0003:1E7D:30D4.000B: couldn't init struct arvo_device [ 637.017396][ T5935] arvo 0003:1E7D:30D4.000B: couldn't install keyboard [ 637.020570][ T5935] arvo 0003:1E7D:30D4.000B: probe with driver arvo failed with error -5 [ 637.026495][ T7709] usb 2-1: config 0 descriptor?? [ 637.052573][ T7709] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 637.894215][T11739] binder: 11738:11739 ioctl c0306201 0 returned -14 [ 638.891626][ T5982] usb 2-1: USB disconnect, device number 73 [ 638.967295][ T5949] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 639.086615][ T10] usb 6-1: USB disconnect, device number 36 [ 639.119642][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.119682][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.119718][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 639.119765][ T5949] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 639.119791][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.191972][ T5949] usb 3-1: config 0 descriptor?? [ 639.607754][ T5949] usbhid 3-1:0.0: can't add hid device: -71 [ 639.607890][ T5949] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 639.633446][ T5949] usb 3-1: USB disconnect, device number 50 [ 639.863236][T11777] binder: 11776:11777 ioctl c0306201 0 returned -14 [ 640.087309][ T5935] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 640.248826][ T5935] usb 6-1: config index 0 descriptor too short (expected 65028, got 72) [ 640.251123][ T5935] usb 6-1: config index 1 descriptor too short (expected 65028, got 72) [ 640.281161][ T5935] usb 6-1: config index 2 descriptor too short (expected 65028, got 72) [ 640.282511][ T5935] usb 6-1: config index 3 descriptor too short (expected 65028, got 72) [ 640.283968][ T5935] usb 6-1: config index 4 descriptor too short (expected 65028, got 72) [ 640.286782][ T5935] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 640.286816][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.286841][ T5935] usb 6-1: Product: syz [ 640.286858][ T5935] usb 6-1: Manufacturer: syz [ 640.286874][ T5935] usb 6-1: SerialNumber: syz [ 640.315165][ T5935] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 640.347305][ T7709] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 640.374293][ T50] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 640.507676][ T7709] usb 2-1: Using ep0 maxpacket: 16 [ 640.512058][ T7709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.512126][ T7709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 640.512235][ T7709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 640.512260][ T7709] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 640.512287][ T7709] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.536831][ T7709] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 640.536870][ T7709] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 640.536894][ T7709] usb 2-1: Manufacturer: syz [ 640.649731][ T7709] usb 2-1: config 0 descriptor?? [ 640.809263][T11796] netlink: 'syz.2.2077': attribute type 10 has an invalid length. [ 640.809305][T11796] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2077'. [ 640.809965][T11796] dummy0: entered promiscuous mode [ 640.814414][T11796] bridge0: port 3(dummy0) entered blocking state [ 640.875779][T11796] bridge0: port 3(dummy0) entered disabled state [ 640.876060][T11796] dummy0: entered allmulticast mode [ 641.077420][ T7709] rc_core: IR keymap rc-hauppauge not found [ 641.077444][ T7709] Registered IR keymap rc-empty [ 641.077992][ T7709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.097550][ T7709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.132415][ T7709] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 641.172963][ T7709] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 641.296165][ T7709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.320301][ T7709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.340995][ T7709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.367321][ T7709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.397466][ T7709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.427428][ T7709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.457560][ T7709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.479392][ T7709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.497377][ T7709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.518195][ T7709] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.598953][ T7709] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 641.598984][ T7709] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 641.634532][ T50] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 641.634907][ T50] ath9k_htc: Failed to initialize the device [ 641.675578][ T50] usb 6-1: ath9k_htc: USB layer deinitialized [ 641.724253][ T7709] usb 2-1: USB disconnect, device number 74 [ 641.850752][T11806] team_slave_0: entered promiscuous mode [ 641.850846][T11806] team_slave_1: entered promiscuous mode [ 641.851312][T11806] macsec1: entered allmulticast mode [ 641.851330][T11806] team0: entered allmulticast mode [ 641.851345][T11806] team_slave_0: entered allmulticast mode [ 641.851365][T11806] team_slave_1: entered allmulticast mode [ 641.868443][T11813] FAULT_INJECTION: forcing a failure. [ 641.868443][T11813] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 641.868486][T11813] CPU: 1 UID: 0 PID: 11813 Comm: syz.3.2083 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 641.868520][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.868535][T11813] Call Trace: [ 641.868545][T11813] [ 641.868555][T11813] dump_stack_lvl+0x189/0x250 [ 641.868597][T11813] ? __pfx____ratelimit+0x10/0x10 [ 641.868627][T11813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.868659][T11813] ? __pfx__printk+0x10/0x10 [ 641.868687][T11813] ? fs_reclaim_acquire+0x7d/0x100 [ 641.868735][T11813] should_fail_ex+0x46c/0x600 [ 641.868780][T11813] prepare_alloc_pages+0x22b/0x6c0 [ 641.868829][T11813] __alloc_frozen_pages_noprof+0x123/0x370 [ 641.868862][T11813] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 641.868911][T11813] alloc_pages_mpol+0xd1/0x380 [ 641.868956][T11813] alloc_pages_noprof+0xcf/0x1e0 [ 641.868997][T11813] __pud_alloc+0x3a/0x470 [ 641.869041][T11813] handle_mm_fault+0xdf7/0x1330 [ 641.869076][T11813] ? mt_find+0x15c/0x5e0 [ 641.869114][T11813] ? handle_mm_fault+0xd1/0x1330 [ 641.869150][T11813] ? __pfx_handle_mm_fault+0x10/0x10 [ 641.869201][T11813] ? __pfx_find_vma+0x10/0x10 [ 641.869232][T11813] ? vma_is_secretmem+0xd/0x50 [ 641.869266][T11813] ? check_vma_flags+0x462/0x590 [ 641.869313][T11813] __get_user_pages+0x166e/0x2830 [ 641.869386][T11813] get_user_pages_remote+0x2f1/0xac0 [ 641.869429][T11813] ? __pfx_get_user_pages_remote+0x10/0x10 [ 641.869465][T11813] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 641.869509][T11813] get_arg_page+0x104/0x330 [ 641.869541][T11813] ? __pfx_get_arg_page+0x10/0x10 [ 641.869580][T11813] copy_string_kernel+0x191/0x2a0 [ 641.869618][T11813] do_execveat_common+0x3c5/0x6a0 [ 641.869665][T11813] __x64_sys_execveat+0xc4/0xe0 [ 641.869703][T11813] do_syscall_64+0xfa/0xf80 [ 641.869736][T11813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.869760][T11813] ? clear_bhb_loop+0x60/0xb0 [ 641.869792][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.869816][T11813] RIP: 0033:0x7fec11dff749 [ 641.869839][T11813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.869860][T11813] RSP: 002b:00007fec1005e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 641.869887][T11813] RAX: ffffffffffffffda RBX: 00007fec12055fa0 RCX: 00007fec11dff749 [ 641.869906][T11813] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 641.869922][T11813] RBP: 00007fec1005e090 R08: 0000000000001000 R09: 0000000000000000 [ 641.869937][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 641.869953][T11813] R13: 00007fec12056038 R14: 00007fec12055fa0 R15: 00007ffde876edf8 [ 641.869993][T11813] [ 642.244994][T11806] team0: left allmulticast mode [ 642.245017][T11806] team_slave_0: left allmulticast mode [ 642.245037][T11806] team_slave_1: left allmulticast mode [ 642.276876][T11806] team_slave_0: left promiscuous mode [ 642.276965][T11806] team_slave_1: left promiscuous mode [ 642.790092][ T5949] usb 6-1: USB disconnect, device number 37 [ 643.037491][T11826] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 643.037521][T11826] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 