last executing test programs: 9.770604153s ago: executing program 4 (id=824): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0020}]}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x12, r6, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) readv(r7, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/154, 0x9a}, {0x0}], 0x2) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0002}]}) write(r10, &(0x7f0000000140)='3', 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100330a2403512614613ae010203010902120001080090d00904000000ffd6824000d322"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0) 7.118352758s ago: executing program 2 (id=831): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8242, 0x0) writev(r0, &(0x7f0000001880)=[{&(0x7f0000000400)='{', 0x1}], 0x1) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket(0x10, 0x3, 0x3b7) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='1', 0x1) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) r4 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) (async, rerun: 32) r5 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) (async, rerun: 32) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (rerun: 32) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"/524], 0x1fffc) (async, rerun: 64) syz_emit_vhci(&(0x7f0000001e00)=ANY=[@ANYBLOB="2136077dfa7a74abaaaa"], 0xa) (async, rerun: 64) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) sendfile(r4, r4, 0x0, 0x200001) (async) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0xfffffffffffeffff) (async) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) (async) pselect6(0x40, &(0x7f0000000040)={0xc, 0x5, 0xfffffffffffffff3, 0xffffffffffffffbe, 0x0, 0x0, 0x400000000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 6.742719459s ago: executing program 1 (id=832): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 6.71152221s ago: executing program 2 (id=833): socket(0x6, 0x3, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x53, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010102020000102505a1a44000010203010902410001010cc0030904000002020600020b2406000000000000000005240000000d240f01e60900000100060002090582020800010305090503020800040606d9ba538de1c5d5127f87ae504679de1ed00929438dadeeaeedf1ddf60e5664af92473e02e27bc7339183c00583f2c6481fe9a1dd98910a86bfca1a11ecffb24e9029c930ee8731f3904d9b47d2df809737485958fd1cb39d00"], &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp6\x00') fchdir(r3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file1\x00', 0x8000041e) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r5, 0x0, 0x4ffe6, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f00000001c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="bc97d52b153f6e3fb309f2ac8fa7bcd1dca6c4eeddbbaf2fb2", 0x19}], 0x1, &(0x7f00000002c0)}, 0x4008855) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) preadv(r6, &(0x7f0000000980), 0x0, 0x186, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x164, 0x184, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x324) 6.576852104s ago: executing program 1 (id=834): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x5, 0xa}, {}, {0x100000000000}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x7}}, 0xe4) connect$inet6(r0, 0x0, 0x0) 6.350731253s ago: executing program 1 (id=835): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) read$char_usb(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x43) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) r4 = socket(0x22, 0x2, 0x4) getsockname(r4, 0x0, 0x0) write$proc_mixer(r3, &(0x7f00000000c0)=[{'SYNTH', @val={' \'', 'Line Capture'}}, {'RADIO', @val={' \'', 'Master Capture Switch'}}, {'TREBLE', @val={' \'', 'CD Capture Switch'}}, {'SPEAKER', @void}, {'IMIX', @val={' \'', 'Master Playback'}}, {'LINE2', @val={' \'', 'CD Capture'}}, {'OGAIN', @void}], 0xef) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x3, 0x4, "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", 0x7, 0x2, 0xfd, 0x9, 0x5, 0x1, 0x1, 0x1}}}, 0x120) syz_usb_disconnect(r0) 6.328770208s ago: executing program 3 (id=836): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfcc7, 0x0, 0x0, 0x0, 0x2d}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x25, 0xd622c77fd7b9de7e, 0x9) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@delchain={0x64, 0x64, 0xf31, 0x3, 0x4, {0x0, 0x0, 0x0, r5, {0x8, 0xffe0}, {0x10, 0xffff}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x46, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}]}}]}, 0x64}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x2}, {0x7, 0xc1}]}, 0x18, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x280, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000000140), 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, &(0x7f00000001c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x8, 0x2, {0x0, 0x2710}, {0x4, 0xc, 0xd, 0x9, 0x61, 0x4, "6b2e1eb8"}, 0x6fb7, 0x1, {&(0x7f00000003c0)=[{0x5, 0x3, {0x5}, 0x3}, {0x3, 0x8, {0x6}, 0x200}]}, 0x7fff}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 6.09440299s ago: executing program 4 (id=838): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6(0xa, 0x80002, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) (async) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000001c0)="0ab2bfe2015e7f6ecf0f25fd4a40619ddf44ae6106419414d9f9822876858db71d5dc78f29373021bffbd03c1fed018949d8184645f0f47d059b6d48ff1b639dd8732bf8aea494607a78bcb57e62c8186c0c3303044bc835e1cd421d31c2fbe0e1e2e8add85ef98d1045356abe4fea486c8ffed0fb0b9f781babd3a83c383d14dabe33414e10ccaa78d694388070a9322d5c2620f0f40bb1ba7ab1a0b238dd6494a1315031965166d73577008b8ac7c1b32ba1700dd0e51ce6810f13", 0xbc}], 0x1}}], 0x1, 0x4001c00) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000100)=0x28) (async) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000100)=0x28) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00') r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x35, &(0x7f00000a2000)={0x0, 0x0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r10, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r7, &(0x7f0000000080), 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r12, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r5, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.304305567s ago: executing program 3 (id=839): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x7000000, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0xd}]}}}]}, 0x44}}, 0x24008008) 5.158721059s ago: executing program 4 (id=841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) syz_open_dev$midi(&(0x7f0000000180), 0xfffffffd, 0x606000) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') close(0x3) pipe2(&(0x7f0000000100), 0x84800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) 5.099437615s ago: executing program 3 (id=842): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000000)={0x0, 0x8080000, 0x7, 0x2, 0x80}) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x23, 0x4e, {0x4e, 0x22, "f19579420874110a0b61858af822ade6e1e48b1175ad55ded3bbe4bbbbe0565b04b726ba8ff4a9d5a9ae34db097007f4677f48f8b648e63aa62ddfe5817ef0e682ee37956d6910c329bd8d71"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000100)={0x0, 0x22, 0x1a, {[@global=@item_4={0x3, 0x1, 0x6, "55713e8a"}, @main=@item_4={0x3, 0x0, 0xc, "3b6b9a98"}, @global=@item_012={0x1, 0x1, 0x3, "82"}, @main=@item_4={0x3, 0x0, 0xa, "93d75ecf"}, @local=@item_012={0x1, 0x2, 0x9, "82"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x4, "88084701"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x9, 0x1, {0x22, 0xb77}}}}, &(0x7f0000000380)={0x18, &(0x7f00000001c0)={0x20, 0x15, 0x1d, "6f9977a7c5a269327d0777a467c8528150953ff8b155e8a8d2de085cf3"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0x20, 0x1, 0xa0, "f729612cf159d72ba692f2be3f4f4012f9b25a754d2ada0aec587c8fee0ff89db712d9c78f6db5cf5f41fcbacdbfb2a465dbb1b42541ffe991c71fe107ae3eb3f7b5aefc69ea060742f3f3b9e25c0e51c3784e1093c3aad5ad775d047d0b821ff91058aec453b13f920a0895f01d3e0a03c606b5bc57c82935bb5f3befdb5368a763241b855fc41ff213254b76f82513081542bb5ec4f3447c97cbe99f04c712"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x8}}) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1ff7, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0xd28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x8, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x6, 0x4, 0x55}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x54, 0x6, 0xfc, 0x8, 0x1}, 0x2f, &(0x7f0000000440)={0x5, 0xf, 0x2f, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x3, 0xe5da, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0x7, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x3, 0x4, 0x6, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xca, 0x1, 0x67}]}, 0x1, [{0x3a, &(0x7f0000000480)=@string={0x3a, 0x3, "ffb4903fdc87da3e7c142988c5354f5ddf208539ef29f32ce30c902b4f0b16d78c584e73e3e72172272e5c71b6df9465261ec37c4df973d5"}}]}) syz_usb_control_io(r1, &(0x7f00000006c0)={0x18, &(0x7f0000000500)={0x40, 0x3, 0x5d, {0x5d, 0x22, "85b4458eced6dae065481a70da62db432d33884dc143019604b48f74fcf4e316144c896eb8e2d812908bc58d9a714ea7d52ae5033cec51dc014ba2c8c06f2dcb18638b3dcb0c54ae6f6cbf4582821136fe6fd58cd8f0ee8bb35cae"}}, &(0x7f0000000580)={0x0, 0x3, 0x63, @string={0x63, 0x3, "f32ea624145c48c7f38714e542dfa38451750a5f481b2094ac0250637016bca36f6e35dd381ebf714254ac43100b0b4c571b42e99f4e5123613e483a8e489a973efba1db7b65aad363ddb496c8e41790b1cf30b99fe0189111a5fd9c0d63c7dadb"}}, &(0x7f0000000600)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x7fffffd, 0xf, 0x2, [0xc000, 0xfff0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6, 0x40, 0x7}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x7f, 0x2, "f4ce5c8f", "8b010bfa"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x80, 0x4, 0x72, 0xfffb, 0x9}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000700)={0x20, 0x5, 0xc6, "289440ef1521a9ed817c1438f5f7039bed825c91adcd2855b0a3f63d61411aebb16dbfde77c9ee9c10ee3376b781945449394a910eba71bdc8d7cab1d64e2066cd693c0e3963a48b903725282fe94c2f99a4e7db3e0592cd6a6e3d1b9902508a79d94d90c1478142b0380efe877773f93a1bc0f8ce12c55fda7b081e0430c056530b87fbdef7e73d423255585ec5b4dbc2f441e1d20654a45f18560f67cf65a6f8d17889f685e7a41c2463e21cd08755d0616886501b2204edd365843c24fb7e604e7e58f460"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x7, 0x3}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0x4, 0x2, [0xf]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0xb51}, &(0x7f0000000940)={0x40, 0x9, 0x1}, &(0x7f0000000980)={0x40, 0xb, 0x2, "a52a"}, &(0x7f00000009c0)={0x40, 0xf, 0x2}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "1cd7"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x1}}) r2 = openat$cuse(0xffffff9c, &(0x7f0000000c40), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000c80), 0x7fff, 0x20000) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000cc0)={0x7}) (async) r3 = syz_usb_connect$cdc_ecm(0x1, 0x97, &(0x7f0000000d00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x1, 0x1, 0x5, 0x40, 0xfa, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "d8ea65bd04ae"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x9, 0xb3}, [@mdlm={0x15}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x6, 0xc, 0x40, 0x2, 0xf9}, @obex={0x5, 0x24, 0x15, 0x351}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xa, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xd5, 0x9, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7f, 0x8}}}}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x200, 0x6, 0x1, 0x7, 0x40, 0x4}, 0x1f, &(0x7f0000000e00)={0x5, 0xf, 0x1f, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "6981ae1b97fbdd42389b520904f58ffe"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x4, [{0x8c, &(0x7f0000000e40)=@string={0x8c, 0x3, "11ffebc11f24020f6eb9905fb9eca00a0d65eb316e5727571730072f0055bfb4ba3d2187f80adf422473eae83d76eae73d461f29125264e6b12d17f0f78b6f1de4eea000183bbde849a23d0d02786c07f5eb2f4b22b9ee6342254601a84371fa230347ee8248d7aa99bec510155161c6e8aaf9aa43a0ac711b1b724899b530fc7923c4c4f5b73723148e"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x411}}, {0x45, &(0x7f0000000f40)=@string={0x45, 0x3, "5ee895db87290a1c812fb2924820c4d6d49574c43eddfa04e5da396025f297f9c25904c7769eda6426c9530d6109839de1d258b42f57230e1dcd538930ad674d79b05e"}}, {0xde, &(0x7f0000000fc0)=@string={0xde, 0x3, "939975fc2e0c0c77d1a6c07de5777f56c8fdb0addb752f28774aefb58cbdb51e21583ff15095bee2ae5c56604e517e1b45d6b281317053dec925f3289a67d8dc0df304d2e4a427e701b70f4b73641876a659c81596d9018f4f40f1390459aeb1e594639ea5ea8d974b87311ff341df454c660195a631a765f4d951bae99801df6d8d9d1f515b3aa5c4322840878c5db7b4def88532fd455cdceb005b303b5a1e56b16ac56880b629701c76866aff4a06802f4d485b040278ea740803b3499fda0fc1766adc9d6a99f37311301708ff18ed0019afcd768bde86c85834"}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000001240)={0xc, &(0x7f0000001100)={0x40, 0x23, 0xde, {0xde, 0xb, "16e01f74f7ad7720befe13ae2024f5b9c48cd760b26bb6eac73ac88d85d51ee7c094ac413ee9b76ea7bb11c709afdc878704d9032c8fd943851668a3dc103e383856f2209b76864cea37b0a8a7bc1478ce17df6c905c5be647387b5da983e9dd298b5344b0d2be56d7ac4421077134caa0aac5119b64a2599f2e7b0927840e3fc33060002c5e7be82228e9548c26aef1af85a7930bc3d5b731922613fd53c95751913e26793e2a5fc125d6328950989ebc65e7b533b73aed3a67e3d4f6df9e55ae4507932855aca6c6d653836fdb6c1b2d62f678babd6540f3a37903"}}, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001380)={0x10, &(0x7f0000001280)={0x40, 0x30, 0x6d, "e5152dff945a2e451a95448aaaf17ad3cd08112fde1f45eb063d696635b45db9826a5f5948fa1d8829b92928a9f14382c3086658470a4850477256622d7d2e7a98b023615d47f1dc15dbf4d032d7337e8fa63bcdedba818be9b33c8db4cbdb7ed9c1a7a486dd129d7dbb74a8d8"}, &(0x7f0000001300)={0x0, 0xa, 0x1}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x40}}) (async) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000013c0), 0x501440, 0x0) r5 = fsmount(r4, 0x0, 0x74) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001400)={0x0, 0x6, 0x1, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) syz_usb_connect(0x2, 0x6b8, &(0x7f0000001440)={{0x12, 0x1, 0x250, 0x8b, 0xa1, 0xed, 0x8, 0xccd, 0x5e, 0x8d3e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a6, 0x3, 0x0, 0xb, 0x20, 0x8b, [{{0x9, 0x4, 0x5c, 0x0, 0xb, 0x0, 0x7f, 0x37, 0x0, [@hid_hid={0x9, 0x21, 0xffff, 0xf, 0x1, {0x22, 0x7ed}}], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0xc, 0x1, 0xe, [@generic={0x58, 0x9, "9eb87601852cac692ef6cc0b1aa2e7e45812bddc3200971721eeaae13a6a5c60dedd2f8ac147beb6b946e8dac15413b0a9a3ed22084075a3023e859785a69cbe31117468ebc9968fe2373aa7f615b0f7723de7187703"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x75, 0x3ff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x10, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}, @generic={0xa0, 0x5, "6bf793cf591d3afd7d679406c9adb662622767e9ab5154ccd2090dd3bbe21920a0cbfa7a1e87f0b07f1b7fe4c35deb00d14d7f565eee534956f99957ca5664c256312bb5ad0397197e452fc5c6af78adc1305245d45de685f5f616733467c5204fe231a692f8178ec4cb6a4ca04d048831fc361ca9769598a17a7422ba35b3c19183c25817b8e199feb6e60c5457bc9d2e266d9ddee07fc425e7eb3b9c12"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x6, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x75, 0xfbff}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x4, 0x8, 0x57, [@generic={0xc4, 0x21, "06078682bde78133e7681dc4247e61c12e632310ee0baf1b58e53512d92a240f045e7942a6af32c3ae33fd53139e68ac15a964215b92e04bfe0739b0e6509ead59b0619306e8b6c01fb6f5a8f0aa47ffbdee23d423746a07cbadef3ff1e5f4e72f509dd8def97cd5fe0a8dd03668a77cc58c9099422501175050279a81f21f359b27e9de3a439a6c041f5e6737737f62dd5eedc0c9be463a101ff6b834d5e5b513fcc1c64adc0c53bd87a88102ba81c4f1f08fb57aa3863b4cfe606e7eb5e59e9f8f"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x41, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x85, 0x3, 0x33}}, {{0x9, 0x5, 0x4, 0x97b01b442764c2d4, 0x40, 0x7, 0x1, 0x74, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x5}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0xf9, 0x0, 0x8, [@generic={0xcd, 0xe, "bea0151d57e6fd047c334205fd2a319b71646560ee9956e805cbbe49f3bc4dbc68767851925486e90d296cb6b2efd0c39ab120609c0ecbd20e098ad9301e169b5cfc3914aac5683b340afea416194f18b39c85ace3266c3f5d2e05ba27236666c2811c64a98642a29feb663d579473fa9b6b46f6acf78d3b659b4e79e29d0e4a5fa82293e9e8afe68121e881d6e6343aaebf8ecf380f31212cec3a6236dd2c702d96f261f80d07e304e4fb279c4e1c07903ce744205c0fa57b7fff872b97967c5eacfd995169b57ac6fd4e"}, @generic={0x39, 0xa, "5740ac13ead3e23a3251fb3982c5d50dc8e236f7cb9b334544ce86c45f7eaab430a298119d5f6d1c3858a5a155b16a6fe056baa9f6a278"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x9, 0x7a, 0xd1}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0xff, 0x5, 0xb4}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xc, 0x4, 0xf0}}]}}, {{0x9, 0x4, 0x42, 0x7, 0x4, 0xa8, 0xbd, 0xb6, 0x2, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "58b0af6808"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x1, 0x7}, {0x6, 0x24, 0x1a, 0x2, 0x25}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xd}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x69, 0x1}, @obex={0x5, 0x24, 0x15, 0x7}]}], [{{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x0, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x400}, @generic={0x32, 0xf, "833e77b62f489ad3a0c848d58b2a8ed73e5dcdeacf2ee3f9efa1e3e6c9b80ea213fade27f31fa2d226463ad511dc15b8"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x0, 0x0, 0x6, 0xfc, [@generic={0x51, 0x8, "69ac411f6f1bff5c41f1735eab5c52b24965bc4cc64f0409d00f041688cae2a218fc53151080b38c48654477b09fc041207136613f6e4fb65ef93285ec199b68bd025ca2b03f3e48bdbb4dec0a3032"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7fff}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x9, 0x81, 0x39}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x3, 0x3, 0xc}}]}}, {{0x9, 0x4, 0x24, 0x0, 0x5, 0x41, 0x7b, 0x3c, 0x6, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "5502746d55"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3, 0x3}, [@country_functional={0x12, 0x24, 0x7, 0xbb, 0x1e0c, [0x7f, 0x3, 0x6, 0x3, 0x101, 0x200]}]}], [{{0x9, 0x5, 0x8, 0xd, 0x8, 0x1, 0x7f, 0x0, [@generic={0xeb, 