last executing test programs: 12.795761711s ago: executing program 4 (id=604): socket(0x10, 0x3, 0x0) (async, rerun: 64) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (rerun: 64) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x1}) (async) clock_gettime(0x0, &(0x7f0000002c40)={0x0, 0x0}) (async, rerun: 32) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) (rerun: 32) lseek(r4, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000002c80)=@overlay={0x4, 0x4, 0x4, 0x10, 0xba00, {r2, r3/1000+10000}, {0x6, 0x8, 0x23, 0x1, 0xa0, 0x2, "296dc971"}, 0xffffffff, 0x3, {}, 0x3, 0x0, r4}) (rerun: 32) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r7 = socket(0x400000000010, 0x2, 0x0) (async, rerun: 64) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x5, 0xd}, {0x1, 0xa}, {0x3, 0xfff3}}, ["", "", ""]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x9}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xe}}]}}]}, 0x3c}}, 0x24044094) (async, rerun: 32) r10 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r11 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r13 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r14 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async, rerun: 64) r15 = add_key$user(&(0x7f0000006400), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000780)="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", 0x179, 0xfffffffffffffffe) (rerun: 64) keyctl$dh_compute(0x17, &(0x7f0000000100)={r13, r14, r15}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) (async) r16 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r16, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f00000002c0)=[@increfs, @exit_looper], 0x0, 0x0, 0x0}) (async, rerun: 32) dup3(r16, r5, 0x0) (rerun: 32) 11.95598004s ago: executing program 4 (id=614): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xffffffffffffff0b, 0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_pidfd_open(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x2, 0x0) r5 = gettid() write$rfkill(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000003c0), 0x4) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r1, 0x0, &(0x7f0000a3d000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x334e8b}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0xc) 8.036308025s ago: executing program 4 (id=628): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffe7}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205ee0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0350000000000000000002000000000000000", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000600)="b5f98a374fbf3212416183121a357a3b99aeed4e6a8324b358be26de690ccb72e4135c43cdf522674ef7ea6520b76372c41830b741250ad82b0ec5d23eec72b680713a6b52f41acc46b65707000c8b09564bb50f302bb8e3dc8b93777e7d0f2c2a1c661cd2b255d25c623f7a41ac2bac1df2ae48359430d6e9b908800813055a3552d21dc80c405feb5a55c64aaebc0f524c18e69e325f92a23fc58754de53ddee702415494b60e3e1285ea47f9eef8b52e220be17700776f1cb249e22d3df373d6c693afda68f0cb87ac715f2805d9b66603abe97bb9811b084fefd7258883fda355c31ead32154a3e80f4204593b81167b", 0xf2}], 0x4, &(0x7f0000000880)}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.383984263s ago: executing program 4 (id=636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703003000000000b704000000000000b50005008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.224997904s ago: executing program 4 (id=638): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xffffffffffffff0b, 0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_pidfd_open(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x2, 0x0) r5 = gettid() write$rfkill(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000003c0), 0x4) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r1, 0x0, &(0x7f0000a3d000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x334e8b}) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[], 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0xc) 5.940929439s ago: executing program 3 (id=640): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="201107000000070729"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x3, 0xc0, 0x50, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0xa, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x0, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x1, 0x9, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x3d4, 0x36}, @dmm={0x7, 0x24, 0x14, 0xa, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x7f, 0x27}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xd, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xca, 0x6, 0x2e}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0xff, 0x8, 0x40, 0xa}, 0x5d, &(0x7f0000000140)={0x5, 0xf, 0x5d, 0x3, [@ptm_cap={0x3}, @generic={0x41, 0x10, 0xb, "f9624fac90a07aa6cd88b276b42b09d96256490e708468de12628c2bd81772b161f242b3bd15bf8fc153869088dd514d3d5ae88ea079c651f85cfc7b5b54"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x11, 0xf000, 0x2, [0xff0030, 0xfe200f]}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x804}}, {0x41, &(0x7f0000000240)=@string={0x41, 0x3, "2e8130f8eb15e15b4a57fa77aedab173c097285dc9c1b5920a21949429843155eafe07926ef763a18e795ccae81cb1d8e83f617270a839e40c869747f9696b"}}, {0xcf, &(0x7f00000002c0)=@string={0xcf, 0x3, "b502bbbec892914d0bb28d94f7ec86394501569904bf55752cdc0188f903f75f6fe43253c61cf452a5be60dbd77bb45787ea0996ad8b6fc6c1e91d37831ef42fa2b100e2259cef4666103f254334159802f7c4047eaf2e3fcc2494f63d21538633bcb1a312467085ef3d76817f4803efd1287e899abaf35bc23450456ad1aa02dfa07918dc28c372ea5d8e7fd2cf8a7fbd7dc81c1e57549226e11acce18c77a2bc1a796f5e6bc39ee3d4052b53e31090f7d1782125f8b7cfd05c8b240581b4fecfa880e1c58674584b0426bc56"}}, {0x55, &(0x7f00000003c0)=@string={0x55, 0x3, "e336af602801505ddba44f73de4d9d223d3360506443af0fc711516d2a9aeee8545f4f571ba147e21f2211ec8641c4fc28a04c037c16c133cc07e3afb179e1fd7b2725272fffb90dc21e2592362ffa174620db"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x820}}, {0xf2, &(0x7f0000000500)=@string={0xf2, 0x3, "351e3f61c88a8c8daec6b20bd0ca585b4c99b2bddba854ffd8f1d2771f9fe50ebf396054b9b5d9a64d9bc7335cc0fbc8abdd6a444872990ac73995aefdd4eedac7f272eb8da651b5d36e464a31142eb39416624b7d856d02ca53ddef7cc4c0e5c8e0400fe89b8f2ba94a2f6b04d7420c0e94498d624cdbccf5eff3a1f031115f13e283895649c9d51ea1530cc59e53772fc7aea80c8c7e075c3b435a46af854b5a6cae854beba458176fdcf7fdcd2235136dccd6cb03bce2464c9feffa2a203494e476feb84179e0e4a42c4dc755a39a2f9a5dd5f15f4caaafb74dc76587c7fb8913a89c8ec358c57e1f9eded96b8082"}}]}) 5.673953197s ago: executing program 2 (id=641): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x4d5, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x158}, 0x1, 0x0, 0x500000000000000}, 0x0) 5.483859052s ago: executing program 2 (id=642): unshare(0x68040200) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r2 = syz_io_uring_setup(0x2501, &(0x7f0000000080)={0x0, 0x4f6, 0x10100, 0x1, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) write$cgroup_subtree(r6, &(0x7f0000000180)={[{0x2b, 'cpuset'}]}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r7, 0xc0045103, &(0x7f0000000040)) pwritev(r1, &(0x7f00000006c0)=[{&(0x7f00000001c0)="274ce8c327e1980d2124d13c1bf5a680791778178439c0ec87afc8bb53829e0c78", 0x21}, {&(0x7f00000002c0)="de95a4bc391a681ce62f8ffaa3f98eeb88dfc1aa8f52a095f7d886b59d65401dac32a84a14a0e0dead5d68c85c39be5f6e24ab4f559fd51047c6727b", 0x3c}, {&(0x7f0000000340)="d24b8fe8db00516257ddd3b3128ee92b6cb4821087bc2dc45fce3812c390192f6787695ba8bdedaf28f5383dd0ffde238d33b076516491c69c44746884d7f58909734728d9c40db6ddbe50073ae6b04e511dad4e2adc619e7d097855a11aea2dc2873a098ba6b288698ccfa86d51cfbb2770e91ddf34388146f38c8d1e46990524cb69a4288d8628968cc399e12029665e98739a865cb8590bcd4694fa3a6bdf480a3e7d737d57b18c4c0538cc0fbd646405ddf02e66c1e6219e4378ef8b2752d1aa822e333d6b2e22cf0bd0eed6b68c8ed14a1faafb4fe520d1c8fca7222bf4bebfc62d89e59283", 0xe8}, {&(0x7f0000000240)="20e969a111f46ec619c9719ba479d2c81f2904abf1dc62d56d36db1ed1b74615ef14859dd597", 0x26}, {&(0x7f0000000440)="9ec203523648ac7049d9e2f0a144f9ae9a47c0157256bab7df2f8ac49e05bc9543c94ae23ab06e7a90ed2925b440a58cbcfb96ffb626d68f70ac3e8be3", 0x3d}, {&(0x7f0000000480)="1d9a6ab847aea0d31de15bdd7c5e42529ae6c9cd360cf30fe814dd8b43ffc6d1d3671746e458d04a5b6546249767be75c4c0d9d7307e6dbbd5bdc9f5c8821bc2438545cec8eabd2fd5d668c9c2567a9f8063d6528189762a0b329bc0195f881cb6aea39f97c8f5c21a785d4fcf6958d5c380a278071efa34872b4a2bbac55bc16caf7bff14b53632999d4bef27072b7dc7078e02a8aeab2f53b624274b6ae2ed7a72a9b965c9764844bba5bd069aee403042881fde39bf4fcef2bfff737b6f4d13963962b04debd2282fedb9bcc78ecfe09850eedb150a56ff9c7a78e87acaaf4c0088ddc1a4ff05cb80", 0xea}, {&(0x7f0000000740)="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", 0xfb}, {&(0x7f0000000680)="38afa85494df83b846e8c5e96e6d9104d6381537f68c20007c197f85c37b219f9c41e8e9fbc953e2b0c0c8988491852c0fabaff8daefc233", 0x38}], 0x8, 0x80100000, 0x7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x20000880) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[], 0x64, 0x4) r9 = socket(0x10, 0x80003, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x816fde3181096b2a, &(0x7f0000000580), 0x10) recvmsg$unix(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 4.923741561s ago: executing program 1 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000007b080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000a0000b50005008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.767538368s ago: executing program 1 (id=645): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000029c0)=""/4093, 0x100c}, {&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f00000009c0)=""/133, 0x81}], 0x3}, 0x1005}], 0x54, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x37, 0x5, 0x7b, 0x8, 0x82d, 0x300, 0xc34b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x6, 0x0, 0x0, 0x8, 0x1, 0xb8, 0x8}}]}}]}}, 0x0) syz_usb_connect$uac1(0x2, 0xcf, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x3, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0xe, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x5, 0x4, [0x2, 0x2, 0xa, 0x9], 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x1, 0x2}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x2, 0x1, [0x6], 0xfc}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x4, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x4, "d45c53", 'm'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0xd5, 0x7, "220dc3"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x0, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1477}}, {0x4c, &(0x7f00000002c0)=@string={0x4c, 0x3, "4b094e2a0e07db201ee271fd1c48e39bcfd1cf7f083e4f49cd9605150c8d873b8aa7f0cfc9b6e11889a82a1dcacb5c67f28010b10dbad09809b912031cba4b7662b1748cd96d8b005c97"}}]}) syz_usb_connect$cdc_ecm(0x5, 0x58, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x8, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0xf6, {{0x7, 0x24, 0x6, 0x0, 0x0, "9c2d"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x1ff, 0x10}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8c, 0x9, 0xc9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x3, 0x57, 0x9, 0x40}, 0x32, &(0x7f0000001440)={0x5, 0xf, 0x32, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x40, 0x3, 0x5, 0xf00, 0x5, [0xc000, 0xc45b972f5c443725, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xfb, 0xd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x5, 0x5, 0x1, 0x7}]}, 0x4, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xfcd8}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40f}}, {0x2a, &(0x7f00000004c0)=@string={0x2a, 0x3, "80e8031c6e5489aa8dc7ea0d313b2a29dc39376a5cc915ace9400ffd16dcfb1bf069639fd5801001"}}, {0xa9, &(0x7f0000001480)=@string={0xa9, 0x3, "3792815085b546c064e41bbde26358d57fccaebe192b5e105f8b6df685d7fd60ed8a835ece9cf16f6dd5bb8d207fccc72f2070ebcf72e96baf027ef2d1de03008dc8442fc473e9d5c7081b1e888ea9c63d42a6fe93f2418f315f74d0ab848cb1d6b572e12a31a6bce5cb8cf2b1abd9a33cd8d15fe524edaa2f85bccec7bea90dffb5d78fd7fdf402c4428c3af384a772fb644046cbd643cc25b4896c668d791b90d54fda4654d9"}}]}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x42c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x42c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = syz_usb_connect(0x4, 0x77c, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x98, 0x78, 0xea, 0xff, 0x2116, 0x320, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76a, 0x2, 0xa, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0xd4, 0x5, 0x5, 0x12, 0xfb, 0xfd, 0xb, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "70779216"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x100, 0xf90, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0xf8, 0x40, 0xc}, @dmm={0x7, 0x24, 0x14, 0x6000, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0xfa, 0xa}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x4}]}, @generic={0xc, 0x8, "6d2e044221dd94515365"}], [{{0x9, 0x5, 0x80, 0x10, 0x0, 0x2, 0x7, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}, @generic={0xfe, 0x22, "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"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x5ef, 0x4, 0x4, 0x7a, [@generic={0xbb, 0x6, "5743146c2736821c974428c5f9b57fdcf698dcdf6fa66fb856aaacd97f96646b3257b2858956be39d9395d3c5191df647a84fd914bb7ea077bfcb4d4c39c85c91bfa97fce5cfd343f2a3364cd1bdb89a37ab8b5ac7c4b6d2dd8fd5deaed8520fbed07259c9d09a8e1b97fba71726af811e52da320235088c543040e548904972466053541bcf23cf3ef2ee498793752db1748a6e4f88e3ccaeae8c32cae540bb7b6e742f9060ed2388f4a4190b550b58223568e6ce59d41e40"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x5}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x7, 0x2, 0x0, [@generic={0x70, 0x10, "38a2669a3f9401e8a5085f6ad65b70d1c00c42251d33a526edf3c26c98a83c875becec3fa09b0309da6c520354ba2d2c271e261101f19aa75ecab7e94c54bd019e4ccb975d1f5c81d7a73c9d97270324e4dddd1f8d28be4f51a7553844e121af7bc465504067d0c397b179ddbcf5"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xf, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x9}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x3, 0xc0, 0x6, [@generic={0x40, 0x5, "5a5406aef4ff1ce2fe1ba0b712468f515bd19d2c1bda2d77f434cdbec2c96d80d8643ac59be48e63bd13d3e33a4788ebd095f8f9a8af8d3ea914471c6090"}]}}]}}, {{0x9, 0x4, 0x63, 0x6, 0x5, 0x59, 0xf, 0x9c, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x3ff, 0x4}, [@mdlm_detail={0x66, 0x24, 0x13, 0x8, "be8ec0fbf819257b27a2d44f93cb47097b15b69528b1f493c906c1c5af88910a1c979525c4a8837c3debce349574001e61f3ecb944d090b524cd3f85b9d47f95873581be8120921f4038910e5176dc0d6a0f422da8b05bb22d3d5fc6022fec19019b"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x1, "cf08885a4bdcdd3b2d10c4459d68115270ebf0dc9688a2103f312265066cefb720e0a9bcff1ae9a2d93ac1871a3a1ec0ab5610cc4da3e44f213a5f70361aebc38650397d9be264135acc4eb8e544bdb08a7077f9b2a3497b80165302934d74c007c33c2c05dceb0352cae5f525776e1c3aa07a61a81adf29978c0ff31855163df028c040c88447a1fa4a67cff950adb4c9e93a0a72476eacb5cd0a0e08e5eacc6d16b0f08961f45a3b8d1a0e2030013e25ef3c19c98758dbb35b571a80bcc82d5e58c518660883d4c65fac8d57aa3ed18850a22c45801afeba366b"}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "29d20e918033"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0xfff7, 0x90}, {0x6, 0x24, 0x1a, 0x0, 0x14}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x9, 0x6, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x6, 0x6c, 0x40, 0x8, 0xa0}]}], [{{0x9, 0x5, 0x8, 0x3, 0x400, 0xbd, 0xb, 0x2, [@generic={0x60, 0x10, "6e0e0eb90d28847f7a1b1265b1627c27c15c04c60e6f7d366a136ead0d09914331c721dbc92414f5028086815b9c0ac8ccc322684c61ce491e5d6fa0592a9241135ab953bf1015f080b8de655d1d0c0e9abf71f2e7caf82545647281f33b"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x6, 0x4, 0x3, [@generic={0xa3, 0x21, "af6338b1c59942209cef6d332aebc5824b5b351787143792fbe306777e3f8987c3bb7aef1d382263a6ee1fdb49af1fb0ddcb2c0a3065d70337dd7877af7b06cfd54103ef8ebd37029c2b858342d8c91726cd9acc1fde7609320599217a59a34df159ac5716d451b5026dbeda658112edf0d9ca630f6600197b841b59d89b0d423487cd57fb9c42c70b9256789affea0e8824a528fa7c9478bdfc16fe76790b2fcb"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xc, 0x6, 0xae, [@generic={0xea, 0x10, "caf0b6a2342bb0cf91af39d531483c2607576774de940f1ea6b0b43230b7abe12ea9093261b34460d3a6c500f3e8b1034f0a874d503cd4b7095cf835074b7d6f838f716bcae4f579f3f89ae5b45575b6ffb2242ed8b3df55599c8834272986917cf9c0f3fbce6974460a31f42722f3dc62cbc02df0c2147f5f0c507d38cfbf641136d73e8045d88226c81b5338c04c841ca0a81053867a6e3dd83badb5971f66318ca9a314375fc1a5fcaa4ea935af79f6ccbfdac27922e89cc1d127e3f168b8f7159c18e7b7c48ccd4c534cf44ca6ca8bbd967b2c0446cefb263fc702993474b3a61f3ebae52882"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xc7, 0xb, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9a2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x50, 0x2, 0x0, 0xa, [@generic={0x6b, 0xc, "a42118d8a5179376ecd69a15d084c58337b48a08e81b9d93bbd2d40cc0bfee4aa5c72051c2cd999aab7acda34c6b5271d5a322960d90443616c2d6950ddcd1a68d4b8858fad2734f779c7a25e63a76310b72c447640bc06beb38499fec04456a0e8fa6d0d31fb42d15"}, @generic={0x3c, 0x21, "98e309a3986e857f5e99a6a98a07ccaa88bf9ff8afa05ba1e3bec7ebde1cd74681c4cfe97ed2778e7f93a3e36316f92424450459446124148e17"}]}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0x5, 0x33, 0x4, 0xbf, 0xb}, 0x33, &(0x7f0000000d00)={0x5, 0xf, 0x33, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x97, "8e460ba534fe0f192cde6d38bed0deeb"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xa, 0x5, 0x1}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x0, 0xf0f, 0x6, [0x3ff0]}]}, 0x3, [{0xf1, &(0x7f0000000d40)=@string={0xf1, 0x3, "fb493abe9158b1ac4b3387789ba215fdcaba6261e12a59d39a4d1b4c09940f1c317f60bfb21a96056b24f45a6c4ae022213f1efcab1f3bb336e9906861fc81b20fdb808a451ac1a4acaf4ad3a1f97f9135cd769b50db5b3da954d126139cc710cf0e88a1e2b23bd415ecabf163b76715802c08608631c1ada7cd10a738889137d6c5fe636cce19f70944f7f4315ce178610cc886cd8548ef809b7304e89c7672c8d0d26f64e96920562b121d05a9f6273fb1534ce8a96c75684894334ade9378cf5d12c94347a9645181ae1cf8705ff3cb92eafd679a1111d031afa45691e6b01879e404d9c0a0b2f3d0bdc8766f4d"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x1403}}, {0x82, &(0x7f0000000e80)=@string={0x82, 0x3, "ac1b08f6f7ab2dbc105cece1b9eefc9e96f4b48c35a41cffbc082a9b31b0a54201d12438773735a541da67d5628ee18f80f7fc3ad700d07c9d2f661eb3aeebe38d2a56464a0c3ff9a1f71f0e32d0a0663cf0df7bfe6a25c2b004e2b7aa9c17ffba4cd534f685e64476fe59e5b29476b12aaf6c60a99d1af0ed322db633a0e6e7"}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000001140)={0x14, &(0x7f0000000f80)={0x20, 0x22, 0xcf, {0xcf, 0x1, "8d7a6d6691e11c40f4c874e9793f8466d823306c239fbe124dfad1879391b2ba6f0e1f179e08bbc17d31cf35d689d6adc8781b2436404186f685bab2be42be173ac2fc960933c32681d3678a782ec7eb794373404510e04adc83c4c9a481f665d4bfdf0931f83fd4e67092919e762d3dc18fa9c9011fcb871f84fae56cdda566de3232774a81ba79a864b63ee181e212cfd8630b533c968db27583c8b01f393b38f29759954e4c9e710f56f090ff8040f2272568b0efe8492ed17de0c74b19b01541b419d1f71e625f4b3e37cb"}}, &(0x7f0000001080)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "2cabb65949299f85cca867d2611c2eff8ec9203360c307edf5cfc5f511ea6186f6af093ee5479e789655c22506f466a72fdd4c0e540854316ef0f0b219851fa83c1112412befe2ee47051e47b61fb6b37f6e167770e425eac1e156a119549c224af42d8ab4ad253499e5b603913734fa3ac8cc0450e9bf7f17f1898441218308dcf39f4d2bb758deb5e0ec84f74eb8fe8c63c0e083e43278fa3692745465c9be2900605c0a5cda9066b9d050ca7a266afb"}}}, &(0x7f00000013c0)={0x44, &(0x7f0000001180)={0x20, 0xd, 0x45, "aa26dc97c9cc2fd77119c4a909746ce0796ae975dc84eb3be4435b34e02a033e14f8934a4c660c1415e15cee13080a4799032395bee546097f3523f7aa736721a60cede1d6"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001280)={0x20, 0x81, 0x1, 'r'}, &(0x7f00000012c0)={0x20, 0x82, 0x2, '5r'}, &(0x7f0000001300)={0x20, 0x83, 0x3, "55a637"}, &(0x7f0000001340)={0x20, 0x84, 0x3, "c7986a"}, &(0x7f0000001380)={0x20, 0x85, 0x3, "ec0d24"}}) 3.964164655s ago: executing program 3 (id=646): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffe7}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205ee0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0350000000000000000002000000000000000", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000600)="b5f98a374fbf3212416183121a357a3b99aeed4e6a8324b358be26de690ccb72e4135c43cdf522674ef7ea6520b76372c41830b741250ad82b0ec5d23eec72b680713a6b52f41acc46b65707000c8b09564bb50f302bb8e3dc8b93777e7d0f2c2a1c661cd2b255d25c623f7a41ac2bac1df2ae48359430d6e9b908800813055a3552d21dc80c405feb5a55c64aaebc0f524c18e69e325f92a23fc58754de53ddee702415494b60e3e1285ea47f9eef8b52e220be17700776f1cb249e22d3df373d6c693afda68f0cb87ac715f2805d9b66603abe97bb9811b084fefd7258883fda355c31ead32154a3e80f4204593b81167b", 