last executing test programs: 6m28.400156944s ago: executing program 2 (id=2339): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000021c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x0, 0xfc, 0x0, 0x5, 0x1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44851}, 0x4c01c) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="f7", 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000002100)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/keys\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = syz_open_dev$dvb_demux(0x0, 0x0, 0x24000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002080), 0x284e83, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f00000000c0)={@mcast1}, 0x2f) r10 = syz_open_procfs(0x0, &(0x7f0000002140)='net/wireless\x00') r11 = dup3(r10, r8, 0x0) read$FUSE(r11, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x12, 0x4}) 6m27.36563206s ago: executing program 2 (id=2343): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x5a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', r1, 0x2f, 0x98, 0x1, 0x3, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x8, 0x10, 0x4, 0x8}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008005}, 0x1) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008005}, 0x1) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 6m27.08879977s ago: executing program 2 (id=2345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000003c000000030a010100000000000000000a0000070900010073797a3100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6m26.832562584s ago: executing program 2 (id=2347): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x104000, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x104000, 0x0) (async) 6m26.579189515s ago: executing program 2 (id=2349): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x455, 0x4800003e, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x140e, 0x100, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') lseek(r5, 0x1000000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000008010100000000000000000a17170000070600024002000000060002400a00000006000240dada0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) read$FUSE(r5, &(0x7f0000003740)={0x2020}, 0x2020) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32], 0x50) read$FUSE(r5, &(0x7f0000005780)={0x2020}, 0x2020) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x40000, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x6}, 0x4) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000180)=0x4, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x17) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2913}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x200}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x200}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) 6m26.144741786s ago: executing program 2 (id=2353): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0x64000512) rmdir(&(0x7f0000000100)='./control\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000040)=ANY=[@ANYRESOCT=r6], &(0x7f0000001300), 0x600) 6m25.699603283s ago: executing program 32 (id=2353): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0x64000512) rmdir(&(0x7f0000000100)='./control\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000040)=ANY=[@ANYRESOCT=r6], &(0x7f0000001300), 0x600) 22.845680896s ago: executing program 5 (id=4107): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x2, r3, 0x10}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000006c0)={0x27800000000, 0x0, 0x2, r3}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3f8, 0x0, 0x0, 0x0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8, 0x0, 0x8, 0x2}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @broadcast, @local, 0xf, 0x1}}}, {{@arp={@rand_addr=0x64010100, @loopback, 0xff, 0x0, 0x1, 0x1, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x88ede4f229c5de10, 0xff, 0xff]}}, 0x0, 0x7, 0xfff7, 0x8, 0x9, 0xf, 'wg0\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @local, @rand_addr=0x64010100, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x473) 22.363525228s ago: executing program 5 (id=4109): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x7f, 0xb, 0x3, 0x0, 0xfd}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 18.864520193s ago: executing program 5 (id=4117): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x8, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r3, 0x5}}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000010000000000000000000003dd60000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000100001042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400240012800b00010062726964676500001400028005002a00000000000600270009000000e8df75d05b9712fbc36d"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040844) r5 = syz_open_dev$swradio(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000380)={0xd, @pix_mp={0x2, 0x5, 0x56595559, 0x0, 0x6, [{0x40, 0x7}, {0xf, 0x4}, {0xbc3, 0x6}, {0x0, 0x9}, {0x81, 0x2}, {0xff, 0x5f7}, {0x7fff, 0x101}, {0xec2, 0xfffffff9}], 0x2, 0x40, 0x3, 0x1, 0x2}}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0x9], [0x1000], [0x2]], '\x00', [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2, r1}}, 0x18) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00030400000004030a50d0d30687b4f19323172cbda1cbe7d9ac159a7934fdb82157eaf9365d769061e9de7834578aa07ef17ed60826418227396276e325dc82af4a8bc744c07451beb9568d361f830ee293cd525fadeffe18c380207267c3653a944f2e3176f73da58225856cc3293ed6ee0113950741a5465ddfd1ba9de86c32c6ab9636fe203b0a0e61e0a12b426ec31d1b76fe853747a6866f30ed51873cc233523415c51ed23b673153dd98758317f381475eb1c67e7355a7b498f129d9a4ed053274aaf3a24dc3be083eb701aab41e18"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000009c0)=@multiplanar_mmap={0x96d2, 0xe, 0x4, 0x40, 0x80, {r7, r8/1000+60000}, {0x5, 0xa, 0x9, 0x3, 0x5, 0x5, "e67b7f8e"}, 0xa6, 0x1, {&(0x7f0000000940)=[{0x8, 0x2, {0x8}, 0x5}, {0x8, 0x2, {0x5}, 0x3}]}, 0x200}) 16.699944852s ago: executing program 3 (id=4123): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="0030ea0000000373887d87815d6d36"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00df250700"/20, @ANYBLOB="043c652f810a9dfaf6d6047ee272a731d4108d879b903341e0d95fc3b30cbc8aea18a9bd35057a6674ac36700ef359651ec2565581a2458fb7df954b940c8911ee140b0f", @ANYBLOB="31020500001002000800230002000000080004000100000008000d00e62200000a0001000180c2000002"], 0x4c}, 0x1, 0x0, 0x0, 0x20044850}, 0x48000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 16.303819884s ago: executing program 5 (id=4125): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a8008"], 0x44}}, 0x2000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c00028008000240"], 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000800060001003a00000008000a00", @ANYRES32=r2], 0x24}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000a0601010000000000000000070000090900020073797a310000000005000100000504000880"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 15.654977073s ago: executing program 5 (id=4126): r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x10000, "58d761a99ef702f8066485d7947206c192671f79dda31a7875af68e91c4a4269"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000140)={0xa, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0xc000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000009040000035883b200090589000000000000090585"], 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x18}], 0x1}, 0x80000) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, 0x0}, 0x4000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x28040014) 12.504715859s ago: executing program 0 (id=4131): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x2000001a, 0x40009, 0x0, 0x9, 0x230, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) getpid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000100)={0xffff, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x0, 0x80801, 0x1) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000300000008b804020240000102030109021b007c8dd8de545e475a000007010000090501020000000000"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_mtu(r7, 0x29, 0x1e, 0x0, 0x29) socket(0x10, 0x803, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x420000, 0x0) poll(&(0x7f0000000180)=[{r8, 0x1400}, {r7, 0xd3e0}, {r7, 0xa288}], 0x3, 0xfffffe70) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x0, 0x7fff, 0x800, '\x00', &(0x7f00000002c0)=0xff}) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xffffffffffffff80, r11}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9, {r4, r5}}, './file0\x00'}) 9.399873387s ago: executing program 4 (id=4133): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) set_mempolicy(0x3, &(0x7f0000000000)=0x4002000ff9, 0xf) io_setup(0x8, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x400000}]) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10e) r4 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r4, &(0x7f0000001680)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x890b, &(0x7f0000000180)=@req={0x0, &(0x7f00000001c0)={'veth1_vlan\x00', @ifru_data=&(0x7f0000000100)="9261db2f896dac1a8cf70e26d58d57696fb3415251dba2fae338cab927da6f7d"}}) r6 = signalfd4(r0, &(0x7f0000000040)={[0x81]}, 0x8, 0x81000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x3338, 0x7, 0x10001, 0x401, 0x1, "44f8d20848cf5283f491c438f84c32a645c51e"}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000005c0)={0x0, 0x7, 0x201d, 0x1}) 9.278493041s ago: executing program 0 (id=4134): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) r4 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000038, 0x3, 0x2a8, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x6, 0x5, 0x7f, 0x3, 0x2, 0x7, 0x4]}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [0x0, 0xffffffff], [0x0, 0x0, 0xff000000], 'veth1\x00', 'veth0_to_batadv\x00', {0x8499377069aa4b5f}, {}, 0x3a, 0x80, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x7fffffff, 0xfffffffc, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x5, 0x9, 0x0, 0x2, 0x6, 0xff, 0x0, 0xfffffeff}}) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r5, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_getevents(r5, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) pwritev2(r8, &(0x7f0000001b00)=[{&(0x7f00000000c0)="05", 0x1}], 0x1, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r9, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x44) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x44050) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0/../file0\x00'}, 0x6e) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) 7.62254672s ago: executing program 1 (id=4135): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(xchacha20,sha224-ce))\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sysinfo(&(0x7f00000001c0)=""/188) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63c5ec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @remote}}}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000280)={0x1f, 0xfffffffffffffffe, 0xe, 0x400, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) accept(r4, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 7.563886556s ago: executing program 3 (id=4136): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d01020301090224000100000000090400000221efb00009050202000000000009058b"], 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r4, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) socket(0x22, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) r5 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r6 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102) landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x0, 0x3}, 0x18, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x1, 0xff, 0x1000081}) 7.562888225s ago: executing program 5 (id=4137): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x5}) ioprio_set$pid(0x2, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000000)=0xfffffffe, 0x4) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x40000e0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x180c75, 0x7, 0x104, 0x1ff, 0x0, 0x0, 0x0, 0x6}) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x2b, '\x00', @buffer={"010d1de90c16308a633fda925d1085c6b9f70f72ad6cc5f4853700", 0x20}, 0xfffffff9}, {0x27, '\x00', @data, 0x5}, {0x29, '\x00', @st={0x4, [{0x3, @uvalue=0x8}, {0x3, @uvalue=0xa}, {0x1, @uvalue=0xc18}, {0x2, @svalue=0x40}]}, 0x7fe}]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042c"], 0x14) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000140)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000180)=0x28) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100300086dd61a491ae00000000ff020000000000000000000000000001fc0000000000000000000000000000010a87ad8fda9554c06320ff8b3cdc430cd2aecccc11c1a22d86431e53ba561b7d5ed5ffffffff9ffb682b5f35fa2a58e0e49b71ba4f881438f4155dfac59acec8a3e682e03d68feadbe455d23ac2574ab1bcc9b0cf674ac6763ea59f24ed6ffe051877f517c3606c6ae69b0e0e7a50a0dce9ff3d53ed4a9de63e81747fae0c6"], 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0xfffffffffffffffe, r10, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r11, r12, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r11, r12, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007040)=[{{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000700)}], 0x1, &(0x7f00000007c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r6]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r2, r5]}}, @rights={{0x10}}], 0x78, 0x40}}, {{&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000900)="440006ec7e7dd33903a2543b749c427c42f46a8e1a5de72077f40c46de7add65b4bb01b31fb2b48d01b129b22e196923a347ee74cb003ed0ff8480e4f1aec9071026956f8518a19a844bf801724325859df35cde85bd29c048d60d918c40ca207dd35ff6b19038668769bad7fe3487945a4e0fc894fac020494e32993c19cdd2298e0737824f2f4dd1e701616db9da915e21ad8c6a5738d2ef6e287c6118f9f99d4ad6cc9a9d1c7c2abbfae4024f972856", 0xb1}], 0x1, &(0x7f00000039c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x400c001}}, {{&(0x7f0000003a00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000003a80)="9456eec6e252364b8debb39f521f1f2e6a104786ce01e1185ab2d266782db37d61cc7281f6e3590ae2a312f7476087b5a1ac942e5e000ec94314d77cbc68325b642a27ea3eb181cfcb225d8da0c543b7b69f58e90dc9790948fe1d5fb4c5d696fb679d2148a8ba02a7260cd9df0eccf3a3f15fe500afcc8ca2a99bb20155c85aa7b40f15e9ff96989661bb397cdfbf8a75bb6c6d15d6557bd959e79c3c2e450914b4c9d686ed693c70729b72ba6ca572b97602957b0093504d9cc58a40d5a6fcf16ce0c73056b5571c3d06c247dcc6428ee02740a1aa37e86b4b47c45c8305eb1ebb63ca4473", 0xe6}, {&(0x7f0000003b80)="888f15bdeb372a31b9341c0e3e73fe9b88d47e2b05c0da17bac554511acc12e0e243ca7a770e4163c3243971b6c932b1175c6c65250805c8ff49216decaa1d25ef96e97f05c58f8e30917963619084f3a4c1616c3d812bb909b3f5d08d6ac804597621f756cd9fe0206ffa7aa826b1401a79ea5e9311702b89ed48de2a6dc9ae06ef8af4ad72ddf8ef236860ad6c2dc018ed3fcb4e0a5befb45d30e90b5c4a3098a018337b318ec3e90c14baac3ebb981b3f62c8fb4bfdb5c097196367216ed7604187dce375f5dbdeb1699a98a6eae78fbc635f2c7e3e2f82e756d947ea2e13d35bc7ed11b12e76c30bea6fa7", 0xed}, {&(0x7f0000003c80)="43f64c68d895132fcd8b39b94393c1688b8288d2", 0x14}, {&(0x7f0000003cc0)="daa8451ba932c7a6d01d0985a87e32c33e61241ddd08aa81f5c372c5922ead69d65a3bb60810de349baca34e3c563b232e7b766324502b64e7436b6b02657aadb53954f665a105ab8fef41936e7dc95b17d63fb5326588248fff6bf5401cefb885d04a2ded890e2e62ecf4f5911c3d62f6cfe7514cb1f3b39d", 0x79}], 0x4, &(0x7f00000040c0)=[@rights={{0x18, 0x1, 0x1, [r8, r3]}}, @rights={{0x20, 0x1, 0x1, [r6, r8, r6, r7]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r5, r6, r2, r0, r5]}}, @rights={{0x30, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, r9, r5, 0xffffffffffffffff, r4, r7]}}, @rights={{0x20, 0x1, 0x1, [r7, r0, r0, r2]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x108, 0x40804}}, {{&(0x7f0000004200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004580)=[{&(0x7f0000004280)="25c819bd7528aec06522a289fec4ca335b9c04e5bf662621f9b03157d5825ad7348b7a4aa661f33e013af1a3c210b46f474e075ffec25509de5140daf0108230e39452137dc774fc5360bd4e4331cd5d0f611c2cdba12058e1d875bc53b8362b90aa1a43e82d1c9eb64e3e775d61ab08e2204b522bb9567ae84936b5b6d981b9ffd46d76a01671f58564ff16e7d5c729de5344820994cd97a7c36a42040632ed38b5e617a54fa080324a2be3b610d88cf6b57821fc499f24bf", 0xb9}, {&(0x7f0000004340)="54aea9a11d3fa73739b801cd1388f7b39f41eb5632c6785fe91a52ded74f9720879f0defb09d7e07e93edcbefc6cbcc324d0b0df3d5e675e5e5f525b52a888999ebbad48d65f306b66a0bff5fd121a3729ddc9033e243a861c7de4530263483bdd88f05b553cd706e46efa5ede18568c3d5ddd45e6ca12ce7ceedec69989b4848a74688d4d925b18f9f8eb6e579c101599fc8ebd07b20e81f1ba2731bc1cb32b9eab93", 0xa3}, {&(0x7f0000004400)="005efbb20810b74951375c3570dbb20532397d47bc388ac647be09356a392a9cda0aae87e0e4a1edcef60db9074e0898f3346e814c0be0f6b6780c8a9c4c13bd6e4dbc2553e058f5ee1196fc73281d7fb8776a29cebbc9b4cca037fba6c21f5c03c109c258c92fc2eb3070df552920390e3e77d6e898e3a481d9d2a23262f2338909a723ec9be319bdca99d4788228350cbe066f200b51197ca5ba9825fd804daf2987050b93510419cd15181a7b781965f2c1c24feef9a3a91ebc5a192171", 0xbf}, {&(0x7f00000044c0)="c5abd06d85a7158eeb69bdacb9e5c337c20a6b93947e1ac541ab1e01fdd2733b8a2ebfb87bbab323b9c92fc83951726dc37f49c80a107654b395b6b486206f84a99f7b8c545ea6b2ef69dfee3b03a4c0c522d302c1e8a026bab70ca4662d50d99b7085bd727c690acfbda5b18831fbd8cd0391bf36e2c8bf0790eaeae25bac71fbe27e9f", 0x84}], 0x4, &(0x7f0000004780)=[@rights={{0x1c, 0x1, 0x1, [r6, r0, r7]}}, @rights={{0x20, 0x1, 0x1, [r4, r8, r6, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f0000004840)="920bd02798fc579dd2c01a2b77d7f19eef3adb0997f8d1af702a8adbbd8d2b005e93e744dd1e367c66a751626c33d3a1136fa9d80643d82872b2d16d585faf02a673a86c59155f96da20f2bcddf07e5b90535dce2821583d6329bdd2d2a72b483910b60a645969bb1e40ebefcea712434c7bc859c04961246af08186e0a5891d73c11de2804958daadb2a625f039bd15430df6c51753252739bac0866e41bb08fbc6fe5ca5de55ebc8552a7d83f9f5ebcc7f5501589eb35945cc2e2965e0a30060c6f048889df9119f26", 0xca}, {&(0x7f0000004940)="61dc19af4a5734dc34b2a755d8772b252799f8bcf545630535fc37825618a25158bd1c7f3ac7722282786fb8f83341400caf7cda71e5899a15d48d3d05b17d0382b8c40ce15346db979588eefa4c3c9e9ec59972817b93f03b8c18f1f35bb1bdace6ddf4d54d8490579993b18f6ed559d455c6eb0c8ebcac7f7bcfc97182aa93fa98b75b0f3b70bcff77371968ad5a0c5766e6688f002c5d9fa98fef55a83999a31531347bf9603594a8d9c6214b01e8233f464ba4e749e85099eb49136be6f81197a88d37b4fe13380f0c0730b3fd5bb6", 0xd1}, {&(0x7f0000004a40)="2dc9d3f0d7af0c52389e0b9688c0c2a8a5b2be19f152245279e176ccb49f5f86ef611122c38cfbd7a164242274c894ddb8b8b04b82", 0x35}, {&(0x7f0000004a80)="da794bab8796da09832517ff5f4bd5a49c32177886e0a4cf272fe70a2b114c07aee9328a525a070560681b66fca1c9900ee0f3da2996bc3876418ac0d5b5bbc880275be7eec29accaf", 