0x30, "111231611af2459b45b0ce6dadbd9e79ce8451eff4c5feb62124bb399608de28c7e0c031930de19522d78e9f65e5331db8a6426503f57b8b7122903314e893bf6edab0745fbe33000e0dd71376bb7a42d29ce5378fa5705f33812d7074d49570c2d686cc6e707cde64091de1925776622ec2111fa2a72cc79ccfe419a6f7c00aff76ac3187a67dff949c15d34bac55e24ec94faf9de8e57808e45ca7438c3b1e0e1b3a981fd24148db40e45c44fbc0536abf30aa320f2d75e3be59aa6e7c5c49280481ecb9a846549852cfddc02d605daff501d1a140722871e5e105131508717752e20358d87fc338"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x4, 0x1, 0x40}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x4, 0x0, 0x8}}, {{0x9, 0x5, 0x9, 0x22, 0x40, 0xd, 0x9, 0xe3}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0xf1, 0x0, 0x2, [@generic={0xe4, 0x31, "bc9250beafe1b7fffa355ee09a165165470760aebf2c77770b2154737753be5bccb45256e89e4897686c9b810df9f8003f2071ed471f3cd6c89d1dcdfd928fe610e84a1748ea4b715495b12bd589d2df0890a6399693ab282f6d89c91ae7b76c157b5b4074cc4ace0eaabac2ed6a97e5d09206e1645570e2fb31d4c207f2039331f85c7d3c21ecfd580894c0a2d4dde7f7889a387733da7d51086cc473ebfc9e00a6feddf2a939d73af2c05c2c70d2b2fdd46d9289eb4764a88e9a11315f607e3169ecf1d2615307f41c4c481ec79aad5eb427e7c44c276bb0cefda3b3902ad8707b"}]}}]}}]}}]}}, &(0x7f0000001f40)={0xa, &(0x7f0000001b00)={0xa, 0x6, 0x200, 0x9, 0xfd, 0x2, 0x8, 0x9}, 0x48, &(0x7f0000001b40)={0x5, 0xf, 0x48, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6f, 0x80, 0xf801, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x33, 0xe, 0x6b, 0x6, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x39, "4c0e3f57d8c1b6443ab2e1d03013f358"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x5a, 0x3, 0x7, 0x1, 0x37}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xce, 0x0, 0x3, 0xe}, @ptm_cap={0x3}]}, 0xa, [{0x75, &(0x7f0000001bc0)=@string={0x75, 0x3, "8be41a9d8bd17cdde2ef8990019339062e6ed1ad04ca560e5eca4b30b97606c77a744fd1be5e1fa646f37ba7c62d4e47babe5d807ebc9c64ba1d29e2c6d44cddebecdb868f36fd6dd67b697419aa149208d7e88f08b856929ee56fa0ebf59f849ccdeff84a98d352a745bae4a6cf661cc4f5cd"}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000001d40)=@string={0x4, 0x3, 'Zc'}}, {0x30, &(0x7f0000001d80)=@string={0x30, 0x3, "3dbc5de7904d50d1c2f565aca029ef6ceabbf5e541364bae95467818664f6203469553f0ccb95e77df22694e8489"}}, {0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0x426}}, {0xf8, &(0x7f0000001e00)=@string={0xf8, 0x3, "6ff5568a43cfa9ad728cd852787cc4ef0192193be7b8033c88b9aa940873f6c9a46fe3201c60c0d313341b78f838b4cd280fe974fcd9ec66a3f419c06d6122f9ec31e3f88f340b5318d5afe6bc7166eb0302dc6436ef12bbb7ed655d6119d785f9e36141a320b1279a623fc4c68dc7fba66ee54545cbe40814881acc9557fe254e663167287c367ca533ba870d3dacbd4fbf19f4c34f5f980dda09c4a5c9efa38542b5e8bf9216972356ca525cb497dbaaa94ffebe3b7719f5e34a8282ce4ed1b5c7f2bc0ba3c42f1fd707206f2c14137de686ac7cc06e3b0825d890ea6ec0843d7858ba74a89e4e31e3c6833ba4531211c8233a0464"}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x280a}}]}) (async) fdatasync(r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000002000)={0x0, @nl=@unspec, @sco={0x1f, @none}, @phonet={0x23, 0x9, 0x5, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x366, 0x0, 0x1, 0x99, 0x7ff}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002080)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000020c0)={r7, 0x1, 0x6, @remote}, 0x10) (async) openat$dir(0xffffff9c, &(0x7f0000002100)='./file0\x00', 0x288003, 0x145) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000002140)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000002240)={0x0, 0xb8, &(0x7f0000002180)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4f3}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x10001, @loopback, 0x401}]}, &(0x7f0000002280)=0xc) (async) ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f00000022c0)=0x3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f00000024c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002480)={&(0x7f00000023c0)={0xb4, r8, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x73}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x10}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xa}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x35d, 0x34}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x6f}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x85}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x7b}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000002500)=0x1) (async) utime(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)={0xff, 0x6}) ioctl$VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f00000025c0)={0x7, @sdr={0x35315241, 0x2}}) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000026c0)=0x3b, 0x4) 4.340572313s ago: executing program 1 (id=843): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x800) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xba, 0xc0, 0xc2, 0x40, 0x102c, 0x6251, 0x753e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6a, 0x73, 0xa9}}]}}]}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x100000000000, 0x0, 0x0, 0x0, 0x4000, 0x3, 0xffffffffffffffff, r3, 0xffffffff, 0x20000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x21, 0xffffffff, 0x58339298, 0x1002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11}}, 0x50) fsmount(r0, 0x1, 0xb) read$FUSE(r0, 0x0, 0x0) 4.203615706s ago: executing program 4 (id=844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8000000006, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r2, r2]}}], 0x14, 0x40}}], 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000240)={0xf, 0x1, 0x2, "6040c47d6572a1000000150073d600deff0000000804000000ee00", 0x49323159}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x28043, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0], 0x60}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050025bd7000fedbdf250600000008000300", @ANYRES32=r6, @ANYBLOB="08000500060000001c00178004"], 0x40}, 0x1, 0x0, 0x0, 0x40048}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) read$hiddev(r8, &(0x7f0000000140)=""/118, 0x76) 3.598486351s ago: executing program 0 (id=848): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x114, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd5c2c317ad42ae19}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xb4, 0x1, [@m_simple={0xb0, 0x1e, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7fffffff, 0x8, 0x1, 0x9, 0x9683831}}, @TCA_DEF_DATA={0xc, 0x3, 'skbedit\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'u32\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x3, 0x5, 0xfffffffa, 0x8001}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff0, 0xfca, 0x20000000, 0x10001, 0xd}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'tunnel_key\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/186, 0xba}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.579132022s ago: executing program 0 (id=849): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000140)='wg0\x00'}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x36, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "70eae4", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) 3.492889946s ago: executing program 2 (id=850): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfcc7, 0x0, 0x0, 0x0, 0x2d}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x25, 0xd622c77fd7b9de7e, 0x9) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@delchain={0x64, 0x64, 0xf31, 0x3, 0x4, {0x0, 0x0, 0x0, r5, {0x8, 0xffe0}, {0x10, 0xffff}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x46, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}]}}]}, 0x64}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) openat$full(0xffffffffffffff9c, 0x0, 0x280, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000000140), 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, &(0x7f00000001c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x8, 0x2, {0x0, 0x2710}, {0x4, 0xc, 0xd, 0x9, 0x61, 0x4, "6b2e1eb8"}, 0x6fb7, 0x1, {&(0x7f00000003c0)=[{0x5, 0x3, {0x5}, 0x3}, {0x3, 0x8, {0x6}, 0x200}]}, 0x7fff}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 2.994762779s ago: executing program 1 (id=851): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x60, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x6, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x6, 0x3, 0x1, 0x40, 0x5}, 0x1a, &(0x7f0000000140)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x8, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa4, 0x81, 0x1, 0x5, 0x40}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}, {0x5f, &(0x7f00000001c0)=@string={0x5f, 0x3, "0eb7d28f2fb538b162d4751cbf3dd74735ed942f561a861e9fc82970e71fb430f4c2691a3c2c8f8927f3fe007c5ae110a9302714d94e53ebf57266d96d3c1d8da69cd32b89d003ef016c56cf55b655056709410783b86d6c4a0d9019d6"}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000340)={0xc, &(0x7f0000000280)={0x0, 0x8, 0x44, {0x44, 0x8, "d8b6a11cf514050b6282cfb8511add2713566e38ced68c165b1060257f01812be480ee9861cb99723f19489d16df60ea3a2ea280926b687129e2f9ae06da887f568f"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x344b}}}, &(0x7f0000000600)={0x1c, &(0x7f0000000380)={0x40, 0x17, 0xe4, "eb038927197e8f32325e4a21ba7a09fb39c38afcf974ce950885f12eb7d59069547f849f375d717f27511b0eb6337ca46cc7336bd08a0990a17709f757bb604be9cf19641b33cb098e7f267bce98a6b3d8ae401466b526e5c3ed241469df3306734ee90cb540637c45fdc750648db738190bfa1d041f9017f63c189469bca09cb852ff33189f39d15177b387fe8432795b991c8f1c066d78866a4c12baaa03d3e5734c0be7983ec7c44a2c2a52be79394b0ef219aa3b50e29f369629735b71ecf1a8c8b72bf8963d4b3cf1f797562c57ee5818996757092e96add667c76731906c6073c1"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x22}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000500)={0x20, 0x0, 0x59, {0x57, "fee4c9f9fa0a7e6b69a10ce33e5e3f9d30cae7b9803a91ca1f7b350bfd936885230e9b9eec000286c7fc30f7fb59e3250d82cb7ab59e5f2c3941fd154d9f753246d4615ede92ad12c510a8e056563935b3c03541a00225"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x2}}) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f0000000000)={0x0, 0xa, 0x7, {0x7, 0x0, "ffffffffea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.304452698s ago: executing program 0 (id=852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x10, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x0, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x8000003, 0x6, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x1, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x8000, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x0, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x0, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x7, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0xfffffffd, 0x6, 0x8, 0x75, 0x9, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x1, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x8, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0x7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x6, 0x6, 0xd, 0x3, 0xa, 0x800d0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x3, 0x5, 0x6f780000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1000, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x6, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x80002, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x4, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x0, 0x0, 0xb, 0x7a8d, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0xffffffffffffffff) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) openat$dma_heap(0xffffff9c, &(0x7f0000000300), 0x180, 0x0) write$UHID_DESTROY(r9, &(0x7f0000000040), 0x4) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') sendto$packet(r10, &(0x7f0000000300), 0x0, 0x80, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x1, 0xff, 0x6, @broadcast}, 0x14) 2.166312626s ago: executing program 2 (id=853): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) (async) r1 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x10, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x10, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840) syz_usb_connect(0x0, 0x51, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x1, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}], [{{0x9, 0x5, 0xa, 0x2, 0x20, 0x1, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1e, 0xf814}]}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xa0, 0x2d, 0xb1, 0x40, 0xfff0, 0xfff0, 0x71df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x40, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x2, 0x7c, 0xc0, 0x51, 0x0, [], [{{0x9, 0x5, 0xe, 0x0, 0x400, 0x5, 0xe, 0x4}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x8, 0x3, 0x40}}]}}]}}]}}, 0x0) r3 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x800) 2.039645928s ago: executing program 4 (id=854): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x31}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) fstatfs(r3, &(0x7f0000000540)=""/188) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x40804) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x20, 0x0, 0xffff, 0x0, 0x0, 0x9122, 0x0, 0x1, {0x2}}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 1.934699127s ago: executing program 3 (id=855): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b41d000000000000711094000000000006000000000000009500000000000000c6507c31754788bd5b146a926ba6bcd0c32f5be016a42449f8c8888ef181ab36f46ac9abd1cd76b58c7a86ce621ec833491d36fae252414c1fc718"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x24) 1.93401976s ago: executing program 0 (id=856): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x5, 0xa}, {}, {0x100000000000}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x7}}, 0xe4) connect$inet6(r0, 0x0, 0x0) 1.92553836s ago: executing program 4 (id=857): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) setxattr$system_posix_acl(&(0x7f00000021c0)='./file0/file1\x00', &(0x7f0000002240)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x4, 0x11116410, 0x0, 0x9, 0x81, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x1, 0x0, 0x7fffbfff, 0x1fffffffffffd, 0x404, 0xa, {0x5, 0x7fffffff, 0x6420, 0x1, 0x1, 0x4, 0x8, 0x123, 0x6, 0xa000, 0x0, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000096d04c65c988cd655cc0409022400010000800009040002010300020009211508fe0122070009058103000600000c"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_io_uring_setup(0x6f5c, &(0x7f0000000100)={0x0, 0x2f3c, 0x800, 0xf, 0x31b}, &(0x7f0000000080), &(0x7f0000000180)) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x1, "7ebab8e8"}, @global=@item_012={0x1, 0x1, 0x0, '!'}]}}, 0x0}, 0x0) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getdents(r5, &(0x7f00000001c0)=""/37, 0x25) 1.854413602s ago: executing program 3 (id=858): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r7, &(0x7f00000003c0)=[{0x0}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x402c5839, &(0x7f00000004c0)={0x20, 0x1, 0x0, 0x400}) write$sndseq(r7, &(0x7f0000000480)=[{0x73, 0x4, 0x5, 0xf, @time={0x9, 0x6}, {0x0, 0x91}, {0x6, 0x4}, @ext={0x0, 0x0}}], 0x1c) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000080)={0x3, r6, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) r9 = syz_io_uring_setup(0x35a3, &(0x7f0000000400)={0x0, 0x9015, 0x40, 0x2}, &(0x7f0000000740), &(0x7f0000000140)) io_uring_setup(0x3d72, &(0x7f00000001c0)={0x0, 0x451f, 0x26, 0x0, 0x0, 0x0, r9}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0x0, 0x2}}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="964a6c5176e84b4d7ad0", 0xa}], 0x1}, 0x4048081) 1.774669611s ago: executing program 0 (id=859): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x1d, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xd2a8, 0xfad}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048054}, 0x4000000) read$alg(r1, &(0x7f0000003780)=""/4096, 0x1000) 787.063672ms ago: executing program 0 (id=860): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) 786.159677ms ago: executing program 1 (id=861): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000000)=[{0xe, 0x0, 0x22, &(0x7f0000000080)="f8ee01961e75f576db8171b7ef49df3e85d58dacbdae2ff4294114bad388e298a1df"}], 0x1}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x10000, 0x2, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x4, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x41}], 0x1}}], 0x2, 0x8010) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bf001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xa6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10}, 0x94) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x5) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x8040}, 0x18, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r7 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000003c0)='#}\xe1}\x00', 0x0, r3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYRES8=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r7, 0x7277, 0x0, 0x28, 0x0, 0x0) write$dsp(r6, &(0x7f0000000200)="bd4c4cc2f24a55e8752448b4c37c520bb5a15833275b9601d6c5c4ab51b93badd121b6dc6ce7b0305b53da8056f62e21b6e61bb466e79eed64b229fb76ae72e773c2ba100f3350ef6f17073a4f3464a6a68d2b21fe0548eaea0a20b59f23080cae50972a2ba17140b98891c318be0ffce9b828f7a216b781d42f96df04466080b721bdf680ac562dc9783aa1e4ebd8d3e6e5a9f3f2535b9042dfc897d4ddce794cff6cb210bddb7670b1da53433f7b", 0xfffffffffffffe5f) r11 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r11, 0xc25c4110, &(0x7f0000000100)={0x8, [[0x1], [0x0, 0x2], [0x3, 0x0, 0x0, 0x0, 0x6]], '\x00', [{0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x4}, {0x0, 0x6}, {}, {}, {}, {0xfffffffd, 0x7}, {}, {}, {}, {}, {0x0, 0x8000}], '\x00', 0x1f15}) landlock_restrict_self(r5, 0x6) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, 0x8) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f00000000c0)=0x800008, 0x4) 607.663358ms ago: executing program 3 (id=862): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e24, 0x0, @mcast2, 0x4}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x2d, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x202005, 0x7}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x2, 0x1, 0x4, 0x90}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2a00) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) 394.664826ms ago: executing program 2 (id=863): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0xe, 0x0, 0x8, 0xfc, 0x9, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfb}, {0x3000, 