0xf2}], 0x4, &(0x7f0000000880)}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.915234344s ago: executing program 2 (id=647): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) timer_create(0x0, 0x0, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xfff, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0xffff0000, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) readv(r3, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) (async) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (async) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) (async) ioctl$VT_SETMODE(r5, 0x5602, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250500000008000500070000000500070004000000050002000800000005000200030000001c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0500020000000000f44cb32d18b90a2bd6506e7656b19f8bd335f338bb73d994cf1b66a26fed7580b8d7e334482fcbc69d67e8cdd722bd1fbc9272edd5787c19cd369a1562fca69dfb0e227893ca1cd9c68e2867a360fd13698dca34e44743fd3a749ee6c9528e65d8681380541f6869c4ffdfcd3e6576b7fad828b9879088a4d40000000000000e1bf713d708a2b0cc39d67b15360cbd7f6cc605edac3d3ff718ea54fd27a16a3dea9f09f040be8763413a5c3174583aabbc50b53dae498fa4bdeb229991b7ce6e98eece6bd57913851bbb9e667d8f2e7409c4c58d50994600dd69a3d8882120951405e1ff66642c813b279f960000000000000000000000000000a2db688ac06158"], 0x58}, 0x1, 0x0, 0x0, 0x86}, 0x40884) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) 3.543138335s ago: executing program 0 (id=648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703003f00000000b704000000000000b50005008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.340020589s ago: executing program 0 (id=649): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r1, &(0x7f00000000c0), 0x28) (async) write$binfmt_script(r1, &(0x7f00000000c0), 0x28) recvmmsg(r1, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 3.213551682s ago: executing program 1 (id=650): capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000040)={0x0, 0x3ff, 0xfffffffd, 0x0, 0x80000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000140)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{0x8000000, 0x4000000000000e8}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x2, 0x2, 0x0, 0x0, 0x3, 0x10001}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c0c0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x6f0, 0x2e0, 0x940c, 0x3002, 0x0, 0x2c0, 0x620, 0x3d8, 0x3d8, 0x620, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0x2d8, 0x3c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0xfffffffffffffffd}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750) 3.031118086s ago: executing program 2 (id=651): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a118", 0x1d}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'bridge0\x00'}) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150002000000050005000a000000050001008700000005000400020000000900020073797a310000000011000300686173683a6970"], 0x60}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa107}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005000"], 0xc4}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.867747393s ago: executing program 0 (id=652): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYBLOB="d6856c4f216a576ab42051fda1f1b7a25240a7df8b00f05f0389b0d629b17c8c556e"], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000030072653000"/34], 0x28}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r9, 0x4611, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x1d}, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8, r8}) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r12 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000340)="a6fc688cd129135517f8fdf0d606a3ae31b0fcc84780f530a6316e9991d998e4eef85a23ecb5b7768752914547d097e87227badaedc5fbfb72bb353872c46b939d7963013a192f25dcf3761d5984", 0x4e, r11) keyctl$set_timeout(0xf, r12, 0xfffff49f) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2.579450994s ago: executing program 1 (id=653): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x4e22, 0x4000352a, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4c21}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_setup(0x1088, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_gettime(0x0, &(0x7f0000001f80)={0x0, 0x0}) futex_waitv(&(0x7f0000003880)=[{0x1, &(0x7f00000000c0)=0x4, 0x82}, {0x5, &(0x7f0000000100)=0x8, 0x82}, {0x2, &(0x7f0000000140)=0x8, 0x2}, {0x3, &(0x7f0000000240)=0x7ff, 0x2}, {0x4, &(0x7f0000000280)=0x5, 0x82}, {0xffffffffffffffff, &(0x7f00000002c0)=0x400, 0x82}, {0x1ff, &(0x7f0000000300)=0x9ebd, 0x2}, {0xa3e, &(0x7f0000000340)=0x7f, 0x2}, {0x41, &(0x7f0000000380)=0x9, 0x82}, {0x6, &(0x7f00000003c0)=0xbcd5, 0x82}, {0x4, &(0x7f0000000400)=0x1000, 0x2}, {0x7, &(0x7f0000000440)=0xff, 0x2}, {0x6, &(0x7f0000000480)=0x64c0, 0x82}, {0x9, &(0x7f00000004c0), 0x82}, {0x1, &(0x7f0000000500)=0x4, 0x82}, {0x7121aca0, &(0x7f0000000540)=0x7ff, 0x82}, {0xfffffffffffff154, &(0x7f0000000580)=0x2, 0x82}, {0x5, &(0x7f00000005c0)=0x7, 0x2}, {0xfff, &(0x7f0000000600)=0x3, 0x82}, {0x5494, &(0x7f0000000700)=0x8109, 0x2}, {0x4f, &(0x7f0000000740)=0x7, 0x82}, {0xffffffffffffffc8, &(0x7f0000000780)=0xc365, 0x2}, {0x0, &(0x7f00000007c0)=0x8, 0x82}, {0x1000, &(0x7f0000000800)=0x17, 0x82}, {0x502d81e7, &(0x7f0000000840)=0x5, 0x82}, {0x8, &(0x7f0000000880)=0x10001, 0x82}, {0x2, &(0x7f00000008c0)=0xfffffffffffffc69, 0x82}, {0x7f, &(0x7f0000000900)=0xd66a, 0x2}, {0x81, &(0x7f0000000940)=0xff, 0x80}, {0x9, &(0x7f0000000980)=0x9, 0x2}, {0x1, &(0x7f00000009c0)=0x7, 0x2}, {0x1, &(0x7f0000000a00)=0x3ff, 0x2}, {0x17, &(0x7f0000000a40)=0x81, 0x82}, {0x6, &(0x7f0000000a80)=0x100, 0x82}, {0x7, &(0x7f0000000ac0)=0x239, 0x2}, {0x1c, &(0x7f0000000b00), 0x82}, {0x8, &(0x7f0000000b40)=0xff, 0x2}, {0x6a, &(0x7f0000000b80)=0x4, 0x82}, {0xa, &(0x7f0000000bc0)=0x2, 0x82}, {0x2, &(0x7f0000000c00)=0x8, 0x2}, {0x80, &(0x7f0000000c40)=0x40, 0x82}, {0xf8, &(0x7f0000000c80)=0x2, 0x2}, {0x0, &(0x7f0000000cc0)=0x8, 0x82}, {0x7fff, &(0x7f0000000d00)=0x7, 0x82}, {0x100, &(0x7f0000000d40)=0xf396, 0x82}, {0x3, &(0x7f0000000d80)=0x5, 0x2}, {0x7, &(0x7f0000000dc0)=0x8, 0x2}, {0x7787, &(0x7f0000000e00)=0x2f, 0x82}, {0x6, &(0x7f0000000e40), 0x82}, {0x2, &(0x7f0000000e80)=0x1}, {0x3, &(0x7f0000000ec0)=0x10, 0x80}, {0x8, &(0x7f0000000f00)=0xc96, 0x82}, {0x0, &(0x7f0000000f40)=0x89, 0x82}, {0x7b, &(0x7f0000000f80)=0x5}, {0xb, &(0x7f0000000fc0)=0x2, 0x2}, {0x80000001, &(0x7f0000001000)=0x7, 0x2}, {0x9, &(0x7f0000001040)=0xf, 0x2}, {0x7, &(0x7f0000001080)=0x4, 0x2}, {0xb, &(0x7f00000010c0)=0x1000, 0x82}, {0xce6, &(0x7f0000001100)=0xcf, 0x2}, {0x3ff, &(0x7f0000001140)=0x7f, 0x82}, {0x5, &(0x7f0000001180)=0x2, 0x82}, {0x5, &(0x7f00000011c0)=0x1, 0x2}, {0x6, &(0x7f0000001200), 0x2}, {0x0, &(0x7f0000001240)=0xef, 0x82}, {0x55, &(0x7f0000001280)=0x56f1, 0x104}, {0x4, &(0x7f0000001300)=0x84c, 0x82}, {0x7, &(0x7f0000001380)=0x7, 0x82}, {0x3ff, &(0x7f00000013c0)=0x5}, {0x3, &(0x7f0000001400)=0xffff, 0x82}, {0x2, &(0x7f0000001440)=0x3, 0x2}, {0x81, &(0x7f0000001480)=0x1ff, 0x2}, {0x6, &(0x7f00000014c0)=0x7fffffff, 0x82}, {0x401, &(0x7f0000001500)=0x1, 0x82}, {0x9, &(0x7f0000001540)=0x2, 0x82}, {0x2, &(0x7f0000001580)=0xf57, 0x82}, {0x3, &(0x7f00000015c0)=0x8, 0x2}, {0x7fff, &(0x7f0000001600)=0x2, 0x82}, {0x100000001, &(0x7f0000001640)=0xa0000000, 0x2}, {0x3, &(0x7f0000001680)=0x9, 0x82}, {0xa0e, &(0x7f00000016c0)=0x3ff, 0x82}, {0x7fffffffffffffff, &(0x7f0000001700)=0x309a, 0x2}, {0x9, &(0x7f0000001740)=0x2, 0x2}, {0x1, &(0x7f0000001780)=0x9, 0x82}, {0x7, &(0x7f00000017c0)=0x2, 0x82}, {0x1, &(0x7f0000001800)=0x1, 0x2}, {0x9, &(0x7f0000001840)=0x6, 0x2}, {0xffffffffffffffff, 0x0, 0x82}, {0x9, &(0x7f00000018c0)=0xffffffffffffffff, 0x2}, {0x200, &(0x7f0000001900)=0x3, 0x82}, {0x7, &(0x7f0000001940)=0x4, 0x82}, {0x8000000000000000, &(0x7f0000001980)=0x2, 0x82}, {0x10, &(0x7f00000019c0)=0x3ff, 0x2}, {0xffffffffffff8001, &(0x7f0000001a00)=0x8, 0x2}, {0x9, &(0x7f0000001a40)=0x9, 0x2}, {0xffffffffffffffff, &(0x7f0000001a80)=0x1000, 0x2}, {0x6, &(0x7f0000001ac0)=0x5, 0x2}, {0x0, &(0x7f0000001b00)=0x9, 0x82}, {0x4, &(0x7f0000001b40)=0x6, 0x82}, {0x1000, &(0x7f0000001b80), 0x2}, {0x1, &(0x7f0000001bc0)=0x1, 0x2}, {0x1, &(0x7f0000001c00)=0x4, 0x2}, {0x6, &(0x7f0000001c40)=0x2, 0x2}, {0xffffffff, &(0x7f0000001c80)=0x4, 0x2}, {0x4ab1, &(0x7f0000001cc0)=0xb99, 0x66709c99c2cef5c0}, {0x0, &(0x7f0000001d00)=0x100000000, 0x82}, {0x60, &(0x7f0000001d40)=0x2, 0x2}, {0x40000000000000, &(0x7f0000001d80)=0xf2b, 0x2}, {0x750, &(0x7f0000001e00)=0x1ff, 0x2}, {0x5, &(0x7f0000001e40)=0x6, 0x82}, {0x1, &(0x7f0000001e80)=0x5, 0xf9cb552fad38d8c1}, {0x2, &(0x7f0000001ec0)=0x401, 0x82}, {0x0, &(0x7f0000001f00)=0x9, 0x82}], 0x71, 0x0, &(0x7f0000001fc0)={r9, r10+10000000}, 0x0) 2.429203381s ago: executing program 3 (id=654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4000000) 2.405217509s ago: executing program 4 (id=655): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) open_tree(r0, &(0x7f00000002c0)='./mnt\x00', 0x9001) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x81, 0x0, 0x1000, 0x20042}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r7, 0xc0404806, &(0x7f0000000040)) close(0xffffffffffffffff) tee(r6, r7, 0x7, 0xd) write$UHID_SET_REPORT_REPLY(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000005c0), 0x40, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./mnt\x00', &(0x7f0000000280), &(0x7f00000004c0)={0x0, 0xfb, 0xe0, 0xc09271ba24b59718, 0x3, "97fbf0afa47b171e74f1ce6ba033cedd", "ed3205d6135186d890141836568c2f966503037a3d49b5c4308b7f2e41cab37c110f686269f531c15664749ccf69d1373893cc4a629340e79135c35160fd14a016c34b6b40e6fe20f46434cf27b29d5cf51d17b0a13c9d0d2e44a4989cbb151108b7c6931fe47f83eeed8ee05f879e3af6c4b56563a23f089629b64ee21dda79c6b4e4d7a7ce68cfa45ab82ef1e82eaf6e6c6a6713a813ecdefee58e22c623696406d8b6c36cbd60a76c5a6d646e7027b05f282a6fc6d2c5c6637a260b52be88af7318d92e1c8c154c89a2"}, 0xe0, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000080), 0x51) 2.187885726s ago: executing program 3 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c0001800800014048ffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0xffffff4800000000, 0x30040043}, 0x240008c4) 1.923912384s ago: executing program 3 (id=657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000fc0)={&(0x7f0000000e40)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000e80)="0fa5e4b103", 0x5}, {&(0x7f00000020c0)="b56fdc0486ae140220a4eb4765262fcbfacc4efcef5b3b81255db8bb66b78bdc87b6f5d1a2915f8e16b1caad364c25cc2f52cf654bbe27c2a5a9da35cf7dc59417557e4441907795ced1ad2341218126f2873ed1ebbca0efe6f62421845918afba2a96c6c655789a489221805d06cfd83e3d809ba202a2c2f733362ea2ff8116395ddc9808a6338f58eb2f3e59c729924e35c9af34c4386c201c8a9de30af540103360fc41394c3e90d50a830aee49096edda5e3ac4373596e06505afaa9c4b8fe3c7bbf86f83c34dbbe8ac09c1628a741cd0a01ce8881d79fa561eecc32018c7cb3e5c80ff9d85578cc9a6ce242e623c65be54e47bfbe863557f8cd4231ce85f798c384274ee914269b7b63af3e1bdb116af3ec7b56ef08f5f7d8e9bcc74b6d10554c86cd60624866dcd6ebef06a480586932c6ededa02ae8baa9fe13d92cd7f2a108e07228ac843bb8b64aaecd68518890ab0127a54c742165111998b41eb814a6fa2cdd10a4d64d5748fbaaa5dd0fff8570368d03a11f9bde5729570ed0cfb789cdf3847af47bcaf9a5872ed7659dd5e487082e94aed3beb6e72c0f02d29a52d29a4ba1a3b63c055dcfa30cd15d7f203b9c677482678cab2440c9791392d4e566bea28027802c92be05a38300c92d909ff2cce387ad71b8549f068d86656aed098059c91cf324e089af5e59a1305acd23d5b7f80a877f387ee26023eaa75f99f9b323f636a94c4415c073a844fd73f22e6b5742cea846289446f7f1c735b0d0e27cd84b48db324092d02018eb2d6cd6ca0428a9a3f576d79d4b616fcf0fb40484347833b049acfb98bf53977dd6005910f36ff1a7ab3864ece2f5d6e9641ec1649531b03ca86c180cad7640c77f198562a2ea871892ca330612aeb3358264c6f55613c8ec91b8d1668b8e757cdb002287ef19b2ab3d9924a52e7504f36c7df35329c999a52a7da56bda284d9129c42290a4850842939c32297f53fc258017a9b60262bcec1cb01ecda49ed049ebd012660261a423e9775fc8eda7a30416038a6c37fa721616065de892f9ceb718b3a0b6b9b41e028913406b2693694fe2408e2e2017f1454817544302ec4e6df3153d3fdc60666a8f1752946fbb1d6dfcfbaf6deef14f7f038305b255e30e196f767ddbe34a60cd207ad7a1819c531a77a920bc92142281f86d4271092da456f2d50fe9d27c38f2367f03f46501856602cd991c941bbedabcd1d4e04f9233f2c47589b5501088a0459d64f1f6693e8b35906fd2e9704aea61f9a709f102b457b6dacef8bb440068177a737a659f67a254cea12a6862425e2f7952daefdd426d45f40e9f55516fe51a4ce2b68572dc6c4a3e6b1cbc8195ad18e0f37a2529f8da34809d1aed8f665e0cb88f75f6fbaca018a35adf5987dc999eb470054f1c7e08a2ebe81275668f21ead5bc4514a2fca0516a863a025a57d43e8e710f0f3364c6ce027c2b96949a58d1f43c950c7bffe141d97cfce15d87e69622d65738f3bbe79b8c9aa139d278fdf1bbd7a5b9e36974845d7ffd34ac6654f101048700db3e847445cdf6748b1fa90030ec24d22d184bb68bcec30cc8b2e13e7b94c4680e4582d9f5fc0474d7e96621e4661ad7405a68a29557058d9c5963d2853034120f556bf80b5a74fb921340603996f26b61d1c30cba5e0371eff54a15131332cefd1c3ea2adde949a5909ee97946534d0c6c6a68c0658a3d1058d18523259902cc53a5c86d0a00d07449a28774be70628d95f7a3ffa75f42db57cf816dd1f1a036c7888a03a2a49f90b321933c25a9e7a540fea85963f12dc0f0bba9e8f41966d6234256573fb2bc00a9deb7070b8f1630c58e5de78b87f8e5281b608efc1e133ddc5ebb1533f7f5d8680715df6eac4fedbf8d1ea26f9d29cace98f034fa46a9f889a8228241339b152afef67316d2a1b692a21c50373ed0d65d168c15574ee11219a0b61f4cbab24733342f99110047f857b427e8862eaf6c457ecea2797bcfee65acade20703b4fee6979ddaa27b1d16529cc1518c8ed891d130baea3aba0200fb8c4981ba4307faae12cca1807793454631f0b3bc973b05833c5bf6b74b4c703b98a1c15bba9b359a6d2b6b6244ffa6b516fecf6a28a7e522ffb211e55d908dd3115550df331382e1e9372895884ba6b0ecc56426592ab3b6a6292859d4a7cbdc255df933594634cf525068145c6084acf7e63d190b7ad56b7b5cc64ebde1b5ce78c657c93a60ff4b18d6f9765b7dde07ddd8f0c339906391f1f26cefb3ae07de49abdd3396f382ccdd364c094b90c9b29ebedae5f16930927ed7ed9417c5e8030f923412e0981a7bea25cfdea806a1102dbe5def0ac09ab59c964cfe848f73b6c17cf182a9cbd6fc148a8c1cc519f685ade275e1da5e8b6425a7be131278c10e99e11e20f3c79a8c6143c9ac87dce385b6f5067dfb0f9318b1fa75edd70877ad73c1408403d4b9abf55aa26854cf5226c5c1f731a49450cbc7858e6eb365e4fd7497b476a9d1c91928f35b710c03adaa03dcfb31164202e7833a686bc2681d6a9b07935d7ffecb52901f6f7ba6d1142644e5c3837069af16447586011728c42a6564e04de97fc477e2f01b36b13b77ad72687da70c15b8becc76a8eb2692456681e18ba562ca4385352e1806d768ff0686a30fde5157e44e66c63a556011b40c18f5fe8d91f2130f4985d37cba589b6650e71dcc1bc5c025ec6921ede1e5e2ffcb42e245d4d32891cb7bf4e93e724ef0c573dc8ebc748a6fec5974d2c6bd939ea82033b97cff797a6aa8ce80c4c90b732afa184d01da24a118869b089d99f6844bc631b1303232c7385b0b7635df503bd55c577f33601a287a97c42e284324fec4a7c90ae6938ae869a227f98bd9c881bec624335f3ba309c4033e05830d0f39f395874e4900f015a424caefff17ae4f5b5ec43a88758207be96c6bac8171cacd806318e1ea5f40c31afe7caf0bdeddb2934cf08f5de92b439f4d568c74f1e8902c347b0ba8ef7a1f5f51c2136dd43222be607d4d02670f9be5d77fcae934514547fe669148617369edeea96c5f4cebbf2560efa08776d9e6c1fc4815e6017043ca8b0483d0b00d8fce5ef7d6bcfedc0c8bc062bd638751a94285bb887364098aca2a763824f3167a63862c0639060224d73162512bd91f842484ce656bcdc0b055f1d08e51c460ed6d855431f3eaa144299a53c71caf7df5d75499005b98621b8c6ef013b0a5c3eb306b489381ec8c2e13a99a3597207b09027c54a625ce85262ccf7180ae9c8144d9dbfb5d26692b62f0a13824ddc19a2102a12a1e876c51210abd2c81f42117752510f2b7a1a3dd26ecf47e6226f71cb91c00eab30e5bb5272ddab68eabee7cbb78575d17c74f922560df45e02cd768adc6e50de994437ee39cf3377d39b7911192dd91eddc2b98a0a17f356c2c39c6bbc24d001bf8a2f3410d2a3f879ccef408e774675ccd60d896cba5fbc5de5b9dd4f95d1161fa1266fa2545168e629cdaa38bc3f2311763cc73bbc70f8cb668da82dd08dd2e2279c79184c00b82735bceb7e25b4f73ee2232cf2232b28cea532327808c64728f22e756734ef7a1faa6cb34b526e780244ba5b9585559b75b56a489837d97b36cbbd60f314e40692d2ec62696ea88a137dc0035c8b19f8e23f9ad09ad8964d5fc8eade8c60bb43b4809351fd2b90587148a29a7e781b0638397a8c1f168f376e9f18f27a27da3e89ad57eb6dc9b99a74f9676a2897010aa49db8bbcef58af8ee7baeecc7ed4c4d6ef2e31abfa74e4fe64793933cfe09cbed659327b7efd89135ea6f91904ba6020cc6dfde1b93efd0cf9d554868dfeb99c71c81293553e00dc4eb6f104cb47b1a4b5587bfc25bc707e352d35255ba39219f67237bf7b0a8edc6569a91372215958ee2ad2c87186753c7a0d39edf1736092f84c428fb42b7136745e66fc5a26b5823df7e3f286786320706b2e7216d50c5b284b4f0eba70ae5be52dd570e3cf8d7dab72d1070faf83d0ba6fe0ae4094a06c434cb3ebaa6550f36ef88d56269840f15384e71b8f02bb57bf9ed3d6831ad3d1eac6ff0d746cb9602076a5b515d79460094782d82c3afb75637620a3d13cb23a0815df80323142be76d5bda371faf1be46ca206498eab6d5f8121dde6db7f9a1988a50334c24936b6ab69b43f0fc6190e0eece588b71b42bb73bcce60e821c8718e8261ae1a3f10b67affc8161448c648aed848beab355c72be0dc51e41127dd7b1d0641e233a505c2b310d2189220ccd08783ca9d0cf76a08fe0a4b93a78e8691b4e5941671a26ddf6d4f461730fbfc61ed5429031b883e974cf531a155ec94dedaccdc4f97d95d32d76654b82d636ff703efdad2aca2c6bfb2a19037f35b44e685f5ae10ecdea54a8200646e4b1713c711039546fad83e16a0c7af89d8242a4477ab67a7f4744a79a6f446247bbbcd77b6fab5335ceddeabc52ffe0a6f8ef0b7add00655c4ee6830398551f111a6df69ce3c756bbbd27a9a760a8555118914b8f4d4ceeefcbfb364a5fbe3ea22f241abcdaa22ed51aba7f6945d82c5a160e52789afc0c07ee89e1d46636f63b16ab65c969f03b67b4b41a2de5186f271eed54015aa73e49a423d8219ac5a25a8e7170bacc800b5c632097efbe7dfb2b551f625030202c72720551001170e05f4c85af38f959fd3137e9c4333f4dd45d0cd6cc57381aa6803f8d6f48851c17953f9a2ed59d7f299c0160f8a67fcc1f74b4659e12fc36ae56089083068c613b2914b496fb84e6635852958b3836ff2d8cedd106009a0b7c1b8304d9c7c9d22d63f5b6222276932df0b14e4b6a8190b1b31d6e419c6c5b426e2b7d20b813513cd98ed396389b5e0b6d994a8d710e8c5e6927de92b1cb9e6dabbaf417227cc301d9502dc989f0f63d0a953", 0xd98}], 0x2, 0x0, 0x0, 0x4000070}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666f303c7b805000000b9000000000f01d9c0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x3a}], 0x1, 0x18, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.638721248s ago: executing program 2 (id=658): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a118", 0x1d}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'bridge0\x00'}) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150002000000050005000a000000050001008700000005000400020000000900020073797a310000000011000300686173683a6970"], 0x60}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa107}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.490787431s ago: executing program 1 (id=659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000007b080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000200000b50005008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.466197534s ago: executing program 0 (id=660): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) r3 = accept$inet(r2, &(0x7f0000000180)={0x2, 0x0, @private}, &(0x7f00000001c0)=0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x1, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) accept(r5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xffffff01, @mcast1, 0x2}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}], 0x58) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r6, @ANYBLOB='\b\x00\r\x00\n'], 0x70}, 0x1, 0x0, 0x0, 0x400c005}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 1.12785357s ago: executing program 1 (id=661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x1170, 0x1170, 0x178, 0x1170, 0x240, 0x1398, 0x1398, 0x240, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x178, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0xef4, 0x0, 0x3, 0x4}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x48a, 0x5, 0x4, 0x1, 0x0, "f342a67c2c8839f34dc41410843d9d5b6c0bffd9272e2a6bbb41043c26f552454c4da82330ce9be65548dea046d85e62aee4e92396bc1c01a84b1d197d6754c2"}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x118d, &(0x7f00000001c0)={0x0, 0x8d2dc, 0x800, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r8 = socket(0x21, 0x2, 0x2) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f00000005c0)={0x2000a210}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x2}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x25, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 767.798953ms ago: executing program 3 (id=662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) pread64(r3, &(0x7f0000000180)=""/244, 0x20, 0x100000000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c000000060000000c00000000000011010000000618bf21740000000600000001000005100000000800000000000000080000000a00000000000008000000000b00000000000001000000006d0072070000000000000003001f00000300000001000000a6000000002e"], &(0x7f0000000700)=""/4096, 0x7a, 0x1000, 0x0, 0x204}, 0x28) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0xb4, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x41}, 0x40800) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32, @ANYBLOB="0160000000000000240012800900010069706970000000001400028008000100", @ANYRES32], 0x44}}, 0x40848c0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905a3"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) (async) pread64(r3, &(0x7f0000000180)=""/244, 0x20, 0x100000000) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) socket$inet6(0xa, 0x3, 0x7) (async) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c000000060000000c00000000000011010000000618bf21740000000600000001000005100000000800000000000000080000000a00000000000008000000000b00000000000001000000006d0072070000000000000003001f00000300000001000000a6000000002e"], &(0x7f0000000700)=""/4096, 0x7a, 0x1000, 0x0, 0x204}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0xb4, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x41}, 0x40800) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32, @ANYBLOB="0160000000000000240012800900010069706970000000001400028008000100", @ANYRES32], 0x44}}, 0x40848c0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905a3"], 0x0) (async) 448.846967ms ago: executing program 0 (id=663): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[@wrmsr={0x65, 0x20, {0x227, 0x54}}, @code={0xa, 0x56, {"b91e0300000f32f345afb9800000c00f3235010000000f30c441677d26400fc75d00400f07400f01ca66baf80cb8de729388ef66bafc0cb000ee650f69d6b9200300000f32"}}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x4, 0x90dc223}}, @rdmsr={0x66, 0x18, {0x39f}}, @cpuid={0x64, 0x18, {0x1ff, 0x8000}}, @in_dx={0x69, 0x20, {0xce7e, 0x2}}, @uexit={0x0, 0x18, 0x5}, @in_dx={0x69, 0x20, {0x511b}}, @out_dx={0x6a, 0x28, {0xec3e, 0x1, 0x4}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest32=0x4800, 0x1, 0x6, 0x4}}, @rdmsr={0x66, 0x18, {0x1363}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host_nat=0x6c08, 0x8, 0x8001, 0x8}}, @nested_vmresume={0x130, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x1, 0x6}}], 0x216}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000280)={0x8, 0x0, [{0xb9d, 0x0, 0x2}, {0xb64, 0x0, 0xaf44}, {0x876, 0x0, 0x14000000}, {0x26a, 0x0, 0xc000000000000000}, {0x0, 0x0, 0xc65c}, {0xb21, 0x0, 0x6}, {0x0, 0x0, 0x81}, {0x260, 0x0, 0x2}]}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x15) r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$x86(r1, &(0x7f0000000780)={0x0, &(0x7f0000000340)=[@nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x6d, {0x0, "66ba4200b8ba460000efc421a5e2c8400f0766baf80cb8d8477d8bef66bafc0ced4b0fc76887b9800000c00f3235000800000f30430f01c9b99a0a0000b800000000ba010000000f3065f30f38f64e0566420fd1c2"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @code={0xa, 0x4d, {"b9800000c00f3235004000000f300f01df66410fc7b70c000000430f06c4c1b9dbd266b807008ee80f07430f070f20d835080000000f22d8670f01c9"}}, @cpuid={0x64, 0x18, {0x1, 0x7}}, @nested_load_code={0x12e, 0x5d, {0x2, "0f07c4e1fd73da5a410fed2db63d73ee660f3880420043da4b2fb923030000b8d4960000ba000000000f300f20d835200000000f22d836f20fff90680d0000f3450f090f07"}}, @out_dx={0x6a, 0x28, {0x8ae3, 0x1, 0x8}}, @cpuid={0x64, 0x18, {0xc61, 0x7c2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control16, 0x100, 0x2000000000000, 0x100000000}}, @wr_crn={0x67, 0x20, {0x8, 0x58000}}, @in_dx={0x69, 0x20, {0x341a, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control16=0x2, 0x7000000, 0x7, 0x6}}, @wr_crn={0x67, 0x20, {0x3, 0x9}}, @code={0xa, 0x68, {"c442e1ac54ede466baf80cb8567a8a89ef66bafc0c66ed66b86e008ed06465410f4b18c40269ad7cb000c4429908aca700180000c4015d57b80b0000006446f466baf80cb8522f4980ef66bafc0c66ed0fae816b000000"}}, @uexit={0x0, 0x18, 0x1a88}, @cpuid={0x64, 0x18, {0x1, 0x9}}, @rdmsr={0x66, 0x18, {0xa46}}, @nested_load_code={0x12e, 0x56, {0x1, "2e400f01bc55697400003e43d8c90f08c4217f2cbad84dfce1dd87e81f2f92c4c21947ee2e3666440f7419670f00610cb9bd0300000f3266b8dc000f00d8"}}, @rdmsr={0x66, 0x18, {0x256}}, @wr_drn={0x68, 0x20, {0x0, 0x5}}, @in_dx={0x69, 0x20, {0x34cf, 0x1}}, @rdmsr={0x66, 0x18, {0x614}}, @wrmsr={0x65, 0x20, {0x872, 0xd}}], 0x41d}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x101, 0x0) eventfd2(0x3d7, 0x80001) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x118100, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000880)={0x5, &(0x7f0000000840)=[{0x3, 0x10, 0x5, 0x808b}, {0x81, 0x5, 0x6, 0x3}, {0x8, 0x4, 0x0, 0x7f}, {0x9, 0xb7, 0x8}, {0x6, 0x9, 0x3, 0xb5}]}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002940)={0x50, 0x0, r6, {0x7, 0x2b, 0x1, 0x1080402, 0x7, 0x193, 0xb2, 0x8000, 0x0, 0x0, 0x10, 0x50000000}}, 0x50) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x4010, 0xffffffffffffffff, 0x8000000) r9 = syz_io_uring_complete(r8) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000029c0)) mremap(&(0x7f0000df6000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) mmap$binder(&(0x7f0000fb5000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x6) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000002a00)={0x165, r3}, 0x0) syz_clone3(&(0x7f0000002c80)={0x5120000, &(0x7f0000002a40), &(0x7f0000002a80), &(0x7f0000002ac0), {0x20}, &(0x7f0000002b00)=""/189, 0xbd, &(0x7f0000002bc0)=""/126, &(0x7f0000002c40)=[0xffffffffffffffff, r7, r7], 0x3, {r5}}, 0x58) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000002d00)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x10) r10 = fsmount(r9, 0x1, 0x71) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002dc0), r10) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x20, r11, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x100, 0x35}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x8000) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000002f00)={0x4, &(0x7f0000002ec0)=[{0x6, 0x9, 0x4, 0x5536}, {0xff3a, 0x1, 0xb, 0x9}, {0x5, 0x0, 0x1, 0x8}, {0x40, 0xfb, 0x8, 0xe}]}) syz_io_uring_setup(0x7767, &(0x7f0000002f40)={0x0, 0xfc3, 0x4000, 0x1, 0x1c2, 0x0, r9}, &(0x7f0000002fc0)=0x0, &(0x7f0000003000)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r13, &(0x7f0000003040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x4000, @fd_index=0x6, 0x5, 0x0, 0x0, 0x10, 0x1, {0x1, r14}}) syz_io_uring_complete(r12) 2.348239ms ago: executing program 0 (id=664): gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21}) ioprio_set$pid(0x2, 0x0, 0x4007) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020}, 0x2020) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x141342, 0x0) sendfile(r4, r4, 0x0, 0x4800000009) 0s ago: executing program 2 (id=665): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xffffffffffffff0b, 0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_pidfd_open(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x2, 0x0) r5 = gettid() write$rfkill(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000003c0), 0x4) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r1, 0x0, &(0x7f0000a3d000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x334e8b}) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[], 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0xc) kernel console output (not intermixed with test programs): ce strings: Mfr=1, Product=2, SerialNumber=3 [ 128.903889][ T56] usb 1-1: Product: syz [ 128.936023][ T56] usb 1-1: Manufacturer: syz [ 128.958799][ T56] usb 1-1: SerialNumber: syz [ 129.209929][ T5948] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 129.218867][ T56] usb 1-1: 0:2 : does not exist [ 129.266920][ T56] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 129.360115][ T56] usb 1-1: USB disconnect, device number 12 [ 129.391438][ T5948] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 129.411506][ T5948] usb 3-1: config 0 has no interface number 0 [ 129.429979][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.430115][ T5948] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 129.580089][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.601405][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.640482][ T5948] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.652574][ T5948] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 129.664433][ T5948] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 129.675151][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.683154][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.703066][ T5948] usb 3-1: config 0 descriptor?? [ 129.753235][ T5948] gspca_main: spca561-2.14.0 probing abcd:cdee [ 129.847682][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.931543][ T6488] netlink: 56 bytes leftover after parsing attributes in process `syz.2.152'. [ 130.220126][ T5948] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 130.261184][ T5948] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.275598][ T5948] usb 3-1: MIDIStreaming interface descriptor not found [ 130.429413][ T856] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.484405][ T5948] usb 3-1: USB disconnect, device number 10 [ 130.492565][ T856] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 130.509674][ T856] usb 4-1: can't read configurations, error -71 [ 131.392327][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 131.647681][ T6517] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 131.647681][ T6517] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 131.647681][ T6517] ~^>Ƥr&Dq.;쀯<2AU,00000000000000000000007' [ 131.690554][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.728273][ T6516] program syz.2.159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.090063][ T877] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 132.170376][ T5898] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 132.265170][ T877] usb 5-1: Using ep0 maxpacket: 16 [ 132.296554][ T877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.338666][ T877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.352551][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.360060][ T877] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 132.380958][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.390927][ T877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.426493][ T877] usb 5-1: config 0 descriptor?? [ 132.431476][ T5898] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 132.458289][ T5898] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 132.467529][ T5898] usb 3-1: Manufacturer: syz [ 132.486416][ T5898] usb 3-1: config 0 descriptor?? [ 132.559899][ T56] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.572151][ T6536] syzkaller0: entered promiscuous mode [ 132.578453][ T6536] syzkaller0: entered allmulticast mode [ 132.601358][ T6537] netlink: 'syz.0.168': attribute type 2 has an invalid length. [ 132.627236][ T6537] !: entered promiscuous mode [ 132.635655][ T6536] netlink: 'syz.0.168': attribute type 2 has an invalid length. [ 132.644444][ T6536] !: left promiscuous mode [ 132.689977][ T56] usb 2-1: device descriptor read/64, error -71 [ 132.921854][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.931710][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.940760][ T56] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 132.944945][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 132.963917][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.964055][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.985654][ T5898] usbhid 3-1:0.0: can't add hid device: -32 [ 132.992477][ T5898] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 133.062720][ T877] hid (null): bogus close delimiter [ 133.070071][ T877] hid (null): report_id 0 is invalid [ 133.076349][ T877] hid (null): bogus close delimiter [ 133.082613][ T56] usb 2-1: device descriptor read/64, error -71 [ 133.090140][ T877] hid (null): report_id 4126020106 is invalid [ 133.102658][ T877] hid (null): unknown global tag 0xd [ 133.187958][ T6544] ip6tnl1: entered promiscuous mode [ 133.200309][ T56] usb usb2-port1: attempt power cycle [ 133.465949][ T877] letsketch 0003:6161:4D15.0006: Device info: ᣍ [ 133.584067][ T5912] usb 3-1: USB disconnect, device number 11 [ 133.610012][ T56] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.688641][ T877] letsketch 0003:6161:4D15.0006: Device info: ఁ [ 133.741047][ T56] usb 2-1: device descriptor read/8, error -71 [ 134.115898][ T56] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 134.145025][ T877] usb 5-1: Max retries (5) exceeded reading string descriptor 202 [ 134.166776][ T877] letsketch 0003:6161:4D15.0006: probe with driver letsketch failed with error -71 [ 134.191299][ T56] usb 2-1: device descriptor read/8, error -71 [ 134.238368][ T877] usb 5-1: USB disconnect, device number 12 [ 134.340547][ T56] usb usb2-port1: unable to enumerate USB device [ 134.390231][ T5948] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 134.589854][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 134.600037][ T5948] usb 3-1: config 0 has no interfaces? [ 134.617249][ T5948] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.627643][ T5948] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.638694][ T5948] usb 3-1: Manufacturer: syz [ 134.648531][ T5948] usb 3-1: config 0 descriptor?? [ 135.074485][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 136.555826][ T6585] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.736740][ T6594] loop9: detected capacity change from 0 to 7 [ 136.791622][ T6594] Dev loop9: unable to read RDB block 7 [ 136.849925][ T6594] loop9: unable to read partition table [ 136.880289][ T6594] loop9: partition table beyond EOD, truncated [ 136.996350][ T6594] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 137.037333][ T6602] fuse: Unknown parameter '' [ 137.294801][ T5898] usb 3-1: USB disconnect, device number 12 [ 137.400619][ T877] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 137.504909][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.194'. [ 137.573266][ T877] usb 1-1: config index 0 descriptor too short (expected 215, got 45) [ 137.598844][ T877] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 137.618316][ T877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.637888][ T877] usb 1-1: Product: syz [ 137.657159][ T877] usb 1-1: Manufacturer: syz [ 137.674518][ T877] usb 1-1: SerialNumber: syz [ 138.113640][ T877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 138.180140][ T877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 139.326185][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'. [ 139.397351][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 140.170468][ T5898] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 140.260017][ T856] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 140.284437][ T877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO [ 140.339165][ T877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 140.362179][ T5898] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 140.375459][ T5898] usb 3-1: config 7 has no interface number 0 [ 140.394627][ T5898] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 140.408231][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.418542][ T877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 140.472625][ T5898] usb 3-1: Product: syz [ 140.477200][ T856] usb 5-1: Using ep0 maxpacket: 16 [ 140.486664][ T5898] usb 3-1: Manufacturer: syz [ 140.494796][ T5898] usb 3-1: SerialNumber: syz [ 140.503222][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.535081][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.546595][ T877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 140.563199][ T856] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 140.605034][ T877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 140.612141][ T856] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 140.653770][ T877] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 140.683621][ T856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.714430][ T856] usb 5-1: config 0 descriptor?? [ 140.715631][ T877] usb 1-1: USB disconnect, device number 13 [ 141.383425][ T856] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0007/input/input19 [ 141.400785][ T6673] loop9: detected capacity change from 0 to 7 [ 141.411885][ T6673] Dev loop9: unable to read RDB block 7 [ 141.425100][ T6673] loop9: AHDI p4 [ 141.431409][ T5898] as10x_usb: device has been detected [ 141.565820][ T5898] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 141.579365][ T6673] loop9: partition table partially beyond EOD, truncated [ 141.594571][ T856] appleir 0003:05AC:8241.0007: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 141.702408][ T5898] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 141.754869][ T856] usb 5-1: USB disconnect, device number 13 [ 141.897550][ T6674] fido_id[6674]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 142.160065][ T5898] as10x_usb: error during firmware upload part1 [ 142.167261][ T5898] Registered device Elgato EyeTV DTT Deluxe [ 143.351859][ T877] usb 3-1: USB disconnect, device number 13 [ 143.444829][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 143.444850][ T30] audit: type=1804 audit(1764491606.144:67): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.215" name="/newroot/38/file1" dev="fuse" ino=1 res=1 errno=0 [ 143.641215][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 143.668506][ T877] Unregistered device Elgato EyeTV DTT Deluxe [ 143.700914][ T877] as10x_usb: device has been disconnected [ 143.738019][ T6720] loop9: detected capacity change from 0 to 7 [ 143.755137][ T6720] Dev loop9: unable to read RDB block 7 [ 143.761327][ T6720] loop9: AHDI p4 [ 143.791197][ T6720] loop9: partition table partially beyond EOD, truncated [ 144.001281][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 144.576627][ T30] audit: type=1326 audit(1764491607.284:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9238f749 code=0x7ffc0000 [ 144.609539][ T6725] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 144.709251][ T30] audit: type=1326 audit(1764491607.284:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9238f749 code=0x7ffc0000 [ 144.789429][ T30] audit: type=1326 audit(1764491607.284:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9238f749 code=0x7ffc0000 [ 144.976152][ T30] audit: type=1326 audit(1764491607.284:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9238f749 code=0x7ffc0000 [ 145.135806][ T30] audit: type=1326 audit(1764491607.284:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f3a9238f749 code=0x7ffc0000 [ 145.238834][ T30] audit: type=1326 audit(1764491607.284:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9238f749 code=0x7ffc0000 [ 145.269654][ T30] audit: type=1326 audit(1764491607.284:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9238f749 code=0x7ffc0000 [ 145.295975][ T30] audit: type=1326 audit(1764491607.284:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9238f749 code=0x7ffc0000 [ 145.322400][ T30] audit: type=1326 audit(1764491607.284:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9238f749 code=0x7ffc0000 [ 146.284135][ T6776] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.232'. [ 146.631466][ T6784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.234'. [ 146.904248][ T6796] netlink: 76 bytes leftover after parsing attributes in process `syz.0.238'. [ 147.048327][ T6799] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer. [ 147.329235][ T6801] macsec1: entered promiscuous mode [ 147.356400][ T6801] macsec1: entered allmulticast mode [ 147.991707][ T6833] netlink: 156 bytes leftover after parsing attributes in process `syz.3.249'. [ 148.203231][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.233253][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.441989][ T56] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 149.231492][ T6859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.253'. [ 