643.037542][T11826] CPU: 0 UID: 0 PID: 11826 Comm: syz.0.2088 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 643.037567][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.037581][T11826] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 643.037616][T11826] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 79 91 ea f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 58 91 ea f9 4d 8b 24 24 48 83 c3 [ 643.037634][T11826] RSP: 0018:ffffc90005e37a40 EFLAGS: 00010206 [ 643.037654][T11826] RAX: 0000000000000005 RBX: ffff88802e955b00 RCX: ffff888025fd8000 [ 643.037671][T11826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.037683][T11826] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 643.037696][T11826] R10: dffffc0000000000 R11: ffffffff8837d9f0 R12: 0000000000000028 [ 643.037711][T11826] R13: dffffc0000000000 R14: ffff888144ff5000 R15: dffffc0000000000 [ 643.037727][T11826] FS: 00007f95a78ee6c0(0000) GS:ffff888126d52000(0000) knlGS:0000000000000000 [ 643.037745][T11826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.037760][T11826] CR2: 00007f95a78acd58 CR3: 000000005c594000 CR4: 00000000003526f0 [ 643.037779][T11826] Call Trace: [ 643.037787][T11826] [ 643.037799][T11826] pcl818_detach+0x66/0xd0 [ 643.037827][T11826] comedi_device_detach_locked+0x178/0x750 [ 643.037857][T11826] comedi_unlocked_ioctl+0xce4/0x1020 [ 643.037891][T11826] ? kasan_quarantine_put+0xdd/0x220 [ 643.037924][T11826] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 643.037964][T11826] ? smack_log+0xef/0x3f0 [ 643.037990][T11826] ? __pfx_smack_log+0x10/0x10 [ 643.038016][T11826] ? smk_access+0x14c/0x4e0 [ 643.038044][T11826] ? smk_tskacc+0x2fc/0x370 [ 643.038072][T11826] ? smack_file_ioctl+0x24d/0x340 [ 643.038103][T11826] ? __pfx_smack_file_ioctl+0x10/0x10 [ 643.038136][T11826] ? __fget_files+0x3a6/0x420 [ 643.038157][T11826] ? __fget_files+0x2a/0x420 [ 643.038180][T11826] ? bpf_lsm_file_ioctl+0x9/0x20 [ 643.038218][T11826] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 643.038250][T11826] __se_sys_ioctl+0xff/0x170 [ 643.038280][T11826] do_syscall_64+0xfa/0xf80 [ 643.038308][T11826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.038329][T11826] ? clear_bhb_loop+0x60/0xb0 [ 643.038348][T11826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.038365][T11826] RIP: 0033:0x7f95a968f749 [ 643.038379][T11826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.038393][T11826] RSP: 002b:00007f95a78ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.038411][T11826] RAX: ffffffffffffffda RBX: 00007f95a98e5fa0 RCX: 00007f95a968f749 [ 643.038424][T11826] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000046 [ 643.038435][T11826] RBP: 00007f95a9713f91 R08: 0000000000000000 R09: 0000000000000000 [ 643.038448][T11826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.038458][T11826] R13: 00007f95a98e6038 R14: 00007f95a98e5fa0 R15: 00007ffcb0ffb638 [ 643.038479][T11826] [ 643.038491][T11826] Modules linked in: [ 643.038514][T11826] ---[ end trace 0000000000000000 ]--- [ 643.039619][T11826] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 643.039655][T11826] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 79 91 ea f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 58 91 ea f9 4d 8b 24 24 48 83 c3 [ 643.039674][T11826] RSP: 0018:ffffc90005e37a40 EFLAGS: 00010206 [ 643.039693][T11826] RAX: 0000000000000005 RBX: ffff88802e955b00 RCX: ffff888025fd8000 [ 643.039709][T11826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.039723][T11826] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 643.039736][T11826] R10: dffffc0000000000 R11: ffffffff8837d9f0 R12: 0000000000000028 [ 643.039752][T11826] R13: dffffc0000000000 R14: ffff888144ff5000 R15: dffffc0000000000 [ 643.039769][T11826] FS: 00007f95a78ee6c0(0000) GS:ffff888126d52000(0000) knlGS:0000000000000000 [ 643.039789][T11826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.039956][T11832] netlink: 'syz.0.2088': attribute type 2 has an invalid length. [ 643.040862][T11826] CR2: 00007f95a78acd58 CR3: 000000005c594000 CR4: 00000000003526f0 [ 643.040891][T11826] Kernel panic - not syncing: Fatal exception [ 643.041211][T11826] Kernel Offset: disabled