0xeeef0000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x8}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000, 0xfffe}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf501, 0x0, [0x0, 0x0, 0x1]}) r6 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r6, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@id, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@id, 0x80, 0x0}}], 0x2, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001805030301032c000502ffffffff00"/28, @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 0s ago: executing program 2 (id=864): syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xfff5, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x33}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 41.190433][ T7665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.190464][ T7665] ___sys_sendmsg+0x21f/0x2a0 [ 241.190482][ T7665] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.190531][ T7665] ? __fget_files+0x2a/0x420 [ 241.190548][ T7665] ? __fget_files+0x3a0/0x420 [ 241.190574][ T7665] __sys_sendmsg+0x164/0x220 [ 241.190596][ T7665] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.190623][ T7665] ? __pfx_ksys_write+0x10/0x10 [ 241.190649][ T7665] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 241.190677][ T7665] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.190703][ T7665] __do_fast_syscall_32+0xb6/0x2b0 [ 241.190719][ T7665] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.190762][ T7665] do_fast_syscall_32+0x34/0x80 [ 241.190779][ T7665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.190803][ T7665] RIP: 0023:0xf7fe5539 [ 241.190821][ T7665] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 241.190837][ T7665] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 241.190855][ T7665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 241.190867][ T7665] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.190877][ T7665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.190886][ T7665] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 241.190896][ T7665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.190922][ T7665] [ 241.226018][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 241.343843][ T5903] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.349748][ T10] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 241.351150][ T5903] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 241.461888][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 241.800140][ T5903] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.809645][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.842579][ T7663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 241.857718][ T5903] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.968027][ T7674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.446'. [ 241.983807][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.991723][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.154659][ T24] usb 3-1: USB disconnect, device number 17 [ 242.781887][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 242.830776][ T7650] delete_channel: no stack [ 242.841746][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 242.899433][ T5903] usb 1-1: USB disconnect, device number 17 [ 243.011632][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 243.023260][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.030985][ T5935] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 243.037440][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.054704][ T24] usb 3-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 243.055805][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 243.096450][ T24] usb 3-1: config 1 interface 0 altsetting 8 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 243.114018][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 243.126292][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.164936][ T9] usb 5-1: config 0 descriptor?? [ 243.231153][ T24] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x85 has an invalid bInterval 126, changing to 7 [ 243.254219][ T24] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x85 has invalid maxpacket 9306, setting to 1024 [ 243.267897][ T24] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 243.301892][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 243.354985][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.364647][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 243.401660][ T5935] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 243.458884][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.474188][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 243.483014][ T5935] usb 4-1: can't read configurations, error -61 [ 243.490142][ T24] usb 3-1: Product: syz [ 243.495078][ T24] usb 3-1: Manufacturer: syz [ 243.577043][ T24] usb 3-1: SerialNumber: syz [ 243.627052][ T9] apple 0003:05AC:027A.0005: hidraw0: USB HID v0.07 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0 [ 243.761021][ T5935] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 244.002845][ T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 244.051847][ T89] usb 5-1: USB disconnect, device number 11 [ 244.204129][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 244.227457][ T5935] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 244.263983][ T24] usb 3-1: USB disconnect, device number 18 [ 244.295073][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 244.356419][ T5935] usb 4-1: can't read configurations, error -61 [ 244.379382][ T5935] usb usb4-port1: attempt power cycle [ 244.981724][ T5935] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 245.118715][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 245.124705][ T5935] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 245.208824][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 245.224677][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'. [ 245.240941][ T5935] usb 4-1: can't read configurations, error -61 [ 245.396403][ T5935] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 245.736648][ T5935] usb 4-1: device not accepting address 20, error -71 [ 245.865909][ T5935] usb usb4-port1: unable to enumerate USB device [ 246.116074][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.464'. [ 246.241515][ T7738] netlink: 52 bytes leftover after parsing attributes in process `syz.2.464'. [ 247.341249][ T5935] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 247.365042][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.471'. [ 247.377736][ T7760] netlink: 52 bytes leftover after parsing attributes in process `syz.1.471'. [ 247.586127][ T5935] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 247.631427][ T5935] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 247.671766][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.712813][ T5935] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 247.895824][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 248.166934][ T5935] usb 5-1: Product: syz [ 248.173969][ T5935] usb 5-1: Manufacturer: syz [ 248.227587][ T5935] usb 5-1: SerialNumber: syz [ 248.235614][ T7765] FAULT_INJECTION: forcing a failure. [ 248.235614][ T7765] name failslab, interval 1, probability 0, space 0, times 0 [ 248.249413][ T7765] CPU: 0 UID: 0 PID: 7765 Comm: syz.0.473 Not tainted syzkaller #0 PREEMPT(full) [ 248.249431][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.249438][ T7765] Call Trace: [ 248.249445][ T7765] [ 248.249451][ T7765] dump_stack_lvl+0x189/0x250 [ 248.249470][ T7765] ? __pfx____ratelimit+0x10/0x10 [ 248.249485][ T7765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.249499][ T7765] ? __pfx__printk+0x10/0x10 [ 248.249508][ T7765] ? __sock_sendmsg+0x21c/0x270 [ 248.249522][ T7765] ? __do_fast_syscall_32+0xb6/0x2b0 [ 248.249532][ T7765] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.249549][ T7765] should_fail_ex+0x414/0x560 [ 248.249568][ T7765] should_failslab+0xa8/0x100 [ 248.249586][ T7765] kmem_cache_alloc_noprof+0x74/0x6e0 [ 248.249611][ T7765] ? skb_clone+0x212/0x3a0 [ 248.249626][ T7765] skb_clone+0x212/0x3a0 [ 248.249640][ T7765] __netlink_deliver_tap+0x404/0x850 [ 248.249658][ T7765] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.249669][ T7765] netlink_deliver_tap+0x19c/0x1b0 [ 248.249680][ T7765] netlink_sendskb+0x68/0x140 [ 248.249697][ T7765] netlink_unicast+0x397/0x9e0 [ 248.249710][ T7765] ? __asan_memcpy+0x40/0x70 [ 248.249728][ T7765] ? __pfx_netlink_unicast+0x10/0x10 [ 248.249748][ T7765] nfnetlink_rcv+0x2309/0x2590 [ 248.249790][ T7765] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 248.249813][ T7765] ? ref_tracker_free+0x63a/0x7d0 [ 248.249840][ T7765] ? __netlink_deliver_tap+0x807/0x850 [ 248.249851][ T7765] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.249871][ T7765] netlink_unicast+0x82f/0x9e0 [ 248.249891][ T7765] ? __pfx_netlink_unicast+0x10/0x10 [ 248.249907][ T7765] ? netlink_sendmsg+0x642/0xb30 [ 248.249916][ T7765] ? skb_put+0x11b/0x210 [ 248.249928][ T7765] netlink_sendmsg+0x805/0xb30 [ 248.249944][ T7765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.249955][ T7765] ? __import_iovec+0x5d4/0x7f0 [ 248.249968][ T7765] ? aa_sock_msg_perm+0xf1/0x1d0 [ 248.249985][ T7765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.249995][ T7765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.250006][ T7765] __sock_sendmsg+0x21c/0x270 [ 248.250022][ T7765] ____sys_sendmsg+0x505/0x830 [ 248.250037][ T7765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.250057][ T7765] ___sys_sendmsg+0x21f/0x2a0 [ 248.250069][ T7765] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.250105][ T7765] ? __fget_files+0x2a/0x420 [ 248.250115][ T7765] ? __fget_files+0x3a0/0x420 [ 248.250131][ T7765] __sys_sendmsg+0x164/0x220 [ 248.250143][ T7765] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.250159][ T7765] ? __pfx_ksys_write+0x10/0x10 [ 248.250176][ T7765] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 248.250193][ T7765] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.250209][ T7765] __do_fast_syscall_32+0xb6/0x2b0 [ 248.250219][ T7765] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.250236][ T7765] do_fast_syscall_32+0x34/0x80 [ 248.250245][ T7765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.250257][ T7765] RIP: 0023:0xf704d539 [ 248.250268][ T7765] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 248.250277][ T7765] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 248.250289][ T7765] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 248.250296][ T7765] RDX: 0000000002000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.250302][ T7765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.250308][ T7765] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 248.250314][ T7765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.250330][ T7765] [ 248.662018][ T5935] usb 5-1: config 0 descriptor?? [ 248.730798][ T5935] usb 5-1: selecting invalid altsetting 0 [ 249.096049][ T7770] netlink: 'syz.1.475': attribute type 2 has an invalid length. [ 249.272985][ T7776] netlink: 'syz.3.474': attribute type 10 has an invalid length. [ 249.287989][ T7776] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 249.299896][ T7776] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 249.388564][ T7776] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 249.409544][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.554891][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.787085][ T5935] usb 5-1: USB disconnect, device number 12 [ 250.543213][ T7790] bond0: option xmit_hash_policy: invalid value (8) [ 250.855728][ T7803] tipc: Enabling of bearer rejected, media not registered [ 251.221180][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 251.473008][ T7816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.486'. [ 251.483999][ T7816] netlink: 52 bytes leftover after parsing attributes in process `syz.0.486'. [ 251.677995][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 251.724639][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.733985][ T10] usb 3-1: config 0 has no interface number 0 [ 251.747333][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 252.106203][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.132717][ T10] usb 3-1: Product: syz [ 252.153098][ T10] usb 3-1: Manufacturer: syz [ 252.185287][ T10] usb 3-1: SerialNumber: syz [ 252.204575][ T10] usb 3-1: config 0 descriptor?? [ 252.213804][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 252.224308][ T10] usb 3-1: selecting invalid altsetting 1 [ 252.234271][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 252.246621][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 252.258903][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 252.299321][ T10] usb 3-1: media controller created [ 252.948603][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.991298][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 253.000060][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 253.007862][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 253.091754][ T10] usb 3-1: USB disconnect, device number 19 [ 253.337378][ T5940] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 253.501000][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 253.519138][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 253.527310][ T5940] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.558419][ T5940] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.565897][ T5940] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 253.575891][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.588686][ T5940] usb 1-1: config 0 descriptor?? [ 253.651669][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 253.702408][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.721948][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 253.751681][ T10] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 253.771056][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.780674][ T10] usb 3-1: Product: syz [ 253.788173][ T10] usb 3-1: Manufacturer: syz [ 253.794012][ T10] usb 3-1: SerialNumber: syz [ 253.811900][ T10] usb 3-1: config 0 descriptor?? [ 254.016374][ T5940] hid-rmi 0003:0461:4E72.0006: hidraw0: USB HID v0.02 Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 254.058231][ T7834] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 254.212170][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.492'. [ 254.520465][ T7868] QAT: failed to copy from user cfg_data. [ 254.550188][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.676041][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.966563][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.975574][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.078502][ T24] usb 1-1: USB disconnect, device number 18 [ 256.450421][ T10] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 256.508730][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 256.576376][ T7879] netlink: 48 bytes leftover after parsing attributes in process `syz.3.505'. [ 256.621339][ T10] usb 3-1: USB disconnect, device number 20 [ 256.739288][ T7877] FAULT_INJECTION: forcing a failure. [ 256.739288][ T7877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.798577][ T7877] CPU: 0 UID: 0 PID: 7877 Comm: syz.0.504 Not tainted syzkaller #0 PREEMPT(full) [ 256.798601][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.798613][ T7877] Call Trace: [ 256.798621][ T7877] [ 256.798630][ T7877] dump_stack_lvl+0x189/0x250 [ 256.798661][ T7877] ? __pfx____ratelimit+0x10/0x10 [ 256.798698][ T7877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.798725][ T7877] ? __pfx__printk+0x10/0x10 [ 256.798749][ T7877] ? fs_reclaim_acquire+0x7d/0x100 [ 256.798788][ T7877] should_fail_ex+0x414/0x560 [ 256.798823][ T7877] prepare_alloc_pages+0x213/0x610 [ 256.798851][ T7877] __alloc_frozen_pages_noprof+0x123/0x370 [ 256.798876][ T7877] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 256.798900][ T7877] ? __pfx___might_resched+0x10/0x10 [ 256.798935][ T7877] __folio_alloc_noprof+0x18/0x120 [ 256.798957][ T7877] migrate_pages_batch+0x801/0x35e0 [ 256.798998][ T7877] ? __pfx_alloc_migration_target+0x10/0x10 [ 256.799030][ T7877] ? __pfx_migrate_pages_batch+0x10/0x10 [ 256.799055][ T7877] ? __pfx_remove_migration_pte+0x10/0x10 [ 256.799096][ T7877] migrate_pages+0x1bcc/0x2930 [ 256.799136][ T7877] ? __pfx_alloc_migration_target+0x10/0x10 [ 256.799165][ T7877] ? __pfx_migrate_pages+0x10/0x10 [ 256.799184][ T7877] ? find_vma+0xe7/0x160 [ 256.799209][ T7877] ? __pfx_find_vma+0x10/0x10 [ 256.799237][ T7877] ? queue_pages_test_walk+0x423/0x790 [ 256.799264][ T7877] ? walk_page_range_mm+0x57e/0x660 [ 256.799303][ T7877] ? __pfx___up_read+0x10/0x10 [ 256.799337][ T7877] do_migrate_pages+0x5ee/0x800 [ 256.799378][ T7877] ? __pfx_do_migrate_pages+0x10/0x10 [ 256.799438][ T7877] ? security_capable+0xbd/0x2e0 [ 256.799471][ T7877] __se_sys_migrate_pages+0x544/0x650 [ 256.799500][ T7877] ? exc_page_fault+0x82/0x100 [ 256.799532][ T7877] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 256.799564][ T7877] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 256.799594][ T7877] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.799625][ T7877] __do_fast_syscall_32+0xb6/0x2b0 [ 256.799644][ T7877] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.799675][ T7877] do_fast_syscall_32+0x34/0x80 [ 256.799693][ T7877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.799717][ T7877] RIP: 0023:0xf704d539 [ 256.799733][ T7877] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 256.799751][ T7877] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000126 [ 256.799771][ T7877] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000003 [ 256.799785][ T7877] RDX: 0000000080000040 RSI: 0000000080000300 RDI: 0000000000000000 [ 256.799797][ T7877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.799808][ T7877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 256.799820][ T7877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.799849][ T7877] [ 257.431281][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 257.572788][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 257.584750][ T10] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 