149.249917][ T5913] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 149.466021][ T5913] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 149.501156][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.541164][ T5913] usb 5-1: Product: syz [ 149.571335][ T5913] usb 5-1: Manufacturer: syz [ 149.642480][ T5913] usb 5-1: SerialNumber: syz [ 150.102209][ T5913] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 150.213682][ T5913] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 150.342804][ T5913] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 150.452195][ T5913] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 150.580244][ T5913] usb 5-1: USB disconnect, device number 15 [ 151.160107][ T6877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.259'. [ 152.723747][ T6899] xt_bpf: check failed: parse error [ 153.340088][ T5913] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.485462][ T856] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.510966][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 153.542333][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 153.564045][ T5913] usb 3-1: config 1 has an invalid interface number: 15 but max is 0 [ 153.580193][ T5913] usb 3-1: config 1 has no interface number 0 [ 153.617581][ T5913] usb 3-1: config 1 interface 15 altsetting 8 endpoint 0x8D has an invalid bInterval 250, changing to 7 [ 153.632891][ T6917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.661091][ T5913] usb 3-1: config 1 interface 15 has no altsetting 0 [ 153.726093][ T856] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 153.789825][ T5948] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 153.862583][ T5913] usb 3-1: New USB device found, idVendor=19d2, idProduct=7e26, bcdDevice=96.b3 [ 153.956869][ T856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.965267][ T6924] netlink: 56 bytes leftover after parsing attributes in process `syz.1.275'. [ 153.975463][ T6917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.983993][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.992496][ T856] usb 4-1: Product: syz [ 153.996730][ T856] usb 4-1: Manufacturer: syz [ 154.034981][ T5913] usb 3-1: Product: syz [ 154.043307][ T856] usb 4-1: SerialNumber: syz [ 154.059330][ T5913] usb 3-1: Manufacturer: syz [ 154.180834][ T5913] usb 3-1: SerialNumber: syz [ 154.464888][ T5913] rndis_host 3-1:1.15: invalid descriptor buffer length [ 154.500250][ T5913] usb 3-1: bad CDC descriptors [ 154.594919][ T856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 154.607496][ T856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 154.634555][ T5913] usb 3-1: USB disconnect, device number 14 [ 155.156123][ T6938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.279'. [ 155.202706][ T6938] team_slave_0: entered promiscuous mode [ 155.208440][ T6938] team_slave_1: entered promiscuous mode [ 155.231946][ T6938] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 155.253901][ T6938] team_slave_0: left promiscuous mode [ 155.259443][ T6938] team_slave_1: left promiscuous mode [ 155.831722][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.860321][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.121473][ T856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 156.136273][ T856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 156.169306][ T6955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.428280][ T6961] netlink: 56 bytes leftover after parsing attributes in process `syz.1.286'. [ 157.502694][ T856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 157.592675][ T856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 157.621492][ T6975] netlink: 'syz.1.291': attribute type 10 has an invalid length. [ 157.653539][ T856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 157.676453][ T856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 157.711453][ T856] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 157.768628][ T856] usb 4-1: USB disconnect, device number 11 [ 157.834835][ T6982] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.293'. [ 157.888239][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 157.929909][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 157.989121][ T6985] tipc: Enabling of bearer rejected, failed to enable media [ 158.115654][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 158.141362][ T6987] x_tables: ip_tables: osf match: only valid for protocol 6 [ 158.179842][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 158.203684][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.222802][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.232271][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 158.259858][ T10] usb 5-1: Product: syz [ 158.267206][ T10] usb 5-1: Manufacturer: syz [ 158.288100][ T10] usb 5-1: SerialNumber: syz [ 158.307797][ T10] usb 5-1: config 0 descriptor?? [ 158.354480][ T10] usb 5-1: selecting invalid altsetting 0 [ 158.419870][ T56] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 158.631377][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 158.648297][ T56] usb 1-1: unable to get BOS descriptor or descriptor too short [ 158.691616][ T56] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 158.732458][ T56] usb 1-1: config 13 has no interface number 0 [ 158.769103][ T56] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 158.802116][ T24] usb 5-1: USB disconnect, device number 16 [ 158.868139][ T56] usb 1-1: config 13 interface 50 has no altsetting 0 [ 158.887299][ T56] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 158.931985][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.951160][ T56] usb 1-1: Product: syz [ 158.966035][ T56] usb 1-1: Manufacturer: syz [ 158.978769][ T56] usb 1-1: SerialNumber: syz [ 159.012843][ T6990] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 159.250189][ T56] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 159.310465][ T56] usb 1-1: MIDIStreaming interface descriptor not found [ 159.406465][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 159.430892][ T56] usb 1-1: USB disconnect, device number 16 [ 159.503510][ T7018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.510907][ T7018] IPv6: NLM_F_CREATE should be set when creating new route [ 159.522242][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.547953][ T7018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.556264][ T7018] IPv6: NLM_F_CREATE should be set when creating new route [ 160.829157][ T7036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.306'. [ 160.887597][ T7036] team_slave_0: entered promiscuous mode [ 160.893412][ T7036] team_slave_1: entered promiscuous mode [ 161.005170][ T7036] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.091370][ T7036] team_slave_0: left promiscuous mode [ 161.096856][ T7036] team_slave_1: left promiscuous mode [ 161.299261][ T856] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 161.370035][ T5912] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.499848][ T856] usb 3-1: Using ep0 maxpacket: 8 [ 161.556212][ T856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.589054][ T856] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 161.590013][ T5912] usb 2-1: device descriptor read/64, error -71 [ 161.639833][ T856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 161.678655][ T856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 161.724550][ T7049] veth3: entered promiscuous mode [ 161.742044][ T856] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 161.792013][ T856] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 161.819788][ T856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 161.842879][ T856] usb 3-1: Product: syz [ 161.847084][ T856] usb 3-1: Manufacturer: syz [ 161.859776][ T856] usb 3-1: SerialNumber: syz [ 161.871474][ T5912] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 161.901892][ T856] usb 3-1: config 0 descriptor?? [ 162.060135][ T5912] usb 2-1: device descriptor read/64, error -71 [ 162.112883][ T856] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 162.129813][ T856] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 162.193519][ T5912] usb usb2-port1: attempt power cycle [ 162.222396][ T856] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 162.269237][ T856] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 162.321260][ T856] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 162.388309][ T856] usb 3-1: USB disconnect, device number 15 [ 162.399351][ T7062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.470222][ T56] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 162.569865][ T5912] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 162.624923][ T5912] usb 2-1: device descriptor read/8, error -71 [ 162.717608][ T7068] netlink: 84 bytes leftover after parsing attributes in process `syz.0.313'. [ 162.735738][ T56] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.778665][ T56] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 162.816111][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.877828][ T56] usb 4-1: config 0 descriptor?? [ 162.878426][ T7073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.900593][ T5912] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 162.912502][ T56] pwc: Askey VC010 type 2 USB webcam detected. [ 162.951158][ T5912] usb 2-1: device descriptor read/8, error -71 [ 163.054012][ T30] kauditd_printk_skb: 268 callbacks suppressed [ 163.054032][ T30] audit: type=1326 audit(1764491625.764:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedd58f749 code=0x7ffc0000 [ 163.086726][ T5912] usb usb2-port1: unable to enumerate USB device [ 163.088828][ T30] audit: type=1326 audit(1764491625.794:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7faedd58f749 code=0x7ffc0000 [ 163.117102][ T30] audit: type=1326 audit(1764491625.824:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedd58f749 code=0x7ffc0000 [ 163.312074][ T30] audit: type=1326 audit(1764491626.024:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faedd58f749 code=0x7ffc0000 [ 163.336194][ T30] audit: type=1326 audit(1764491626.044:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedd58f749 code=0x7ffc0000 [ 163.374977][ T30] audit: type=1326 audit(1764491626.084:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedd58f749 code=0x7ffc0000 [ 163.402541][ T30] audit: type=1326 audit(1764491626.114:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faedd58f749 code=0x7ffc0000 [ 163.402608][ T56] pwc: recv_control_msg error -32 req 02 val 2b00 [ 163.459902][ T30] audit: type=1326 audit(1764491626.154:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedd58f749 code=0x7ffc0000 [ 163.526671][ T30] audit: type=1326 audit(1764491626.204:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faedd58f749 code=0x7ffc0000 [ 163.549514][ T56] pwc: recv_control_msg error -32 req 02 val 2700 [ 163.557429][ T56] pwc: recv_control_msg error -32 req 02 val 2c00 [ 163.564731][ T30] audit: type=1326 audit(1764491626.214:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedd58f749 code=0x7ffc0000 [ 163.588137][ T56] pwc: recv_control_msg error -32 req 04 val 1000 [ 163.598529][ T56] pwc: recv_control_msg error -32 req 04 val 1300 [ 163.605993][ T56] pwc: recv_control_msg error -32 req 04 val 1400 [ 163.613400][ T56] pwc: recv_control_msg error -32 req 02 val 2000 [ 163.628504][ T56] pwc: recv_control_msg error -32 req 02 val 2100 [ 163.645979][ T56] pwc: recv_control_msg error -32 req 04 val 1500 [ 164.166581][ T56] pwc: recv_control_msg error -71 req 02 val 2400 [ 164.218845][ T56] pwc: recv_control_msg error -71 req 02 val 2600 [ 164.226463][ T56] pwc: recv_control_msg error -71 req 02 val 2900 [ 164.240228][ T5913] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 164.240972][ T56] pwc: recv_control_msg error -71 req 02 val 2800 [ 164.335907][ T56] pwc: recv_control_msg error -71 req 04 val 1100 [ 164.370238][ T56] pwc: recv_control_msg error -71 req 04 val 1200 [ 164.452458][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 164.480908][ T56] pwc: Registered as video103. [ 164.497591][ T5913] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 164.521207][ T56] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 164.530903][ T5913] usb 2-1: can't read configurations, error -22 [ 164.670346][ T56] usb 4-1: USB disconnect, device number 12 [ 164.709982][ T5913] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 164.950300][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 165.000733][ T5913] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 165.037212][ T5913] usb 2-1: can't read configurations, error -22 [ 165.073624][ T5913] usb usb2-port1: attempt power cycle [ 165.336952][ T7108] x_tables: duplicate underflow at hook 3 [ 165.460076][ T5913] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 165.515502][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 165.574582][ T5913] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 165.592585][ T5913] usb 2-1: can't read configurations, error -22 [ 165.627300][ T7118] netlink: 116 bytes leftover after parsing attributes in process `syz.2.328'. [ 165.750546][ T5913] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 165.802740][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 165.822195][ T5913] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 165.835572][ T5913] usb 2-1: can't read configurations, error -22 [ 165.845229][ T5913] usb usb2-port1: unable to enumerate USB device [ 166.069840][ T856] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 166.189145][ T7131] netlink: 56 bytes leftover after parsing attributes in process `syz.2.333'. [ 166.240601][ T856] usb 1-1: Using ep0 maxpacket: 8 [ 166.263420][ T856] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 166.280845][ T856] usb 1-1: config 2 has no interface number 0 [ 166.289878][ T856] usb 1-1: config 2 interface 31 has no altsetting 0 [ 166.310369][ T856] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 166.382144][ T856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.410420][ T856] usb 1-1: Product: syz [ 166.414742][ T856] usb 1-1: Manufacturer: syz [ 166.419971][ T856] usb 1-1: SerialNumber: syz [ 166.539299][ T7135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.546607][ T7135] IPv6: NLM_F_CREATE should be set when creating new route [ 166.601958][ T7137] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 166.971940][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 167.153526][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 167.955470][ T856] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 168.070717][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 168.253649][ T7175] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 168.310116][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 168.320886][ T10] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.332841][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.339693][ T10] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 168.349586][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.368838][ T10] usb 5-1: config 0 descriptor?? [ 168.394156][ T856] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 168.609782][ T856] usb 3-1: Using ep0 maxpacket: 32 [ 168.640817][ T56] usb 1-1: USB disconnect, device number 17 [ 168.760292][ T856] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.782624][ T7182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.351'. [ 168.822562][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 168.849257][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 168.862634][ T856] usb 3-1: config 0 has no interface number 0 [ 168.926477][ T7182] team_slave_0: entered promiscuous mode [ 168.932951][ T7182] team_slave_1: entered promiscuous mode [ 168.947494][ T10] usb 5-1: USB disconnect, device number 17 [ 168.973518][ T856] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 169.015603][ T7182] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.055276][ T856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.057108][ T7182] team_slave_0: left promiscuous mode [ 169.069031][ T7182] team_slave_1: left promiscuous mode [ 169.096062][ T856] usb 3-1: Product: syz [ 169.109327][ T856] usb 3-1: Manufacturer: syz [ 169.122756][ T856] usb 3-1: SerialNumber: syz [ 169.155298][ T856] usb 3-1: config 0 descriptor?? [ 169.262074][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 169.262091][ T30] audit: type=1326 audit(1764491631.974:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 169.292278][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.385791][ T30] audit: type=1326 audit(1764491632.014:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 169.426497][ T856] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 169.467766][ T856] usb 3-1: selecting invalid altsetting 1 [ 169.497449][ T856] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 169.538144][ T30] audit: type=1326 audit(1764491632.034:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 169.566537][ T856] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 169.589602][ T56] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 169.677452][ T7153] netlink: 2 bytes leftover after parsing attributes in process `syz.2.340'. [ 169.710281][ T856] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 169.738344][ T7200] loop9: detected capacity change from 0 to 7 [ 169.757351][ T856] usb 3-1: media controller created [ 169.772360][ T30] audit: type=1326 audit(1764491632.034:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 169.821764][ T5982] Dev loop9: unable to read RDB block 7 [ 169.827553][ T5982] loop9: AHDI p4 [ 169.837233][ T56] usb 5-1: unable to get BOS descriptor or descriptor too short [ 169.856817][ T30] audit: type=1326 audit(1764491632.034:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 169.880201][ T56] usb 5-1: config index 0 descriptor too short (expected 33540, got 36) [ 169.898782][ T56] usb 5-1: config 108 has too many interfaces: 60, using maximum allowed: 32 [ 169.913047][ T856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.923130][ T5982] loop9: partition table partially beyond EOD, truncated [ 169.949365][ T56] usb 5-1: config 108 has an invalid descriptor of length 0, skipping remainder of the config [ 169.970422][ T30] audit: type=1326 audit(1764491632.034:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 169.995432][ T56] usb 5-1: config 108 has 1 interface, different from the descriptor's value: 60 [ 170.037135][ T7203] netlink: 44 bytes leftover after parsing attributes in process `syz.1.358'. [ 170.048992][ T56] usb 5-1: config 108 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.065275][ T30] audit: type=1326 audit(1764491632.064:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 170.089492][ T7203] netlink: 43 bytes leftover after parsing attributes in process `syz.1.358'. [ 170.091254][ T56] usb 5-1: config 108 interface 0 has no altsetting 0 [ 170.112507][ T7200] Dev loop9: unable to read RDB block 7 [ 170.119774][ T7203] netlink: 'syz.1.358': attribute type 6 has an invalid length. [ 170.136191][ T7203] netlink: 'syz.1.358': attribute type 5 has an invalid length. [ 170.138970][ T7200] loop9: AHDI p4 [ 170.148512][ T7203] netlink: 43 bytes leftover after parsing attributes in process `syz.1.358'. [ 170.151182][ T7200] loop9: partition table partially beyond EOD, truncated [ 170.172555][ T56] usb 5-1: string descriptor 0 read error: -22 [ 170.181577][ T30] audit: type=1326 audit(1764491632.064:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 170.209302][ T56] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 170.237112][ T56] usb 5-1: New USB device strings: Mfr=1, Product=235, SerialNumber=2 [ 170.320963][ T30] audit: type=1326 audit(1764491632.064:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 170.427515][ T30] audit: type=1326 audit(1764491632.064:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 170.716639][ T7186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.353'. [ 170.772758][ T7210] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 171.118595][ T856] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 171.127510][ T856] zl10353_read_register: readreg