0x49}, {&(0x7f0000004b00)="9cb277825cb57a93f525cd875288a93ff9552bec2a683a77351091d9529ef75d7e3bc0e1421bbd18d6291214b028af1bf3adae02bafac2e8d9c52bc22b36d36d149c4af733932432fef55520449997242e4e1ab97a3165c6c4a373c51cc0d77f6c110f801883b735bcc553b5f47dee8dc1790b9d1b80c346a8143d1b35a30e1473cfea2cf9ed90eed912d6d993fbf2f4481513350f0b70b3c1d1fad25eaf171882ac71653e68af1ddff7ebdb", 0xac}, {&(0x7f0000004bc0)="5b84e8f7eb582845c9ac913c56fb9b39faa35d789df0006a85689dd9e7ff483d6a25", 0x22}], 0x6, &(0x7f0000006f80)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, r6, r4, r7, r7, r9, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r12}}}], 0x90, 0x840}}], 0x5, 0x1) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xd, 0x0, 0x4, {0x8, 0xb, 0x0, 0x2, 0x1, 0xff, 0x20, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0xa, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x8, 0x0, {0x8, 0x25, 0x1, 0x81, 0x33, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x440, 0x9, 0x0, 0x8, {0x8, 0x25, 0x1, 0x0, 0x0, 0x7}}}}}}}}]}}, 0x0) 7.481171744s ago: executing program 4 (id=4138): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6d, 0x11, r0, 0x2ab87000) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000005c0)={0x2, 0xa9, "4512beb6346e002b9e31c9741dbdf3757b6cf893cbf0e0620b73bc193adecad43eccd55f5bdc8720bda1a4c60537a5e5948864861d0fec64f830357d90617ea9a34e35186bd14ae492d23c2bd473ddfc9ff44f5ac2f26372e53fc95f3d51e7dee5e072a7a4eae58e67b88c82"}) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8cce, 0x60580) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001780), 0x101880, 0x0) fcntl$dupfd(r2, 0x0, r2) bpf$BPF_LINK_CREATE_XDP(0x25, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5ab879ca62cdab2a0a00000086d85ba5665a3247e500f61681905db882d2a2ed6e91626f068881e50f6853770721a100efb76cba37ff3111d6847e8b9398a6c008daefba68e6222103472bc55704cdb72b4b996e5f34171113d806726615380fe65a6a0a72e1000000000000e000b6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4ac79f599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x22f, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, 0x0, 0x2d, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000e8097e6d22a04", @ANYRES8=r4, @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000014) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) 7.063535237s ago: executing program 0 (id=4139): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000b, 0x810, 0xffffffffffffffff, 0xace80000) r0 = userfaultfd(0x80801) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0xa, 0x12) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xa}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000001c0)={r4}, &(0x7f0000000200)=0x8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x11) mmap(&(0x7f0000107000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0xffffe000) 7.062725736s ago: executing program 4 (id=4140): syz_clone3(&(0x7f0000000240)={0x402008000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x98c3, 0x98) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) (async) open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028004000100c402000008000140000000080900010073797a30000000000900020073797a32"], 0x94}}, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffff001, 0x2) fcntl$setlease(r4, 0x400, 0x1) (async) fcntl$setlease(r2, 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) execveat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000140)=')\x00', &(0x7f0000000180)='/dev/video#\x00', &(0x7f00000002c0)='veth1_macvtap\x00', &(0x7f0000000300)='/dev/video#\x00']}, &(0x7f0000000540)={[&(0x7f0000000380)='\xc4\x00', &(0x7f0000000440)='veth1_macvtap\x00', &(0x7f0000000480)='^$]*)(.+,,\x00', &(0x7f00000004c0)='!\x00', &(0x7f0000000500)=':\x00']}, 0x800) (async) fcntl$setlease(r1, 0x400, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000a80)={0x0, 'veth1_macvtap\x00', {0x1}, 0xca2}) 6.975924803s ago: executing program 1 (id=4141): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000c00)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000aa401042a00ff0f00001324030500010206020280000007001000d8000d24090202000000007b"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_MSS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x8a, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x10000, 0x2, 0x4}, 0x50) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x0, 0x9, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x60}, &(0x7f0000000300)={0x20, 0x81, 0x1, 'm'}, &(0x7f0000000340)={0x20, 0x82, 0x1, 'y'}, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x85, 0x3, "2e32d0"}}) 6.847345058s ago: executing program 4 (id=4142): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x844a}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r3, 0x5608, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r5) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9234751", 0x81}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r8 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac3(0x0, 0xa7, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0xff, 0x0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x31, 0xd12}, [@output_terminal={0x13, 0x24, 0x3, 0xc2, 0x405, 0x6, 0x4, 0x2, 0x3, 0x5, 0x7f, 0x80}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x200, 0x3, 0x2, 0x6, 0x8, 0x8, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0xd2, 0x1, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfa, 0xa, 0x1, {0xa, 0x25, 0x25, 0x0, 0x5, 0x9}}}}}}}}]}}, 0x0) 6.773391387s ago: executing program 0 (id=4143): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0x80, 0x6}}}}}}}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "2e3e0e865714b474", "b616e463f5ace7d71268a39d174b609df3394aa841da0aaa576fbe29516c5f90", "aef47ef3", "f86ce4d58ed1ac95"}, 0x38) pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) r4 = socket$key(0xf, 0x3, 0x2) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000083000000bf0900000000000055090100000000009500000000000000bf980000000000005608000002000000c500000007000000b70000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000021, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="13010000da7d3f10cd06090104250102030109021200010000230009041e110009651e00"], 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x1d, 0x2, 0x6) epoll_create(0x2) (async) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r5, 0x2, {0x2, 0x0, 0x1}, 0x1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff011}, {0x30, 0x0, 0x0, 0x8003}, {0x1ff, 0x0, 0x1, 0x400000}]}, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c20}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000500)={r9, 0x3c, 0x0, r9}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r9, 0x17, 0x2, r9}) (async) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r9, 0x17, 0x2, r9}) 3.229729367s ago: executing program 3 (id=4148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, 0x0, 0x80) 3.034994717s ago: executing program 1 (id=4149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r2, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfdfffffc, 0x20, 0xfffffdfb, 0x71}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0) syz_clone(0x80201000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = userfaultfd(0x80001) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_clone3(&(0x7f0000001640)={0x240100, 0x0, 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="01"], 0x1c}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x5) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.808668783s ago: executing program 4 (id=4150): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000180)=@random={'security.', 'syz\xf6\xa3>NpW\xb9k\\|\xeb|\x01\x00\x00\x00\x00\x00\x00\x00\xac\x81\v\xe1j}\xb7\a}h\xd6;\a\x85i\xa4q\xb7q\x80\xebXk\x96G1\xdcRd\x89\xae\xd0[\xcf\xf3\xb3\xd5*\xd6\x96\x84\xf4\x0e\x1fH/M\a\xcd\x13\'Z\x98\'X\xd98\x06F}b*~\xf7\xe5\xa0\x80aGG\xd4\xba\x8f\xce\fd@Glj6\x87\xe9\xb8\x8c\xdaR\xee\xb6D\xff\xa1\xbf#\xb0\xd5\xb9w\xf6!R\xdf,\xf9\xc9\xe1\xf0'}, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05005000000000000109022400010000e80b090400000103f302000921fd7f000122c10109058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x1, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x400000000000000, 0x0, 0xc010}, 0x4044040) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa0842, 0x0) write$FUSE_BMAP(r6, &(0x7f00000001c0)={0x18, 0xfffffffffffffff5, 0x0, {0x4}}, 0x18) read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020) preadv(r4, 0x0, 0x0, 0xffffffff, 0x6ba8d998) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.743834599s ago: executing program 3 (id=4151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) listen(r1, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x1, 0x65, 0x68, 0x0, 0x5, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp_prespec={0x44, 0x4, 0x24, 0x3, 0x2}]}}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0xa, 0x0, 0x8}, {"2a5367d39f1c52efe0b973ff882d78c4383d50b0e6a2efaf5b714abd6570f23f853b6ab6ad0eb0481b318bab9f075c7d2f165fe63a422fae6b"}}}}, 0x73) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) unshare(0x2040400) r4 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) splice(r3, &(0x7f0000000200)=0xfffffffffffff042, r4, 0x0, 0xe, 0x6) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) getgroups(0x2, &(0x7f0000002940)=[0x0, 0x0]) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r7, 0x1000006) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000580)=0x1) close_range(r5, 0xffffffffffffffff, 0x0) 2.077078208s ago: executing program 1 (id=4152): r0 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000003400)=@nat={'nat\x00', 0x62, 0x5, 0x1bd0, 0x1170, 0x1170, 0xffffffff, 0x10c8, 0x0, 0x1b38, 0x1b38, 0xffffffff, 0x1b38, 0x1b38, 0x5, 0x0, {[{{@uncond, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @empty, @rand_addr=0x64010100, @gre_key=0x76e, @icmp_id=0x66}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00', {}, {}, 0x2f, 0x3}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @private=0xa010102, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'veth1_macvtap\x00', {0xff}}, 0x0, 0x878, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x4}, {0x0, 0x1}, {0x1}, {0xf, 0x2}, {0x40, 0x2}, {0xffff85e6, 0x2}, {0x2}, {0x10001, 0x1}, {0x1, 0x2}, {0x5}, {0x6, 0x3}], [{0x200, 0x7c6}, {0x9, 0x7}, {0x8, 0xffff}, {0xfffffffb, 0x7}, {0x0, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x800}, {0x0, 0x8}, {0x8, 0x746d}, {0x49, 0x1fc0}], 0x7, 0x8}, {[{0x8001}, {0x4, 0x3}, {0x84, 0x3}, {0x4}, {0x7}, {0xffff, 0x2}, {0x10001, 0x1}, {}, {0x17, 0x2}, {0x8, 0x3}, {0x4, 0x1}], [{0x1c77, 0x5}, {0x9, 0x4}, {0x9, 0xe}, {0xe, 0xffff}, {0x46, 0x401}, {0xcbd, 0xf6}, {0x9, 0x9}, {0x6d, 0xffffffff}, {0x1, 0x6}, {0xf0000000, 0x5}, {0x4, 0x69}], 0x2, 0x5}, {[{0x3, 0x2}, {0xe46b, 0x3}, {0x1ff, 0x3}, {0x0, 0x1}, {0xfff, 0x1}, {0x4, 0x3}, {0x633, 0x1}, {0x8, 0x3}, {0x2, 0x3}, {0xe, 0x1}, {0x426, 0x2}], [{0x0, 0x5}, {0x8, 0x9}, {0x45a46d11, 0x10001}, {0x4, 0x800}, {0xffffd61b, 0x7f}, {0xfffff800, 0x2}, {0x2, 0x80000000}, {0xfffffffe, 0x7}, {0x8, 0x6}, {0x200, 0x8001}, {0x589c, 0x7fff}], 0x7, 0x3}, {[{0x9, 0x3}, {0x9, 0x3}, {0x9d, 0x1}, {0x10000, 0x3}, {0x2}, {0x7, 0x3}, {0x10001, 0x1}, {0x8, 0x1}, {0x10001, 0x1}, {0x8}, {0x3831294d, 0x1}], [{0x6, 0x7}, {0x5, 0xfd}, {0x100, 0xd}, {0x9, 0x6}, {0x9, 0x7ff}, {0x1, 0x12bf}, {0x80000001, 0x7}, {0x1, 0x7}, {0xfffffffc, 0x3f9}, {0x4, 0x8000}, {0xd546, 0xee18}], 0x4, 0xb}, {[{0x4, 0x3}, {0x85, 0x1}, {0x6}, {0xffff2d0f, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x6d}, {0x3, 0x2}, {0x2, 0x3}], [{0x0, 0x6}, {0x65, 0x2}, {0x3, 0xffffffff}, {0x8}, {0x8001, 0x156}, {0x6, 0x2}, {0x1, 0x101}, {0x1, 0x3}, {0x1ff, 0x9}, {0x1, 0x7}, {0x0, 0x2}], 0x0, 0x3}, {[{0xe, 0x2}, {0xc8}, {}, {0x7ff}, {0x8, 0x3}, {0xb, 0x2}, {0x0, 0x1}, {0x6}, {0xfffffffd, 0x2}, {0x2, 0x2}, {0x7, 0x2}], [{0x1, 0x5}, {0x2, 0xc04}, {0x0, 0x7}, {0x10001, 0x80000001}, {0x2, 0x3}, {0x3, 0xfffffff8}, {0x6, 0xc5}, {0x3, 0xfffffbff}, {0x3, 0x8}, {0x0, 0x8}, {0x0, 0xa}], 0x1, 0xa}, {[{0x8, 0x3}, {0x6, 0x1}, {0xb8000000, 0x1}, {0x9, 0x2}, {0x7fffffff, 0x1}, {0x8000, 0x3}, {0x1, 0x3}, {0xab1f}, {0x9, 0x1}, {0x8, 0x1}, {0x7f}], [{0x80000001, 0xffffffff}, {0x6, 0x7}, {0xfff, 0x9}, {0x67, 0x2}, {0x846, 0xc6}, {0xcb}, {0x4, 0x4}, {0x6, 0x544d}, {0xd, 0x4}, {0x6, 0x4f2436ac}, {0x8, 0x1}], 0x7, 0x1}, {[{0x3, 0x3}, {0xff, 0x1}, {0x4, 0x1}, {0x1b, 0x2}, {0x8, 0x3}, {0x268, 0x3}, {0x9, 0x3}, {0x8}, {0x4, 0x3}, {0xff, 0x1}, {0x4, 0x3}], [{0x200, 0x4}, {0x1, 0x2}, {0x7, 0x100}, {0x6, 0x3ff}, {0x5}, {0x8001, 0x5}, {0xa5d, 0x800}, {0x7, 0xfffffff0}, {0xfffffff8, 0x5d7fc3bf}, {0xfffffffb}, {0xf7a, 0x2}], 0x8, 0x2}, {[{0xd6, 0x1}, {0xa, 0x1}, {0x2, 0x1}, {0x9, 0x2}, {0x2, 0x3}, {0x200, 0x1}, {0x2}, {0x4, 0x2}, {0x1}, {0x6, 0x2}, {0x400, 0x3}], [{0x9, 0x3}, {0x2, 0x6}, {0x8, 0x6}, {0x4, 0x100}, {0x3, 0x3}, {0x8c, 0x3}, {0x5, 0x3ff}, {0x8, 0x88}, {0x8000, 0x800}, {0x7f, 0x4}, {0x87, 0x9}], 0x3, 0x5}, {[{0x7}, {0xffffffff}, {0x5}, {0x3, 0x2}, {0xfffffffb, 0x1}, {0xf, 0x3}, {0x5, 0x3}, {0x0, 0x1}, {0x4, 0x3}, {0xffffffff, 0x2}, {0xf770}], [{0x693, 0xf75}, {0x1, 0x6c}, {0x1000, 0x9}, {0x7fff, 0x2ef}, {0x6, 0x3}, {0x7, 0x10001}, {0x0, 0x1}, {0x7, 0x2}, {0xfffff001, 0xef}, {0x80000001, 0x8}, {0x6, 0x3}], 0x9, 0x2}, {[{0x88}, {0xfffffff7, 0x1}, {0xff, 0x3}, {0x6, 0x1}, {0x9}, {0xf, 0x2}, {0xb, 0x3}, {0x200}, {0x2, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x10001, 0x6}, {0x9, 0x9fa}, {0x1, 0xfffffff9}, {0x0, 0x27}, {0x9, 0x2}, {0x9}, {0x5, 0xffffffff}, {0x8}, {0xff, 0xaaae}, {0x4, 0x8}, {0x7, 0x4e24b56e}], 0x7, 0x1}], 0x2, 0x1}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1c30) 1.800560777s ago: executing program 0 (id=4153): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0xf, 0x1, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100"], 0x1c}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0xc15db06e676022ae, 0x1) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001e0000082bbd7009fb00fddbdf2500004f65"], 0x14}}, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000fb266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a73, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000840), 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0007}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r8, 0x2}) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x5c}, 0x6e) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r10}) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r12, 0x84, 0xc, &(0x7f0000000200), 0x4) getsockname(r12, 0x0, &(0x7f0000001500)) mmap(&(0x7f0000001000/0x4000)=nil, 0x21000, 0x4, 0x11, r7, 0x100000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000fc0)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) 1.495327461s ago: executing program 1 (id=4154): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f00005bc000/0xa000)=nil, 0xa000, 0x0, 0x110, 0xffffffffffffffff, 0x7787c000) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a60122030109022200010000000009040000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0xff2, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/4082, 0xff2, 0x0, 0x0}, &(0x7f0000000000)=0x31) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x3, 0xc3, &(0x7f0000000480)=""/195}, 0x94) 0s ago: executing program 4 (id=4155): r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@allow_other}], [{@pcr={'pcr', 0x3d, 0x33}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_gt}, {@uid_lt={'uid<', 0xee00}}, {@hash}]}}, 0x1, 0x0, &(0x7f00000001c0)="70dae9485428c74c5d3fd41ac6") mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x109) setxattr$incfs_size(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=0x5, 0x8, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0', [{0x20, '}}.'}, {0x20, '!$$'}, {0x20, 'MMAP_CHECK'}, {0x20, '&'}, {0x20, 'func'}], 0xa, "a5ce9e0962ca69bacf7ee1a5fa046a845f4d21f0b5252181ae237dc7d00cea08469c1bcf75b0ff5e775dafac0ab97138bd1ea95ed2fd8ef11e547d7d4bf8deab63bd0e80349d5674f636061d123e64429e2d00adcfa2fc63c015ca920418ffc50ad8f038dd738026e65e6244af2ff95e2c4ef21d2d33b9cf414d8246f77f0135bd"}, 0xa6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f00000003c0), 0x4) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400), 0x701182, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x1, 0x4c}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000540)={r5, @in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}}, 0x8, 0x1}, &(0x7f0000000600)=0x90) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000640)=0x6) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000680)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x4}) recvfrom$rxrpc(r2, 0xfffffffffffffffc, 0x0, 0x2000, 0x0, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000006c0)={r2, 0x0, 0x8000, 0x8000}) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x14c, 0x13, 0xa, 0x200, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0xcc, 0x8, "2c68ff05c48d904433b12e4bc66dc5f922f0833c4eddabea446447a8a1320efba56b92ee51eaa55516c5dcc609930bef11c455c99d617976dfb3ebb215d4c0188b87d5082582960a62d8da8e66e9dcceb5dadd04563895ae6f9524f24c4a2eaf4ed2b07e4c650c916d6a7d09838fe8b8bc5dadb35a7c7b657057983535e578213387c9034bd40f90432fb76edbce5b979287c81d736e5536a9bd8202be0ff738b31874d20767a9fdaca0274bacba90e0e62413db2ff166c55557ff3f5c3e68e376132ae6cf63d59e"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x27, 0x8, "b15514643bd2eb0b029b82f9c5c2a5dcfada32d33d74f0ba71304d02e65adbec6fcd2b"}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000220}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r7, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000a80)={'vxcan1\x00', 0x0}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000ac0)={0x0, 0x9, 0x80000001, 0x10001, 0x0, "a833f02cdfda106dd85a43273f073ad660fcfd"}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000b00)={r6, 0x5, 0x8001}, &(0x7f0000000b40)=0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000b80)={0x8, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e23, @empty}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000d00)={'ip6_vti0\x00', r8, 0x4, 0x80, 0xe, 0x3, 0x40, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x20, 0x8020, 0x3ff, 0x8000}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000dc0)={r6, 0x638}, &(0x7f0000000e00)=0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x38, r11, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x812}, 0x8800) kernel console output (not intermixed with test programs): ___sys_sendmsg+0x10/0x10 [ 884.970508][T20183] ? import_iovec+0x73/0xa0 [ 884.970534][T20183] ___sys_sendmsg+0x2a5/0x360 [ 884.970556][T20183] ? __lock_acquire+0x6b5/0x2cf0 [ 