257.593607][ T10] usb 3-1: config 0 has no interface number 0 [ 257.602900][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 257.612534][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.620785][ T10] usb 3-1: Product: syz [ 257.627053][ T10] usb 3-1: Manufacturer: syz [ 257.631974][ T10] usb 3-1: SerialNumber: syz [ 257.641510][ T10] usb 3-1: config 0 descriptor?? [ 257.651997][ T10] ftdi_sio 3-1:0.117: FTDI USB Serial Device converter detected [ 257.663446][ T10] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 257.693281][ T30] audit: type=1326 audit(1763704185.789:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 257.726108][ T5940] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 257.728409][ T30] audit: type=1326 audit(1763704185.819:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 257.762540][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 257.774175][ T30] audit: type=1326 audit(1763704185.819:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=244 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 257.775267][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 257.803850][ T30] audit: type=1326 audit(1763704185.819:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 257.836025][ T9] usb 1-1: config 179 has no interface number 0 [ 257.836507][ T30] audit: type=1326 audit(1763704185.819:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 257.842876][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 257.867398][ T30] audit: type=1326 audit(1763704185.819:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=123 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 257.902477][ T30] audit: type=1326 audit(1763704185.819:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 257.927789][ T5965] usb 3-1: USB disconnect, device number 21 [ 257.948219][ T5965] ftdi_sio 3-1:0.117: device disconnected [ 257.951920][ T30] audit: type=1326 audit(1763704185.819:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 257.956918][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 257.984526][ T5940] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 257.991422][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 143, changing to 11 [ 258.004595][ T5940] usb 4-1: config 0 has no interface number 0 [ 258.010541][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 258.027700][ T5940] usb 4-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 258.033754][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 258.041747][ T5940] usb 4-1: config 0 interface 11 has no altsetting 0 [ 258.063517][ T30] audit: type=1326 audit(1763704185.819:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 258.064181][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 258.085659][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.085849][ T5940] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 258.085876][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.095611][ T89] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 258.098195][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.141106][ T30] audit: type=1326 audit(1763704185.819:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 258.181703][ T5940] usb 4-1: config 0 descriptor?? [ 258.187501][ T7887] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 258.197365][ T7891] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 258.210744][ T5940] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 258.219269][ T5940] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 87 [ 258.238283][ T5940] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 258.245441][ T89] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.246773][ T5940] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 258.265458][ T89] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 258.265493][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 258.265521][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 258.265619][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 258.265642][ T89] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.274201][ T89] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 258.334241][ T5940] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 258.336554][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.344726][ T5940] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 258.351174][ T89] usb 2-1: Product: syz [ 258.359216][ T5940] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 258.363055][ T89] usb 2-1: Manufacturer: syz [ 258.376930][ T89] usb 2-1: SerialNumber: syz [ 258.377466][ T5940] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 258.393901][ T89] usb 2-1: config 0 descriptor?? [ 258.400703][ T5940] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 258.437754][ T7898] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 258.447088][ T5940] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 258.457537][ T5940] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 258.475084][ T89] ati_remote 2-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 258.485377][ T5940] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 258.514597][ T5940] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 258.561791][ T5940] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 258.602599][ T5940] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 258.634169][ T5940] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 258.713481][ T5940] usb 4-1: USB disconnect, device number 21 [ 258.732493][ T5940] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 258.808924][ T5940] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 258.825701][ T24] usb 2-1: USB disconnect, device number 20 [ 258.901899][ T5940] keyspan 4-1:0.11: device disconnected [ 258.934463][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.966849][ T7907] netlink: 108 bytes leftover after parsing attributes in process `syz.2.515'. [ 258.988581][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.343360][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 259.343365][ T24] usb 1-1: USB disconnect, device number 19 [ 259.358879][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 260.778661][ T7949] vivid-000: ================= START STATUS ================= [ 261.011179][ T7949] vivid-000: Test Pattern: 75% Colorbar [ 261.018584][ T7949] vivid-000: Fill Percentage of Frame: 100 [ 261.033648][ T7949] vivid-000: Horizontal Movement: No Movement [ 261.050272][ T7949] vivid-000: Vertical Movement: No Movement [ 261.050462][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'. [ 261.094444][ T7949] vivid-000: OSD Text Mode: All [ 261.110631][ T7949] vivid-000: Show Border: false [ 261.156015][ T7949] vivid-000: Show Square: false [ 261.186836][ T7949] vivid-000: Sensor Flipped Horizontally: false [ 261.212611][ T7949] vivid-000: Sensor Flipped Vertically: false [ 261.218931][ T7949] vivid-000: Insert SAV Code in Image: false [ 261.264231][ T7949] vivid-000: Insert EAV Code in Image: false [ 261.279935][ T7949] vivid-000: Insert Video Guard Band: false [ 261.288020][ T7949] vivid-000: Reduced Framerate: false [ 261.294981][ T7949] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 261.304173][ T7949] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 261.314342][ T7949] vivid-000: Enable Capture Cropping: true [ 261.430961][ T7949] vivid-000: Enable Capture Composing: true [ 261.437524][ T7949] vivid-000: Enable Capture Scaler: true [ 261.461191][ T7949] vivid-000: Timestamp Source: End of Frame [ 261.470969][ T7949] vivid-000: Colorspace: SMPTE 170M [ 261.490953][ T7949] vivid-000: Transfer Function: Default [ 261.510948][ T7949] vivid-000: Y'CbCr Encoding: Default [ 261.530972][ T7949] vivid-000: HSV Encoding: Hue 0-179 [ 261.541695][ T7949] vivid-000: Quantization: Default [ 261.594225][ T7949] vivid-000: Apply Alpha To Red Only: false [ 261.640636][ T7949] vivid-000: Standard Aspect Ratio: 4x3 [ 261.640686][ T7949] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 261.640703][ T7949] vivid-000: DV Timings: 640x480p59 inactive [ 261.640718][ T7949] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 261.640731][ T7949] vivid-000: Maximum EDID Blocks: 2 [ 261.640744][ T7949] vivid-000: Limited RGB Range (16-235): false [ 261.640757][ T7949] vivid-000: Rx RGB Quantization Range: Automatic [ 261.640769][ T7949] vivid-000: Power Present: 0x00000001 [ 261.640791][ T7949] tpg source WxH: 720x576 (Y'CbCr) [ 261.640885][ T7949] tpg field: 4 [ 261.640895][ T7949] tpg crop: (0,0)/720x576 [ 261.640908][ T7949] tpg compose: (0,0)/720x576 [ 261.640921][ T7949] tpg colorspace: 1 [ 261.640929][ T7949] tpg transfer function: 0/0 [ 261.640939][ T7949] tpg Y'CbCr encoding: 0/0 [ 261.640950][ T7949] tpg quantization: 0/0 [ 261.640959][ T7949] tpg RGB range: 0/2 [ 261.640970][ T7949] vivid-000: ================== END STATUS ================== [ 262.267840][ T7975] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 262.267880][ T7975] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 262.267933][ T7975] vhci_hcd vhci_hcd.0: Device attached [ 262.510927][ T89] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 262.831979][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 262.962790][ T7976] vhci_hcd: connection reset by peer [ 262.977899][ T1100] vhci_hcd: stop threads [ 263.042195][ T7988] syzkaller0: entered promiscuous mode [ 263.048713][ T7988] syzkaller0: entered allmulticast mode [ 263.085117][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 263.126291][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.135441][ T1100] vhci_hcd: release socket [ 263.141162][ T24] usb 3-1: config 0 has no interface number 0 [ 263.147622][ T1100] vhci_hcd: disconnect device [ 263.152770][ T5940] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 263.176498][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 263.199738][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.217738][ T24] usb 3-1: Product: syz [ 263.226648][ T24] usb 3-1: Manufacturer: syz [ 263.235658][ T24] usb 3-1: SerialNumber: syz [ 263.250648][ T24] usb 3-1: config 0 descriptor?? [ 263.305604][ T24] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 263.317654][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 263.329238][ T24] usb 3-1: selecting invalid altsetting 1 [ 263.337771][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 263.345204][ T5940] usb 5-1: config 32 has an invalid interface number: 206 but max is 3 [ 263.354195][ T5940] usb 5-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 263.371480][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.382660][ T5940] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 263.400516][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 263.409341][ T5940] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 4 [ 263.418631][ T24] usb 3-1: media controller created [ 263.424633][ T5940] usb 5-1: config 32 has no interface number 0 [ 263.442823][ T5940] usb 5-1: config 32 interface 206 altsetting 5 endpoint 0x5 has an invalid bInterval 180, changing to 7 [ 263.475128][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.489158][ T5940] usb 5-1: config 32 interface 206 altsetting 5 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 263.496022][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 263.502575][ T5940] usb 5-1: config 32 interface 206 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 263.582263][ T5940] usb 5-1: config 32 interface 206 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 263.753012][ T9] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.765326][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 263.819388][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 263.835814][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 263.836935][ T5940] usb 5-1: config 32 interface 206 altsetting 5 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 263.845835][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.861504][ T5940] usb 5-1: config 32 interface 206 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 263.877002][ T24] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 263.884533][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 263.901954][ T5940] usb 5-1: config 32 interface 206 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 263.905039][ T7992] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 263.913240][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 263.950320][ T5940] usb 5-1: config 32 interface 206 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 264.066209][ T5940] usb 5-1: config 32 interface 206 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 264.107667][ T5940] usb 5-1: config 32 interface 206 altsetting 5 has 14 endpoint descriptors, different from the interface descriptor's value: 16 [ 264.132848][ T5940] usb 5-1: config 32 interface 206 has no altsetting 0 [ 264.147742][ T5940] usb 5-1: New USB device found, idVendor=0499, idProduct=100a, bcdDevice=40.15 [ 264.157276][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.194693][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 264.216997][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 264.223854][ T5940] usb 5-1: Product: 벯긾읱蚙竧傏똞唇뒎좿ۡ⚩䷺땄ꆁ餵숺懆깾ᝌዼ剙鐩㈒례䂅黬ᜰ啬㞅캯Ż䚙᤭蘚饭⭒ꎂ䓏蘞㛛ᆖਃ䇼ꄩᗕ괯ữ⬃운匿늤ｕ轚ᶁ⋌ﴅ홀紘⭭♅ [ 264.253277][ T24] usb 3-1: USB disconnect, device number 22 [ 264.311575][ T5940] usb 5-1: Manufacturer: 弭孧踵䣢ᠻ✁鰍⤫哰䥩︌쑵ऴ욗旬鈈ꌑ뛕暊갷攤鿦屎⸨鎼碑癋嬋ꋡ㈉槝Ჟ㪤饈ꟽꡢ棟ᨱ፤㐍鍝셢鄡咚쿩拃䱡ﷇ譔貲욈纳巵鼀攊檣湧禃ꢧɆ啛磵鋄ꥧ橙缤뎫ᐮꞛ囗꿉塩ꞃ튃웱ﳍ䝮硤킾幛湋퍐璵ꝑ〹淍➷ᐄ翚ป [ 264.351178][ T5940] usb 5-1: SerialNumber:   [ 264.440483][ T8002] random: crng reseeded on system resumption [ 264.855986][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.865314][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.932337][ T5940] usb 5-1: USB disconnect, device number 13 [ 267.621084][ T89] vhci_hcd: vhci_device speed not set [ 267.721550][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 267.886875][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 267.901733][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 267.922573][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.940743][ T24] usb 5-1: Product: syz [ 267.946279][ T24] usb 5-1: Manufacturer: syz [ 267.951489][ T24] usb 5-1: SerialNumber: syz [ 267.974490][ T24] usb 5-1: config 0 descriptor?? [ 267.990752][ T24] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 268.157123][ T9] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 268.167871][ T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input13 [ 268.311427][ T9] usb 2-1: USB disconnect, device number 21 [ 268.317504][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 268.395761][ T24] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 268.410577][ T24] visor 5-1:0.0: probe with driver visor failed with error -5 [ 268.533739][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.551'. [ 268.609460][ T5935] usb 5-1: USB disconnect, device number 14 [ 269.161153][ T8038] netlink: 52 bytes leftover after parsing attributes in process `syz.2.551'. [ 269.935866][ T8053] gre1: entered promiscuous mode [ 269.943471][ T8053] gre1: entered allmulticast mode [ 269.957302][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 269.976538][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 269.996383][ T8054] netlink: 104 bytes leftover after parsing attributes in process `syz.3.555'. [ 270.006470][ T8054] netlink: 104 bytes leftover after parsing attributes in process `syz.3.555'. [ 271.235429][ T8064] FAULT_INJECTION: forcing a failure. [ 271.235429][ T8064] name failslab, interval 1, probability 0, space 0, times 0 [ 271.305401][ T8064] CPU: 1 UID: 0 PID: 8064 Comm: syz.4.559 Not tainted syzkaller #0 PREEMPT(full) [ 271.305427][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.305439][ T8064] Call Trace: [ 271.305448][ T8064] [ 271.305457][ T8064] dump_stack_lvl+0x189/0x250 [ 271.305488][ T8064] ? __pfx____ratelimit+0x10/0x10 [ 271.305514][ T8064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.305540][ T8064] ? __pfx__printk+0x10/0x10 [ 271.305567][ T8064] ? __pfx___might_resched+0x10/0x10 [ 271.305595][ T8064] should_fail_ex+0x414/0x560 [ 271.305630][ T8064] should_failslab+0xa8/0x100 [ 271.305651][ T8064] kmem_cache_alloc_noprof+0x74/0x6e0 [ 271.305678][ T8064] ? security_inode_alloc+0x39/0x330 [ 271.305712][ T8064] security_inode_alloc+0x39/0x330 [ 271.305742][ T8064] inode_init_always_gfp+0x9ed/0xdc0 [ 271.305778][ T8064] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 271.305808][ T8064] alloc_inode+0x82/0x1b0 [ 271.305837][ T8064] new_inode+0x22/0x170 [ 271.305860][ T8064] debugfs_create_dir+0xfb/0x420 [ 271.305893][ T8064] ieee80211_debugfs_recreate_netdev+0x1a6/0x1460 [ 271.305932][ T8064] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 271.305960][ T8064] ? ieee80211_mgd_setup_link+0x52e/0x780 [ 271.306000][ T8064] ieee80211_if_change_type+0x53a/0x990 [ 271.306036][ T8064] ieee80211_change_iface+0xd5/0x510 [ 271.306068][ T8064] cfg80211_change_iface+0x795/0xef0 [ 271.306108][ T8064] nl80211_set_interface+0x773/0xaa0 [ 271.306143][ T8064] ? __pfx_nl80211_set_interface+0x10/0x10 [ 271.306173][ T8064] ? nl80211_pre_doit+0x4fb/0x930 [ 271.306202][ T8064] genl_family_rcv_msg_doit+0x215/0x300 [ 271.306236][ T8064] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 271.306276][ T8064] ? bpf_lsm_capable+0x9/0x20 [ 271.306300][ T8064] ? security_capable+0x7e/0x2e0 [ 271.306330][ T8064] genl_rcv_msg+0x60e/0x790 [ 271.306361][ T8064] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.306385][ T8064] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 271.306405][ T8064] ? __pfx_nl80211_set_interface+0x10/0x10 [ 271.306426][ T8064] ? __pfx_nl80211_post_doit+0x10/0x10 [ 271.306449][ T8064] ? __asan_memcpy+0x40/0x70 [ 271.306471][ T8064] ? __pfx_ref_tracker_free+0x10/0x10 [ 271.306495][ T8064] netlink_rcv_skb+0x208/0x470 [ 271.306509][ T8064] ? __lock_acquire+0xab9/0xd20 [ 271.306526][ T8064] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.306547][ T8064] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.306591][ T8064] ? down_read+0x1ad/0x2e0 [ 271.306610][ T8064] genl_rcv+0x28/0x40 [ 271.306628][ T8064] netlink_unicast+0x82f/0x9e0 [ 271.306673][ T8064] ? __pfx_netlink_unicast+0x10/0x10 [ 271.306699][ T8064] ? netlink_sendmsg+0x642/0xb30 [ 