error (reg=127, ret==-71) [ 171.142152][ T856] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 171.236487][ T856] usb 3-1: USB disconnect, device number 16 [ 171.286601][ T7215] FAULT_INJECTION: forcing a failure. [ 171.286601][ T7215] name failslab, interval 1, probability 0, space 0, times 0 [ 171.404012][ T7215] CPU: 1 UID: 0 PID: 7215 Comm: syz.2.363 Not tainted syzkaller #0 PREEMPT(full) [ 171.404040][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.404050][ T7215] Call Trace: [ 171.404058][ T7215] [ 171.404066][ T7215] dump_stack_lvl+0x189/0x250 [ 171.404095][ T7215] ? __pfx____ratelimit+0x10/0x10 [ 171.404120][ T7215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.404141][ T7215] ? __pfx__printk+0x10/0x10 [ 171.404163][ T7215] ? __pfx___might_resched+0x10/0x10 [ 171.404182][ T7215] ? fs_reclaim_acquire+0x7d/0x100 [ 171.404204][ T7215] should_fail_ex+0x414/0x560 [ 171.404234][ T7215] should_failslab+0xa8/0x100 [ 171.404254][ T7215] __kmalloc_cache_noprof+0x6f/0x6f0 [ 171.404277][ T7215] ? nft_pernet+0x23/0x240 [ 171.404295][ T7215] ? nf_tables_newtable+0x435/0x1890 [ 171.404320][ T7215] nf_tables_newtable+0x435/0x1890 [ 171.404340][ T7215] ? nfnetlink_has_listeners+0x12/0x50 [ 171.404381][ T7215] nfnetlink_rcv+0x11d9/0x2590 [ 171.404436][ T7215] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 171.404474][ T7215] ? ref_tracker_free+0x63a/0x7d0 [ 171.404519][ T7215] ? __netlink_deliver_tap+0x807/0x850 [ 171.404537][ T7215] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.404582][ T7215] netlink_unicast+0x82f/0x9e0 [ 171.404616][ T7215] ? __pfx_netlink_unicast+0x10/0x10 [ 171.404642][ T7215] ? netlink_sendmsg+0x642/0xb30 [ 171.404658][ T7215] ? skb_put+0x11b/0x210 [ 171.404678][ T7215] netlink_sendmsg+0x805/0xb30 [ 171.404706][ T7215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.404726][ T7215] ? aa_sock_msg_perm+0xf1/0x1d0 [ 171.404754][ T7215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 171.404771][ T7215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.404787][ T7215] __sock_sendmsg+0x21c/0x270 [ 171.404810][ T7215] ____sys_sendmsg+0x505/0x830 [ 171.404835][ T7215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.404862][ T7215] ? import_iovec+0x74/0xa0 [ 171.404886][ T7215] ___sys_sendmsg+0x21f/0x2a0 [ 171.404907][ T7215] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.404963][ T7215] ? __fget_files+0x2a/0x420 [ 171.404980][ T7215] ? __fget_files+0x3a0/0x420 [ 171.405007][ T7215] __x64_sys_sendmsg+0x19b/0x260 [ 171.405031][ T7215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.405057][ T7215] ? __pfx_ksys_write+0x10/0x10 [ 171.405084][ T7215] ? do_syscall_64+0xbe/0xfa0 [ 171.405109][ T7215] do_syscall_64+0xfa/0xfa0 [ 171.405130][ T7215] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.405152][ T7215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.405169][ T7215] ? clear_bhb_loop+0x60/0xb0 [ 171.405190][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.405206][ T7215] RIP: 0033:0x7fa70958f749 [ 171.405223][ T7215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.405236][ T7215] RSP: 002b:00007fa70a484038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.405254][ T7215] RAX: ffffffffffffffda RBX: 00007fa7097e5fa0 RCX: 00007fa70958f749 [ 171.405266][ T7215] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 171.405277][ T7215] RBP: 00007fa70a484090 R08: 0000000000000000 R09: 0000000000000000 [ 171.405289][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.405300][ T7215] R13: 00007fa7097e6038 R14: 00007fa7097e5fa0 R15: 00007fa70990fa28 [ 171.405328][ T7215] [ 171.783168][ T5912] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 171.949823][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 171.957020][ T5912] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 171.965490][ T5912] usb 4-1: config 0 has no interface number 0 [ 171.972565][ T5912] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.983919][ T5912] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.996712][ T5912] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 172.006964][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 172.015419][ T5912] usb 4-1: Product: syz [ 172.019827][ T5912] usb 4-1: SerialNumber: syz [ 172.026623][ T5912] usb 4-1: config 0 descriptor?? [ 172.060644][ T5912] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 172.075650][ T5912] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input21 [ 172.236098][ T7222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.307851][ T7222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.390930][ T7212] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 172.460012][ T856] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 172.473132][ T7212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.640326][ T856] usb 2-1: Using ep0 maxpacket: 8 [ 172.647802][ T856] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 172.672934][ T856] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 172.690881][ T856] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 172.729841][ T856] usb 2-1: Product: syz [ 172.743924][ T856] usb 2-1: Manufacturer: syz [ 172.769608][ T856] usb 2-1: SerialNumber: syz [ 172.945482][ T5948] usb 5-1: USB disconnect, device number 18 [ 173.061138][ T5913] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 173.107700][ T856] usb 2-1: Invalid connection information received from device [ 173.135058][ T7239] loop9: detected capacity change from 0 to 7 [ 173.230134][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 173.239409][ T7239] Dev loop9: unable to read RDB block 7 [ 173.246260][ T5913] usb 3-1: config 0 has no interfaces? [ 173.260033][ T5913] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 173.270246][ T5913] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 173.278439][ T5913] usb 3-1: Manufacturer: syz [ 173.319452][ T5913] usb 3-1: config 0 descriptor?? [ 173.344217][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'. [ 173.371138][ T7239] loop9: unable to read partition table [ 173.371972][ T5948] usb 2-1: USB disconnect, device number 19 [ 173.377088][ T7239] loop9: partition table beyond EOD, truncated [ 173.553956][ T7239] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 173.591464][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.600557][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.608939][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.617698][ T5912] usb 4-1: USB disconnect, device number 13 [ 173.623817][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.623836][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 173.775056][ T5912] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 174.070027][ T56] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 174.293176][ T56] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 174.331152][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 174.393610][ T56] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254 [ 174.520457][ T56] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.648235][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 174.670858][ T56] usb 5-1: SerialNumber: syz [ 174.687719][ T7248] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.747784][ T56] cdc_acm 5-1:1.0: skipping garbage [ 174.783185][ T7272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'. [ 174.786803][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 175.775329][ T56] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 175.801529][ T56] usb 5-1: USB disconnect, device number 19 [ 176.038160][ T7283] ALSA: mixer_oss: invalid OSS volume '@@' [ 176.073289][ T5912] usb 3-1: USB disconnect, device number 17 [ 176.519939][ T5913] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 176.729821][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 176.778496][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 176.834612][ T5913] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 176.860308][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.887172][ T5913] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 176.951375][ T5913] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 177.009787][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.047370][ T5913] usb 1-1: Product: syz [ 177.071398][ T5913] usb 1-1: Manufacturer: syz [ 177.071424][ T5913] usb 1-1: SerialNumber: syz [ 177.092070][ T5913] usb 1-1: config 0 descriptor?? [ 177.092840][ T7287] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 177.122989][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 177.123199][ T5913] port100 1-1:0.0: NFC: Could not get supported command types [ 177.245245][ T5912] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 177.338194][ T5913] usb 1-1: USB disconnect, device number 18 [ 177.409922][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 177.417327][ T5912] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 177.452775][ T5912] usb 2-1: config 0 has no interface number 0 [ 177.471339][ T5912] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.495563][ T5912] usb 2-1: config 0 interface 89 has no altsetting 0 [ 177.523153][ T5912] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 177.537225][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.594677][ T5912] usb 2-1: Product: syz [ 177.599188][ T5912] usb 2-1: Manufacturer: syz [ 177.606217][ T5912] usb 2-1: SerialNumber: syz [ 177.617700][ T5912] usb 2-1: config 0 descriptor?? [ 177.675293][ T5912] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 177.716168][ T5912] em28xx 2-1:0.89: Video interface 89 found: [ 177.883023][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.883400][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.186693][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.397'. [ 178.351252][ T5912] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 178.360604][ T7326] team_slave_0: entered promiscuous mode [ 178.366467][ T7326] team_slave_1: entered promiscuous mode [ 178.424847][ T7326] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.444671][ T7326] team_slave_0: left promiscuous mode [ 178.450270][ T7326] team_slave_1: left promiscuous mode [ 179.523306][ T7335] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 179.549517][ T5912] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 179.571276][ T7339] kAFS: unable to lookup cell '(,cL' [ 179.607515][ T7335] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 179.625973][ T5912] em28xx 2-1:0.89: board has no eeprom [ 179.643496][ T7335] kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 179.702734][ T7335] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 179.740288][ T5912] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 179.758551][ T7335] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 179.789170][ T5912] em28xx 2-1:0.89: analog set to bulk mode. [ 179.802602][ T56] em28xx 2-1:0.89: Registering V4L2 extension [ 179.819856][ T5913] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 179.833865][ T5912] usb 2-1: USB disconnect, device number 20 [ 179.899933][ T5912] em28xx 2-1:0.89: Disconnecting em28xx [ 180.060649][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 180.089420][ T56] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 180.090491][ T5913] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 180.140464][ T56] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 180.147687][ T56] em28xx 2-1:0.89: No AC97 audio processor [ 180.152826][ T5913] usb 5-1: config 0 has no interface number 0 [ 180.204953][ T5913] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 180.257974][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.258332][ T56] usb 2-1: Decoder not found [ 180.299285][ T5913] usb 5-1: Product: syz [ 180.319811][ T5913] usb 5-1: Manufacturer: syz [ 180.334406][ T5913] usb 5-1: SerialNumber: syz [ 180.370700][ T56] em28xx 2-1:0.89: failed to create media graph [ 180.377971][ T5913] usb 5-1: config 0 descriptor?? [ 180.407609][ T56] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 180.426823][ T5913] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 180.475619][ T56] em28xx 2-1:0.89: Registering snapshot button... [ 180.555008][ T56] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input22 [ 180.576166][ T56] em28xx 2-1:0.89: Remote control support is not available for this card. [ 180.602497][ T5912] em28xx 2-1:0.89: Closing input extension [ 180.629965][ T5912] em28xx 2-1:0.89: Deregistering snapshot button [ 180.698598][ T7363] fuse: Unknown parameter 'gouF_id' [ 180.700946][ T7368] loop6: detected capacity change from 0 to 524287487 [ 180.737097][ T7368] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.870508][ T5912] em28xx 2-1:0.89: Freeing device [ 180.931667][ T7368] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.982267][ T7368] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.030237][ T7368] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.053443][ T7368] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.068205][ T7368] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.092621][ T7368] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.129801][ T7368] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.138571][ T7368] ldm_validate_partition_table(): Disk read failed. [ 181.149975][ T7368] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.158400][ T7368] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.168699][ T7368] Dev loop6: unable to read RDB block 0 [ 181.176189][ T7368] loop6: unable to read partition table [ 181.200119][ T7368] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 181.211838][ T7342] kAFS: unable to lookup cell '.,' [ 181.265641][ T7380] binder: 7365:7380 ioctl c018620c 200000000000 returned -1 [ 181.280395][ T5913] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 181.368678][ T5913] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 181.546262][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 181.546736][ T56] usb 5-1: USB disconnect, device number 20 [ 181.632131][ T56] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 181.670623][ T56] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 181.682854][ T56] quatech2 5-1:0.51: device disconnected [ 181.976115][ T7382] FAULT_INJECTION: forcing a failure. [ 181.976115][ T7382] name failslab, interval 1, probability 0, space 0, times 0 [ 181.991874][ T7382] CPU: 1 UID: 0 PID: 7382 Comm: syz.3.410 Not tainted syzkaller #0 PREEMPT(full) [ 181.991891][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.991898][ T7382] Call Trace: [ 181.991903][ T7382] [ 181.991908][ T7382] dump_stack_lvl+0x189/0x250 [ 181.991943][ T7382] ? __pfx____ratelimit+0x10/0x10 [ 181.991957][ T7382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.991970][ T7382] ? __pfx__printk+0x10/0x10 [ 181.991983][ T7382] ? __pfx___might_resched+0x10/0x10 [ 181.991997][ T7382] should_fail_ex+0x414/0x560 [ 181.992015][ T7382] should_failslab+0xa8/0x100 [ 181.992026][ T7382] __kmalloc_cache_noprof+0x6f/0x6f0 [ 181.992041][ T7382] ? nft_trans_table_add+0x56/0x430 [ 181.992057][ T7382] nft_trans_table_add+0x56/0x430 [ 181.992073][ T7382] nf_tables_newtable+0xce3/0x1890 [ 181.992096][ T7382] nfnetlink_rcv+0x11d9/0x2590 [ 181.992129][ T7382] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 181.992151][ T7382] ? ref_tracker_free+0x63a/0x7d0 [ 181.992176][ T7382] ? __netlink_deliver_tap+0x807/0x850 [ 181.992187][ T7382] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.992210][ T7382] netlink_unicast+0x82f/0x9e0 [ 181.992229][ T7382] ? __pfx_netlink_unicast+0x10/0x10 [ 181.992244][ T7382] ? netlink_sendmsg+0x642/0xb30 [ 181.992252][ T7382] ? skb_put+0x11b/0x210 [ 181.992264][ T7382] netlink_sendmsg+0x805/0xb30 [ 181.992279][ T7382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.992291][ T7382] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.992306][ T7382] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.992317][ T7382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.992327][ T7382] __sock_sendmsg+0x21c/0x270 [ 181.992348][ T7382] ____sys_sendmsg+0x505/0x830 [ 181.992362][ T7382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.992378][ T7382] ? import_iovec+0x74/0xa0 [ 181.992396][ T7382] ___sys_sendmsg+0x21f/0x2a0 [ 181.992408][ T7382] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.992437][ T7382] ? __fget_files+0x2a/0x420 [ 181.992449][ T7382] ? __fget_files+0x3a0/0x420 [ 181.992464][ T7382] __x64_sys_sendmsg+0x19b/0x260 [ 181.992477][ T7382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.992493][ T7382] ? __pfx_ksys_write+0x10/0x10 [ 181.992508][ T7382] ? do_syscall_64+0xbe/0xfa0 [ 181.992524][ T7382] do_syscall_64+0xfa/0xfa0 [ 181.992536][ T7382] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.992549][ T7382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.992559][ T7382] ? clear_bhb_loop+0x60/0xb0 [ 181.992570][ T7382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.992580][ T7382] RIP: 0033:0x7f3a9238f749 [ 181.992597][ T7382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.992606][ T7382] RSP: 002b:00007f3a93266038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.992623][ T7382] RAX: ffffffffffffffda RBX: 00007f3a925e5fa0 RCX: 00007f3a9238f749 [ 181.992630][ T7382] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 181.992636][ T7382] RBP: 00007f3a93266090 R08: 0000000000000000 R09: 0000000000000000 [ 181.992642][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.992648][ T7382] R13: 00007f3a925e6038 R14: 00007f3a925e5fa0 R15: 00007f3a9270fa28 [ 181.992665][ T7382] [ 182.316401][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.383435][ T7405] binder: 7403:7405 ioctl c0306201 200000000040 returned -22 [ 183.503448][ T7409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.417'. [ 183.539254][ T7409] team_slave_0: entered promiscuous mode [ 183.545336][ T7409] team_slave_1: entered promiscuous mode [ 183.597785][ T7409] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 183.600138][ T7412] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.416'. [ 183.633827][ T7409] team_slave_0: left promiscuous mode [ 183.640911][ T7409] team_slave_1: left promiscuous mode [ 184.546144][ T7426] FAULT_INJECTION: forcing a failure. [ 184.546144][ T7426] name failslab, interval 1, probability 0, space 0, times 0 [ 184.724634][ T7426] CPU: 0 UID: 0 PID: 7426 Comm: syz.4.421 Not tainted syzkaller #0 PREEMPT(full) [ 184.724662][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.724673][ T7426] Call Trace: [ 184.724680][ T7426] [ 184.724688][ T7426] dump_stack_lvl+0x189/0x250 [ 184.724717][ T7426] ? __pfx____ratelimit+0x10/0x10 [ 184.724740][ T7426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.724762][ T7426] ? __pfx__printk+0x10/0x10 [ 184.724786][ T7426] ? __pfx___might_resched+0x10/0x10 [ 184.724804][ T7426] ? fs_reclaim_acquire+0x7d/0x100 [ 184.724825][ T7426] should_fail_ex+0x414/0x560 [ 184.724855][ T7426] should_failslab+0xa8/0x100 [ 184.724875][ T7426] __kvmalloc_node_noprof+0x158/0x910 [ 184.724900][ T7426] ? nf_tables_newset+0x1330/0x2540 [ 184.724922][ T7426] ? nft_set_lookup+0x128/0x150 [ 184.724943][ T7426] ? nft_rhash_estimate+0x8f/0xa0 [ 184.724964][ T7426] nf_tables_newset+0x1330/0x2540 [ 184.724998][ T7426] ? __pfx_nf_tables_newset+0x10/0x10 [ 184.725050][ T7426] ? __nla_parse+0x40/0x60 [ 184.725074][ T7426] nfnetlink_rcv+0x11d9/0x2590 [ 184.725129][ T7426] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 184.725196][ T7426] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 184.725222][ T7426] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.725257][ T7426] netlink_unicast+0x82f/0x9e0 [ 184.725291][ T7426] ? __pfx_netlink_unicast+0x10/0x10 [ 184.725316][ T7426] ? netlink_sendmsg+0x642/0xb30 [ 184.725331][ T7426] ? skb_put+0x11b/0x210 [ 184.725353][ T7426] netlink_sendmsg+0x805/0xb30 [ 184.725381][ T7426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.725403][ T7426] ? aa_sock_msg_perm+0xf1/0x1d0 [ 184.725429][ T7426] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.725446][ T7426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.725465][ T7426] __sock_sendmsg+0x21c/0x270 [ 184.725491][ T7426] ____sys_sendmsg+0x505/0x830 [ 184.725515][ T7426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.725543][ T7426] ? import_iovec+0x74/0xa0 [ 184.725568][ T7426] ___sys_sendmsg+0x21f/0x2a0 [ 184.725587][ T7426] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.725639][ T7426] ? __fget_files+0x2a/0x420 [ 184.725654][ T7426] ? __fget_files+0x3a0/0x420 [ 184.725680][ T7426] __x64_sys_sendmsg+0x19b/0x260 [ 184.725701][ T7426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.725730][ T7426] ? __pfx_ksys_write+0x10/0x10 [ 184.725756][ T7426] ? do_syscall_64+0xbe/0xfa0 [ 184.725782][ T7426] do_syscall_64+0xfa/0xfa0 [ 184.725804][ T7426] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.725825][ T7426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.725842][ T7426] ? clear_bhb_loop+0x60/0xb0 [ 184.725862][ T7426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.725879][ T7426] RIP: 0033:0x7faedd58f749 [ 184.725896][ T7426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.725911][ T7426] RSP: 002b:00007faede345038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.725930][ T7426] RAX: ffffffffffffffda RBX: 00007faedd7e5fa0 RCX: 00007faedd58f749 [ 184.725943][ T7426] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 184.725955][ T7426] RBP: 00007faede345090 R08: 0000000000000000 R09: 0000000000000000 [ 184.725966][ T7426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.725977][ T7426] R13: 00007faedd7e6038 R14: 00007faedd7e5fa0 R15: 00007faedd90fa28 [ 184.726009][ T7426] [ 185.735447][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 186.270626][ T5948] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 186.440304][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 186.452710][ T5948] usb 1-1: config 4 has an invalid interface number: 206 but max is 0 [ 186.507435][ T5948] usb 1-1: config 4 has no interface number 0 [ 186.566014][ T5948] usb 1-1: config 4 interface 206 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 186.598355][ T5948] usb 1-1: config 4 interface 206 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 186.617178][ T5948] usb 1-1: config 4 interface 206 has no altsetting 0 [ 186.632698][ T5948] usb 1-1: New USB device found, idVendor=2040, idProduct=c653, bcdDevice=f2.06 [ 186.646143][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.745446][ T5948] usb 1-1: Product: syz [ 186.780204][ T5948] usb 1-1: Manufacturer: syz [ 186.803054][ T5948] usb 1-1: SerialNumber: syz [ 186.838529][ T7440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.858814][ T7440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.867277][ T5913] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 187.049884][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 187.071222][ T5913] usb 4-1: config 116 has no interfaces? [ 187.119478][ T5948] usb 1-1: USB disconnect, device number 19 [ 187.151713][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=50.9d [ 187.213386][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.240371][ T5913] usb 4-1: Product: syz [ 187.244746][ T5913] usb 4-1: Manufacturer: syz [ 187.250172][ T5912] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 187.250794][ T5913] usb 4-1: SerialNumber: syz [ 187.449939][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 187.473998][ T5912] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 187.508471][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.523002][ T5912] usb 2-1: Product: syz [ 187.527453][ T5912] usb 2-1: Manufacturer: syz [ 187.532674][ T5912] usb 2-1: SerialNumber: syz [ 187.554432][ T5912] usb 2-1: config 0 descriptor?? [ 187.565641][ T5912] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 188.000278][ T5948] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 188.001833][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.021151][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.044095][ T5912] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 188.060108][ T5912] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 188.114054][ T5912] usb 2-1: USB disconnect, device number 21 [ 188.229911][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 188.239487][ T5948] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.269450][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.304428][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 188.363394][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.432817][ T5948] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 188.537033][ T5948] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 188.600565][ T5948] usb 1-1: Manufacturer: syz [ 188.623677][ T5948] usb 1-1: config 0 descriptor?? [ 188.848235][ T7480] netlink: 'syz.2.438': attribute type 27 has an invalid length. [ 188.921463][ T7465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.966758][ T7484] FAULT_INJECTION: forcing a failure. [ 188.966758][ T7484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.981812][ T7465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.061225][ T7484] CPU: 1 UID: 0 PID: 7484 Comm: syz.1.440 Not tainted syzkaller #0 PREEMPT(full) [ 189.061251][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.061262][ T7484] Call Trace: [ 189.061268][ T7484] [ 189.061274][ T7484] dump_stack_lvl+0x189/0x250 [ 189.061293][ T7484] ? __pfx____ratelimit+0x10/0x10 [ 189.061306][ T7484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.061319][ T7484] ? __pfx__printk+0x10/0x10 [ 189.061329][ T7484] ? __might_fault+0xb0/0x130 [ 189.061347][ T7484] should_fail_ex+0x414/0x560 [ 189.061365][ T7484] _copy_from_user+0x2d/0xb0 [ 189.061379][ T7484] ____sys_sendmsg+0x2fe/0x830 [ 189.061393][ T7484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.061408][ T7484] ? import_iovec+0x74/0xa0 [ 189.061422][ T7484] ___sys_sendmsg+0x21f/0x2a0 [ 189.061433][ T7484] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.061462][ T7484] ? __fget_files+0x2a/0x420 [ 189.061471][ T7484] ? __fget_files+0x3a0/0x420 [ 189.061485][ T7484] __x64_sys_sendmsg+0x19b/0x260 [ 189.061497][ T7484] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.061512][ T7484] ? __pfx_ksys_write+0x10/0x10 [ 189.061535][ T7484] ? do_syscall_64+0xbe/0xfa0 [ 189.061550][ T7484] do_syscall_64+0xfa/0xfa0 [ 189.061562][ T7484] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.061575][ T7484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.061585][ T7484] ? clear_bhb_loop+0x60/0xb0 [ 189.061597][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.061606][ T7484] RIP: 0033:0x7f3ec2d8f749 [ 189.061616][ T7484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.061624][ T7484] RSP: 002b:00007f3ec3c24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.061636][ T7484] RAX: ffffffffffffffda RBX: 00007f3ec2fe5fa0 RCX: 00007f3ec2d8f749 [ 189.061644][ T7484] RDX: 00000000000040c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 189.061650][ T7484] RBP: 00007f3ec3c24090 R08: 0000000000000000 R09: 0000000000000000 [ 189.061656][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.061662][ T7484] R13: 00007f3ec2fe6038 R14: 00007f3ec2fe5fa0 R15: 00007f3ec310fa28 [ 189.061678][ T7484] [ 189.549787][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.558774][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.189376][ T7480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.263044][ T7480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.280856][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 190.440130][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 190.472434][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.494138][ T10] usb 3-1: config 0 has no interface number 0 [ 190.545448][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 190.592926][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.627962][ T10] usb 3-1: Product: syz [ 190.643924][ T10] usb 3-1: Manufacturer: syz [ 190.649146][ T10] usb 3-1: SerialNumber: syz [ 190.721383][ T10] usb 3-1: config 0 descriptor?? [ 190.735392][ T7498] usb 4-1: USB disconnect, device number 14 [ 190.827322][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 190.867608][ T56] usb 1-1: USB disconnect, device number 20 [ 190.957967][ T7481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.020632][ T7481] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.092012][ T7481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.138969][ T3597] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.264524][ T3597] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.361716][ T3597] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.413449][ T7522] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 191.440035][ T10] gspca_spca1528: reg_w err -110 [ 191.454159][ T3597] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.463944][ T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 191.698853][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 191.698870][ T30] audit: type=1800 audit(1764491654.404:439): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.450" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 191.789886][ T10] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 191.790324][ T7535] FAULT_INJECTION: forcing a failure. [ 191.790324][ T7535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.813168][ T7535] CPU: 1 UID: 0 PID: 7535 Comm: syz.0.451 Not tainted syzkaller #0 PREEMPT(full) [ 191.813194][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.813204][ T7535] Call Trace: [ 191.813211][ T7535] [ 191.813219][ T7535] dump_stack_lvl+0x189/0x250 [ 191.813245][ T7535] ? __pfx____ratelimit+0x10/0x10 [ 191.813266][ T7535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.813288][ T7535] ? __pfx__printk+0x10/0x10 [ 191.813315][ T7535] should_fail_ex+0x414/0x560 [ 191.813341][ T7535] _copy_to_user+0x31/0xb0 [ 191.813363][ T7535] simple_read_from_buffer+0xe1/0x170 [ 191.813393][ T7535] proc_fail_nth_read+0x1b3/0x220 [ 191.813418][ T7535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.813441][ T7535] ? rw_verify_area+0x2a6/0x4d0 [ 191.813462][ T7535] ? __lock_acquire+0xab9/0xd20 [ 191.813477][ T7535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.813497][ T7535] vfs_read+0x200/0xa30 [ 191.813518][ T7535] ? fdget_pos+0x247/0x320 [ 191.813539][ T7535] ? __pfx___mutex_lock+0x10/0x10 [ 191.813555][ T7535] ? __pfx_vfs_read+0x10/0x10 [ 191.813576][ T7535] ? __fget_files+0x2a/0x420 [ 191.813604][ T7535] ? __fget_files+0x3a0/0x420 [ 191.813619][ T7535] ? __fget_files+0x2a/0x420 [ 191.813642][ T7535] ksys_read+0x145/0x250 [ 191.813664][ T7535] ? __pfx_ksys_read+0x10/0x10 [ 191.813689][ T7535] ? do_syscall_64+0xbe/0xfa0 [ 191.813715][ T7535] do_syscall_64+0xfa/0xfa0 [ 191.813735][ T7535] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.813757][ T7535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.813771][ T7535] ? clear_bhb_loop+0x60/0xb0 [ 191.813791][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.813806][ T7535] RIP: 0033:0x7fafb398e15c [ 191.813821][ T7535] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 191.813837][ T7535] RSP: 002b:00007fafb47b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.813855][ T7535] RAX: ffffffffffffffda RBX: 00007fafb3be5fa0 RCX: 00007fafb398e15c [ 191.813868][ T7535] RDX: 000000000000000f RSI: 00007fafb47b10a0 RDI: 0000000000000004 [ 191.813877][ T7535] RBP: 00007fafb47b1090 R08: 0000000000000000 R09: 0000000000000000 [ 191.813887][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.813896][ T7535] R13: 00007fafb3be6038 R14: 00007fafb3be5fa0 R15: 00007fafb3d0fa28 [ 191.813926][ T7535] [ 192.131994][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.193176][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 192.252690][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 192.299855][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 192.338376][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.407677][ T10] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 192.428600][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.534165][ T10] usb 4-1: Product: syz [ 192.537037][ T5969] usb 3-1: USB disconnect, device number 18 [ 192.544591][ T10] usb 4-1: Manufacturer: syz [ 192.577106][ T10] usb 4-1: SerialNumber: syz [ 192.681772][ T10] usb 4-1: config 0 descriptor?? [ 192.708604][ T7528] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.744068][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 192.887662][ C1] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 193.093537][ T7528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.138764][ T7528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.302756][ T5969] usb 4-1: USB disconnect, device number 15 [ 194.321765][ T856] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 194.396604][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.404199][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.411711][ T7583] dummy0: entered promiscuous mode [ 194.445915][ T7583] macvtap0: entered allmulticast mode [ 194.474385][ T7583] dummy0: entered allmulticast mode [ 194.509173][ T7583] dummy0: left allmulticast mode [ 194.516838][ T856] usb 4-1: Using ep0 maxpacket: 8 [ 194.533825][ T856] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 194.552601][ T856] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.555632][ T7583] dummy0: left promiscuous mode [ 194.575414][ T856] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.604715][ T856] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.660822][ T856] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.725877][ T856] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.756935][ T856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.220855][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 195.392941][ T10] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 195.433129][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.544344][ T10] usb 2-1: config 0 descriptor?? [ 195.571780][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 195.655041][ T7607] lo: entered promiscuous mode [ 195.667974][ T7607] lo: entered allmulticast mode [ 195.878239][ T10] gspca_cpia1: usb_control_msg 05, error -71 [ 195.922096][ T10] gspca_cpia1: usb_control_msg 01, error -71 [ 195.958033][ T10] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 196.025062][ T10] usb 2-1: USB disconnect, device number 22 [ 196.235678][ T7617] dummy0: entered allmulticast mode [ 196.304209][ T7616] dummy0: left allmulticast mode [ 196.779911][ T5912] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 197.009179][ T56] usb 4-1: USB disconnect, device number 16 [ 197.346892][ T7634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.481'. [ 197.530183][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 197.624553][ T5912] usb 1-1: not running at top speed; connect to a high speed hub [ 197.757682][ T5912] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 197.766413][ T7632] syz_tun: entered allmulticast mode [ 197.768707][ T7632] syz_tun: left allmulticast mode [ 197.810263][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 197.932120][ T5912] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.962610][ T5912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.991325][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.094087][ T5912] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.122810][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 198.127647][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.205562][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 198.254471][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.283775][ T5912] usb 1-1: Product: syz [ 198.299638][ T10] usb 5-1: config 0 descriptor?? [ 198.444471][ T5912] usb 1-1: Manufacturer: syz [ 198.525439][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.570240][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.591847][ T5912] usb 1-1: SerialNumber: syz [ 198.601836][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.631308][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.912839][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 198.943586][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 198.979104][ T10] usb 5-1: USB disconnect, device number 21 [ 199.069963][ T56] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 199.229835][ T56] usb 2-1: Using ep0 maxpacket: 32 [ 199.245784][ T56] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 199.255178][ T56] usb 2-1: config 0 has no interface number 0 [ 199.269181][ T56] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 199.279063][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.289417][ T56] usb 2-1: Product: syz [ 199.293804][ T56] usb 2-1: Manufacturer: syz [ 199.298599][ T56] usb 2-1: SerialNumber: syz [ 199.308114][ T56] usb 2-1: config 0 descriptor?? [ 199.320837][ T56] smsc95xx v2.0.0 [ 199.570190][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 199.764940][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 199.782534][ T10] usb 3-1: config 220 has an invalid descriptor of length 199, skipping remainder of the config [ 199.787276][ T56] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 199.830739][ T56] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 199.837591][ T10] usb 3-1: config 220 has no interface number 2 [ 199.878438][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 199.909982][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 199.935059][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 199.947668][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 199.967114][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 199.982271][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.006584][ T10] usb 3-1: Product: syz [ 200.040064][ T10] usb 3-1: Manufacturer: syz [ 200.045552][ T10] usb 3-1: SerialNumber: syz [ 200.251880][ T56] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 200.279936][ T56] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 200.289454][ T10] usb 3-1: selecting invalid altsetting 0 [ 200.297485][ T56] usb 2-1: USB disconnect, device number 23 [ 200.326029][ T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 200.354004][ T10] uvcvideo 3-1:220.0: No valid video chain found. [ 200.388591][ T10] usb 3-1: selecting invalid altsetting 0 [ 200.409235][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 200.445313][ T10] usb 3-1: USB disconnect, device number 19 [ 200.576654][ T5912] usb 1-1: invalid UAC_HEADER (v1) [ 200.625534][ T5912] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 200.651638][ T5912] usb 1-1: USB disconnect, device number 21 [ 200.674905][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.325144][ T856] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 201.340302][ T7706] geneve2: entered allmulticast mode [ 201.359610][ T3002] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 201.368721][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 201.380447][ T3002] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 201.390988][ T3002] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 201.401675][ T3002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 201.495728][ T856] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 201.527196][ T856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.540947][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 201.571885][ T856] usb 2-1: Product: syz [ 201.576331][ T856] usb 2-1: Manufacturer: syz [ 201.581463][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 201.596780][ T856] usb 2-1: SerialNumber: syz [ 201.601438][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 201.616147][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3C, changing to 0xC [ 201.628335][ T856] usb 2-1: config 0 descriptor?? [ 201.637309][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 35 [ 201.650620][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 201.660469][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.669572][ T10] usb 5-1: Product: syz [ 201.676076][ T10] usb 5-1: Manufacturer: syz [ 201.681102][ T10] usb 5-1: SerialNumber: syz [ 201.691565][ T10] usb 5-1: config 0 descriptor?? [ 201.698094][ T7702] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.708156][ T7702] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.729606][ T10] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 201.790076][ T5912] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 201.839687][ T856] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 201.926680][ T10] usb 5-1: USB disconnect, device number 22 [ 201.951548][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 201.958891][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.990699][ T5912] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 202.000710][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.019641][ T5912] usb 1-1: config 0 descriptor?? [ 202.274413][ T5912] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 202.515787][ T7503] usb 1-1: USB disconnect, device number 22 [ 202.589965][ T5912] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 202.759801][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 202.771552][ T5912] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 202.789971][ T5912] usb 3-1: config 0 has no interface number 0 [ 202.813021][ T5912] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 202.824150][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.834323][ T5912] usb 3-1: Product: syz [ 202.838525][ T5912] usb 3-1: Manufacturer: syz [ 202.843505][ T5912] usb 3-1: SerialNumber: syz [ 202.851985][ T5912] usb 3-1: config 0 descriptor?? [ 202.866997][ T5912] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 203.089880][ T5912] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 203.147702][ T5912] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 203.498915][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 203.499803][ T9] usb 3-1: USB disconnect, device number 20 [ 203.518317][ T5898] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 203.541372][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 203.561538][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 203.593056][ T9] quatech2 3-1:0.51: device disconnected [ 203.642332][ T856] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 203.662599][ T856] usb 2-1: USB disconnect, device number 24 [ 203.689838][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 203.699463][ T5898] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 203.712014][ T5898] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 203.724829][ T5898] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.736092][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 203.743742][ T5898] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 203.759544][ T5898] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 203.768877][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.776916][ T5898] usb 1-1: Product: syz [ 203.781128][ T5898] usb 1-1: Manufacturer: syz [ 203.786258][ T5898] usb 1-1: SerialNumber: syz [ 203.798614][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 203.809050][ T5898] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input24 [ 203.909947][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 203.933234][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.944238][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 203.956206][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 203.967662][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 203.978929][ T10] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 203.988083][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.009825][ T5898] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 204.022208][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 204.028168][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 204.035540][ T5898] (id 0x00) [ 204.046642][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 204.067732][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 204.096603][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 204.112807][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 204.170348][ T5898] rc_core: IR keymap rc-imon-pad not found [ 204.187361][ T5898] Registered IR keymap rc-empty [ 204.192499][ T5898] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 204.204043][ T5898] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 204.240773][ T5898] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 204.294304][ T5898] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input25 [ 204.377562][ T7757] binder: 7750:7757 ioctl c018620c 200000000000 returned -1 [ 204.377756][ T5898] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:23> initialized [ 204.903776][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 205.242153][ T7772] dlm: no locking on control device [ 206.178284][ T7506] usb 1-1: USB disconnect, device number 23 [ 206.472031][ T7503] usb 5-1: USB disconnect, device number 23 [ 207.180143][ T5898] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 207.441889][ T7801] bridge0: entered promiscuous mode [ 207.448455][ T7801] macvlan2: entered promiscuous mode [ 207.454955][ T7801] bridge0: port 3(macvlan2) entered blocking state [ 207.461760][ T7801] bridge0: port 3(macvlan2) entered disabled state [ 207.469106][ T7801] macvlan2: entered allmulticast mode [ 207.478634][ T7801] bridge0: entered allmulticast mode [ 207.493986][ T7801] macvlan2: left allmulticast mode [ 207.499301][ T7801] bridge0: left allmulticast mode [ 207.520746][ T7801] bridge0: left promiscuous mode [ 207.602337][ T5898] usb 2-1: Invalid ep0 maxpacket: 64 [ 207.739879][ T5898] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 207.899801][ T5898] usb 2-1: Invalid ep0 maxpacket: 64 [ 207.923353][ T5898] usb usb2-port1: attempt power cycle [ 208.031011][ T7815] loop9: detected capacity change from 0 to 7 [ 208.056378][ T7815] Dev loop9: unable to read RDB block 7 [ 208.063577][ T7815] loop9: unable to read partition table [ 208.069414][ T7815] loop9: partition table beyond EOD, truncated [ 208.078953][ T7815] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 208.300019][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 208.327992][ T5898] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 208.350540][ T7822] ip6tnl1: entered promiscuous mode [ 208.425560][ T7824] ip6tnl1: entered promiscuous mode [ 208.445567][ T5898] usb 2-1: Invalid ep0 maxpacket: 64 [ 208.555301][ T10] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 208.576700][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.584878][ T5898] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 208.610416][ T5898] usb 2-1: Invalid ep0 maxpacket: 64 [ 208.616704][ T10] usb 4-1: Product: syz [ 208.625359][ T5898] usb usb2-port1: unable to enumerate USB device [ 208.632743][ T10] usb 4-1: Manufacturer: syz [ 208.656030][ T10] usb 4-1: SerialNumber: syz [ 208.701073][ T10] usb 4-1: config 0 descriptor?? [ 208.765360][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 208.956685][ T10] usb 4-1: USB disconnect, device number 18 [ 208.971304][ T7503] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 209.140563][ T7503] usb 3-1: device descriptor read/64, error -71 [ 209.391000][ T7503] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 209.511953][ T7830] bond2: ARP target 9.0.0.0 is already present [ 209.518168][ T7830] bond2: option arp_ip_target: invalid value (9) [ 209.529053][ T7830] bond2 (unregistering): Released all slaves [ 209.580344][ T7503] usb 3-1: device descriptor read/64, error -71 [ 209.724502][ T7503] usb usb3-port1: attempt power cycle [ 209.748444][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.546'. [ 209.859793][ T5912] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 210.019915][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 210.031669][ T5912] usb 1-1: config 4 has an invalid interface descriptor of length 8, skipping [ 210.045494][ T5912] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 210.062054][ T5912] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 210.071301][ T7503] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 210.082826][ T5912] usb 1-1: New USB device found, idVendor=09b2, idProduct=b351, bcdDevice=f4.bb [ 210.101961][ T7851] loop9: detected capacity change from 0 to 7 [ 210.108159][ T5912] usb 1-1: New USB device strings: Mfr=115, Product=53, SerialNumber=57 [ 210.117743][ T7503] usb 3-1: device descriptor read/8, error -71 [ 210.132990][ T7851] Dev loop9: unable to read RDB block 7 [ 210.143544][ T5912] usb 1-1: Product: syz [ 210.147821][ T7851] loop9: unable to read partition table [ 210.154730][ T7851] loop9: partition table beyond EOD, truncated [ 210.167249][ T7851] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 210.184188][ T5912] usb 1-1: Manufacturer: syz [ 210.260735][ T5912] usb 1-1: SerialNumber: syz [ 210.479895][ T7503] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 210.510021][ T7503] usb 3-1: device descriptor read/8, error -71 [ 210.603663][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 210.641294][ T7503] usb usb3-port1: unable to enumerate USB device [ 210.685277][ T5912] usb 1-1: USB disconnect, device number 24 [ 211.479308][ T7870] syz.4.552 (7870): drop_caches: 0 [ 211.492881][ T30] audit: type=1326 audit(1764491674.184:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 211.528498][ T30] audit: type=1326 audit(1764491674.184:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 211.560145][ T30] audit: type=1326 audit(1764491674.224:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 211.583187][ T30] audit: type=1326 audit(1764491674.224:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 211.611917][ T30] audit: type=1326 audit(1764491674.224:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 211.635950][ T30] audit: type=1326 audit(1764491674.224:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 211.658883][ T30] audit: type=1326 audit(1764491674.224:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 211.694152][ T30] audit: type=1326 audit(1764491674.224:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 211.812862][ T30] audit: type=1326 audit(1764491674.224:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 212.031479][ T30] audit: type=1326 audit(1764491674.224:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7ffc0000 [ 212.086159][ T7875] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 212.568993][ T7890] loop9: detected capacity change from 0 to 7 [ 212.598232][ T7890] Dev loop9: unable to read RDB block 7 [ 212.618448][ T7890] loop9: unable to read partition table [ 212.636505][ T7890] loop9: partition table beyond EOD, truncated [ 212.655297][ T7890] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 212.669848][ T5912] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 212.883387][ T5912] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 212.948401][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.969791][ T5912] usb 1-1: Product: syz [ 212.970164][ T5898] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 212.990617][ T5912] usb 1-1: Manufacturer: syz [ 213.001096][ T5912] usb 1-1: SerialNumber: syz [ 213.016028][ T5912] usb 1-1: config 0 descriptor?? [ 213.241128][ T5912] usb 1-1: ignoring: probably an ADSL modem [ 213.272116][ T7903] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 213.275369][ T5912] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 213.316238][ T5898] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.324872][ T5898] usb 3-1: config 0 has no interface number 0 [ 213.331877][ T5898] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 213.343132][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.373386][ T5898] usb 3-1: config 0 descriptor?? [ 213.445705][ T5898] usb 3-1: selecting invalid altsetting 1 [ 213.462218][ T5898] dvb_ttusb_budget: ttusb_init_controller: error [ 213.497251][ T7503] usb 1-1: USB disconnect, device number 25 [ 213.508640][ T5898] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 213.711878][ T5912] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 213.728683][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.738961][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.873091][ T5898] DVB: Unable to find symbol cx22700_attach() [ 213.934576][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.946606][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.033213][ T5898] DVB: Unable to find symbol tda10046_attach() [ 214.033227][ T5898] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 214.050336][ T7503] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 214.080926][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.080955][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.084886][ T5912] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.084917][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 214.084936][ T5912] usb 4-1: SerialNumber: syz [ 214.207724][ T7503] usb 1-1: Using ep0 maxpacket: 8 [ 214.274426][ T7503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 214.318100][ T7503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.328728][ T7503] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.340442][ T7503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 214.452573][ T7503] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 214.486707][ T7503] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 214.499142][ T7503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.517221][ T7503] usb 1-1: config 0 descriptor?? [ 214.526194][ T7920] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 215.091704][ T7935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.111671][ T5845] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 215.121086][ T5898] usb 1-1: USB disconnect, device number 26 [ 215.164118][ T7935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.330488][ T856] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 215.499814][ T856] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.521611][ T856] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 215.576285][ T856] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.709932][ T856] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.726415][ T856] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.736218][ T856] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.744644][ T856] usb 2-1: Product: syz [ 215.748953][ T856] usb 2-1: Manufacturer: syz [ 215.764751][ T856] cdc_wdm 2-1:1.0: skipping garbage [ 215.770252][ T856] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 215.793965][ T5969] usb 3-1: USB disconnect, device number 25 [ 215.850904][ T7942] loop9: detected capacity change from 0 to 7 [ 215.858152][ T7942] Dev loop9: unable to read RDB block 7 [ 215.864499][ T7942] loop9: unable to read partition table [ 215.870800][ T7942] loop9: partition table beyond EOD, truncated [ 215.877142][ T7942] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 215.966867][ T856] usb 2-1: USB disconnect, device number 29 [ 216.399547][ T5912] usb 4-1: 0:2 : does not exist [ 216.420557][ T5912] usb 4-1: unit 5: unexpected type 0x0e [ 216.454541][ T7954] xt_bpf: check failed: parse error [ 216.541922][ T5912] usb 4-1: USB disconnect, device number 19 [ 216.716039][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.743720][ T7958] [U]  [ 216.746597][ T7958] [U] K{ [ 216.749635][ T7958] [U] t 1ŠFfˊ`GJgo/mC [ 216.756561][ T7958] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 216.772101][ T7958] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 216.782512][ T7958] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 216.818276][ T7958] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 216.841961][ T7958] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 216.853056][ T7958] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 216.864583][ T7958] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 217.264613][ T7958] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 217.273109][ T7958] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 217.286630][ T7958] [U] 22Ʃx?0;3u [ 217.290788][ T7958] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 217.315729][ T7958] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 217.325002][ T7958] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 217.333573][ T7958] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 217.339727][ T7958] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 217.352050][ T7958] [U] ec [ 217.355171][ T7958] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 217.367509][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.411833][ T7957] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 217.644510][ T5969] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 217.668534][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.698068][ T5969] usb 2-1: Product: syz [ 217.718068][ T5969] usb 2-1: Manufacturer: syz [ 217.728275][ T5969] usb 2-1: SerialNumber: syz [ 217.774718][ T5969] usb 2-1: config 0 descriptor?? [ 218.004721][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.021219][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.044059][ T5912] usb 2-1: USB disconnect, device number 30 [ 218.243642][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.519817][ T5912] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 218.683191][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'. [ 218.694895][ T5912] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 218.708830][ T5912] usb 5-1: config 0 has an invalid interface number: 2 but max is -1 [ 218.729114][ T5912] usb 5-1: config 0 has an invalid interface number: 2 but max is -1 [ 218.753863][ T8013] xt_bpf: check failed: parse error [ 218.782202][ T5912] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 218.855946][ T5912] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 218.874712][ T5912] usb 5-1: config 0 has no interface number 0 [ 218.881493][ T5912] usb 5-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.910575][ T5912] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.951674][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.983298][ T5912] usb 5-1: Product: syz [ 219.002286][ T5912] usb 5-1: Manufacturer: syz [ 219.032439][ T5912] usb 5-1: SerialNumber: syz [ 219.058937][ T5912] usb 5-1: config 0 descriptor?? [ 220.333459][ T8034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.593'. [ 220.665643][ T8034] team_slave_0: entered promiscuous mode [ 220.671395][ T8034] team_slave_1: entered promiscuous mode [ 220.694216][ T8034] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 220.771024][ T8034] team_slave_0: left promiscuous mode [ 220.777728][ T8034] team_slave_1: left promiscuous mode [ 221.470880][ T5912] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 221.487836][ T5912] usb 5-1: MIDIStreaming interface descriptor not found [ 221.583823][ T5912] usb 5-1: USB disconnect, device number 24 [ 221.585934][ T8048] xt_bpf: check failed: parse error [ 221.600067][ T856] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 221.754482][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.755578][ T8052] input: syz0 as /devices/virtual/input/input26 [ 221.772113][ T5898] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 221.804742][ T856] usb 3-1: Using ep0 maxpacket: 8 [ 221.836113][ T856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.860252][ T856] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 221.871231][ T856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.891122][ T856] usb 3-1: config 0 descriptor?? [ 221.898874][ T856] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 221.992917][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.992948][ T5898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 221.992999][ T5898] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 221.993022][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.998705][ T5898] usb 4-1: config 0 descriptor?? [ 222.039393][ T5898] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 222.039437][ T5898] dvb-usb: bulk message failed: -22 (3/0) [ 222.050103][ T5898] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 222.052315][ T5898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 222.052368][ T5898] usb 4-1: media controller created [ 222.056644][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.114269][ T8038] netlink: 136 bytes leftover after parsing attributes in process `syz.2.595'. [ 222.124915][ T10] usb 3-1: USB disconnect, device number 26 [ 222.143486][ T5898] dvb-usb: bulk message failed: -22 (6/0) [ 222.143565][ T5898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 222.155652][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 222.157309][ T5898] dvb-usb: schedule remote query interval to 150 msecs. [ 222.157332][ T5898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 222.240240][ T856] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 222.257995][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.259280][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.262807][ T8044] netlink: 'syz.3.597': attribute type 10 has an invalid length. [ 222.276021][ T8044] team0: Cannot enslave team device to itself [ 222.321466][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 222.321499][ T9] dvb-usb: error while querying for an remote control event. [ 222.345113][ T8044] dibusb: i2c wr: len=8192 is too big! [ 222.345113][ T8044] [ 222.345898][ T8044] dvb-usb: bulk message failed: -22 (2/0) [ 222.345983][ T8044] dvb-usb: bulk message failed: -22 (4/0) [ 222.364866][ T5912] usb 4-1: USB disconnect, device number 20 [ 222.402918][ T856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.402940][ T5912] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 222.402975][ T856] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 222.402997][ T856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.408200][ T856] usb 2-1: config 0 descriptor?? [ 222.419932][ T856] pwc: Askey VC010 type 2 USB webcam detected. [ 222.519315][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 222.519332][ T30] audit: type=1326 audit(1764491685.224:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.0.