884.970579][T20183] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.970634][T20183] ? __fget_files+0x2a/0x420 [ 884.970652][T20183] ? __fget_files+0x3a0/0x420 [ 884.970682][T20183] __x64_sys_sendmsg+0x1bd/0x2a0 [ 884.970708][T20183] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 884.970738][T20183] ? __pfx_ksys_write+0x10/0x10 [ 884.970769][T20183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.970789][T20183] do_syscall_64+0x15f/0xf80 [ 884.970811][T20183] ? trace_irq_disable+0x3b/0x140 [ 884.970837][T20183] ? clear_bhb_loop+0x40/0x90 [ 884.970859][T20183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.970876][T20183] RIP: 0033:0x7efd8479ce59 [ 884.970894][T20183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.970917][T20183] RSP: 002b:00007efd856d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.970936][T20183] RAX: ffffffffffffffda RBX: 00007efd84a15fa0 RCX: 00007efd8479ce59 [ 884.970948][T20183] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 884.970958][T20183] RBP: 00007efd856d9090 R08: 0000000000000000 R09: 0000000000000000 [ 884.970968][T20183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.970978][T20183] R13: 00007efd84a16038 R14: 00007efd84a15fa0 R15: 00007efd84b3fa48 [ 884.971002][T20183] [ 885.226050][ T5738] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 885.330190][T20187] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 885.340105][ T808] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 885.390137][ T5738] usb 4-1: device descriptor read/64, error -71 [ 885.490802][ T808] usb 6-1: Using ep0 maxpacket: 16 [ 885.499079][ T808] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.511403][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 885.523046][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 885.533670][ T808] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 885.543959][ T808] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 885.561749][ T808] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 885.571428][ T808] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 885.579844][ T808] usb 6-1: Manufacturer: syz [ 885.580141][ T5689] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 885.600198][ T808] usb 6-1: config 0 descriptor?? [ 885.620104][ T5096] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 885.650251][ T5738] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 885.750198][ T5689] usb 1-1: Using ep0 maxpacket: 16 [ 885.757435][ T5689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.771373][ T5689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.772005][ T5096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.781370][ T5689] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 885.805179][ T5738] usb 4-1: device descriptor read/64, error -71 [ 885.815210][ T5689] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 885.834716][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.841606][ T5096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.855828][ T5689] usb 1-1: config 0 descriptor?? [ 885.876831][ T5096] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 885.903629][ T5096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.922088][ T5738] usb usb4-port1: attempt power cycle [ 885.940053][ T808] rc_core: IR keymap rc-hauppauge not found [ 885.946285][ T808] Registered IR keymap rc-empty [ 885.961347][ T5096] usb 5-1: config 0 descriptor?? [ 885.970824][ T808] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 886.020345][ T808] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 886.041859][ T808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 886.059811][ T808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input126 [ 886.102787][ T808] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 886.130150][ T808] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 886.150153][ T808] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 886.199374][T20191] netlink: 'syz.4.3784': attribute type 13 has an invalid length. [ 886.200216][ T808] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 886.231119][ T808] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 886.260103][ T5738] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 886.261913][ T808] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 886.281069][ T5738] usb 4-1: device descriptor read/8, error -71 [ 886.299530][ T5689] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 886.320572][ T808] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 886.331740][ T5689] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 886.351259][ T808] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 886.354538][ T5689] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 886.381445][ T808] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 886.402247][ T5689] microsoft 0003:045E:07DA.004D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 886.430247][ T808] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 886.446933][ T5689] microsoft 0003:045E:07DA.004D: no inputs found [ 886.464131][ T808] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 886.465551][ T5689] microsoft 0003:045E:07DA.004D: could not initialize ff, continuing anyway [ 886.492795][T20214] syzkaller0: entered promiscuous mode [ 886.494460][ T808] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 886.508154][T20214] syzkaller0: entered allmulticast mode [ 886.540370][ T5738] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 886.572081][ T5738] usb 4-1: device descriptor read/8, error -71 [ 886.572098][ T808] usb 6-1: USB disconnect, device number 88 [ 886.634710][T20219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.666773][T20219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.703683][ T5738] usb usb4-port1: unable to enumerate USB device [ 886.733247][ T5096] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 886.773757][ T5096] cp2112 0003:10C4:EA90.004E: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 886.941897][ T5096] cp2112 0003:10C4:EA90.004E: Part Number: 0x00 Device Version: 0x00 [ 886.963180][ T808] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 887.123599][ T808] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.157886][ T808] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 887.199748][ T808] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 887.223902][ T808] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 887.244903][ T808] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 887.264989][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.313040][ T5096] cp2112 0003:10C4:EA90.004E: error requesting SMBus config [ 887.333448][ T5096] cp2112 0003:10C4:EA90.004E: probe with driver cp2112 failed with error -71 [ 887.355675][T20204] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 887.372695][ T808] hub 6-1:1.0: bad descriptor, ignoring hub [ 887.388472][ T808] hub 6-1:1.0: probe with driver hub failed with error -5 [ 887.408340][ T5096] usb 5-1: USB disconnect, device number 95 [ 887.415134][ T808] cdc_wdm 6-1:1.0: skipping garbage [ 887.435530][ T808] cdc_wdm 6-1:1.0: skipping garbage [ 887.452935][ T808] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 887.582275][T20204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.591285][T20204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.720461][ T5738] usb 6-1: USB disconnect, device number 89 [ 887.899563][T20229] FAULT_INJECTION: forcing a failure. [ 887.899563][T20229] name failslab, interval 1, probability 0, space 0, times 0 [ 887.914244][T20229] CPU: 0 UID: 0 PID: 20229 Comm: syz.4.3793 Tainted: G L syzkaller #0 PREEMPT(full) [ 887.914273][T20229] Tainted: [L]=SOFTLOCKUP [ 887.914280][T20229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 887.914290][T20229] Call Trace: [ 887.914298][T20229] [ 887.914306][T20229] dump_stack_lvl+0xe8/0x150 [ 887.914332][T20229] should_fail_ex+0x412/0x560 [ 887.914360][T20229] should_failslab+0xa8/0x100 [ 887.914384][T20229] ? skb_clone+0x212/0x3a0 [ 887.914407][T20229] kmem_cache_alloc_noprof+0x87/0x650 [ 887.914428][T20229] ? __netlink_lookup+0xc6/0x8b0 [ 887.914450][T20229] skb_clone+0x212/0x3a0 [ 887.914466][T20229] __netlink_deliver_tap+0x404/0x850 [ 887.914485][T20229] ? netlink_deliver_tap+0x2e/0x1b0 [ 887.914498][T20229] netlink_deliver_tap+0x19c/0x1b0 [ 887.914512][T20229] netlink_unicast+0x730/0x8e0 [ 887.914530][T20229] netlink_sendmsg+0x813/0xb40 [ 887.914548][T20229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.914563][T20229] ? aa_sock_msg_perm+0xf1/0x1b0 [ 887.914577][T20229] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 887.914592][T20229] ____sys_sendmsg+0x972/0x9f0 [ 887.914606][T20229] ? __might_fault+0xaf/0x130 [ 887.914622][T20229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 887.914640][T20229] ? import_iovec+0x73/0xa0 [ 887.914656][T20229] ___sys_sendmsg+0x2a5/0x360 [ 887.914669][T20229] ? __lock_acquire+0x6b5/0x2cf0 [ 887.914682][T20229] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.914722][T20229] ? __fget_files+0x2a/0x420 [ 887.914734][T20229] ? __fget_files+0x3a0/0x420 [ 887.914750][T20229] __x64_sys_sendmsg+0x1bd/0x2a0 [ 887.914765][T20229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 887.914784][T20229] ? __pfx_ksys_write+0x10/0x10 [ 887.914802][T20229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.914813][T20229] do_syscall_64+0x15f/0xf80 [ 887.914827][T20229] ? trace_irq_disable+0x3b/0x140 [ 887.914841][T20229] ? clear_bhb_loop+0x40/0x90 [ 887.914854][T20229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.914864][T20229] RIP: 0033:0x7efd8479ce59 [ 887.914875][T20229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.914884][T20229] RSP: 002b:00007efd856d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.914895][T20229] RAX: ffffffffffffffda RBX: 00007efd84a15fa0 RCX: 00007efd8479ce59 [ 887.914902][T20229] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 887.914909][T20229] RBP: 00007efd856d9090 R08: 0000000000000000 R09: 0000000000000000 [ 887.914915][T20229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.914921][T20229] R13: 00007efd84a16038 R14: 00007efd84a15fa0 R15: 00007efd84b3fa48 [ 887.914936][T20229] [ 888.412436][ T5738] usb 1-1: USB disconnect, device number 29 [ 888.674435][T20248] netlink: 'syz.3.3798': attribute type 10 has an invalid length. [ 888.701654][T20248] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 888.729542][T20248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 888.834038][T20250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3798'. [ 888.891608][T20250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.952177][T20250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.981736][T20250] batman_adv: batadv0: Removing interface: dummy0 [ 889.503352][T20262] input: syz1 as /devices/virtual/input/input128 [ 889.544646][T20262] netlink: 'syz.0.3802': attribute type 1 has an invalid length. [ 889.580480][ T808] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 889.597372][T20262] tun0: tun_chr_ioctl cmd 1074025681 [ 889.760724][ T808] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 889.780569][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.807382][T20264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3803'. [ 889.817530][ T808] usb 5-1: Product: syz [ 889.823212][ T808] usb 5-1: Manufacturer: syz [ 889.827936][ T808] usb 5-1: SerialNumber: syz [ 889.880905][ T808] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 889.904919][ T5096] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 890.400175][ T808] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 890.536965][T20259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.555085][T20259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.563058][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 890.577072][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 890.621216][ T5761] usb 5-1: USB disconnect, device number 96 [ 890.632149][ T808] usb 1-1: config 4 interface 0 has no altsetting 0 [ 890.652917][ T808] usb 1-1: string descriptor 0 read error: -22 [ 890.664591][ T808] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 890.678858][ T808] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 890.727218][ T808] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 890.752653][T20271] FAULT_INJECTION: forcing a failure. [ 890.752653][T20271] name failslab, interval 1, probability 0, space 0, times 0 [ 890.794663][ T808] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 890.817150][ T808] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 890.836399][T20271] CPU: 1 UID: 0 PID: 20271 Comm: syz.1.3805 Tainted: G L syzkaller #0 PREEMPT(full) [ 890.836427][T20271] Tainted: [L]=SOFTLOCKUP [ 890.836432][T20271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 890.836441][T20271] Call Trace: [ 890.836448][T20271] [ 890.836455][T20271] dump_stack_lvl+0xe8/0x150 [ 890.836482][T20271] should_fail_ex+0x412/0x560 [ 890.836509][T20271] should_failslab+0xa8/0x100 [ 890.836536][T20271] __kmalloc_cache_noprof+0x88/0x660 [ 890.836560][T20271] ? nfnetlink_rcv+0xfdf/0x27b0 [ 890.836587][T20271] nfnetlink_rcv+0xfdf/0x27b0 [ 890.836636][T20271] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 890.836694][T20271] ? netlink_deliver_tap+0x2e/0x1b0 [ 890.836734][T20271] ? netlink_deliver_tap+0x2e/0x1b0 [ 890.836756][T20271] ? netlink_deliver_tap+0x2e/0x1b0 [ 890.836783][T20271] netlink_unicast+0x75c/0x8e0 [ 890.836813][T20271] netlink_sendmsg+0x813/0xb40 [ 890.836846][T20271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.836877][T20271] ? aa_sock_msg_perm+0xf1/0x1b0 [ 890.836902][T20271] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 890.836926][T20271] ____sys_sendmsg+0x972/0x9f0 [ 890.836949][T20271] ? __might_fault+0xaf/0x130 [ 890.836974][T20271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 890.837005][T20271] ? import_iovec+0x73/0xa0 [ 890.837030][T20271] ___sys_sendmsg+0x2a5/0x360 [ 890.837053][T20271] ? __lock_acquire+0x6b5/0x2cf0 [ 890.837076][T20271] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.837130][T20271] ? __fget_files+0x2a/0x420 [ 890.837148][T20271] ? __fget_files+0x3a0/0x420 [ 890.837176][T20271] __x64_sys_sendmsg+0x1bd/0x2a0 [ 890.837203][T20271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 890.837238][T20271] ? __pfx_ksys_write+0x10/0x10 [ 890.837269][T20271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.837288][T20271] do_syscall_64+0x15f/0xf80 [ 890.837314][T20271] ? clear_bhb_loop+0x40/0x90 [ 890.837334][T20271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.837351][T20271] RIP: 0033:0x7f97d519ce59 [ 890.837369][T20271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.837384][T20271] RSP: 002b:00007f97d5f92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.837403][T20271] RAX: ffffffffffffffda RBX: 00007f97d5415fa0 RCX: 00007f97d519ce59 [ 890.837417][T20271] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 890.837436][T20271] RBP: 00007f97d5f92090 R08: 0000000000000000 R09: 0000000000000000 [ 890.837447][T20271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.837457][T20271] R13: 00007f97d5416038 R14: 00007f97d5415fa0 R15: 00007f97d553fa48 [ 890.837485][T20271] [ 890.844191][ T808] usb 1-1: media controller created [ 891.127181][ T5096] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 891.140212][ T5096] ath9k_htc: Failed to initialize the device [ 891.167968][ T5761] usb 5-1: ath9k_htc: USB layer deinitialized [ 891.322506][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 891.489699][T20269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.558581][T20269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.610122][ T5096] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 891.720182][T20272] ALSA: mixer_oss: invalid OSS volume '' [ 891.744835][T20272] ALSA: mixer_oss: invalid OSS volume ' aü=!ÿšê˹=·+LKWà„MšñŒëÓ:§~' [ 891.790189][ T5096] usb 5-1: Using ep0 maxpacket: 32 [ 891.800995][T20272] ALSA: mixer_oss: invalid OSS volume 'ƒ%wÀ¹¼Ñº§ˆMò#i¥6[…ìNVLéúÃKK-' [ 891.819870][ T5096] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 891.840962][T20272] ALSA: mixer_oss: invalid OSS volume 'Ú¶ÿÌêZù•ç:Ñ 3.âôF?ºYùð¹Š^x1b' [ 891.874954][ T5096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 891.877820][T20272] ALSA: mixer_oss: invalid OSS volume ' ”—$i.A<­”g—Õmo鱌‚éÜ)ã&:/“¢Œ' [ 891.904756][ T5096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 891.919332][T20282] netlink: 'syz.3.3809': attribute type 10 has an invalid length. [ 891.928762][ T5096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 891.940681][ T5096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 891.953200][T20282] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3809'. [ 891.967585][T20272] ALSA: mixer_oss: invalid OSS volume 'Ü~)~×ó·Š´¤‹ì}Úìk/FJ°¶éƒ—†]j' [ 891.971197][ T5096] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 892.012361][ T5096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.024176][T20282] bridge0: port 3(veth1_macvtap) entered blocking state [ 892.026799][T20272] ALSA: mixer_oss: invalid OSS volume '§‹' [ 892.031538][ T5096] usb 5-1: Product: syz [ 892.044044][T20282] bridge0: port 3(veth1_macvtap) entered disabled state [ 892.051582][ T5096] usb 5-1: Manufacturer: syz [ 892.056550][ T5096] usb 5-1: SerialNumber: syz [ 892.064813][T20282] veth1_macvtap: entered allmulticast mode [ 892.073276][T20272] ALSA: mixer_oss: invalid OSS volume 'FµµÈq(ã2÷Äž¾?