271.306713][ T8064] ? skb_put+0x11b/0x210 [ 271.306733][ T8064] netlink_sendmsg+0x805/0xb30 [ 271.306759][ T8064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.306777][ T8064] ? __import_iovec+0x5d4/0x7f0 [ 271.306797][ T8064] ? aa_sock_msg_perm+0xf1/0x1d0 [ 271.306823][ T8064] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.306838][ T8064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.306855][ T8064] __sock_sendmsg+0x21c/0x270 [ 271.306880][ T8064] ____sys_sendmsg+0x505/0x830 [ 271.306904][ T8064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.306936][ T8064] ___sys_sendmsg+0x21f/0x2a0 [ 271.306956][ T8064] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.307007][ T8064] ? __fget_files+0x2a/0x420 [ 271.307022][ T8064] ? __fget_files+0x3a0/0x420 [ 271.307046][ T8064] __sys_sendmsg+0x164/0x220 [ 271.307066][ T8064] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.307104][ T8064] ? __pfx_ksys_write+0x10/0x10 [ 271.307131][ T8064] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 271.307161][ T8064] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.307187][ T8064] __do_fast_syscall_32+0xb6/0x2b0 [ 271.307203][ T8064] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.307229][ T8064] do_fast_syscall_32+0x34/0x80 [ 271.307244][ T8064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.307264][ T8064] RIP: 0023:0xf7f91539 [ 271.307278][ T8064] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 271.307294][ T8064] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 271.307312][ T8064] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 271.307323][ T8064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.307333][ T8064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.307342][ T8064] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 271.307352][ T8064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.307378][ T8064] [ 271.845016][ T8064] debugfs: out of free dentries, can not create directory 'netdev:wlan0' [ 272.514582][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 272.880972][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 273.408434][ T24] usb 1-1: config 0 has no interfaces? [ 273.419108][ T24] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 273.595633][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.620411][ T24] usb 1-1: Product: syz [ 273.633954][ T24] usb 1-1: Manufacturer: syz [ 273.638608][ T24] usb 1-1: SerialNumber: syz [ 273.652168][ T24] usb 1-1: config 0 descriptor?? [ 273.682122][ T8096] fuse: Bad value for 'fd' [ 273.687056][ T8096] fuse: Bad value for 'fd' [ 274.381659][ T5935] usb 1-1: USB disconnect, device number 20 [ 276.084609][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 276.251130][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 276.262418][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.369785][ T9] usb 4-1: config 0 has no interface number 0 [ 276.583790][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 276.593409][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.603242][ T9] usb 4-1: Product: syz [ 276.628904][ T9] usb 4-1: Manufacturer: syz [ 276.661979][ T9] usb 4-1: SerialNumber: syz [ 276.752542][ T9] usb 4-1: config 0 descriptor?? [ 276.800519][ T9] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 276.815682][ T9] usb 4-1: selecting invalid altsetting 1 [ 276.843742][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 276.905450][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 276.932444][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 276.952027][ T9] usb 4-1: media controller created [ 277.048998][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.151714][ T9] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 277.159000][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 277.202144][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 277.365379][ T9] usb 4-1: USB disconnect, device number 22 [ 278.358891][ T8164] netlink: 'syz.3.584': attribute type 6 has an invalid length. [ 278.499478][ T8165] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 278.506244][ T8165] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.624737][ T8169] netdevsim netdevsim2: Direct firmware load for nel/address_bits failed with error -2 [ 278.636824][ T8169] netdevsim netdevsim2: Falling back to sysfs fallback for: nel/address_bits [ 278.665142][ T8165] vhci_hcd vhci_hcd.0: Device attached [ 279.001884][ T24] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 279.201890][ T5935] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 279.221572][ T8171] trusted_key: encrypted_key: master key parameter '' is invalid [ 279.245865][ T8173] netlink: 'syz.4.588': attribute type 5 has an invalid length. [ 279.253787][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.588'. [ 279.413562][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short [ 279.427678][ T5935] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.441679][ T5935] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.490481][ T8178] random: crng reseeded on system resumption [ 279.509885][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.547315][ T5935] usb 3-1: Product: syz [ 279.557510][ T5935] usb 3-1: Manufacturer: syz [ 279.564821][ T5935] usb 3-1: SerialNumber: syz [ 279.611337][ T5940] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 279.814840][ T5940] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 279.823479][ T5940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.835284][ T5940] usb 1-1: config 0 has no interface number 0 [ 279.944550][ T5940] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 65365, setting to 64 [ 279.966609][ T5940] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 279.982112][ T5940] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 279.997953][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.017317][ T5940] usb 1-1: config 0 descriptor?? [ 280.084510][ T8183] syz.3.589 (8183) used obsolete PPPIOCDETACH ioctl [ 280.338707][ T8183] FAULT_INJECTION: forcing a failure. [ 280.338707][ T8183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.361563][ T8183] CPU: 1 UID: 0 PID: 8183 Comm: syz.3.589 Not tainted syzkaller #0 PREEMPT(full) [ 280.361580][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.361587][ T8183] Call Trace: [ 280.361591][ T8183] [ 280.361596][ T8183] dump_stack_lvl+0x189/0x250 [ 280.361616][ T8183] ? __pfx____ratelimit+0x10/0x10 [ 280.361631][ T8183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.361647][ T8183] ? __pfx__printk+0x10/0x10 [ 280.361665][ T8183] should_fail_ex+0x414/0x560 [ 280.361684][ T8183] _copy_to_user+0x31/0xb0 [ 280.361706][ T8183] simple_read_from_buffer+0xe1/0x170 [ 280.361725][ T8183] proc_fail_nth_read+0x1b3/0x220 [ 280.361741][ T8183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.361756][ T8183] ? rw_verify_area+0x2a6/0x4d0 [ 280.361770][ T8183] ? __lock_acquire+0xab9/0xd20 [ 280.361779][ T8183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.361792][ T8183] vfs_read+0x200/0xa30 [ 280.361806][ T8183] ? fdget_pos+0x247/0x320 [ 280.361818][ T8183] ? __pfx___mutex_lock+0x10/0x10 [ 280.361834][ T8183] ? __pfx_vfs_read+0x10/0x10 [ 280.361848][ T8183] ? __fget_files+0x2a/0x420 [ 280.361860][ T8183] ? __fget_files+0x3a0/0x420 [ 280.361869][ T8183] ? __fget_files+0x2a/0x420 [ 280.361884][ T8183] ksys_read+0x145/0x250 [ 280.361899][ T8183] ? __pfx_ksys_read+0x10/0x10 [ 280.361914][ T8183] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 280.361931][ T8183] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.361947][ T8183] __do_fast_syscall_32+0xb6/0x2b0 [ 280.361957][ T8183] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.361973][ T8183] do_fast_syscall_32+0x34/0x80 [ 280.361983][ T8183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.361995][ T8183] RIP: 0023:0xf7fe5539 [ 280.362005][ T8183] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 280.362014][ T8183] RSP: 002b:00000000f54b5590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 280.362026][ T8183] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54b5620 [ 280.362033][ T8183] RDX: 000000000000000f RSI: 00000000f7476ff4 RDI: 0000000000000000 [ 280.362039][ T8183] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 280.362045][ T8183] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 280.362051][ T8183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.362067][ T8183] [ 280.369064][ T5940] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 280.393452][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 280.398544][ T36] usb 1-1: Failed to submit usb control message: -71 [ 280.576578][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 280.659772][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.726523][ T5940] usb 1-1: USB disconnect, device number 21 [ 280.734094][ T9] usb 5-1: Product: syz [ 280.735592][ T36] usb 1-1: unable to send the bmi data to the device: -71 [ 280.745976][ T36] usb 1-1: unable to get target info from device [ 280.749963][ T9] usb 5-1: Manufacturer: syz [ 280.753487][ T36] usb 1-1: could not get target info (-71) [ 280.764303][ T36] usb 1-1: could not probe fw (-71) [ 280.879609][ T9] usb 5-1: SerialNumber: syz [ 280.899851][ T9] usb 5-1: config 0 descriptor?? [ 281.143529][ T9] usb 5-1: USB disconnect, device number 15 [ 281.291100][ T5940] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 281.440975][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 281.466331][ T5940] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.475328][ T5940] usb 2-1: config 0 has no interface number 0 [ 281.513797][ T5940] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 281.523285][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.538460][ T5940] usb 2-1: Product: syz [ 281.574362][ T5940] usb 2-1: Manufacturer: syz [ 281.580963][ T5940] usb 2-1: SerialNumber: syz [ 281.593560][ T5940] usb 2-1: config 0 descriptor?? [ 281.638799][ T5940] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 281.649918][ T5940] usb 2-1: selecting invalid altsetting 1 [ 281.656366][ T5940] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 281.674124][ T5940] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.686271][ T5940] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 281.694946][ T5940] usb 2-1: media controller created [ 281.803805][ T8166] vhci_hcd: connection reset by peer [ 281.813116][ T1100] vhci_hcd: stop threads [ 281.822063][ T1100] vhci_hcd: release socket [ 281.836107][ T1100] vhci_hcd: disconnect device [ 281.898191][ T5935] usb 3-1: USB disconnect, device number 23 [ 281.927340][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.512946][ T5940] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 282.536290][ T5940] zl10353_read_register: readreg error (reg=127, ret==-71) [ 282.579062][ T5940] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 282.685376][ T89] IPVS: starting estimator thread 0... [ 282.823730][ T8210] IPVS: using max 33 ests per chain, 79200 per kthread [ 282.871367][ T5940] usb 2-1: USB disconnect, device number 22 [ 283.215837][ T5935] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 283.236110][ T8221] syz.4.601: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 283.300931][ T8221] CPU: 1 UID: 0 PID: 8221 Comm: syz.4.601 Not tainted syzkaller #0 PREEMPT(full) [ 283.300960][ T8221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.300973][ T8221] Call Trace: [ 283.300982][ T8221] [ 283.300990][ T8221] dump_stack_lvl+0x189/0x250 [ 283.301027][ T8221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.301054][ T8221] ? __pfx__printk+0x10/0x10 [ 283.301072][ T8221] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 283.301099][ T8221] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 283.301128][ T8221] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 283.301156][ T8221] warn_alloc+0x214/0x310 [ 283.301187][ T8221] ? stack_depot_save_flags+0x40/0x860 [ 283.301220][ T8221] ? __pfx_warn_alloc+0x10/0x10 [ 283.301251][ T8221] ? kasan_save_track+0x3e/0x80 [ 283.301277][ T8221] ? __kasan_kmalloc+0x93/0xb0 [ 283.301307][ T8221] ? xsk_setsockopt+0x4dc/0x8d0 [ 283.301330][ T8221] ? do_sock_setsockopt+0x17c/0x1b0 [ 283.301349][ T8221] ? __ia32_sys_setsockopt+0x13f/0x1b0 [ 283.301368][ T8221] ? __do_fast_syscall_32+0xb6/0x2b0 [ 283.301386][ T8221] ? do_fast_syscall_32+0x34/0x80 [ 283.301402][ T8221] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.301435][ T8221] __vmalloc_node_range_noprof+0x125/0x12d0 [ 283.301502][ T8221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.301532][ T8221] ? __kasan_kmalloc+0x93/0xb0 [ 283.301564][ T8221] vmalloc_user_noprof+0xad/0xf0 [ 283.301592][ T8221] ? xskq_create+0xbf/0x170 [ 283.301619][ T8221] xskq_create+0xbf/0x170 [ 283.301649][ T8221] xsk_init_queue+0xb0/0x110 [ 283.301677][ T8221] xsk_setsockopt+0x4dc/0x8d0 [ 283.301704][ T8221] ? __pfx_xsk_setsockopt+0x10/0x10 [ 283.301729][ T8221] ? __pfx_aa_sk_perm+0x10/0x10 [ 283.301760][ T8221] ? aa_sock_opt_perm+0xff/0x1b0 [ 283.301791][ T8221] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 283.301809][ T8221] ? __pfx_xsk_setsockopt+0x10/0x10 [ 283.301831][ T8221] do_sock_setsockopt+0x17c/0x1b0 [ 283.301853][ T8221] __ia32_sys_setsockopt+0x13f/0x1b0 [ 283.301875][ T8221] __do_fast_syscall_32+0xb6/0x2b0 [ 283.301893][ T8221] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.301928][ T8221] do_fast_syscall_32+0x34/0x80 [ 283.301945][ T8221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.301968][ T8221] RIP: 0023:0xf7f91539 [ 283.301985][ T8221] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 283.302001][ T8221] RSP: 002b:00000000f544b55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 283.302021][ T8221] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 283.302034][ T8221] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 283.302047][ T8221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.302058][ T8221] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.302070][ T8221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.302102][ T8221] [ 283.302931][ T8221] Mem-Info: [ 283.605171][ T8221] active_anon:6296 inactive_anon:0 isolated_anon:0 [ 283.605171][ T8221] active_file:12947 inactive_file:39963 isolated_file:0 [ 283.605171][ T8221] unevictable:769 dirty:170 writeback:0 [ 283.605171][ T8221] slab_reclaimable:10677 slab_unreclaimable:100901 [ 283.605171][ T8221] mapped:31536 shmem:1357 pagetables:1265 [ 283.605171][ T8221] sec_pagetables:0 bounce:0 [ 283.605171][ T8221] kernel_misc_reclaimable:0 [ 283.605171][ T8221] free:1310205 free_pcp:15575 free_cma:0 [ 283.653178][ T8221] Node 0 active_anon:25184kB inactive_anon:0kB active_file:51752kB inactive_file:159648kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:126108kB dirty:680kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12608kB pagetables:4932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 283.688756][ T8221] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 283.783450][ T8221] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.813487][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.826892][ T5935] usb 1-1: device descriptor read/64, error -71 [ 283.906591][ T8221] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 283.916112][ T8221] Node 0 DMA32 free:1337852kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25384kB inactive_anon:0kB active_file:51752kB inactive_file:159648kB unevictable:1540kB writepending:680kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:38864kB local_pcp:19516kB free_cma:0kB [ 283.953258][ T8221] lowmem_reserve[]: 0 0 0 0 0 [ 283.968967][ T8221] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.001866][ T8221] lowmem_reserve[]: 0 0 0 0 0 [ 284.021206][ T8221] Node 1 Normal free:3887384kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24068kB local_pcp:13188kB free_cma:0kB [ 284.076856][ T8221] lowmem_reserve[]: 0 0 0 0 0 [ 284.130913][ T5935] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 284.154440][ T8221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 284.272656][ T5935] usb 1-1: device descriptor read/64, error -71 [ 284.315475][ T8221] Node 0 DMA32: 1187*4kB (UM) 1254*8kB (UM) 805*16kB (UME) 609*32kB (UME) 179*64kB (UME) 256*128kB (UME) 175*256kB (UME) 59*512kB (UM) 48*1024kB (UME) 4*2048kB (UM) 272*4096kB (UM) = 1337836kB [ 284.343847][ T24] vhci_hcd: vhci_device speed not set [ 284.350998][ T8221] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 284.364162][ T8221] Node 1 Normal: 238*4kB (UME) 64*8kB (UME) 44*16kB (UME) 133*32kB (UME) 38*64kB (UME) 5*128kB (UME) 2*256kB (UM) 5*512kB (UM) 2*1024kB (ME) 3*2048kB (UME) 944*4096kB (M) = 3887384kB [ 284.403820][ T8221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.411342][ T5935] usb usb1-port1: attempt power cycle [ 284.432481][ T8221] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.456280][ T8221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.482853][ T8221] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.510194][ T8221] 54265 total pagecache pages [ 284.529256][ T8221] 0 pages in swap cache [ 284.550658][ T8221] Free swap = 124996kB [ 284.568482][ T8221] Total swap = 124996kB [ 284.581944][ T8221] 2097051 pages RAM [ 284.586653][ T8221] 0 pages HighMem/MovableOnly [ 284.594374][ T8221] 424122 pages reserved [ 284.600921][ T8221] 0 pages cma reserved [ 284.780989][ T5935] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 284.802736][ T5935] usb 1-1: device descriptor read/8, error -71 [ 285.349936][ T5935] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 285.391907][ T5935] usb 1-1: device descriptor read/8, error -71 [ 285.814476][ T5935] usb usb1-port1: unable to enumerate USB device [ 286.350198][ T8242] loop5: detected capacity change from 0 to 7 [ 286.452930][ T8242] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 286.550678][ T8242] loop5: partition table partially beyond EOD, truncated [ 286.559315][ T8242] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 286.702758][ T8262] fuse: Unknown parameter '000000000000000000060x0000000000000006' [ 287.045920][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 288.074895][ T8273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.313207][ T8273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.323730][ T8282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'. [ 288.397991][ T8273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.500314][ T8273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.828036][ T8282] lo: entered promiscuous mode [ 288.837100][ T8282] tunl0: entered promiscuous mode [ 288.869451][ T8282] gre0: entered promiscuous mode [ 288.929658][ T8282] gretap0: entered promiscuous mode [ 288.971370][ T8282] erspan0: entered promiscuous mode [ 289.014694][ T8282] ip_vti0: entered promiscuous mode [ 289.051154][ T5935] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 289.064343][ T8282] ip6_vti0: entered promiscuous mode [ 289.090214][ T8282] sit0: entered promiscuous mode [ 289.124314][ T8282] ip6tnl0: entered promiscuous mode [ 289.150743][ T8282] ip6gre0: entered promiscuous mode [ 289.177455][ T8282] syz_tun: entered promiscuous mode [ 289.202014][ T8282] ip6gretap0: entered promiscuous mode [ 289.212178][ T8282] bridge0: entered promiscuous mode [ 289.218036][ T8282] bond0: entered promiscuous mode [ 289.227197][ T8282] bond_slave_0: entered promiscuous mode [ 289.227385][ T5935] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 289.243365][ T8282] bond_slave_1: entered promiscuous mode [ 289.259163][ T8282] team0: entered promiscuous mode [ 289.264720][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.273223][ T8282] team_slave_0: entered promiscuous mode [ 289.279036][ T5935] usb 4-1: Product: syz [ 289.283555][ T8282] team_slave_1: entered promiscuous mode [ 289.289742][ T5935] usb 4-1: Manufacturer: syz [ 289.314781][ T5935] usb 4-1: SerialNumber: syz [ 289.320118][ T8282] dummy0: entered promiscuous mode [ 289.361709][ T8282] nlmon0: entered promiscuous mode [ 289.413417][ T8282] caif0: entered promiscuous mode [ 289.440620][ T8282] batadv0: entered promiscuous mode [ 289.444090][ T5935] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 289.464970][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 289.495317][ T8294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'. [ 289.506850][ T8282] vxcan0: entered promiscuous mode [ 289.524727][ T8282] vxcan1: entered promiscuous mode [ 289.635711][ T8282] veth0: entered promiscuous mode [ 289.688289][ T8282] veth1: entered promiscuous mode [ 289.721494][ T8282] wg0: entered promiscuous mode [ 289.807056][ T8282] wg1: entered promiscuous mode [ 289.814263][ T8282] wg2: entered promiscuous mode [ 289.822629][ T8282] veth0_to_bridge: entered promiscuous mode [ 289.834528][ T8282] veth1_to_bridge: entered promiscuous mode [ 289.900042][ T8282] veth0_to_bond: entered promiscuous mode [ 289.915191][ T8282] veth1_to_bond: entered promiscuous mode [ 289.929613][ T8282] veth0_to_team: entered promiscuous mode [ 289.967925][ T8282] veth1_to_team: entered promiscuous mode [ 290.254487][ T8282] veth0_to_batadv: entered promiscuous mode [ 290.414745][ T8282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.444626][ T8282] batadv_slave_0: entered promiscuous mode [ 290.495421][ T8282] veth1_to_batadv: entered promiscuous mode [ 290.538415][ T8282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.564338][ T8282] batadv_slave_1: entered promiscuous mode [ 290.606003][ T8282] xfrm0: entered promiscuous mode [ 290.631603][ T8282] veth0_to_hsr: entered promiscuous mode [ 290.658282][ T8282] veth1_to_hsr: entered promiscuous mode [ 290.673793][ T8282] hsr0: entered promiscuous mode [ 290.682974][ T8282] veth1_virt_wifi: entered promiscuous mode [ 290.693057][ T8282] veth0_virt_wifi: entered promiscuous mode [ 290.703211][ T8282] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 290.726901][ T8282] vlan0: entered promiscuous mode [ 290.734654][ T8282] vlan1: entered promiscuous mode [ 290.742020][ T8282] macvlan0: entered promiscuous mode [ 290.754076][ T8282] macvlan1: entered promiscuous mode [ 290.764013][ T8282] ipvlan0: entered promiscuous mode [ 290.769598][ T8282] ipvlan1: entered promiscuous mode [ 290.781836][ T8282] macvtap0: entered promiscuous mode [ 290.792310][ T8282] macsec0: entered promiscuous mode [ 290.801908][ T8282] geneve0: entered promiscuous mode [ 290.812716][ T8282] geneve1: entered promiscuous mode [ 290.821137][ T24] usb 4-1: Service connection timeout for: 256 [ 290.830123][ T8282] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 290.830122][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 290.850886][ T24] ath9k_htc: Failed to initialize the device [ 290.858661][ T8282] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 290.865549][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 290.879954][ T8282] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 290.898960][ T8282] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 290.926415][ T8282] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 290.939004][ T8282] gre1: entered promiscuous mode [ 290.945487][ T8282] syztnl1: entered promiscuous mode [ 290.962947][ T8298] netlink: 52 bytes leftover after parsing attributes in process `syz.2.619'. [ 290.973428][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.991359][ T1100] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.011259][ T1100] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.033779][ T1100] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.760154][ T10] usb 4-1: USB disconnect, device number 23 [ 292.422966][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.432832][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.460963][ T5903] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 292.630466][ T5903] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 292.639718][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.648248][ T5903] usb 5-1: Product: syz [ 292.652782][ T5903] usb 5-1: Manufacturer: syz [ 292.657446][ T5903] usb 5-1: SerialNumber: syz [ 292.684381][ T5903] usb 5-1: config 0 descriptor?? [ 292.896966][ T5903] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 292.943805][ T5903] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 293.025867][ T5903] usb 5-1: USB disconnect, device number 16 [ 294.491709][ T5903] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 294.572374][ T8388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.645'. [ 294.583106][ T8388] netlink: 52 bytes leftover after parsing attributes in process `syz.4.645'. [ 294.710917][ T5935] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 294.741025][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 294.748746][ T5903] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.767909][ T5903] usb 3-1: config 0 has no interface number 0 [ 294.792753][ T5903] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 294.802160][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.810995][ T5903] usb 3-1: Product: syz [ 294.815452][ T5903] usb 3-1: Manufacturer: syz [ 294.820168][ T5903] usb 3-1: SerialNumber: syz [ 294.843644][ T5903] usb 3-1: config 0 descriptor?? [ 294.863258][ T5935] usb 1-1: config 0 has an invalid interface number: 171 but max is 0 [ 294.871861][ T5935] usb 1-1: config 0 has no interface number 0 [ 294.880019][ T5903] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 294.895706][ T5935] usb 1-1: config 0 interface 171 has no altsetting 0 [ 294.926366][ T5903] usb 3-1: selecting invalid altsetting 1 [ 294.938331][ T5935] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 294.949154][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.958653][ T5903] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 294.972048][ T5935] usb 1-1: Product: syz [ 294.979734][ T5903] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 294.995911][ T5935] usb 1-1: Manufacturer: syz [ 295.004364][ T5935] usb 1-1: SerialNumber: syz [ 295.015832][ T5903] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 295.027891][ T5935] usb 1-1: config 0 descriptor?? [ 295.039063][ T5903] usb 3-1: media controller created [ 295.048341][ T5935] usb-storage 1-1:0.171: USB Mass Storage device detected [ 295.243025][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.091238][ T8381] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 296.151364][ T5903] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 296.159208][ T5903] zl10353_read_register: readreg error (reg=127, ret==-71) [ 296.173762][ T5903] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 296.331985][ T5903] usb 3-1: USB disconnect, device number 24 [ 296.870963][ T5903] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 296.986549][ T8428] netlink: 44 bytes leftover after parsing attributes in process `syz.2.657'. [ 297.038077][ T8428] netlink: 72 bytes leftover after parsing attributes in process `syz.2.657'. [ 297.094736][ T5903] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 297.104395][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.114802][ T5903] usb 5-1: Product: syz [ 297.121720][ T5903] usb 5-1: Manufacturer: syz [ 297.126984][ T5903] usb 5-1: SerialNumber: syz [ 297.141276][ T89] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 297.159258][ T5903] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 297.186714][ T5940] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 297.302235][ T10] usb 1-1: USB disconnect, device number 26 [ 297.326749][ T89] usb 2-1: Using ep0 maxpacket: 8 [ 297.337203][ T89] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 297.349953][ T89] usb 2-1: config 2 has no interface number 0 [ 297.377950][ T89] usb 2-1: config 2 interface 31 has no altsetting 0 [ 297.539417][ T89] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 297.560861][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.607176][ T89] usb 2-1: Product: syz [ 297.640748][ T89] usb 2-1: Manufacturer: syz [ 297.692444][ T89] usb 2-1: SerialNumber: syz [ 297.742779][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 297.760329][ T8419] netlink: 'syz.4.655': attribute type 2 has an invalid length. [ 297.775266][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 297.959698][ T89] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 298.027398][ T89] usb 2-1: USB disconnect, device number 23 [ 298.250983][ T5940] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 298.258242][ T5940] ath9k_htc: Failed to initialize the device [ 298.302294][ T5940] usb 5-1: ath9k_htc: USB layer deinitialized [ 298.836644][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.665'. [ 299.156141][ T8465] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 299.168623][ T8465] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 300.042681][ T89] usb 5-1: USB disconnect, device number 17 [ 300.251370][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'. [ 300.348426][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 300.628825][ T8490] team0: Device gtp0 is of different type [ 300.680992][ T5940] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 300.690860][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 300.702540][ T8492] netlink: 'syz.0.679': attribute type 29 has an invalid length. [ 300.712752][ T8492] netlink: 'syz.0.679': attribute type 29 has an invalid length. [ 300.742709][ T8490] team0: Device gtp0 is of different type [ 300.811184][ T5935] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 300.844758][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 300.852974][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.861356][ T8495] fuse: Bad value for 'fd' [ 300.890369][ T8490] team0: Device gtp0 is of different type [ 300.891039][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.951571][ T5940] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 301.002282][ T8490] team0: Device gtp0 is of different type [ 301.061019][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 301.077614][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.089242][ T8490] team0: Device gtp0 is of different type [ 301.100869][ T5940] usb 3-1: config 0 descriptor?? [ 301.123185][ T5935] usb 4-1: config index 0 descriptor too short (expected 9116, got 27) [ 301.138677][ T5935] usb 4-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 301.182249][ T8490] team0: Device gtp0 is of different type [ 301.203136][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.234205][ T8503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.682'. [ 301.265434][ T5935] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 33 [ 301.354034][ T8503] netlink: 52 bytes leftover after parsing attributes in process `syz.0.682'. [ 301.390587][ T8490] team0: Device gtp0 is of different type [ 301.564889][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 301.589128][ T8508] syzkaller0: entered promiscuous mode [ 301.597954][ T5935] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 301.625120][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.643080][ T8508] syzkaller0: entered allmulticast mode [ 301.650602][ T5935] usb 4-1: Product: syz [ 301.660565][ T5935] usb 4-1: Manufacturer: syz [ 301.675430][ T5935] usb 4-1: SerialNumber: syz [ 301.702469][ T5940] usbhid 3-1:0.0: can't add hid device: -71 [ 301.708715][ T5940] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 301.721981][ T5935] usb 4-1: config 0 descriptor?? [ 301.781664][ T5940] usb 3-1: USB disconnect, device number 25 [ 301.974276][ T8485] loop6: detected capacity change from 0 to 524287999 [ 302.951066][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 303.904699][ T5935] usb 4-1: USB disconnect, device number 24 [ 304.131889][ T8529] FAULT_INJECTION: forcing a failure. [ 304.131889][ T8529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.148596][ T8529] CPU: 1 UID: 0 PID: 8529 Comm: syz.0.691 Not tainted syzkaller #0 PREEMPT(full) [ 304.148622][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.148633][ T8529] Call Trace: [ 304.148641][ T8529] [ 304.148649][ T8529] dump_stack_lvl+0x189/0x250 [ 304.148681][ T8529] ? __pfx____ratelimit+0x10/0x10 [ 304.148709][ T8529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.148736][ T8529] ? __pfx__printk+0x10/0x10 [ 304.148756][ T8529] ? __might_fault+0xb0/0x130 [ 304.148795][ T8529] should_fail_ex+0x414/0x560 [ 304.148829][ T8529] _copy_from_iter+0x1de/0x1790 [ 304.148866][ T8529] ? rcu_is_watching+0x15/0xb0 [ 304.148893][ T8529] ? kmalloc_reserve+0xbd/0x290 [ 304.148912][ T8529] ? __pfx__copy_from_iter+0x10/0x10 [ 304.148936][ T8529] ? __build_skb_around+0x262/0x3f0 [ 304.148959][ T8529] ? netlink_sendmsg+0x642/0xb30 [ 304.148977][ T8529] ? skb_put+0x11b/0x210 [ 304.149000][ T8529] netlink_sendmsg+0x6b2/0xb30 [ 304.149029][ T8529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.149052][ T8529] ? __import_iovec+0x5d4/0x7f0 [ 304.149074][ T8529] ? aa_sock_msg_perm+0xf1/0x1d0 [ 304.149102][ T8529] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.149120][ T8529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.149140][ T8529] __sock_sendmsg+0x21c/0x270 [ 304.149166][ T8529] ____sys_sendmsg+0x505/0x830 [ 304.149193][ T8529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.149231][ T8529] ___sys_sendmsg+0x21f/0x2a0 [ 304.149255][ T8529] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.149313][ T8529] ? __fget_files+0x2a/0x420 [ 304.149330][ T8529] ? __fget_files+0x3a0/0x420 [ 304.149360][ T8529] __sys_sendmsg+0x164/0x220 [ 304.149383][ T8529] ? __pfx___sys_sendmsg+0x10/0x10 [ 304.149414][ T8529] ? __pfx_ksys_write+0x10/0x10 [ 304.149444][ T8529] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 304.149476][ T8529] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.149507][ T8529] __do_fast_syscall_32+0xb6/0x2b0 [ 304.149526][ T8529] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.149557][ T8529] do_fast_syscall_32+0x34/0x80 [ 304.149575][ T8529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.149599][ T8529] RIP: 0023:0xf704d539 [ 304.149616][ T8529] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 304.149633][ T8529] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 304.149654][ T8529] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 304.149668][ T8529] RDX: 0000000024008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.149680][ T8529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.149691][ T8529] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 304.149703][ T8529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.149731][ T8529] [ 304.667846][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'. [ 307.094575][ T8536] netlink: 56 bytes leftover after parsing attributes in process `syz.2.693'. [ 307.103900][ T8536] tipc: Enabling of bearer rejected, failed to enable media [ 307.587271][ T8552] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 307.616669][ T8552] syzkaller0: entered promiscuous mode [ 307.625646][ T8552] syzkaller0: entered allmulticast mode [ 310.624845][ T8605] netlink: 92 bytes leftover after parsing attributes in process `syz.3.710'. [ 310.635953][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 310.645112][ T8604] bridge_slave_1: left allmulticast mode [ 310.652098][ T8604] bridge_slave_1: left promiscuous mode [ 310.658328][ T8604] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.798194][ T8604] bridge_slave_0: left allmulticast mode [ 310.804318][ T8604] bridge_slave_0: left promiscuous mode [ 310.810406][ T8604] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.961984][ T8620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.714'. [ 312.037731][ T8621] syzkaller0: entered promiscuous mode [ 312.074464][ T8621] syzkaller0: entered allmulticast mode [ 312.104191][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 312.475464][ T89] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 312.663824][ T89] usb 1-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.674529][ T89] usb 1-1: config 0 interface 0 has no altsetting 0 [ 312.688541][ T89] usb 1-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 312.697865][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.717753][ T89] usb 1-1: config 0 descriptor?? [ 312.867118][ T5965] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 313.047524][ T5965] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 313.057755][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.065963][ T5965] usb 5-1: Product: syz [ 313.070191][ T5965] usb 5-1: Manufacturer: syz [ 313.075276][ T5965] usb 5-1: SerialNumber: syz [ 