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb398f749 code=0x7fc00000 [ 222.628360][ T8068] netlink: zone id is out of range [ 222.817228][ T856] pwc: recv_control_msg error -32 req 02 val 2b00 [ 222.842150][ T856] pwc: recv_control_msg error -32 req 02 val 2700 [ 222.999897][ T8085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.009311][ T8085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.085655][ T8088] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 223.207761][ T856] pwc: recv_control_msg error -32 req 02 val 2c00 [ 223.231256][ T856] pwc: recv_control_msg error -32 req 04 val 1000 [ 223.244694][ T856] pwc: recv_control_msg error -32 req 04 val 1300 [ 223.292083][ T856] pwc: recv_control_msg error -32 req 04 val 1400 [ 223.901835][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.615'. [ 223.919474][ T8111] binder: 8098:8111 ioctl c018620c 200000000000 returned -1 [ 223.953929][ T8108] bond_slave_0: entered promiscuous mode [ 223.959986][ T8108] bond_slave_1: entered promiscuous mode [ 224.091989][ T8108] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 224.102509][ T8108] bond_slave_0: left promiscuous mode [ 224.108007][ T8108] bond_slave_1: left promiscuous mode [ 224.179870][ T5912] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 224.873532][ T8116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.228743][ T856] pwc: recv_control_msg error -71 req 02 val 2100 [ 225.269161][ T856] pwc: recv_control_msg error -71 req 04 val 1500 [ 225.297089][ T856] pwc: recv_control_msg error -71 req 02 val 2500 [ 225.327121][ T856] pwc: recv_control_msg error -71 req 02 val 2400 [ 225.377312][ T856] pwc: recv_control_msg error -71 req 02 val 2600 [ 225.436722][ T856] pwc: recv_control_msg error -71 req 02 val 2900 [ 225.481079][ T856] pwc: recv_control_msg error -71 req 02 val 2800 [ 225.550953][ T856] pwc: recv_control_msg error -71 req 04 val 1100 [ 225.623787][ T856] pwc: recv_control_msg error -71 req 04 val 1200 [ 225.798679][ T856] pwc: Registered as video103. [ 225.936028][ T856] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 226.025104][ T856] usb 2-1: USB disconnect, device number 31 [ 227.075440][ T8147] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 227.077734][ T8150] ======================================================= [ 227.077734][ T8150] WARNING: The mand mount option has been deprecated and [ 227.077734][ T8150] and is ignored by this kernel. Remove the mand [ 227.077734][ T8150] option from the mount to silence this warning. [ 227.077734][ T8150] ======================================================= [ 227.419830][ T5969] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 227.654396][ T5969] usb 3-1: config 0 has no interfaces? [ 227.654426][ T5969] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 227.654439][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.669233][ T5969] usb 3-1: config 0 descriptor?? [ 227.969135][ T5898] usb 3-1: USB disconnect, device number 27 [ 229.003216][ T10] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 229.114250][ T8199] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 229.192491][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 229.350426][ T10] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 229.529815][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 229.535302][ T7503] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 229.540143][ T10] usb usb1-port1: attempt power cycle [ 229.578947][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.592753][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.733005][ T7503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.750593][ T5898] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 229.760340][ T5912] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 229.770985][ T7503] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 229.785256][ T7503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.802402][ T7503] usb 2-1: config 0 descriptor?? [ 229.912472][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.923794][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.934829][ T10] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 230.020849][ T5898] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 230.031750][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 230.059671][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.075810][ T5898] usb 4-1: config 0 descriptor?? [ 230.183328][ T10] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 230.210737][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 230.216847][ T10] usb usb1-port1: unable to enumerate USB device [ 230.249069][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.267285][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.331878][ T7503] usbhid 2-1:0.0: can't add hid device: -71 [ 230.348773][ T7503] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 230.362512][ T7503] usb 2-1: USB disconnect, device number 32 [ 230.515993][ T5898] cypress 0003:04B4:DE61.0008: unknown main item tag 0x0 [ 230.574983][ T5898] cypress 0003:04B4:DE61.0008: unknown main item tag 0x0 [ 230.629631][ T5898] cypress 0003:04B4:DE61.0008: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 230.704214][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.765270][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.799404][ T5898] usb 4-1: USB disconnect, device number 21 [ 230.929860][ T7503] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 231.130920][ T7503] usb 2-1: Using ep0 maxpacket: 8 [ 231.153751][ T7503] usb 2-1: config 1 has an invalid interface number: 6 but max is 0 [ 231.169971][ T7503] usb 2-1: config 1 has no interface number 0 [ 231.181624][ T7503] usb 2-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 231.193380][ T7503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.219930][ T7503] usb 2-1: Product: syz [ 231.224639][ T7503] usb 2-1: Manufacturer: syz [ 231.229481][ T7503] usb 2-1: SerialNumber: syz [ 231.487098][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.523059][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.532352][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.541820][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.566367][ T8226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.645'. [ 231.591042][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.645'. [ 231.765333][ T7503] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 232.409851][ T7503] visor 2-1:1.6: Handspring Visor / Palm OS converter detected [ 232.431351][ T7503] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 232.444869][ T7503] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 232.525460][ T7503] usb 2-1: USB disconnect, device number 33 [ 232.556520][ T7503] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 232.587769][ T8255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.598844][ T7503] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 232.616552][ T7503] visor 2-1:1.6: device disconnected [ 233.070689][ T8262] binder: 8261:8262 ioctl c0306201 0 returned -14 [ 233.105965][ T8254] ip6tnl1: entered promiscuous mode [ 233.176927][ T7503] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 233.355339][ T7503] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 233.579969][ T5912] usb 5-1: device descriptor read/64, error -71 [ 233.837805][ T5912] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 234.052707][ T5912] usb 5-1: config 0 has no interfaces? [ 234.066213][ T5912] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.100243][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 234.173887][ T5912] usb 5-1: SerialNumber: syz [ 234.207273][ T5912] usb 5-1: config 0 descriptor?? [ 234.519588][ T5912] usb 5-1: USB disconnect, device number 27 [ 234.906033][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 235.259843][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 235.431885][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.451459][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 235.464348][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 235.476526][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.490056][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 235.499195][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.512050][ T10] usb 4-1: config 0 descriptor?? [ 235.528254][ T10] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 235.799881][ T5969] usb 4-1: USB disconnect, device number 22 [ 235.818913][ T8293] ------------[ cut here ]------------ [ 235.824774][ T8293] WARNING: CPU: 1 PID: 8293 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x137/0x160 [ 235.836083][ T8293] Modules linked in: [ 235.840196][ T8293] CPU: 1 UID: 0 PID: 8293 Comm: syz.3.662 Not tainted syzkaller #0 PREEMPT(full) [ 235.849382][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.859565][ T8293] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 235.866808][ T8293] Code: 42 80 3c 28 00 74 08 48 89 df e8 74 6c 66 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 80 38 8a 05 cc e8 8a a7 00 fc 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 235.887111][ T8293] RSP: 0018:ffffc900033d72e8 EFLAGS: 00010293 [ 235.893413][ T8293] RAX: ffffffff85bf5c26 RBX: ffffc900033d7460 RCX: ffff8880289d0000 [ 235.901443][ T8293] RDX: 0000000000000000 RSI: 00000036e6133405 RDI: 00000036e6133405 [ 235.909442][ T8293] RBP: 1ffff9200067ae8c R08: ffffc900035c9000 R09: 0000000000000000 [ 235.917669][ T8293] R10: ffffc900035c9000 R11: ffffffff85bf5af0 R12: 00000036e6133405 [ 235.925751][ T8293] R13: dffffc0000000000 R14: ffff888020b84028 R15: 00000036e6133405 [ 235.933799][ T8293] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 235.942798][ T8293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.949389][ T8293] CR2: 00002000001d7030 CR3: 000000007b974000 CR4: 00000000003526f0 [ 235.957456][ T8293] Call Trace: [ 235.960773][ T8293] [ 235.963693][ T8293] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 235.970293][ T8293] drm_crtc_next_vblank_start+0x226/0x470 [ 235.976017][ T8293] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 235.982710][ T8293] ? drm_gem_fb_vmap+0x230/0x8d0 [ 235.987653][ T8293] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 235.994421][ T8293] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 236.001479][ T8293] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 236.007907][ T8293] drm_atomic_helper_commit+0x5c7/0xb10 [ 236.014565][ T8293] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 236.020754][ T8293] drm_atomic_commit+0x262/0x2c0 [ 236.025727][ T8293] ? __pfx_drm_atomic_commit+0x10/0x10 [ 236.031244][ T8293] ? __pfx___drm_printfn_info+0x10/0x10 [ 236.036796][ T8293] ? drm_client_rotation+0x47c/0x5b0 [ 236.042179][ T8293] drm_client_modeset_commit_atomic+0x620/0x760 [ 236.048473][ T8293] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 236.055329][ T8293] ? __mutex_lock+0x335/0x1350 [ 236.060230][ T8293] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 236.066420][ T8293] drm_client_modeset_commit+0x4a/0x70 [ 236.072643][ T8293] drm_fb_helper_lastclose+0xa4/0x1c0 [ 236.078051][ T8293] drm_fbdev_client_restore+0x34/0x40 [ 236.084081][ T8293] drm_client_dev_restore+0x13c/0x270 [ 236.089497][ T8293] drm_release+0x318/0x3f0 [ 236.094035][ T8293] ? __pfx_drm_release+0x10/0x10 [ 236.099000][ T8293] __fput+0x44c/0xa70 [ 236.103101][ T8293] task_work_run+0x1d4/0x260 [ 236.107724][ T8293] ? __pfx_task_work_run+0x10/0x10 [ 236.112939][ T8293] do_exit+0x6b5/0x2300 [ 236.117126][ T8293] ? do_raw_spin_lock+0x121/0x290 [ 236.122272][ T8293] ? __pfx_do_exit+0x10/0x10 [ 236.126996][ T8293] do_group_exit+0x21c/0x2d0 [ 236.131699][ T8293] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.136932][ T8293] get_signal+0x1285/0x1340 [ 236.141544][ T8293] arch_do_signal_or_restart+0xa0/0x790 [ 236.147119][ T8293] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 236.153488][ T8293] ? __se_sys_futex+0x36f/0x400 [ 236.158385][ T8293] ? exit_to_user_mode_loop+0x40/0x130 [ 236.160170][ T5898] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 236.163977][ T8293] exit_to_user_mode_loop+0x72/0x130 [ 236.177462][ T8293] do_syscall_64+0x2bd/0xfa0 [ 236.183179][ T8293] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.188429][ T8293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.196162][ T8293] ? clear_bhb_loop+0x60/0xb0 [ 236.201427][ T8293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.207374][ T8293] RIP: 0033:0x7f3a9238f749 [ 236.212386][ T8293] Code: Unable to access opcode bytes at 0x7f3a9238f71f. [ 236.219455][ T8293] RSP: 002b:00007f3a932660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 236.228480][ T8293] RAX: 0000000000000000 RBX: 00007f3a925e5fa8 RCX: 00007f3a9238f749 [ 236.237065][ T8293] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3a925e5fa8 [ 236.245482][ T8293] RBP: 00007f3a925e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 236.253571][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.261653][ T8293] R13: 00007f3a925e6038 R14: 00007f3a9270f940 R15: 00007f3a9270fa28 [ 236.269826][ T8293] [ 236.272863][ T8293] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 236.280153][ T8293] CPU: 1 UID: 0 PID: 8293 Comm: syz.3.662 Not tainted syzkaller #0 PREEMPT(full) [ 236.289359][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.299419][ T8293] Call Trace: [ 236.302694][ T8293] [ 236.305617][ T8293] dump_stack_lvl+0x99/0x250 [ 236.310215][ T8293] ? __asan_memcpy+0x40/0x70 [ 236.314811][ T8293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.320012][ T8293] ? __pfx__printk+0x10/0x10 [ 236.324604][ T8293] vpanic+0x237/0x6d0 [ 236.328594][ T8293] ? __pfx_vpanic+0x10/0x10 [ 236.333638][ T8293] panic+0xb9/0xc0 [ 236.337401][ T8293] ? __pfx_panic+0x10/0x10 [ 236.341856][ T8293] __warn+0x31b/0x4b0 [ 236.345845][ T8293] ? vkms_get_vblank_timestamp+0x137/0x160 [ 236.351738][ T8293] ? vkms_get_vblank_timestamp+0x137/0x160 [ 236.357545][ T8293] report_bug+0x2be/0x4f0 [ 236.361977][ T8293] ? vkms_get_vblank_timestamp+0x137/0x160 [ 236.367808][ T8293] ? vkms_get_vblank_timestamp+0x137/0x160 [ 236.373618][ T8293] ? vkms_get_vblank_timestamp+0x139/0x160 [ 236.379431][ T8293] handle_bug+0x84/0x160 [ 236.383674][ T8293] exc_invalid_op+0x1a/0x50 [ 236.388178][ T8293] asm_exc_invalid_op+0x1a/0x20 [ 236.393025][ T8293] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 236.399435][ T8293] Code: 42 80 3c 28 00 74 08 48 89 df e8 74 6c 66 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 80 38 8a 05 cc e8 8a a7 00 fc 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 236.419121][ T8293] RSP: 0018:ffffc900033d72e8 EFLAGS: 00010293 [ 236.425188][ T8293] RAX: ffffffff85bf5c26 RBX: ffffc900033d7460 RCX: ffff8880289d0000 [ 236.433159][ T8293] RDX: 0000000000000000 RSI: 00000036e6133405 RDI: 00000036e6133405 [ 236.441150][ T8293] RBP: 1ffff9200067ae8c R08: ffffc900035c9000 R09: 0000000000000000 [ 236.449116][ T8293] R10: ffffc900035c9000 R11: ffffffff85bf5af0 R12: 00000036e6133405 [ 236.457080][ T8293] R13: dffffc0000000000 R14: ffff888020b84028 R15: 00000036e6133405 [ 236.465050][ T8293] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 236.471206][ T8293] ? vkms_get_vblank_timestamp+0x136/0x160 [ 236.477031][ T8293] ? vkms_get_vblank_timestamp+0x136/0x160 [ 236.482846][ T8293] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 236.489003][ T8293] drm_crtc_next_vblank_start+0x226/0x470 [ 236.494850][ T8293] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 236.501089][ T8293] ? drm_gem_fb_vmap+0x230/0x8d0 [ 236.506036][ T8293] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 236.512372][ T8293] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 236.519214][ T8293] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 236.525629][ T8293] drm_atomic_helper_commit+0x5c7/0xb10 [ 236.531190][ T8293] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 236.537272][ T8293] drm_atomic_commit+0x262/0x2c0 [ 236.542220][ T8293] ? __pfx_drm_atomic_commit+0x10/0x10 [ 236.547684][ T8293] ? __pfx___drm_printfn_info+0x10/0x10 [ 236.553272][ T8293] ? drm_client_rotation+0x47c/0x5b0 [ 236.558566][ T8293] drm_client_modeset_commit_atomic+0x620/0x760 [ 236.564821][ T8293] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 236.571580][ T8293] ? __mutex_lock+0x335/0x1350 [ 236.576366][ T8293] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 236.582525][ T8293] drm_client_modeset_commit+0x4a/0x70 [ 236.587997][ T8293] drm_fb_helper_lastclose+0xa4/0x1c0 [ 236.593430][ T8293] drm_fbdev_client_restore+0x34/0x40 [ 236.598797][ T8293] drm_client_dev_restore+0x13c/0x270 [ 236.604264][ T8293] drm_release+0x318/0x3f0 [ 236.608858][ T8293] ? __pfx_drm_release+0x10/0x10 [ 236.613795][ T8293] __fput+0x44c/0xa70 [ 236.617869][ T8293] task_work_run+0x1d4/0x260 [ 236.622466][ T8293] ? __pfx_task_work_run+0x10/0x10 [ 236.627591][ T8293] do_exit+0x6b5/0x2300 [ 236.631765][ T8293] ? do_raw_spin_lock+0x121/0x290 [ 236.636804][ T8293] ? __pfx_do_exit+0x10/0x10 [ 236.641407][ T8293] do_group_exit+0x21c/0x2d0 [ 236.645999][ T8293] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.651199][ T8293] get_signal+0x1285/0x1340 [ 236.655810][ T8293] arch_do_signal_or_restart+0xa0/0x790 [ 236.661355][ T8293] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 236.667511][ T8293] ? __se_sys_futex+0x36f/0x400 [ 236.672392][ T8293] ? exit_to_user_mode_loop+0x40/0x130 [ 236.677848][ T8293] exit_to_user_mode_loop+0x72/0x130 [ 236.683214][ T8293] do_syscall_64+0x2bd/0xfa0 [ 236.687811][ T8293] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.693016][ T8293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.699076][ T8293] ? clear_bhb_loop+0x60/0xb0 [ 236.703751][ T8293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.709636][ T8293] RIP: 0033:0x7f3a9238f749 [ 236.714060][ T8293] Code: Unable to access opcode bytes at 0x7f3a9238f71f. [ 236.721096][ T8293] RSP: 002b:00007f3a932660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 236.729525][ T8293] RAX: 0000000000000000 RBX: 00007f3a925e5fa8 RCX: 00007f3a9238f749 [ 236.737496][ T8293] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3a925e5fa8 [ 236.745469][ T8293] RBP: 00007f3a925e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 236.753436][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.761402][ T8293] R13: 00007f3a925e6038 R14: 00007f3a9270f940 R15: 00007f3a9270fa28 [ 236.769385][ T8293] [ 236.772751][ T8293] Kernel Offset: disabled [ 236.777122][ T8293] Rebooting in 86400 seconds..