åsÒï È[œ'|¾' [ 892.077183][T20282] veth1_macvtap: left allmulticast mode [ 892.088941][ T5096] usb 5-1: config 0 descriptor?? [ 892.105793][T20282] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 892.110067][T20272] ALSA: mixer_oss: invalid OSS volume '³§Û}`K’ƈãZ>_|¯#X³d#>zž^a¨' [ 892.181971][T20272] ALSA: mixer_oss: invalid OSS volume '*‹Ümo‹É×G%BuZkÂÄ@¤ª–m¸Iv¯Ó HID v0.00 Device [syz1] on syz0 [ 899.209249][ T8121] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.330325][T18772] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 900.690988][T18772] usb 1-1: device descriptor read/64, error -71 [ 900.773413][T20428] team0: left promiscuous mode [ 900.773436][T20428] team_slave_0: left promiscuous mode [ 900.782569][T20428] team_slave_1: left promiscuous mode [ 900.804022][T20428] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 900.940164][T18772] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 901.120128][T18772] usb 1-1: Using ep0 maxpacket: 8 [ 901.133109][T18772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 901.153865][T18772] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 901.194129][T18772] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 901.222521][T18772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.253508][T18772] usb 1-1: config 0 descriptor?? [ 901.702590][T18772] hid_parser_main: 31 callbacks suppressed [ 901.702624][T18772] dragonrise 0003:0079:0006.0051: unknown main item tag 0x0 [ 901.724901][T18772] dragonrise 0003:0079:0006.0051: unknown main item tag 0x0 [ 901.749765][T18772] dragonrise 0003:0079:0006.0051: unknown main item tag 0x0 [ 901.781556][T18772] dragonrise 0003:0079:0006.0051: unknown main item tag 0x0 [ 901.805986][T18772] dragonrise 0003:0079:0006.0051: unknown main item tag 0x0 [ 901.827002][T18772] dragonrise 0003:0079:0006.0051: unknown main item tag 0x0 [ 901.859260][T18772] dragonrise 0003:0079:0006.0051: unknown main item tag 0x0 [ 901.886856][T18772] dragonrise 0003:0079:0006.0051: unknown main item tag 0x0 [ 901.912439][T18772] dragonrise 0003:0079:0006.0051: unknown main item tag 0x0 [ 901.941808][T18772] dragonrise 0003:0079:0006.0051: unknown main item tag 0x0 [ 901.971827][T18772] dragonrise 0003:0079:0006.0051: unbalanced collection at end of report description [ 902.016936][T18772] dragonrise 0003:0079:0006.0051: parse failed [ 902.040128][T18772] dragonrise 0003:0079:0006.0051: probe with driver dragonrise failed with error -22 [ 902.072583][T18772] usb 1-1: USB disconnect, device number 33 [ 902.260114][ T5761] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 902.280165][ T808] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 902.409780][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 902.409797][ T29] audit: type=1326 audit(1779136933.216:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20452 comm="syz.4.3860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd8479ce59 code=0x0 [ 902.410130][ T808] usb 6-1: device descriptor read/64, error -71 [ 902.446918][ T5761] usb 4-1: Using ep0 maxpacket: 16 [ 902.472608][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.486314][ T5761] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 902.500139][ T5761] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 902.509258][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.528990][ T5761] usb 4-1: config 0 descriptor?? [ 902.710211][ T808] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 902.850114][ T808] usb 6-1: device descriptor read/64, error -71 [ 902.960465][ T808] usb usb6-port1: attempt power cycle [ 903.300129][ T808] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 903.340864][ T808] usb 6-1: device descriptor read/8, error -71 [ 903.581758][ T808] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 903.620899][ T808] usb 6-1: device descriptor read/8, error -71 [ 903.740603][ T808] usb usb6-port1: unable to enumerate USB device [ 903.959158][T20481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3869'. [ 905.105066][ T5761] usbhid 4-1:0.0: can't add hid device: -71 [ 905.149730][ T5761] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 905.192367][ T5761] usb 4-1: USB disconnect, device number 124 [ 905.603599][T20497] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3874'. [ 905.645352][ T5761] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 905.665985][T20498] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3874'. [ 905.826056][ T5761] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 905.871967][ T5761] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 64 [ 905.904580][ T5761] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 905.950107][ T5761] usb 4-1: config 0 interface 0 has no altsetting 0 [ 905.976666][ T5761] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 906.019860][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.066603][ T5761] usb 4-1: config 0 descriptor?? [ 906.085182][T20490] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 906.112597][T20515] adf_ctl_ioctl: 15 callbacks suppressed [ 906.112614][T20515] QAT: Invalid ioctl 1075883590 [ 906.142959][T20515] QAT: Invalid ioctl 1075883590 [ 906.180283][T20515] QAT: Invalid ioctl 1075883590 [ 906.211404][T20515] QAT: Invalid ioctl 1075883590 [ 906.223566][T20515] QAT: Invalid ioctl 1075883590 [ 906.232245][T20515] QAT: Invalid ioctl 1075883590 [ 906.242534][T20515] QAT: Invalid ioctl 1075883590 [ 906.251023][T20515] QAT: Invalid ioctl 1075883590 [ 906.256302][T20515] QAT: Invalid ioctl 1075883590 [ 906.261464][T20515] QAT: Invalid ioctl 1075883590 [ 906.351595][T20514] team_slave_1: Caught tx_queue_len zero misconfig [ 906.367510][ T5761] usbhid 4-1:0.0: can't add hid device: -71 [ 906.374709][ T5761] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 906.428708][ T5761] usb 4-1: USB disconnect, device number 125 [ 907.565649][T20537] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 907.580235][ T808] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 907.590322][T20537] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 907.628549][T20538] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 907.668013][T20538] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 907.750169][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 907.761956][ T808] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 907.762914][T20541] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 907.789400][ T808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.802614][ T808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 907.821586][ T808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 907.837641][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.855599][ T808] usb 1-1: Product: syz [ 907.865430][ T808] usb 1-1: Manufacturer: syz [ 907.877210][ T808] usb 1-1: SerialNumber: syz [ 907.890377][T18772] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 907.917046][ T808] usb 1-1: 0:2 : does not exist [ 908.071879][T18772] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 908.087342][T18772] usb 4-1: config 2 has no interface number 0 [ 908.103123][T18772] usb 4-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 908.140045][T18772] usb 4-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 908.186991][T18772] usb 4-1: config 2 interface 88 has no altsetting 0 [ 908.205687][T18772] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 908.239653][T18772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.268784][T18772] usb 4-1: Product: syz [ 908.286565][T18772] usb 4-1: Manufacturer: syz [ 908.300008][T18772] usb 4-1: SerialNumber: syz [ 908.336724][T20540] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 908.351905][T20540] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 908.586395][T20540] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 908.612852][T20540] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 908.827156][ T808] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 908.880381][ T5761] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 908.909348][ T808] usb 1-1: USB disconnect, device number 34 [ 909.043357][ T5761] usb 6-1: config 1 interface 0 has no altsetting 0 [ 909.061678][T20553] netlink: 'syz.4.3890': attribute type 1 has an invalid length. [ 909.075223][ T5761] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 909.097178][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.118386][ T5761] usb 6-1: Product: syz [ 909.124653][ T5761] usb 6-1: Manufacturer: syz [ 909.139523][ T5761] usb 6-1: SerialNumber: syz [ 909.241653][T20558] dlm: no locking on control device [ 909.570238][ T808] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 909.641534][T20540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.651002][T20540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.662367][T18772] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 909.673214][T18772] asix 4-1:2.88: probe with driver asix failed with error -61 [ 909.722779][ T808] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 909.732109][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.750882][ T808] usb 5-1: config 0 descriptor?? [ 909.787708][ T808] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 909.877592][T18772] usb 4-1: USB disconnect, device number 126 [ 910.272853][ T5761] usbhid 6-1:1.0: can't add hid device: -71 [ 910.288345][ T5761] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 910.336138][ T808] gp8psk: usb in 128 operation failed. [ 910.431127][ T5761] usb 6-1: USB disconnect, device number 95 [ 910.790936][ T5096] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 910.900261][T18772] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 910.920955][ T5096] usb 1-1: device descriptor read/64, error -71 [ 911.033271][ T2364] pvrusb2: request_firmware fatal error with code=-110 [ 911.050028][ T2364] pvrusb2: Failure uploading firmware1 [ 911.058026][ T2364] pvrusb2: Device initialization was not successful. [ 911.065551][T18772] usb 4-1: Using ep0 maxpacket: 32 [ 911.071262][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 911.081877][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 911.091419][ T2364] pvrusb2: Failed to submit write-control URB status=-19 [ 911.091562][T17540] pvrusb2: Device being rendered inoperable [ 911.099409][ T2364] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 911.114569][ T2364] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 911.128869][T18772] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 911.150237][T18772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.167711][T18772] usb 4-1: Product: syz [ 911.171279][ T5096] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 911.176629][T18772] usb 4-1: Manufacturer: syz [ 911.185472][T18772] usb 4-1: SerialNumber: syz [ 911.193325][T18772] usb 4-1: config 0 descriptor?? [ 911.203185][T18772] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 911.310208][ T5096] usb 1-1: device descriptor read/64, error -71 [ 911.400272][ T5761] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 911.420507][ T5096] usb usb1-port1: attempt power cycle [ 911.550174][ T5761] usb 6-1: Using ep0 maxpacket: 8 [ 911.559497][ T5761] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 911.568735][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.577061][ T5761] usb 6-1: Product: syz [ 911.581343][ T5761] usb 6-1: Manufacturer: syz [ 911.586027][ T5761] usb 6-1: SerialNumber: syz [ 911.595440][ T5761] usb 6-1: config 0 descriptor?? [ 911.611222][ T5761] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 911.760414][ T5096] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 911.790905][ T5096] usb 1-1: device descriptor read/8, error -71 [ 912.031715][ T5096] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 912.072788][ T5096] usb 1-1: device descriptor read/8, error -71 [ 912.079486][ T5761] gspca_sonixj: reg_r err -71 [ 912.089248][ T5761] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 912.117235][ T5761] usb 6-1: USB disconnect, device number 96 [ 912.200323][ T5096] usb usb1-port1: unable to enumerate USB device [ 912.389063][ T808] gp8psk: usb in 146 operation failed. [ 912.409739][T18772] gspca_topro: reg_r err -32 [ 912.448664][T18772] gspca_topro: Sensor soi763a [ 912.691670][ T808] gp8psk: failed to get FW version [ 912.699745][ T808] gp8psk: usb in 149 operation failed. [ 912.705402][ T808] gp8psk: failed to get FPGA version [ 912.711341][ T808] gp8psk: usb in 138 operation failed. [ 912.716870][ T808] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 912.727461][ T808] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 912.741124][ T808] usb 5-1: USB disconnect, device number 98 [ 913.116744][ T29] audit: type=1326 audit(1779136943.926:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.3.3901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105d39ce59 code=0x7ffc0000 [ 913.168318][T18772] usb 4-1: USB disconnect, device number 127 [ 914.279019][T20659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 914.296474][T20659] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 914.382935][T20661] ip6t_srh: unknown srh invflags 4000 [ 914.450516][ T5096] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 914.600171][ T5096] usb 6-1: device descriptor read/64, error -71 [ 914.850732][ T5096] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 914.930299][ T808] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 914.990105][ T5096] usb 6-1: device descriptor read/64, error -71 [ 915.060130][T18772] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 915.090101][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 915.100500][ T5096] usb usb6-port1: attempt power cycle [ 915.111623][ T808] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 915.122200][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.133144][ T808] usb 1-1: Product: syz [ 915.137524][ T808] usb 1-1: Manufacturer: syz [ 915.143318][ T808] usb 1-1: SerialNumber: syz [ 915.151120][ T808] usb 1-1: config 0 descriptor?? [ 915.172444][ T808] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 915.230170][T18772] usb 5-1: Using ep0 maxpacket: 8 [ 915.237071][T18772] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.250937][T18772] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 915.263983][T18772] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 915.281520][T18772] usb 5-1: Product: syz [ 915.294706][T18772] usb 5-1: Manufacturer: syz [ 915.310370][T18772] usb 5-1: SerialNumber: syz [ 915.317849][T18772] usb 5-1: config 0 descriptor?? [ 915.327603][T18772] imon_raw 5-1:0.0: IR endpoint missing [ 915.460121][ T5096] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 915.480989][ T5096] usb 6-1: device descriptor read/8, error -71 [ 915.730194][ T5096] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 915.770819][ T5096] usb 6-1: device descriptor read/8, error -71 [ 915.883963][ T5096] usb usb6-port1: unable to enumerate USB device [ 915.916151][ T5738] usb 5-1: USB disconnect, device number 99 [ 916.180683][ T808] gspca_ov534_9: reg_w failed -71 [ 916.490047][ T808] gspca_ov534_9: Unknown sensor 0000 [ 916.490161][ T808] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 916.523294][ T808] usb 1-1: USB disconnect, device number 39 [ 916.603200][T20696] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 916.612649][T20696] syzkaller0: entered promiscuous mode [ 916.618164][T20696] syzkaller0: entered allmulticast mode [ 916.665887][T20696] tipc: Enabled bearer , priority 0 [ 916.687573][T20696] tipc: Resetting bearer [ 916.764498][T20696] tipc: Disabling bearer [ 916.808616][T20702] netlink: 'syz.0.3938': attribute type 2 has an invalid length. [ 917.219388][T20726] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3946'. [ 917.310326][ T808] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 917.487411][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3950'. [ 917.496968][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 917.502886][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3950'. [ 917.514728][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 917.527203][ T808] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 917.537741][T20736] syzkaller0: entered promiscuous mode [ 917.540365][ T5738] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 917.543335][T20736] syzkaller0: entered allmulticast mode [ 917.558794][ T808] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 917.569456][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.577988][ T808] usb 4-1: Product: syz [ 917.582350][ T5096] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 917.590119][ T5761] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 917.599760][T20736] tipc: Enabled bearer , priority 0 [ 917.606461][ T808] usb 4-1: Manufacturer: syz [ 917.613282][ T808] usb 4-1: SerialNumber: syz [ 917.619311][T20735] tipc: Resetting bearer [ 917.628846][ T808] usb 4-1: config 0 descriptor?? [ 917.668324][T20735] tipc: Disabling bearer [ 917.744814][ T5738] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.760165][ T5096] usb 5-1: Using ep0 maxpacket: 8 [ 917.760599][ T5738] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 917.765329][ T5761] usb 6-1: Using ep0 maxpacket: 8 [ 917.786717][ T5738] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 917.788815][ T5096] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.798588][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 917.809216][ T5096] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 917.816785][ T5738] usb 1-1: SerialNumber: syz [ 917.825277][ T5096] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 917.840757][ T5761] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.872601][ T5761] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 917.897361][ T5096] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 917.908807][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 917.920736][ T5761] usb 6-1: Product: syz [ 917.930299][ T5096] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 917.949691][ T5761] usb 6-1: Manufacturer: syz [ 917.954511][ T5761] usb 6-1: SerialNumber: syz [ 917.959159][ T5096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.979314][ T5761] usb 6-1: config 0 descriptor?? [ 917.988994][ T5761] imon_raw 6-1:0.0: IR endpoint missing [ 918.029226][ T5096] hub 5-1:1.0: bad descriptor, ignoring hub [ 918.042324][ T5096] hub 5-1:1.0: probe with driver hub failed with error -5 [ 918.065494][T18772] usb 4-1: USB disconnect, device number 2 [ 918.081766][ T5096] cdc_wdm 5-1:1.0: skipping garbage [ 918.108484][ T5096] cdc_wdm 5-1:1.0: skipping garbage [ 918.140636][T20742] xt_TCPMSS: Only works on TCP SYN packets [ 918.149419][ T5096] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 918.165717][ T5096] cdc_wdm 5-1:1.0: Unknown control protocol [ 918.437538][T20732] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 918.625663][T20747] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3954'. [ 918.689211][T20747] bond3: (slave dummy0): Releasing active interface [ 918.851769][ T5096] usb 5-1: USB disconnect, device number 100 [ 919.146674][T18772] usb 6-1: USB disconnect, device number 101 [ 919.600551][ T5096] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 919.757482][ T5096] usb 5-1: Using ep0 maxpacket: 8 [ 919.777347][ T5096] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 184, changing to 11 [ 919.813332][ T5096] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 919.844313][ T5096] usb 5-1: config 1 interface 0 has no altsetting 0 [ 919.857887][ T5096] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.40 [ 919.885208][ T5096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.918136][ T5096] usb 5-1: Product: 岒똭⦔햻驪閸딹鿂轛錸⥶谻溡ï³å·€ï¦šå®€ã–çŽã´šå·¸è¿íˆ£Ö¯á¦³î‚ˆê”›è ¶çˆ°ì­ªéŽ·áµœë›¾é˜­é­‰ [ 919.941288][ T5761] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 919.954879][ T5096] usb 5-1: Manufacturer: à°Œ [ 919.959831][ T5096] usb 5-1: SerialNumber: П [ 920.110166][ T5761] usb 4-1: Using ep0 maxpacket: 32 [ 920.126428][ T5761] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 920.138063][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.193993][ T5761] usb 4-1: config 0 descriptor?? [ 920.217163][ T5761] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 920.447837][ T5096] usbhid 5-1:1.0: can't add hid device: -71 [ 920.469291][ T5096] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 920.525619][ T5096] usb 5-1: USB disconnect, device number 101 [ 920.773204][T20782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3965'. [ 920.823146][T20782] erspan2: entered promiscuous mode [ 920.836329][ T5738] usb 1-1: 0:2 : does not exist [ 920.840309][T20782] erspan2: entered allmulticast mode [ 920.852194][T20783] binder: BINDER_SET_CONTEXT_MGR already set [ 920.867388][T20783] binder: 20781:20783 ioctl 4018620d 200000000100 returned -16 [ 920.919143][T20782] binder: BINDER_SET_CONTEXT_MGR already set [ 920.935649][T20782] binder: 20781:20782 ioctl 4018620d 200000004a80 returned -16 [ 920.939999][ T5738] usb 1-1: USB disconnect, device number 40 [ 920.992811][T14364] udevd[14364]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.191219][T20782] syz.5.3965 (20782): drop_caches: 2 [ 921.197445][T20782] syz.5.3965 (20782): drop_caches: 2 [ 921.391853][ T5738] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 921.551960][T20795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3970'. [ 921.563073][ T5738] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 921.573360][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.580231][T20795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3970'. [ 921.581660][ T5738] usb 1-1: Product: syz [ 921.595703][ T5738] usb 1-1: Manufacturer: syz [ 921.600571][ T5738] usb 1-1: SerialNumber: syz [ 921.910265][ T5096] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 922.020970][ T5738] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 922.034503][ T5738] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 922.046460][T20766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.046885][ T5738] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 922.063910][ T5096] usb 6-1: Using ep0 maxpacket: 8 [ 922.076943][T20766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.079718][ T5738] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 922.100057][ T5096] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.118334][ T5761] gspca_vc032x: reg_r err -71 [ 922.127817][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.131108][ T5738] usb 1-1: USB disconnect, device number 41 [ 922.133617][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.144995][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.154647][ T5096] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 922.189820][ T5096] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 922.198235][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.214435][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.221335][ T5096] usb 6-1: Product: syz [ 922.226026][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.231850][ T5096] usb 6-1: Manufacturer: syz [ 922.236492][ T5096] usb 6-1: SerialNumber: syz [ 922.241358][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.248185][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.254026][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.263652][ T5096] usb 6-1: config 0 descriptor?? [ 922.269330][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.274848][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.284328][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.285652][ T5096] imon_raw 6-1:0.0: IR endpoint missing [ 922.296984][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.302434][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.309159][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.315786][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.321231][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.326663][ T5761] gspca_vc032x: I2c Bus Busy Wait 00 [ 922.332637][ T5761] gspca_vc032x: Unknown sensor... [ 922.337806][ T5761] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 922.349242][ T5761] usb 4-1: USB disconnect, device number 3 [ 922.854641][ T5096] usb 6-1: USB disconnect, device number 102 [ 922.861296][ T5761] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 923.034812][ T5761] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 923.067103][ T5761] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 923.080645][ T5761] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 923.090963][ T5761] usb 1-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 923.104312][ T5761] usb 1-1: config 16 interface 0 has no altsetting 0 [ 923.120428][ T5761] usb 1-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 923.150387][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.373087][T20809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3975'. [ 923.461949][ T5738] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 923.582052][ T5761] usb 1-1: string descriptor 0 read error: -71 [ 923.604945][ T5761] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 923.623299][ T5761] imon 1-1:16.0: unable to initialize intf0, err -19 [ 923.631351][ T5761] imon:imon_probe: failed to initialize context! [ 923.640318][ T5738] usb 4-1: Using ep0 maxpacket: 16 [ 923.646467][ T5761] imon 1-1:16.0: unable to register, err -19 [ 923.650955][ T5738] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 923.670983][ T5761] usb 1-1: USB disconnect, device number 42 [ 923.699686][ T5738] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 923.715840][ T5738] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 923.724858][ T5738] usb 4-1: Product: syz [ 923.729063][ T5738] usb 4-1: Manufacturer: syz [ 923.743617][ T5738] r8152-cfgselector 4-1: Unknown version 0x0000 [ 923.761353][ T5738] r8152-cfgselector 4-1: config 0 descriptor?? [ 924.078198][T20845] [U]  [ 924.213092][T20851] futex_wake_op: syz.4.3987 tries to shift op by -1; fix this program [ 924.384110][T20859] netlink: 'syz.4.3989': attribute type 1 has an invalid length. [ 924.556897][T20862] veth5: entered promiscuous mode [ 924.575406][T20862] bond1: (slave veth5): Enslaving as an active interface with a down link [ 924.708748][T20859] bond1: (slave veth7): Enslaving as an active interface with a down link [ 924.730563][ T5738] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 924.744034][T20865] bond1: entered promiscuous mode [ 924.764817][T20865] bond1: entered allmulticast mode [ 924.774655][T20865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 924.900341][ T5738] usb 1-1: Using ep0 maxpacket: 8 [ 924.908845][ T5738] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.938278][ T5738] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 924.957471][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 924.978294][ T5738] usb 1-1: Product: syz [ 924.987894][ T5738] usb 1-1: Manufacturer: syz [ 925.002073][ T5738] usb 1-1: SerialNumber: syz [ 925.022803][ T5738] usb 1-1: config 0 descriptor?? [ 925.040306][ T5738] imon_raw 1-1:0.0: IR endpoint missing [ 925.285275][T20870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3992'. [ 925.592386][ T5096] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 925.760226][ T5096] usb 5-1: Using ep0 maxpacket: 32 [ 925.774994][ T5096] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 925.803753][ T5096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.825612][ T5096] usb 5-1: Product: syz [ 925.850282][ T5096] usb 5-1: Manufacturer: syz [ 925.868300][ T5096] usb 5-1: SerialNumber: syz [ 925.964833][T20878] tipc: Enabled bearer , priority 0 [ 925.998468][T20878] syzkaller0: entered promiscuous mode [ 926.020697][T20878] syzkaller0: entered allmulticast mode [ 926.081805][ T5738] usb 1-1: USB disconnect, device number 43 [ 926.220640][T18772] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 926.363687][T20875] tipc: Resetting bearer [ 926.388714][ T5096] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 926.408130][ T5096] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 926.568679][ T5096] usb 5-1: USB disconnect, device number 102 [ 926.682241][T15815] udevd[15815]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 926.750383][T20890] No such timeout policy "syz0" [ 926.810821][T20873] tipc: Resetting bearer [ 926.888642][T20873] tipc: Disabling bearer [ 926.993721][T20898] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 927.050143][ T5761] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 927.118644][T20901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4001'. [ 927.144565][T20901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4001'. [ 927.180425][ T5761] usb 4-1: device descriptor read/64, error -71 [ 927.382765][T20908] input: syz0 as /devices/virtual/input/input131 [ 927.440433][ T5761] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 927.570099][ T5761] usb 4-1: device descriptor read/64, error -71 [ 927.660425][T18772] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 927.690865][ T5761] usb usb4-port1: attempt power cycle [ 927.822654][T18772] usb 5-1: Using ep0 maxpacket: 32 [ 927.850100][T18772] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 927.868224][T18772] usb 5-1: config 0 has no interface number 0 [ 927.879039][T18772] usb 5-1: config 0 interface 132 has no altsetting 0 [ 927.903951][T18772] usb 5-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 927.930068][T18772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.938132][T18772] usb 5-1: Product: syz [ 927.950281][T18772] usb 5-1: Manufacturer: syz [ 927.956422][T18772] usb 5-1: SerialNumber: syz [ 927.973047][T18772] usb 5-1: config 0 descriptor?? [ 928.030053][ T5761] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 928.082468][ T5761] usb 4-1: device descriptor read/8, error -71 [ 928.320243][ T5761] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 928.330247][ T5096] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 928.340563][ T5761] usb 4-1: device descriptor read/8, error -71 [ 928.380108][ T5738] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 928.450904][ T5761] usb usb4-port1: unable to enumerate USB device [ 928.490071][ T5096] usb 1-1: Using ep0 maxpacket: 8 [ 928.497328][ T5096] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.510869][ T5096] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 928.520506][ T5096] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 928.528622][ T5096] usb 1-1: Product: syz [ 928.533194][ T5096] usb 1-1: Manufacturer: syz [ 928.537897][ T5096] usb 1-1: SerialNumber: syz [ 928.545897][ T5738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.564071][ T5096] usb 1-1: config 0 descriptor?? [ 928.576639][ T5738] usb 6-1: config 0 has no interfaces? [ 928.577610][ T5096] imon_raw 1-1:0.0: IR endpoint missing [ 928.598389][ T5738] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 928.617385][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.631494][ T5738] usb 6-1: Product: syz [ 928.635896][ T5738] usb 6-1: Manufacturer: syz [ 928.641031][ T5738] usb 6-1: SerialNumber: syz [ 928.647778][ T5738] usb 6-1: config 0 descriptor?? [ 928.977878][T20928] netlink: 'syz.5.4009': attribute type 1 has an invalid length. [ 929.130631][T20932] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4009'. [ 929.133436][T20928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 929.224105][T20928] bond3: (slave dummy0): making interface the new active one [ 929.236883][ T5738] usb 1-1: USB disconnect, device number 44 [ 929.250575][T20928] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 929.333554][T20932] bond3: entered promiscuous mode [ 929.342049][T20932] dummy0: entered promiscuous mode [ 929.360936][T20932] bond3: entered allmulticast mode [ 929.366350][T20932] dummy0: entered allmulticast mode [ 929.579259][ T5738] usb 6-1: USB disconnect, device number 103 [ 930.288941][T18772] cdc_subset 5-1:0.132: probe with driver cdc_subset failed with error -71 [ 930.319335][T18772] usb 5-1: USB disconnect, device number 103 [ 930.842202][ T29] audit: type=1326 audit(1779136961.656:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20960 comm="syz.1.4017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d519ce59 code=0x7ffc0000 [ 930.937462][ T29] audit: type=1326 audit(1779136961.656:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20960 comm="syz.1.4017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d519ce59 code=0x7ffc0000 [ 931.008857][ T29] audit: type=1326 audit(1779136961.746:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20960 comm="syz.1.4017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d519ce59 code=0x7ffc0000 [ 931.118633][ T29] audit: type=1326 audit(1779136961.746:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20960 comm="syz.1.4017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d519ce59 code=0x7ffc0000 [ 931.178823][ T29] audit: type=1326 audit(1779136961.776:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20960 comm="syz.1.4017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97d519ce59 code=0x7ffc0000 [ 931.251186][ T29] audit: type=1326 audit(1779136961.776:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20960 comm="syz.1.4017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d519ce59 code=0x7ffc0000 [ 931.340174][ T29] audit: type=1326 audit(1779136961.776:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20960 comm="syz.1.4017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d519ce59 code=0x7ffc0000 [ 931.477701][ T29] audit: type=1326 audit(1779136961.786:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20960 comm="syz.1.4017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d519ce59 code=0x7ffc0000 [ 931.518248][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.524721][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.629346][ T29] audit: type=1326 audit(1779136961.796:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20960 comm="syz.1.4017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f97d519ce59 code=0x7ffc0000 [ 931.725512][ T29] audit: type=1326 audit(1779136961.796:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20960 comm="syz.1.4017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d519ce59 code=0x7ffc0000 [ 931.854849][T20961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4017'. [ 932.197009][T20981] tap0: tun_chr_ioctl cmd 1074025680 [ 932.299255][T20983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 932.375384][T20983] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 933.102130][ T5761] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 933.283876][ T5761] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 933.307248][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.320086][ T5738] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 933.327640][ T5761] usb 1-1: Product: syz [ 933.337768][ T5761] usb 1-1: Manufacturer: syz [ 933.347887][ T5761] usb 1-1: SerialNumber: syz [ 933.520371][ T5738] usb 5-1: Using ep0 maxpacket: 16 [ 933.548121][ T5738] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 933.568673][ T5738] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 933.580609][ T5761] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 933.587453][ T5738] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 933.622110][ T5738] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 933.646962][ T5761] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 933.659517][ T5738] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 933.708091][ T5738] usb 5-1: config 0 has no interface number 0 [ 933.726510][ T5761] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 933.744712][ T5738] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 933.744723][ T5761] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 933.744746][ T5738] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 933.766197][ T5761] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 933.856838][ T5738] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 933.887568][ T5761] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 933.891843][ T5738] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 933.965404][ T5738] usb 5-1: config 0 interface 125 has no altsetting 0 [ 933.980467][ T5761] usb 1-1: USB disconnect, device number 45 [ 933.992814][ T5738] usb 5-1: config 0 interface 125 has no altsetting 2 [ 934.021211][ T5738] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 934.030681][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.052750][ T5738] usb 5-1: Product: syz [ 934.066279][ T5738] usb 5-1: Manufacturer: syz [ 934.084214][ T5738] usb 5-1: SerialNumber: syz [ 934.107904][ T5738] usb 5-1: config 0 descriptor?? [ 934.137315][ T5738] usb 5-1: selecting invalid altsetting 2 [ 934.479632][T21012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 934.548227][T20998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.607310][T20998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.922898][T21019] tipc: Started in network mode [ 934.932508][T21019] tipc: Node identity ac14140f, cluster identity 4711 [ 934.967484][T21019] tipc: Enabled bearer , priority 10 [ 935.274123][ T5738] get_1284_register timeout [ 935.301188][ C1] usb 5-1: async_complete: urb error -104 [ 935.307099][ C1] usb 5-1: async_complete: urb error -104 [ 935.312946][ C1] usb 5-1: async_complete: urb error -104 [ 935.972298][ T5738] tipc: Node number set to 2886997007 [ 936.041724][T21029] syz.3.4035 (21029): drop_caches: 2 [ 936.099160][ T5738] usb 5-1: USB disconnect, device number 104 [ 936.237680][T21029] syz.3.4035 (21029): drop_caches: 2 [ 936.380424][T18772] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 936.490117][T21033] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 936.500358][T21033] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 936.506966][T21033] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 936.540156][T18772] usb 1-1: device descriptor read/64, error -71 [ 936.810106][T18772] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 936.844830][T21046] kvm: user requested TSC rate below hardware speed [ 936.861708][T21046] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 936.961175][T18772] usb 1-1: device descriptor read/64, error -71 [ 937.092752][T18772] usb usb1-port1: attempt power cycle [ 937.461793][T18772] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 937.502152][T18772] usb 1-1: device descriptor read/8, error -71 [ 937.750445][T18772] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 937.781176][T18772] usb 1-1: device descriptor read/8, error -71 [ 937.900780][T18772] usb usb1-port1: unable to enumerate USB device [ 938.361703][T21073] syz.4.4048 (21073): drop_caches: 2 [ 938.367715][T21073] syz.4.4048 (21073): drop_caches: 2 [ 938.470309][ T5624] Bluetooth: hci0: command 0x0406 tx timeout [ 938.526064][T21078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.550147][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout [ 938.550278][ T5633] Bluetooth: hci1: command 0x0c1a tx timeout [ 939.280348][T18772] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 939.399102][T21100] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4055'. [ 939.420088][T18772] usb 4-1: device descriptor read/64, error -71 [ 939.535731][ T5738] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 939.611292][T21110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4058'. [ 939.628221][T21110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4058'. [ 939.681632][T18772] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 939.700140][ T5738] usb 1-1: Using ep0 maxpacket: 32 [ 939.712158][ T5738] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 939.729852][ T5738] usb 1-1: config 0 has no interface number 0 [ 939.736467][ T5738] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 939.779892][ T5738] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 939.803444][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.820072][ T5738] usb 1-1: Product: syz [ 939.831519][ T5738] usb 1-1: Manufacturer: syz [ 939.846434][ T5738] usb 1-1: SerialNumber: syz [ 939.852095][T18772] usb 4-1: device descriptor read/64, error -71 [ 939.878668][T21119] syz.5.4060 (21119): drop_caches: 2 [ 939.892387][T21119] syz.5.4060 (21119): drop_caches: 2 [ 939.898881][ T5738] usb 1-1: config 0 descriptor?? [ 939.905858][T21097] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 939.980098][ T5096] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 939.991585][T18772] usb usb4-port1: attempt power cycle [ 940.124847][T21097] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 940.130135][ T5096] usb 5-1: Using ep0 maxpacket: 16 [ 940.139622][ T5096] usb 5-1: config 0 has no interfaces? [ 940.150960][ T5096] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 940.166921][ T5096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.177818][ T5096] usb 5-1: config 0 descriptor?? [ 940.334971][ T5738] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 940.345347][T18772] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 940.353267][ T5689] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 940.361137][ T5738] asix 1-1:0.188: probe with driver asix failed with error -61 [ 940.380863][T18772] usb 4-1: device descriptor read/8, error -71 [ 940.399894][T21108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.409585][T21108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.521593][ T5689] usb 6-1: Using ep0 maxpacket: 16 [ 940.537200][ T5689] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 940.563045][ T5689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.582735][ T5689] usb 6-1: Product: syz [ 940.592022][ T5689] usb 6-1: Manufacturer: syz [ 940.597937][ T5689] usb 6-1: SerialNumber: syz [ 940.604761][ T5689] usb 6-1: config 0 descriptor?? [ 940.612105][ T5689] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 940.630346][T18772] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 940.650695][T18772] usb 4-1: device descriptor read/8, error -71 [ 940.760467][T18772] usb usb4-port1: unable to enumerate USB device [ 941.331272][T21128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.341364][T21128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.355217][T21128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.379932][T21128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.433643][ T5689] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 941.448650][ T5689] visor 6-1:0.0: probe with driver visor failed with error -71 [ 941.478086][ T5689] usb 6-1: USB disconnect, device number 104 [ 941.714470][T21143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4065'. [ 941.743403][T21143] FAULT_INJECTION: forcing a failure. [ 941.743403][T21143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.787753][T21143] CPU: 0 UID: 0 PID: 21143 Comm: syz.5.4065 Tainted: G L syzkaller #0 PREEMPT(full) [ 941.787782][T21143] Tainted: [L]=SOFTLOCKUP [ 941.787789][T21143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 941.787799][T21143] Call Trace: [ 941.787807][T21143] [ 941.787814][T21143] dump_stack_lvl+0xe8/0x150 [ 941.787841][T21143] should_fail_ex+0x412/0x560 [ 941.787870][T21143] _copy_from_user+0x2d/0xb0 [ 941.787894][T21143] ___sys_sendmsg+0x1c6/0x360 [ 941.787919][T21143] ? __lock_acquire+0x6b5/0x2cf0 [ 941.787942][T21143] ? __pfx____sys_sendmsg+0x10/0x10 [ 941.787997][T21143] ? __fget_files+0x2a/0x420 [ 941.788018][T21143] ? __fget_files+0x3a0/0x420 [ 941.788047][T21143] __x64_sys_sendmsg+0x1bd/0x2a0 [ 941.788074][T21143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 941.788107][T21143] ? __pfx_ksys_write+0x10/0x10 [ 941.788139][T21143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.788156][T21143] do_syscall_64+0x15f/0xf80 [ 941.788188][T21143] ? trace_irq_disable+0x3b/0x140 [ 941.788213][T21143] ? clear_bhb_loop+0x40/0x90 [ 941.788233][T21143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.788250][T21143] RIP: 0033:0x7fb34f19ce59 [ 941.788267][T21143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.788282][T21143] RSP: 002b:00007fb350127028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.788301][T21143] RAX: ffffffffffffffda RBX: 00007fb34f415fa0 RCX: 00007fb34f19ce59 [ 941.788315][T21143] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 941.788326][T21143] RBP: 00007fb350127090 R08: 0000000000000000 R09: 0000000000000000 [ 941.788337][T21143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.788348][T21143] R13: 00007fb34f416038 R14: 00007fb34f415fa0 R15: 00007fb34f53fa48 [ 941.788376][T21143] [ 942.537266][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4071'. [ 942.564408][ T5689] usb 1-1: USB disconnect, device number 50 [ 942.586907][T21160] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4072'. [ 942.599774][T21158] binder: BINDER_SET_CONTEXT_MGR already set [ 942.627241][T21158] binder: 21157:21158 ioctl 4018620d 200000000100 returned -16 [ 942.645839][ T5096] usb 5-1: USB disconnect, device number 105 [ 942.668769][T21161] binder: BINDER_SET_CONTEXT_MGR already set [ 942.682756][T21163] netlink: 'syz.0.4073': attribute type 1 has an invalid length. [ 942.694005][T21161] binder: 21157:21161 ioctl 4018620d 200000004a80 returned -16 [ 942.738435][T21163] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 942.761866][T21158] syz.5.4071 (21158): drop_caches: 2 [ 942.824173][T21158] syz.5.4071 (21158): drop_caches: 2 [ 943.230130][ T5096] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 943.250444][T21190] kvm: apic: phys broadcast and lowest prio [ 943.250471][ T5761] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 943.258591][T21190] kvm: Disabled LAPIC found during irq injection [ 943.391773][ T5096] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.406506][ T5096] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 943.425098][ T5096] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 943.425236][ T5761] usb 1-1: not running at top speed; connect to a high speed hub [ 943.443501][ T5096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.457585][ T5096] usb 5-1: config 0 descriptor?? [ 943.464964][ T5761] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 943.474545][ T5761] usb 1-1: config 95 has no interface number 0 [ 943.488992][ T5761] usb 1-1: config 95 interface 1 has no altsetting 0 [ 943.499579][ T5761] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 943.509341][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.517965][ T5761] usb 1-1: Product: syz [ 943.522804][ T5761] usb 1-1: Manufacturer: syz [ 943.527512][ T5761] usb 1-1: SerialNumber: syz [ 943.676740][T21177] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 943.779251][ T5096] ath6kl: Failed to read usb control message: -71 [ 943.801792][ T5096] ath6kl: Unable to read the bmi data from the device: -71 [ 943.817519][ T5096] ath6kl: Unable to recv target info: -71 [ 943.862508][ T5096] ath6kl: Failed to init ath6kl core: -71 [ 943.876308][ T5096] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 943.923885][ T5096] usb 5-1: USB disconnect, device number 106 [ 943.979600][ T5761] usb 1-1: USB disconnect, device number 51 [ 944.194901][T14364] udevd[14364]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 944.387185][T18772] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 944.573261][T21211] geneve0: entered allmulticast mode [ 944.590127][T18772] usb 5-1: Using ep0 maxpacket: 8 [ 944.599791][T18772] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.612744][T18772] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 944.622256][T18772] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 944.631271][T18772] usb 5-1: Product: syz [ 944.635680][T18772] usb 5-1: Manufacturer: syz [ 944.647978][T18772] usb 5-1: SerialNumber: syz [ 944.660559][T18772] usb 5-1: config 0 descriptor?? [ 944.672625][T18772] imon_raw 5-1:0.0: IR endpoint missing [ 944.700696][ T5689] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 944.860136][ T5689] usb 1-1: Using ep0 maxpacket: 32 [ 944.878508][ T5689] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 944.913684][ T5689] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 944.940159][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 944.957341][ T5689] usb 1-1: Product: syz [ 944.967270][ T5689] usb 1-1: Manufacturer: syz [ 944.978642][ T5689] usb 1-1: SerialNumber: syz [ 944.995845][ T5689] usb 1-1: config 0 descriptor?? [ 945.023361][T21206] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 945.481512][T21226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4087'. [ 945.504885][T21226] binder: BINDER_SET_CONTEXT_MGR already set [ 945.519094][T21226] binder: 21225:21226 ioctl 4018620d 200000000100 returned -16 [ 945.571412][T21226] binder: BINDER_SET_CONTEXT_MGR already set [ 945.602883][T21226] binder: 21225:21226 ioctl 4018620d 200000004a80 returned -16 [ 945.654703][T21230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4088'. [ 945.715279][T21229] syz.5.4087 (21229): drop_caches: 2 [ 945.769501][ T5689] usb 5-1: USB disconnect, device number 107 [ 945.825889][T21229] syz.5.4087 (21229): drop_caches: 2 [ 946.140827][T21234] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 946.181297][T21234] bond4 (unregistering): Released all slaves [ 946.990546][ T5761] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 947.180884][ T5761] usb 6-1: Using ep0 maxpacket: 8 [ 947.195455][ T5761] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 947.207005][ T5761] usb 6-1: config 0 has no interface number 1 [ 947.216580][ T5761] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 947.239793][ T5761] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 947.261301][ T5761] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 947.301011][ T5761] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 947.314375][ T5096] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 947.316630][T21259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4097'. [ 947.334148][ T5761] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 947.367064][ T5761] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 947.391408][ T5761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 947.405001][ T5761] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 947.438993][ T5761] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 947.456510][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.476305][ T808] usb 1-1: USB disconnect, device number 52 [ 947.484978][ T5761] usb 6-1: Product: syz [ 947.501978][ T5096] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 947.512683][ T5761] usb 6-1: Manufacturer: syz [ 947.526796][ T5096] usb 4-1: config 0 has no interface number 0 [ 947.533478][ T5761] usb 6-1: SerialNumber: syz [ 947.538514][ T5096] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 947.551460][ T5761] usb 6-1: config 0 descriptor?? [ 947.557251][ T5096] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 947.568409][T21244] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 947.578911][ T5096] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 947.589157][ T5096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.603667][ T5761] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 947.623745][ T5096] usb 4-1: Product: syz [ 947.640505][ T5761] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 947.648764][ T5096] usb 4-1: Manufacturer: syz [ 947.655551][ T5096] usb 4-1: SerialNumber: syz [ 947.675620][ T5096] usb 4-1: config 0 descriptor?? [ 947.698298][ T5096] ums-karma 4-1:0.46: USB Mass Storage device detected [ 947.739275][T21261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4098'. [ 947.786164][ T5761] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 947.816049][ T5096] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5 [ 947.825134][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4098'. [ 947.878877][T21261] fuse: Bad value for 'rootmode' [ 947.901949][ T5761] usb 6-1: USB disconnect, device number 105 [ 947.921710][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4096'. [ 948.016062][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4096'. [ 948.077049][T21266] udevd[21266]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 948.138008][T21254] ni: entered allmulticast mode [ 948.216097][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4099'. [ 948.268802][ T5761] usb 4-1: USB disconnect, device number 13 [ 948.536931][T21276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4100'. [ 948.569284][T21276] binder: BINDER_SET_CONTEXT_MGR already set [ 948.578193][T21276] binder: 21275:21276 ioctl 4018620d 200000000100 returned -16 [ 948.595056][T21276] binder: BINDER_SET_CONTEXT_MGR already set [ 948.604959][T21276] binder: 21275:21276 ioctl 4018620d 200000004a80 returned -16 [ 948.678388][T21276] syz.5.4100 (21276): drop_caches: 2 [ 948.717382][T21276] syz.5.4100 (21276): drop_caches: 2 [ 949.222241][ T5761] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 949.432330][ T5761] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 949.464041][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.498131][ T5761] usb 4-1: config 0 descriptor?? [ 949.525450][ T5761] cp210x 4-1:0.0: cp210x converter detected [ 949.804349][T21301] fuse: Bad value for 'fd' [ 949.874417][T21302] binder: 21300:21302 ioctl 80105873 200000000140 returned -22 [ 949.900425][T21302] binder: 21300:21302 ioctl c0306201 200000000640 returned -22 [ 949.928096][ T5761] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 950.179837][ T5761] usb 4-1: cp210x converter now attached to ttyUSB0 [ 950.460278][T21309] syz_tun: entered allmulticast mode [ 950.496449][ T5761] usb 4-1: USB disconnect, device number 14 [ 950.503811][T21309] netlink: 'syz.0.4110': attribute type 58 has an invalid length. [ 950.527572][ T5761] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 950.538118][T21309] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4110'. [ 950.562092][ T5761] cp210x 4-1:0.0: device disconnected [ 950.585059][T21308] syz_tun: left allmulticast mode [ 951.143376][T21317] vivid-006: disconnect [ 951.193458][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4112'. [ 951.244978][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4112'. [ 951.404396][T21316] vivid-006: reconnect [ 951.440404][T18772] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 951.630651][T18772] usb 1-1: Using ep0 maxpacket: 32 [ 951.653750][T18772] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 951.675537][T18772] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 951.703757][T18772] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 951.726070][T18772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.734876][T18772] usb 1-1: Product: syz [ 951.739156][T18772] usb 1-1: Manufacturer: syz [ 951.744344][T18772] usb 1-1: SerialNumber: syz [ 952.624470][T21322] syzkaller0: entered promiscuous mode [ 952.673314][T21322] syzkaller0: entered allmulticast mode [ 953.119195][T21326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4115'. [ 953.560683][T21325] vlan1: entered promiscuous mode [ 953.582727][T21330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4116'. [ 953.593791][T21325] bond0: entered promiscuous mode [ 953.629211][T21325] bond_slave_0: entered promiscuous mode [ 953.665216][T21325] bond_slave_1: entered promiscuous mode [ 953.766921][T21326] bond4: (slave macvlan0): Removing an active aggregator [ 953.819868][T21326] bond4: (slave macvlan0): Releasing backup interface [ 953.870102][ T5689] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 953.998441][T21326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.046790][T21326] bond_slave_0: left promiscuous mode [ 954.061320][ T5689] usb 6-1: Using ep0 maxpacket: 8 [ 954.074254][T21326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.077130][ T5689] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 954.112635][ T5689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.131193][T21326] bond_slave_1: left promiscuous mode [ 954.145531][ T5689] usb 6-1: Product: syz [ 954.150002][T21326] bond0 (unregistering): Released all slaves [ 954.161438][ T5689] usb 6-1: Manufacturer: syz [ 954.177228][ T5689] usb 6-1: SerialNumber: syz [ 954.418805][T18772] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 954.461002][T18772] usb 1-1: unit 4 not found! [ 954.681586][T18772] usb 1-1: USB disconnect, device number 53 [ 954.941095][ T5689] usb 6-1: clock source 0 is not valid, cannot use [ 954.949599][T21344] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 954.992214][T21344] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 955.017692][T21344] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 955.157427][T21349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4121'. [ 955.405218][T21350] FAULT_INJECTION: forcing a failure. [ 955.405218][T21350] name failslab, interval 1, probability 0, space 0, times 0 [ 955.405250][T21350] CPU: 1 UID: 0 PID: 21350 Comm: syz.3.4121 Tainted: G L syzkaller #0 PREEMPT(full) [ 955.405267][T21350] Tainted: [L]=SOFTLOCKUP [ 955.405271][T21350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 955.405278][T21350] Call Trace: [ 955.405282][T21350] [ 955.405287][T21350] dump_stack_lvl+0xe8/0x150 [ 