313.162146][ T5965] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 313.177959][ T89] hid (null): unknown global tag 0xc [ 313.187189][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 313.262358][ T89] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 313.269303][ T89] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 313.276965][ T89] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 313.284055][ T89] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 313.291925][ T89] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 313.308483][ T89] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 313.317073][ T89] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 313.324704][ T89] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 313.331702][ T89] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 313.341272][ T89] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 313.361110][ T89] asus 0003:0B05:1A30.0007: collection stack underflow [ 313.374034][ T89] asus 0003:0B05:1A30.0007: item 0 0 0 12 parsing failed [ 313.388119][ T89] asus 0003:0B05:1A30.0007: Asus hid parse failed: -22 [ 313.395605][ T89] asus 0003:0B05:1A30.0007: probe with driver asus failed with error -22 [ 314.491043][ T10] usb 5-1: Service connection timeout for: 256 [ 314.498323][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 314.538556][ T10] ath9k_htc: Failed to initialize the device [ 314.566558][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 314.684374][ T8630] netlink: 52 bytes leftover after parsing attributes in process `syz.1.714'. [ 314.843114][ T5965] usb 1-1: USB disconnect, device number 27 [ 315.122316][ T8654] IPVS: set_ctl: invalid protocol: 2 172.20.20.55:20001 [ 315.964803][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'. [ 316.220767][ T5965] usb 5-1: USB disconnect, device number 18 [ 316.591607][ T8676] netlink: 72 bytes leftover after parsing attributes in process `syz.4.726'. [ 317.094073][ T8685] bond1: option arp_interval: invalid value (18446744073709551615) [ 317.261368][ T8685] bond1: option arp_interval: allowed values 0 - 2147483647 [ 317.333901][ T8685] bond1 (unregistering): Released all slaves [ 317.375067][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.381686][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.439704][ T8693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.730'. [ 317.580530][ T8696] netlink: 52 bytes leftover after parsing attributes in process `syz.4.730'. [ 318.101213][ T8699] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1491149184 (190867095552 ns) > initial count (176694493312 ns). Using initial count to start timer. [ 318.989114][ T8707] netdevsim netdevsim3 netdevsim0: Device is already in use. [ 319.187501][ T8649] syz.2.720 (8649): drop_caches: 3 [ 319.451039][ T5935] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 319.560887][ T5903] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 319.619961][ T5935] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 319.652932][ T5935] usb 1-1: config 0 has no interface number 0 [ 319.677345][ T5935] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.734841][ T5935] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.753210][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 319.769242][ T5935] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.806213][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.815448][ T5903] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 319.860601][ T5935] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 319.870655][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.893094][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.904272][ T5903] usb 2-1: config 0 descriptor?? [ 319.913920][ T5935] usb 1-1: config 0 descriptor?? [ 320.718588][ T5903] usbhid 2-1:0.0: can't add hid device: -71 [ 320.725056][ T5903] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 320.752463][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.742'. [ 320.772125][ T8743] netlink: 52 bytes leftover after parsing attributes in process `syz.4.742'. [ 320.786717][ T5903] usb 2-1: USB disconnect, device number 24 [ 321.107381][ T5935] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0008/input/input16 [ 321.238632][ T5935] uclogic 0003:28BD:0042.0008: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 321.571796][ T5965] usb 1-1: USB disconnect, device number 28 [ 321.583422][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 322.246220][ T8749] fido_id[8749]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 322.692037][ T8767] bond2: option arp_interval: invalid value (18446744073709551615) [ 322.726470][ T8767] bond2: option arp_interval: allowed values 0 - 2147483647 [ 322.756212][ T8767] bond2 (unregistering): Released all slaves [ 322.833728][ T8780] tipc: Started in network mode [ 322.838757][ T8780] tipc: Node identity aacbee4b7123, cluster identity 4711 [ 322.870473][ T8780] tipc: Enabled bearer , priority 0 [ 322.888610][ T8771] syzkaller0: entered promiscuous mode [ 322.894405][ T8771] syzkaller0: entered allmulticast mode [ 322.946668][ T8771] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 323.007004][ T8775] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 323.036439][ T8770] tipc: Resetting bearer [ 323.066285][ T8770] tipc: Disabling bearer [ 323.344176][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 323.531095][ T89] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 323.720933][ T89] usb 1-1: Using ep0 maxpacket: 8 [ 323.738843][ T89] usb 1-1: unable to get BOS descriptor or descriptor too short [ 323.758158][ T89] usb 1-1: config 5 has an invalid interface number: 215 but max is 0 [ 323.772487][ T89] usb 1-1: config 5 has no interface number 0 [ 323.778691][ T89] usb 1-1: config 5 interface 215 has no altsetting 0 [ 323.805612][ T89] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 323.823532][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.832391][ T89] usb 1-1: Product: syz [ 323.838954][ T89] usb 1-1: Manufacturer: syz [ 323.844137][ T89] usb 1-1: SerialNumber: syz [ 324.074735][ T8807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.762'. [ 324.087171][ T8807] netlink: 52 bytes leftover after parsing attributes in process `syz.3.762'. [ 324.102059][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.756'. [ 324.228021][ T8805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.761'. [ 324.240922][ T8805] netlink: 52 bytes leftover after parsing attributes in process `syz.2.761'. [ 324.684546][ T89] cypress_m8 1-1:5.215: DeLorme Earthmate USB converter detected [ 324.926363][ T89] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 324.981398][ T89] usb 1-1: USB disconnect, device number 29 [ 325.102433][ T89] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 325.143834][ T89] cypress_m8 1-1:5.215: device disconnected [ 325.939542][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 326.471477][ T5965] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 326.633407][ T5965] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 326.636370][ T8842] FAULT_INJECTION: forcing a failure. [ 326.636370][ T8842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.661106][ T8842] CPU: 1 UID: 0 PID: 8842 Comm: syz.3.771 Not tainted syzkaller #0 PREEMPT(full) [ 326.661134][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.661145][ T8842] Call Trace: [ 326.661152][ T8842] [ 326.661160][ T8842] dump_stack_lvl+0x189/0x250 [ 326.661192][ T8842] ? __pfx____ratelimit+0x10/0x10 [ 326.661218][ T8842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.661244][ T8842] ? __pfx__printk+0x10/0x10 [ 326.661264][ T8842] ? __might_fault+0xb0/0x130 [ 326.661302][ T8842] should_fail_ex+0x414/0x560 [ 326.661336][ T8842] _copy_from_user+0x2d/0xb0 [ 326.661363][ T8842] cmsghdr_from_user_compat_to_kern+0x50b/0x800 [ 326.661399][ T8842] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 326.661432][ T8842] ____sys_sendmsg+0x20f/0x830 [ 326.661460][ T8842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.661497][ T8842] ___sys_sendmsg+0x21f/0x2a0 [ 326.661521][ T8842] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.661544][ T8842] ? __lock_acquire+0xab9/0xd20 [ 326.661595][ T8842] ? __fget_files+0x2a/0x420 [ 326.661613][ T8842] ? __fget_files+0x3a0/0x420 [ 326.661641][ T8842] __sys_sendmmsg+0x28e/0x430 [ 326.661668][ T8842] ? __pfx___sys_sendmmsg+0x10/0x10 [ 326.661687][ T8842] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 326.661743][ T8842] ? ksys_write+0x22a/0x250 [ 326.661768][ T8842] ? exc_page_fault+0x82/0x100 [ 326.661796][ T8842] ? __pfx_ksys_write+0x10/0x10 [ 326.661828][ T8842] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 326.661853][ T8842] __do_fast_syscall_32+0xb6/0x2b0 [ 326.661872][ T8842] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.661903][ T8842] do_fast_syscall_32+0x34/0x80 [ 326.661921][ T8842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.661943][ T8842] RIP: 0023:0xf7fe5539 [ 326.661965][ T8842] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 326.661986][ T8842] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 326.662006][ T8842] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 326.662020][ T8842] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000000 [ 326.662032][ T8842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.662043][ T8842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 326.662055][ T8842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.662084][ T8842] [ 326.675227][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.018828][ T5965] usb 3-1: config 0 descriptor?? [ 327.037959][ T5965] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 327.213207][ T8846] FAULT_INJECTION: forcing a failure. [ 327.213207][ T8846] name failslab, interval 1, probability 0, space 0, times 0 [ 327.229635][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.3.774 Not tainted syzkaller #0 PREEMPT(full) [ 327.229662][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.229676][ T8846] Call Trace: [ 327.229684][ T8846] [ 327.229692][ T8846] dump_stack_lvl+0x189/0x250 [ 327.229724][ T8846] ? __pfx____ratelimit+0x10/0x10 [ 327.229752][ T8846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.229778][ T8846] ? __pfx__printk+0x10/0x10 [ 327.229806][ T8846] ? __pfx___might_resched+0x10/0x10 [ 327.229851][ T8846] should_fail_ex+0x414/0x560 [ 327.229895][ T8846] should_failslab+0xa8/0x100 [ 327.229917][ T8846] __kmalloc_noprof+0xcb/0x7f0 [ 327.229944][ T8846] ? kfree+0x4d/0x6d0 [ 327.229965][ T8846] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 327.230004][ T8846] tomoyo_realpath_from_path+0xe3/0x5d0 [ 327.230051][ T8846] tomoyo_path2_perm+0x288/0x680 [ 327.230074][ T8846] ? look_up_lock_class+0x74/0x170 [ 327.230102][ T8846] ? tomoyo_path2_perm+0x235/0x680 [ 327.230129][ T8846] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 327.230213][ T8846] tomoyo_path_rename+0x141/0x190 [ 327.230232][ T8846] ? __d_lookup+0x6df/0x780 [ 327.230259][ T8846] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 327.230296][ T8846] security_path_rename+0x250/0x490 [ 327.230322][ T8846] do_renameat2+0x52b/0xa50 [ 327.230371][ T8846] ? __pfx_do_renameat2+0x10/0x10 [ 327.230419][ T8846] ? getname_flags+0x1e5/0x540 [ 327.230443][ T8846] __ia32_sys_renameat2+0xce/0xe0 [ 327.230477][ T8846] __do_fast_syscall_32+0xb6/0x2b0 [ 327.230505][ T8846] do_fast_syscall_32+0x34/0x80 [ 327.230524][ T8846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.230548][ T8846] RIP: 0023:0xf7fe5539 [ 327.230565][ T8846] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 327.230583][ T8846] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 327.230604][ T8846] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000480 [ 327.230618][ T8846] RDX: 00000000ffffff9c RSI: 00000000800004c0 RDI: 0000000000000002 [ 327.230630][ T8846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.230642][ T8846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 327.230654][ T8846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.230687][ T8846] [ 327.462776][ T8846] ERROR: Out of memory at tomoyo_realpath_from_path. [ 327.488620][ T5965] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 328.088698][ T8828] raw_sendmsg: syz.2.767 forgot to set AF_INET. Fix it! [ 328.099661][ T5965] gspca_cpia1: usb_control_msg 05, error -71 [ 328.106655][ T5965] cpia1 3-1:0.0: unexpected systemstate: 00 [ 328.118622][ T5965] usb 3-1: USB disconnect, device number 26 [ 328.439996][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.778'. [ 328.450414][ T8867] netlink: 52 bytes leftover after parsing attributes in process `syz.1.778'. [ 329.460419][ T8879] ip6tnl1: entered allmulticast mode [ 330.128283][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 330.660938][ T89] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 331.021000][ T89] usb 1-1: Using ep0 maxpacket: 8 [ 331.066719][ T89] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 331.076913][ T89] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 331.097095][ T89] usb 1-1: Product: syz [ 331.101947][ T89] usb 1-1: Manufacturer: syz [ 331.111216][ T89] usb 1-1: SerialNumber: syz [ 331.125206][ T89] usb 1-1: config 0 descriptor?? [ 331.146279][ T89] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 331.440992][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 331.485179][ T8914] FAULT_INJECTION: forcing a failure. [ 331.485179][ T8914] name failslab, interval 1, probability 0, space 0, times 0 [ 331.498346][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.3.795 Not tainted syzkaller #0 PREEMPT(full) [ 331.498378][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.498389][ T8914] Call Trace: [ 331.498397][ T8914] [ 331.498406][ T8914] dump_stack_lvl+0x189/0x250 [ 331.498438][ T8914] ? __pfx____ratelimit+0x10/0x10 [ 331.498465][ T8914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.498491][ T8914] ? __pfx__printk+0x10/0x10 [ 331.498517][ T8914] ? __pfx___might_resched+0x10/0x10 [ 331.498538][ T8914] ? fs_reclaim_acquire+0x7d/0x100 [ 331.498571][ T8914] should_fail_ex+0x414/0x560 [ 331.498604][ T8914] should_failslab+0xa8/0x100 [ 331.498642][ T8914] kmem_cache_alloc_node_noprof+0x77/0x710 [ 331.498668][ T8914] ? __alloc_skb+0x112/0x2d0 [ 331.498694][ T8914] ? netlink_autobind+0xdb/0x300 [ 331.498719][ T8914] __alloc_skb+0x112/0x2d0 [ 331.498741][ T8914] netlink_sendmsg+0x5c6/0xb30 [ 331.498771][ T8914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.498794][ T8914] ? __import_iovec+0x5d4/0x7f0 [ 331.498816][ T8914] ? aa_sock_msg_perm+0xf1/0x1d0 [ 331.498846][ T8914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.498865][ T8914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.498882][ T8914] __sock_sendmsg+0x21c/0x270 [ 331.498905][ T8914] ____sys_sendmsg+0x505/0x830 [ 331.498930][ T8914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.498967][ T8914] ___sys_sendmsg+0x21f/0x2a0 [ 331.498991][ T8914] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.499045][ T8914] ? __fget_files+0x2a/0x420 [ 331.499063][ T8914] ? __fget_files+0x3a0/0x420 [ 331.499092][ T8914] __sys_sendmsg+0x164/0x220 [ 331.499116][ T8914] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.499146][ T8914] ? __pfx_ksys_write+0x10/0x10 [ 331.499177][ T8914] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 331.499209][ T8914] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.499239][ T8914] __do_fast_syscall_32+0xb6/0x2b0 [ 331.499258][ T8914] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.499289][ T8914] do_fast_syscall_32+0x34/0x80 [ 331.499307][ T8914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.499330][ T8914] RIP: 0023:0xf7fe5539 [ 331.499347][ T8914] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 331.499364][ T8914] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 331.499385][ T8914] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 331.499399][ T8914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.499410][ T8914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.499422][ T8914] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 331.499433][ T8914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.499463][ T8914] [ 331.793520][ T89] gspca_zc3xx: reg_r err -71 [ 331.798244][ T89] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 331.809340][ T89] usb 1-1: USB disconnect, device number 30 [ 331.861182][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 331.875525][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 331.884027][ T9] usb 2-1: config 0 has no interface number 0 [ 331.890609][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 331.906548][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 331.916065][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.926015][ T9] usb 2-1: Product: syz [ 331.930222][ T9] usb 2-1: Manufacturer: syz [ 331.935236][ T9] usb 2-1: SerialNumber: syz [ 331.943981][ T9] usb 2-1: config 0 descriptor?? [ 331.952012][ T9] smsc75xx v1.0.0 [ 332.662390][ T5935] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 332.950855][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 332.971675][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short [ 333.025319][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 333.025815][ T5935] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 333.073192][ T5935] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 333.095037][ T5935] usb 3-1: config 8 interface 0 has no altsetting 0 [ 333.111361][ T5935] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 333.124750][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.139960][ T5935] usb 3-1: Product: syz [ 333.153336][ T5935] usb 3-1: Manufacturer: syz [ 333.155302][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 333.168082][ T5935] usb 3-1: SerialNumber: syz [ 333.191128][ T8921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 333.244535][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 333.303827][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 333.396071][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 333.467227][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 333.499514][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 333.562497][ T8928] netlink: 