955.405304][T21350] should_fail_ex+0x412/0x560 [ 955.405326][T21350] should_failslab+0xa8/0x100 [ 955.405354][T21350] __kmalloc_cache_noprof+0x88/0x660 [ 955.405376][T21350] ? nf_tables_newtable+0x435/0x1910 [ 955.405396][T21350] ? nla_strcmp+0x106/0x140 [ 955.405418][T21350] nf_tables_newtable+0x435/0x1910 [ 955.405438][T21350] nfnetlink_rcv+0x123e/0x27b0 [ 955.405468][T21350] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 955.405503][T21350] ? netlink_deliver_tap+0x2e/0x1b0 [ 955.405521][T21350] ? netlink_deliver_tap+0x2e/0x1b0 [ 955.405534][T21350] ? netlink_deliver_tap+0x2e/0x1b0 [ 955.405549][T21350] netlink_unicast+0x75c/0x8e0 [ 955.405566][T21350] netlink_sendmsg+0x813/0xb40 [ 955.405585][T21350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.405600][T21350] ? aa_sock_msg_perm+0xf1/0x1b0 [ 955.405614][T21350] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 955.405630][T21350] ____sys_sendmsg+0x972/0x9f0 [ 955.405644][T21350] ? __might_fault+0xaf/0x130 [ 955.405660][T21350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 955.405678][T21350] ? import_iovec+0x73/0xa0 [ 955.405694][T21350] ___sys_sendmsg+0x2a5/0x360 [ 955.405710][T21350] ? __lock_acquire+0x6b5/0x2cf0 [ 955.405733][T21350] ? __pfx____sys_sendmsg+0x10/0x10 [ 955.405764][T21350] ? __fget_files+0x2a/0x420 [ 955.405776][T21350] ? __fget_files+0x3a0/0x420 [ 955.405792][T21350] __x64_sys_sendmsg+0x1bd/0x2a0 [ 955.405807][T21350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 955.405825][T21350] ? __pfx_ksys_write+0x10/0x10 [ 955.405839][T21350] ? handle_softirqs+0x715/0x840 [ 955.405854][T21350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.405865][T21350] do_syscall_64+0x15f/0xf80 [ 955.405880][T21350] ? clear_bhb_loop+0x40/0x90 [ 955.405892][T21350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.405902][T21350] RIP: 0033:0x7f105d39ce59 [ 955.405912][T21350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.405920][T21350] RSP: 002b:00007f105e2d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.405932][T21350] RAX: ffffffffffffffda RBX: 00007f105d616090 RCX: 00007f105d39ce59 [ 955.405939][T21350] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 955.405946][T21350] RBP: 00007f105e2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 955.405952][T21350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.405958][T21350] R13: 00007f105d616128 R14: 00007f105d616090 R15: 00007f105d73fa48 [ 955.405976][T21350] [ 955.410666][ T5689] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 955.411970][ T5689] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 955.418087][ T5689] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 955.418104][ T5689] usb 6-1: clock source 0 is not valid, cannot use [ 955.418405][ T5689] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 955.418753][ T5689] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 955.752402][ T5689] usb 6-1: USB disconnect, device number 106 [ 956.166994][T21361] netlink: 179632 bytes leftover after parsing attributes in process `syz.5.4125'. [ 956.335365][T14359] udevd[14359]: setting mode of /dev/audio4 to 020660 failed: No such file or directory [ 956.335465][T14359] udevd[14359]: setting owner of /dev/audio4 to uid=0, gid=29 failed: No such file or directory [ 956.359824][T21361] cgroup: fork rejected by pids controller in /syz5 [ 956.412477][T14387] udevd[14387]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 956.950559][ T5633] Bluetooth: hci0: command 0x0406 tx timeout [ 957.030550][ T5633] Bluetooth: hci5: command 0x0c1a tx timeout [ 957.030591][ T5633] Bluetooth: hci1: command 0x0c1a tx timeout [ 958.246070][ T5689] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 958.443137][ T5689] usb 1-1: unable to get BOS descriptor or descriptor too short [ 958.454098][ T5689] usb 1-1: not running at top speed; connect to a high speed hub [ 958.479486][ T5689] usb 1-1: config 0 has too many interfaces: 238, using maximum allowed: 32 [ 958.497204][ T5689] usb 1-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config [ 958.526304][ T5689] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 238 [ 958.538292][ T5689] usb 1-1: config 0 has no interface number 0 [ 958.546044][ T5689] usb 1-1: config 0 interface 116 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 958.580055][ T5689] usb 1-1: config 0 interface 116 has no altsetting 0 [ 958.589052][ T5689] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 958.607394][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.616850][ T5689] usb 1-1: Product: syz [ 958.638385][ T5689] usb 1-1: Manufacturer: syz [ 958.644811][ T5689] usb 1-1: SerialNumber: syz [ 958.661498][ T5689] usb 1-1: config 0 descriptor?? [ 958.910601][ T5689] ums-usbat 1-1:0.116: USB Mass Storage device detected [ 959.074382][ T5689] usb 1-1: USB disconnect, device number 54 [ 959.960114][ T5096] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 960.101529][ T5096] usb 5-1: device descriptor read/64, error -71 [ 960.270132][ T5761] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 960.393666][ T5096] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 960.430468][ T5761] usb 1-1: Using ep0 maxpacket: 8 [ 960.487761][ T5761] usb 1-1: unable to get BOS descriptor or descriptor too short [ 960.521477][ T5761] usb 1-1: config 141 has too many interfaces: 124, using maximum allowed: 32 [ 960.530505][ T5096] usb 5-1: device descriptor read/64, error -71 [ 960.560385][ T5761] usb 1-1: config 141 has an invalid descriptor of length 94, skipping remainder of the config [ 960.580474][ T5761] usb 1-1: config 141 has 0 interfaces, different from the descriptor's value: 124 [ 960.612355][ T5761] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 960.640726][ T5096] usb usb5-port1: attempt power cycle [ 960.646467][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.693019][ T5761] usb 1-1: Product: syz [ 960.700669][ T5761] usb 1-1: Manufacturer: syz [ 960.724404][ T5761] usb 1-1: SerialNumber: syz [ 961.000833][ T5096] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 961.024107][ T5096] usb 5-1: device descriptor read/8, error -71 [ 961.271772][ T5096] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 961.363973][ T5096] usb 5-1: device descriptor read/8, error -71 [ 961.517449][ T5096] usb usb5-port1: unable to enumerate USB device [ 963.067579][ T5761] usb 1-1: USB disconnect, device number 55 [ 964.646322][T21409] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 965.160355][T18772] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 965.361057][T18772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 965.371375][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 965.371391][ T29] audit: type=1326 audit(1779136996.176:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21421 comm="syz.0.4139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3359ce59 code=0x7ffc0000 [ 965.418796][T18772] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 965.444090][T18772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 965.472270][T18772] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 965.482641][ T29] audit: type=1326 audit(1779136996.176:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21421 comm="syz.0.4139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3359ce59 code=0x7ffc0000 [ 965.512320][T18772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.530030][T18772] usb 4-1: Product: syz [ 965.540052][T18772] usb 4-1: Manufacturer: syz [ 965.546188][T18772] usb 4-1: SerialNumber: syz [ 965.555924][ T29] audit: type=1326 audit(1779136996.186:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21421 comm="syz.0.4139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d3359ce59 code=0x7ffc0000 [ 965.584245][T18772] usb 4-1: config 0 descriptor?? [ 965.599075][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 965.616294][T18772] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 965.629880][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 965.639625][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 965.656535][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 965.664438][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 965.740252][ T29] audit: type=1326 audit(1779136996.186:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21421 comm="syz.0.4139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3359ce59 code=0x7ffc0000 [ 965.869611][ T29] audit: type=1326 audit(1779136996.186:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21421 comm="syz.0.4139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d3359ce59 code=0x7ffc0000 [ 965.869656][ T29] audit: type=1326 audit(1779136996.186:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21421 comm="syz.0.4139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3359ce59 code=0x7ffc0000 [ 965.869696][ T29] audit: type=1326 audit(1779136996.186:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21421 comm="syz.0.4139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7d3359ce59 code=0x7ffc0000 [ 965.869735][ T29] audit: type=1326 audit(1779136996.186:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21421 comm="syz.0.4139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3359ce59 code=0x7ffc0000 [ 965.869775][ T29] audit: type=1326 audit(1779136996.186:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21421 comm="syz.0.4139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7d3359ce59 code=0x7ffc0000 [ 965.869813][ T29] audit: type=1326 audit(1779136996.186:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21421 comm="syz.0.4139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3359ce59 code=0x7ffc0000 [ 966.016249][ T5096] usb 4-1: USB disconnect, device number 15 [ 966.030215][ T5761] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 966.245209][T21436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.245707][T21436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.249929][T21436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.260873][T21436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.466130][T21436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.466453][T21436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.471437][T21436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.471850][T21436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.586731][ T5761] usb 1-1: unable to get BOS descriptor or descriptor too short [ 966.587409][ T5761] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 966.587431][ T5761] usb 1-1: can't read configurations, error -71 [ 966.660114][T18772] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 966.780778][T21437] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.780855][T21437] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.781015][T21437] bridge_slave_0: entered allmulticast mode [ 966.782172][T21437] bridge_slave_0: entered promiscuous mode [ 966.794564][T21437] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.794621][T21437] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.794735][T21437] bridge_slave_1: entered allmulticast mode [ 966.795779][T21437] bridge_slave_1: entered promiscuous mode [ 966.868225][T21437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.882395][T21437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.007609][T18772] usb 5-1: Using ep0 maxpacket: 32 [ 967.083436][T18772] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 967.096510][T18772] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 967.136828][T18772] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 967.146842][T18772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.166528][T18772] usb 5-1: Product: syz [ 967.176646][T18772] usb 5-1: Manufacturer: syz [ 967.185365][T18772] usb 5-1: SerialNumber: syz [ 967.240822][T21437] team0: Port device team_slave_0 added [ 967.253673][T21450] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 967.262708][T21437] team0: Port device team_slave_1 added [ 967.360551][T21437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.398046][T21437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.447955][T21437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.478030][T21437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.493999][T21437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.521987][T21437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.620083][ T5761] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 967.750205][ T5624] Bluetooth: hci0: command tx timeout [ 967.780121][ T5761] usb 1-1: Using ep0 maxpacket: 16 [ 967.787050][ T5761] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 967.804553][ T5761] usb 1-1: config 0 interface 0 has no altsetting 0 [ 967.815349][T21437] hsr_slave_0: entered promiscuous mode [ 967.824263][ T5761] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 967.838213][T21437] hsr_slave_1: entered promiscuous mode [ 967.855036][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.880184][T21437] debugfs: 'hsr0' already exists in 'hsr' [ 967.882065][ T5761] usb 1-1: Product: syz [ 967.906218][ T5761] usb 1-1: Manufacturer: syz [ 967.915505][ T5761] usb 1-1: SerialNumber: syz [ 967.916203][T21437] Cannot create hsr debugfs directory [ 967.953976][ T5761] usb 1-1: config 0 descriptor?? [ 968.205543][ T5761] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input132 [ 968.501923][ T5761] rc_core: IR keymap rc-imon-pad not found [ 968.520690][ T5761] Registered IR keymap rc-empty [ 968.558549][ T5761] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 968.617890][ T5761] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 968.681564][ T5761] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 968.738118][ T5761] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input133 [ 968.858404][ T5761] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:57> initialized [ 969.490673][T18772] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 969.512008][T18772] usb 5-1: unit 4 not found! [ 969.678994][T18772] usb 5-1: USB disconnect, device number 112 [ 969.805414][T21477] syzkaller1: entered promiscuous mode [ 969.830287][ T5624] Bluetooth: hci0: command tx timeout [ 969.848496][T21477] syzkaller1: entered allmulticast mode [ 970.104270][ T5689] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 970.111963][T18772] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 970.303088][T18772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 970.326884][T18772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.337415][ T5689] usb 4-1: config 0 has no interfaces? [ 970.351953][ T5689] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 970.372364][T18772] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 970.381639][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.400161][T18772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.420770][ T5689] usb 4-1: config 0 descriptor?? [ 970.431176][T18772] usb 5-1: config 0 descriptor?? [ 970.482069][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 970.482648][ T5738] usb 1-1: USB disconnect, device number 57 [ 970.731212][T21437] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 970.796057][T21437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 970.821132][T21437] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 970.829552][ T5737] usb 4-1: USB disconnect, device number 16 [ 970.840296][T21437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 970.857810][T21437] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 970.887642][T21437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 970.895199][T18772] hid (null): unknown global tag 0xe [ 970.910553][T21437] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 970.917323][T18772] hid (null): global environment stack underflow [ 970.926710][T18772] hid (null): unknown global tag 0x52 [ 970.934779][T21437] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 970.947873][T18772] hid_parser_main: 13 callbacks suppressed [ 970.947893][T18772] wacom 0003:056A:5000.0052: unknown main item tag 0x0 [ 970.964093][T18772] wacom 0003:056A:5000.0052: unknown main item tag 0x0 [ 970.971686][T18772] wacom 0003:056A:5000.0052: unknown main item tag 0x0 [ 970.979025][T18772] wacom 0003:056A:5000.0052: unknown main item tag 0x0 [ 970.987121][T18772] wacom 0003:056A:5000.0052: unknown main item tag 0x0 [ 970.994598][T18772] wacom 0003:056A:5000.0052: unknown main item tag 0x0 [ 971.003553][T18772] wacom 0003:056A:5000.0052: ignoring exceeding usage max [ 971.012715][T18772] wacom 0003:056A:5000.0052: unknown global tag 0xe [ 971.030206][T18772] wacom 0003:056A:5000.0052: item 0 1 1 14 parsing failed [ 971.045319][T18772] wacom 0003:056A:5000.0052: parse failed [ 971.059106][T18772] wacom 0003:056A:5000.0052: probe with driver wacom failed with error -22 [ 971.112743][T21437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.141085][ T5738] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 971.169690][T21437] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.213185][T15527] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.220396][T15527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.233830][T18772] usb 5-1: USB disconnect, device number 113 [ 971.303194][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 971.317195][T15527] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.317226][ T5738] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 971.324420][T15527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.334615][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12784, setting to 1024 [ 971.353525][ T5738] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 971.365296][ T5738] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 971.386509][ T5738] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 971.405502][ T5738] usb 1-1: Manufacturer: syz [ 971.440476][ T5738] usb 1-1: config 0 descriptor?? [ 971.460468][T21488] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 971.488840][ T5738] smsusb:smsusb_probe: board id=9, interface number 0 [ 971.536823][ T5738] smsusb:siano_media_device_register: media controller created [ 971.592784][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.600142][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.607450][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.614738][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.625967][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.633743][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.641028][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.648297][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.656369][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.663652][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.670890][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.678118][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.686485][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.693784][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.701062][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.708328][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.729085][T21437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.740438][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.747798][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.755113][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.762423][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.769731][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.777042][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.784822][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.792090][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.799337][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.806607][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.813864][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.821116][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.828970][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.836250][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.843509][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.850754][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.857985][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.865219][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.872937][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.880202][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.887451][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.894678][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.901899][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.909113][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.916856][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.916916][ T5624] Bluetooth: hci0: command tx timeout [ 971.924133][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.937024][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.944310][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.951669][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.958938][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.983807][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.991142][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 971.998425][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.005696][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.013330][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.020619][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.028400][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.035686][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.042966][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.050221][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.057462][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.064700][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.072558][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.079863][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.087143][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.094430][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.101710][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.108992][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.119560][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.126617][T21437] veth0_vlan: entered promiscuous mode [ 972.126866][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.139799][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.147088][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.154336][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.161573][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.169436][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.176755][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.184077][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.191383][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.198698][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.204493][T21437] veth1_vlan: entered promiscuous mode [ 972.205992][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.219649][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.226935][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.234196][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.241450][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.248686][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.255915][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.263643][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.270951][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.278257][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.285546][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.292827][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.300100][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.307389][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.315317][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.322617][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.329902][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.337766][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.345016][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.352238][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.359453][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.366672][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.373884][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.381109][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.388718][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.395981][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.403235][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.410488][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.417748][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.425016][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.432273][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.439534][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.449567][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.456875][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.464167][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.471464][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.478764][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.486051][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.493344][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.500639][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.507924][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.515203][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 972.523335][ T5738] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 972.534717][ T5738] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 972.542550][ T5738] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 972.551826][ T5738] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 972.556376][T21502] fuse: Bad value for 'fd' [ 972.563604][ T5738] ------------[ cut here ]------------ [ 972.569152][ T5738] !PageLargeKmalloc(page) [ 972.569174][ T5738] WARNING: mm/slub.c:6475 at free_large_kmalloc+0x9b/0x110, CPU#1: kworker/1:7/5738 [ 972.583082][ T5738] Modules linked in: [ 972.587926][ T5738] CPU: 1 UID: 0 PID: 5738 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 972.598090][ T2364] pvrusb2: request_firmware fatal error with code=-110 [ 972.599037][ T5738] Tainted: [L]=SOFTLOCKUP [ 972.610148][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 972.620264][ T5738] Workqueue: usb_hub_wq hub_event [ 972.625318][ T5738] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 972.631311][ T5738] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 b3 69 fc 8d 5b 41 5e 5d e9 af 4b 02 ff SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 972.646640][ T2364] pvrusb2: Failure uploading firmware1 [ 972.651095][ T5738] RSP: 0018:ffffc9000435eb20 EFLAGS: 00010206 [ 972.651122][ T5738] RAX: 00000000ff000000 RBX: ffffea0002cdd880 RCX: 0000000000000001 [ 972.651137][ T5738] RDX: ffffc90019b95000 RSI: ffff8880b3762000 RDI: ffffea0002cdd880 [ 972.651153][ T5738] RBP: 0000000000000000 R08: ffff8880490b5b03 R09: 1ffff11009216b60 [ 972.651167][ T5738] R10: dffffc0000000000 R11: ffffed1009216b61 R12: 1ffff1100c4af482 [ 972.651184][ T5738] R13: ffff8880363c4880 R14: ffff8880490b5b60 R15: dffffc0000000000 [ 972.651199][ T5738] FS: 0000000000000000(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 972.651215][ T5738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 972.651228][ T5738] CR2: 00007f7d335ea540 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 972.651246][ T5738] Call Trace: [ 972.651256][ T5738] [ 972.651267][ T5738] usb_free_urb+0xd0/0x120 [ 972.651294][ T5738] smsusb_term_device+0x1d7/0x3e0 [ 972.651321][ T5738] smsusb_probe+0x1aba/0x2280 [ 972.651364][ T5738] ? __pfx_smsusb_probe+0x10/0x10 [ 972.651398][ T5738] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 972.705156][ T2364] pvrusb2: Device initialization was not successful. [ 972.712946][ T5738] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 972.712990][ T5738] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 972.713025][ T5738] usb_probe_interface+0x659/0xc70 [ 972.713067][ T5738] ? __pfx_usb_probe_interface+0x10/0x10 [ 972.713094][ T5738] really_probe+0x267/0xaf0 [ 972.713130][ T5738] __driver_probe_device+0x1ef/0x380 [ 972.713161][ T5738] driver_probe_device+0x4f/0x240 [ 972.803008][ T5738] __device_attach_driver+0x279/0x430 [ 972.808414][ T5738] bus_for_each_drv+0x258/0x2f0 [ 972.813342][ T5738] ? __pfx___device_attach_driver+0x10/0x10 [ 972.819253][ T5738] ? __pfx_bus_for_each_drv+0x10/0x10 [ 972.824685][ T5738] ? lockdep_hardirqs_on+0x7a/0x110 [ 972.829906][ T5738] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 972.835815][ T5738] __device_attach+0x2c5/0x450 [ 972.836445][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 972.840670][ T5738] ? __pfx___device_attach+0x10/0x10 [ 972.840705][ T5738] ? _raw_spin_unlock+0x28/0x50 [ 972.840737][ T5738] device_initial_probe+0xa1/0xd0 [ 972.840767][ T5738] bus_probe_device+0x12a/0x220 [ 972.870925][ T5738] device_add+0x7e9/0xbb0 [ 972.875281][ T5738] usb_set_configuration+0x1a87/0x2110 [ 972.880847][ T5738] usb_generic_driver_probe+0x8d/0x150 [ 972.883531][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 972.886324][ T5738] usb_probe_device+0x1c4/0x3b0 [ 972.900536][ T5738] ? __pfx_usb_probe_device+0x10/0x10 [ 972.905931][ T5738] really_probe+0x267/0xaf0 [ 972.910514][ T5738] __driver_probe_device+0x1ef/0x380 [ 972.911033][T17540] pvrusb2: Device being rendered inoperable [ 972.915817][ T5738] driver_probe_device+0x4f/0x240 [ 972.915853][ T5738] __device_attach_driver+0x279/0x430 [ 972.932284][ T5738] bus_for_each_drv+0x258/0x2f0 [ 972.937153][ T5738] ? __pfx___device_attach_driver+0x10/0x10 [ 972.943127][ T5738] ? __pfx_bus_for_each_drv+0x10/0x10 [ 972.948521][ T5738] ? lockdep_hardirqs_on+0x7a/0x110 [ 972.954045][ T5738] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 972.959878][ T5738] __device_attach+0x2c5/0x450 [ 972.964747][ T5738] ? __pfx___device_attach+0x10/0x10 [ 972.970101][ T5738] ? _raw_spin_unlock+0x28/0x50 [ 972.974975][ T5738] device_initial_probe+0xa1/0xd0 [ 972.980081][ T5738] bus_probe_device+0x12a/0x220 [ 972.984946][ T5738] device_add+0x7e9/0xbb0 [ 972.989297][ T5738] usb_new_device+0xa08/0x16f0 [ 972.994174][ T5738] ? __pfx_usb_new_device+0x10/0x10 [ 972.999393][ T5738] ? _raw_spin_unlock_irq+0x23/0x50 [ 973.004686][ T5738] hub_event+0x2a1c/0x4f30 [ 973.009213][ T5738] ? __pfx_hub_event+0x10/0x10 [ 973.014070][ T5738] ? process_scheduled_works+0xa70/0x1860 [ 973.019821][ T5738] ? process_scheduled_works+0xa70/0x1860 [ 973.025679][ T5738] ? process_scheduled_works+0xa70/0x1860 [ 973.031660][ T5738] process_scheduled_works+0xb5d/0x1860 [ 973.037263][ T5738] ? __pfx_process_scheduled_works+0x10/0x10 [ 973.043324][ T5738] ? assign_work+0x3d5/0x5e0 [ 973.047939][ T5738] worker_thread+0xa53/0xfc0 [ 973.052659][ T5738] kthread+0x389/0x470 [ 973.056752][ T5738] ? __pfx_worker_thread+0x10/0x10 [ 973.061951][ T5738] ? __pfx_kthread+0x10/0x10 [ 973.066572][ T5738] ret_from_fork+0x514/0xb70 [ 973.071228][ T5738] ? __pfx_ret_from_fork+0x10/0x10 [ 973.076446][ T5738] ? __switch_to+0xc79/0x1410 [ 973.081289][ T5738] ? __pfx_kthread+0x10/0x10 [ 973.085927][ T5738] ret_from_fork_asm+0x1a/0x30 [ 973.090799][ T5738] [ 973.093846][ T5738] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 973.101128][ T5738] CPU: 1 UID: 0 PID: 5738 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 973.112141][ T5738] Tainted: [L]=SOFTLOCKUP [ 973.116453][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 973.126500][ T5738] Workqueue: usb_hub_wq hub_event [ 973.131545][ T5738] Call Trace: [ 973.134815][ T5738] [ 973.137739][ T5738] vpanic+0x56c/0xa60 [ 973.141713][ T5738] ? __pfx__printk+0x10/0x10 [ 973.146300][ T5738] ? __pfx_vpanic+0x10/0x10 [ 973.150795][ T5738] ? is_bpf_text_address+0x292/0x2b0 [ 973.156074][ T5738] ? is_bpf_text_address+0x26/0x2b0 [ 973.161274][ T5738] panic+0xc5/0xd0 [ 973.164986][ T5738] ? __pfx_panic+0x10/0x10 [ 973.169423][ T5738] ? ret_from_fork_asm+0x1a/0x30 [ 973.174383][ T5738] __warn+0x315/0x4c0 [ 973.178362][ T5738] ? free_large_kmalloc+0x9b/0x110 [ 973.183477][ T5738] ? free_large_kmalloc+0x9b/0x110 [ 973.188589][ T5738] __report_bug+0x29a/0x540 [ 973.193101][ T5738] ? device_initial_probe+0xa1/0xd0 [ 973.198297][ T5738] ? bus_probe_device+0x12a/0x220 [ 973.203313][ T5738] ? device_add+0x7e9/0xbb0 [ 973.207813][ T5738] ? free_large_kmalloc+0x9b/0x110 [ 973.212922][ T5738] ? __pfx___report_bug+0x10/0x10 [ 973.217938][ T5738] ? usb_new_device+0xa08/0x16f0 [ 973.222881][ T5738] ? hub_event+0x2a1c/0x4f30 [ 973.227461][ T5738] ? process_scheduled_works+0xb5d/0x1860 [ 973.233176][ T5738] ? smscore_unregister_device+0x651/0x780 [ 973.238988][ T5738] ? free_large_kmalloc+0x9b/0x110 [ 973.244105][ T5738] report_bug+0x16a/0x220 [ 973.248443][ T5738] ? free_large_kmalloc+0x9b/0x110 [ 973.253634][ T5738] ? free_large_kmalloc+0x9d/0x110 [ 973.258740][ T5738] handle_bug+0x9c/0x200 [ 973.262972][ T5738] exc_invalid_op+0x1a/0x50 [ 973.267489][ T5738] asm_exc_invalid_op+0x1a/0x20 [ 973.272337][ T5738] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 973.278139][ T5738] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 b3 69 fc 8d 5b 41 5e 5d e9 af 4b 02 ff [ 973.297740][ T5738] RSP: 0018:ffffc9000435eb20 EFLAGS: 00010206 [ 973.303804][ T5738] RAX: 00000000ff000000 RBX: ffffea0002cdd880 RCX: 0000000000000001 [ 973.311765][ T5738] RDX: ffffc90019b95000 RSI: ffff8880b3762000 RDI: ffffea0002cdd880 [ 973.319729][ T5738] RBP: 0000000000000000 R08: ffff8880490b5b03 R09: 1ffff11009216b60 [ 973.327687][ T5738] R10: dffffc0000000000 R11: ffffed1009216b61 R12: 1ffff1100c4af482 [ 973.335646][ T5738] R13: ffff8880363c4880 R14: ffff8880490b5b60 R15: dffffc0000000000 [ 973.343628][ T5738] usb_free_urb+0xd0/0x120 [ 973.348123][ T5738] smsusb_term_device+0x1d7/0x3e0 [ 973.353144][ T5738] smsusb_probe+0x1aba/0x2280 [ 973.357832][ T5738] ? __pfx_smsusb_probe+0x10/0x10 [ 973.362856][ T5738] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 973.368397][ T5738] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 973.374199][ T5738] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 973.379831][ T5738] usb_probe_interface+0x659/0xc70 [ 973.384946][ T5738] ? __pfx_usb_probe_interface+0x10/0x10 [ 973.390571][ T5738] really_probe+0x267/0xaf0 [ 973.395074][ T5738] __driver_probe_device+0x1ef/0x380 [ 973.400367][ T5738] driver_probe_device+0x4f/0x240 [ 973.405413][ T5738] __device_attach_driver+0x279/0x430 [ 973.410799][ T5738] bus_for_each_drv+0x258/0x2f0 [ 973.415650][ T5738] ? __pfx___device_attach_driver+0x10/0x10 [ 973.421551][ T5738] ? __pfx_bus_for_each_drv+0x10/0x10 [ 973.426917][ T5738] ? lockdep_hardirqs_on+0x7a/0x110 [ 973.432113][ T5738] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 973.437944][ T5738] __device_attach+0x2c5/0x450 [ 973.442716][ T5738] ? __pfx___device_attach+0x10/0x10 [ 973.448001][ T5738] ? _raw_spin_unlock+0x28/0x50 [ 973.452850][ T5738] device_initial_probe+0xa1/0xd0 [ 973.457875][ T5738] bus_probe_device+0x12a/0x220 [ 973.462716][ T5738] device_add+0x7e9/0xbb0 [ 973.467043][ T5738] usb_set_configuration+0x1a87/0x2110 [ 973.472519][ T5738] usb_generic_driver_probe+0x8d/0x150 [ 973.477971][ T5738] usb_probe_device+0x1c4/0x3b0 [ 973.482816][ T5738] ? __pfx_usb_probe_device+0x10/0x10 [ 973.488179][ T5738] really_probe+0x267/0xaf0 [ 973.492681][ T5738] __driver_probe_device+0x1ef/0x380 [ 973.497975][ T5738] driver_probe_device+0x4f/0x240 [ 973.502994][ T5738] __device_attach_driver+0x279/0x430 [ 973.508365][ T5738] bus_for_each_drv+0x258/0x2f0 [ 973.513206][ T5738] ? __pfx___device_attach_driver+0x10/0x10 [ 973.519092][ T5738] ? __pfx_bus_for_each_drv+0x10/0x10 [ 973.524451][ T5738] ? lockdep_hardirqs_on+0x7a/0x110 [ 973.529649][ T5738] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 973.535457][ T5738] __device_attach+0x2c5/0x450 [ 973.540226][ T5738] ? __pfx___device_attach+0x10/0x10 [ 973.545509][ T5738] ? _raw_spin_unlock+0x28/0x50 [ 973.550355][ T5738] device_initial_probe+0xa1/0xd0 [ 973.555377][ T5738] bus_probe_device+0x12a/0x220 [ 973.560219][ T5738] device_add+0x7e9/0xbb0 [ 973.564547][ T5738] usb_new_device+0xa08/0x16f0 [ 973.569311][ T5738] ? __pfx_usb_new_device+0x10/0x10 [ 973.574502][ T5738] ? _raw_spin_unlock_irq+0x23/0x50 [ 973.579707][ T5738] hub_event+0x2a1c/0x4f30 [ 973.584156][ T5738] ? __pfx_hub_event+0x10/0x10 [ 973.588920][ T5738] ? process_scheduled_works+0xa70/0x1860 [ 973.594653][ T5738] ? process_scheduled_works+0xa70/0x1860 [ 973.600368][ T5738] ? process_scheduled_works+0xa70/0x1860 [ 973.606080][ T5738] process_scheduled_works+0xb5d/0x1860 [ 973.611638][ T5738] ? __pfx_process_scheduled_works+0x10/0x10 [ 973.617616][ T5738] ? assign_work+0x3d5/0x5e0 [ 973.622199][ T5738] worker_thread+0xa53/0xfc0 [ 973.626801][ T5738] kthread+0x389/0x470 [ 973.630900][ T5738] ? __pfx_worker_thread+0x10/0x10 [ 973.636000][ T5738] ? __pfx_kthread+0x10/0x10 [ 973.640586][ T5738] ret_from_fork+0x514/0xb70 [ 973.645167][ T5738] ? __pfx_ret_from_fork+0x10/0x10 [ 973.650267][ T5738] ? __switch_to+0xc79/0x1410 [ 973.654959][ T5738] ? __pfx_kthread+0x10/0x10 [ 973.659539][ T5738] ret_from_fork_asm+0x1a/0x30 [ 973.664307][ T5738] [ 973.667915][ T5738] Kernel Offset: disabled [ 973.672228][ T5738] Rebooting in 86400 seconds..