576 bytes leftover after parsing attributes in process `syz.0.798'. [ 334.509970][ T5935] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.526996][ T5935] usb 3-1: selecting invalid altsetting 0 [ 334.665524][ T5935] usb 3-1: USB disconnect, device number 27 [ 334.681029][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 334.724521][ T6103] udevd[6103]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.815819][ T5940] usb 2-1: USB disconnect, device number 25 [ 334.852138][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 334.870146][ T9] usb 5-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 334.885273][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.927789][ T9] usb 5-1: config 0 descriptor?? [ 334.945136][ T9] usblcd 5-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 334.968664][ T8945] team_slave_0: entered promiscuous mode [ 334.974671][ T8945] team_slave_1: entered promiscuous mode [ 334.983150][ T8945] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 335.254123][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.328676][ T8955] syzkaller0: entered promiscuous mode [ 335.334322][ T8955] syzkaller0: entered allmulticast mode [ 335.431749][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.433009][ T8957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.455409][ T8957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.466293][ T5965] usb 5-1: USB disconnect, device number 19 [ 336.340987][ T5965] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 336.554140][ T5965] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 336.582453][ T5965] usb 2-1: config 5 has no interface number 0 [ 336.589410][ T5965] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 336.599491][ T5965] usb 2-1: config 5 interface 123 has no altsetting 0 [ 336.630052][ T5965] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 336.648742][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.666041][ T5965] usb 2-1: Product: syz [ 336.685912][ T5965] usb 2-1: Manufacturer: syz [ 336.696049][ T5965] usb 2-1: SerialNumber: syz [ 337.170474][ T5965] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 337.211228][ T5965] usb 2-1: USB disconnect, device number 26 [ 338.016809][ T5965] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 338.183787][ T5965] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.194729][ T5965] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 338.207345][ T5965] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.217476][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.226775][ T5965] usb 2-1: Product: syz [ 338.231659][ T5965] usb 2-1: Manufacturer: syz [ 338.236576][ T5965] usb 2-1: SerialNumber: syz [ 338.675316][ T89] IPVS: starting estimator thread 0... [ 338.771011][ T8998] IPVS: using max 27 ests per chain, 64800 per kthread [ 339.275860][ T5965] usb 2-1: USB disconnect, device number 27 [ 339.344323][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 340.780022][ T9025] loop5: detected capacity change from 0 to 7 [ 341.240942][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 341.253764][ T9025] Dev loop5: unable to read RDB block 7 [ 341.259379][ T9025] loop5: unable to read partition table [ 341.266144][ T9025] loop5: partition table beyond EOD, truncated [ 341.274164][ T9025] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 341.411917][ T9] usb 5-1: device descriptor read/64, error -71 [ 341.676640][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 341.823527][ T9] usb 5-1: device descriptor read/64, error -71 [ 341.941725][ T9] usb usb5-port1: attempt power cycle [ 342.331430][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 342.469212][ T9] usb 5-1: device descriptor read/8, error -71 [ 342.731609][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 342.761819][ T9] usb 5-1: device descriptor read/8, error -71 [ 342.871211][ T9] usb usb5-port1: unable to enumerate USB device [ 342.940919][ T89] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 343.091928][ T89] usb 3-1: Using ep0 maxpacket: 8 [ 343.102534][ T89] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 343.112587][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.120673][ T89] usb 3-1: Product: syz [ 343.187130][ T9070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.836'. [ 343.197671][ T9070] netlink: 52 bytes leftover after parsing attributes in process `syz.3.836'. [ 343.258585][ T89] usb 3-1: Manufacturer: syz [ 343.267241][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 343.267252][ T30] audit: type=1326 audit(1763704271.359:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.838" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f91539 code=0x0 [ 343.278859][ T89] usb 3-1: SerialNumber: syz [ 343.316792][ T89] usb 3-1: config 0 descriptor?? [ 343.320965][ T5940] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 343.480887][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 343.488228][ T5940] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 343.497389][ T5940] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 343.511011][ T5940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 343.525103][ T5940] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.537775][ T5940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 343.551798][ T5940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 343.566168][ T5940] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 343.581209][ T5940] usb 2-1: config 168 interface 0 has no altsetting 0 [ 343.590472][ T5940] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 343.611574][ T89] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 343.624534][ T5940] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 343.638131][ T5940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 343.650757][ T5940] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.664043][ T5940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 343.676711][ T5940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 343.689095][ T5940] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 343.703620][ T5940] usb 2-1: config 168 interface 0 has no altsetting 0 [ 343.712873][ T5940] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 343.720732][ T5940] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 343.734558][ T5940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 343.746745][ T5940] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.759563][ T5940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 343.772795][ T5940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 343.785265][ T5940] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 343.799705][ T5940] usb 2-1: config 168 interface 0 has no altsetting 0 [ 343.811646][ T5940] usb 2-1: string descriptor 0 read error: -22 [ 343.820716][ T5940] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 343.835454][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.866280][ T5940] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 344.121189][ T89] gspca_sunplus: reg_w_riv err -110 [ 344.126734][ T89] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 344.190165][ T5935] usb 2-1: USB disconnect, device number 28 [ 344.281466][ T5940] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 344.450853][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 344.459368][ T5940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 344.468490][ T5940] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 344.476775][ T5940] usb 1-1: config 0 has no interface number 0 [ 344.483219][ T5903] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 344.491598][ T5940] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 344.503010][ T5940] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 344.513738][ T5940] usb 1-1: config 0 interface 88 has no altsetting 0 [ 344.526764][ T5940] usb 1-1: string descriptor 0 read error: -22 [ 344.533953][ T5940] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 344.543432][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 344.553502][ T5940] usb 1-1: config 0 descriptor?? [ 344.567091][ T5940] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input18 [ 344.623599][ T5978] udevd[5978]: Error opening device "/dev/input/event4": Input/output error [ 344.632647][ T5978] udevd[5978]: Unable to EVIOCGABS device "/dev/input/event4" [ 344.640341][ T5978] udevd[5978]: Unable to EVIOCGABS device "/dev/input/event4" [ 344.671300][ T5903] usb 4-1: Invalid ep0 maxpacket: 16 [ 344.811666][ T5903] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 344.839070][ T5940] usb 1-1: USB disconnect, device number 31 [ 344.971120][ T5903] usb 4-1: Invalid ep0 maxpacket: 16 [ 344.977555][ T5903] usb usb4-port1: attempt power cycle [ 345.088427][ T9092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.844'. [ 345.170984][ T89] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 345.325703][ T89] usb 2-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=75.3e [ 345.335174][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.340886][ T5903] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 345.343950][ T89] usb 2-1: Product: syz [ 345.355163][ T5965] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 345.367699][ T89] usb 2-1: Manufacturer: syz [ 345.372127][ T5903] usb 4-1: Invalid ep0 maxpacket: 16 [ 345.372417][ T89] usb 2-1: SerialNumber: syz [ 345.386228][ T89] usb 2-1: config 0 descriptor?? [ 345.408665][ T89] gspca_main: etoms-2.14.0 probing 102c:6251 [ 345.512571][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 345.519856][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.532957][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.543164][ T5903] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 345.543186][ T5965] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 345.562108][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.582012][ T5965] usb 5-1: config 0 descriptor?? [ 345.591584][ T5903] usb 4-1: Invalid ep0 maxpacket: 16 [ 345.598997][ T5903] usb usb4-port1: unable to enumerate USB device [ 345.679974][ T89] usb 2-1: USB disconnect, device number 29 [ 345.744743][ T5903] usb 3-1: USB disconnect, device number 28 [ 345.965545][ T9109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.850'. [ 345.976100][ T9109] netlink: 52 bytes leftover after parsing attributes in process `syz.2.850'. [ 346.397216][ T5965] usbhid 5-1:0.0: can't add hid device: -71 [ 346.403387][ T5965] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 346.415651][ T5965] usb 5-1: USB disconnect, device number 24 [ 346.760927][ T5903] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 346.943616][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.954809][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.974028][ T5903] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 346.997525][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.021872][ T5903] usb 2-1: config 0 descriptor?? [ 347.122513][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 347.124273][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 347.168280][ T9115] tipc: Enabling of bearer rejected, failed to enable media [ 347.380927][ T89] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 347.444999][ T9113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.463274][ T9113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.497432][ T5903] waltop 0003:172F:0034.0009: item fetching failed at offset 5/7 [ 347.505051][ T9132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.507471][ T5903] waltop 0003:172F:0034.0009: probe with driver waltop failed with error -22 [ 347.543450][ T89] usb 3-1: unable to get BOS descriptor or descriptor too short [ 347.553838][ T89] usb 3-1: config 14 has an invalid interface number: 21 but max is 0 [ 347.569759][ T89] usb 3-1: config 14 has no interface number 0 [ 347.589641][ T30] audit: type=1326 audit(1763704275.679:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 347.605224][ T89] usb 3-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 347.622283][ T30] audit: type=1326 audit(1763704275.679:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 347.761136][ T30] audit: type=1326 audit(1763704275.679:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 347.801730][ T89] usb 3-1: config 14 interface 21 has no altsetting 0 [ 347.807626][ T5903] usb 2-1: USB disconnect, device number 30 [ 347.811027][ T89] usb 3-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 347.841850][ T5965] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 347.850508][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.869491][ T89] usb 3-1: Product: syz [ 347.875533][ T89] usb 3-1: Manufacturer: syz [ 347.880335][ T89] usb 3-1: SerialNumber: syz [ 347.931771][ T9117] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 347.933519][ T30] audit: type=1326 audit(1763704275.679:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 347.988756][ T30] audit: type=1326 audit(1763704275.679:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.016587][ T30] audit: type=1326 audit(1763704275.679:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.021045][ T5965] usb 5-1: Invalid ep0 maxpacket: 9 [ 348.043562][ T30] audit: type=1326 audit(1763704275.679:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.116016][ T30] audit: type=1326 audit(1763704275.679:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.139419][ T30] audit: type=1326 audit(1763704275.679:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.164602][ T9117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.178605][ T9117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.319644][ T5965] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 348.321230][ T30] audit: type=1326 audit(1763704275.849:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.352398][ T89] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.360980][ T89] usb 3-1: MIDIStreaming interface descriptor not found [ 348.377818][ T30] audit: type=1326 audit(1763704275.849:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.432929][ T30] audit: type=1326 audit(1763704275.929:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.501795][ T5965] usb 5-1: Invalid ep0 maxpacket: 9 [ 348.514583][ T89] usb 3-1: USB disconnect, device number 29 [ 348.530993][ T5965] usb usb5-port1: attempt power cycle [ 348.547688][ T30] audit: type=1326 audit(1763704275.929:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.588173][ T30] audit: type=1326 audit(1763704275.929:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.612140][ T30] audit: type=1326 audit(1763704276.069:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.635638][ T30] audit: type=1326 audit(1763704276.069:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.686848][ T5902] udevd[5902]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.693347][ T30] audit: type=1326 audit(1763704276.109:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.739231][ T30] audit: type=1326 audit(1763704276.109:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.766094][ T30] audit: type=1326 audit(1763704276.109:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 348.820936][ T5940] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 348.841169][ T5903] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 348.923859][ T5965] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 348.961636][ T5965] usb 5-1: Invalid ep0 maxpacket: 9 [ 348.988883][ T9147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.001907][ T9147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.863'. [ 349.011177][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 349.018088][ T5940] usb 1-1: config 0 interface 0 has no altsetting 0 [ 349.025067][ T5940] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 349.035147][ T5903] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.044401][ T5903] usb 2-1: config 0 has no interface number 0 [ 349.050639][ T5903] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 349.059826][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.071648][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.082225][ T5940] usb 1-1: config 0 descriptor?? [ 349.090975][ T5965] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 349.103368][ T5940] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 349.112609][ T5903] usb 2-1: config 0 descriptor?? [ 349.161561][ T5965] usb 5-1: Invalid ep0 maxpacket: 9 [ 349.168890][ T5965] usb usb5-port1: unable to enumerate USB device [ 349.169375][ T5903] usb 2-1: selecting invalid altsetting 1 [ 349.212204][ T5940] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 349.222988][ T5965] IPVS: starting estimator thread 0... [ 349.223080][ T5903] dvb_ttusb_budget: ttusb_init_controller: error [ 349.235592][ T5940] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 349.249825][ T5903] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 349.258583][ T5940] usb 1-1: media controller created [ 349.322188][ T9150] IPVS: using max 32 ests per chain, 76800 per kthread [ 349.365346][ T9140] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI [ 349.368433][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.377367][ T9140] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 349.377393][ T9140] CPU: 0 UID: 0 PID: 9140 Comm: syz.1.861 Not tainted syzkaller #0 PREEMPT(full) [ 349.377413][ T9140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.377426][ T9140] RIP: 0010:__mutex_lock+0x13b/0x1350 [ 349.419077][ T9140] Code: 60 93 79 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 2b 10 00 00 83 3d 43 a6 31 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 49 d8 dd f6 4d 39 64 24 60 0f 85 51 0f 00 [ 349.438881][ T9140] RSP: 0018:ffffc9000b0ef160 EFLAGS: 00010202 [ 349.444966][ T9140] RAX: 0000000000000019 RBX: ffffc9000b0ef240 RCX: ffffffff99799303 [ 349.452957][ T9140] RDX: ffff88802e56bc80 RSI: ffffffff8d8f50e4 RDI: 00000000000000c8 [ 349.460997][ T9140] RBP: ffffc9000b0ef318 R08: ffffc9000b0ef287 R09: 0000000000000000 [ 349.468981][ T9140] R10: ffffc9000b0ef260 R11: fffff5200161de51 R12: 0000000000000068 [ 349.476995][ T9140] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.484995][ T9140] FS: 0000000000000000(0000) GS:ffff88812613b000(0063) knlGS:00000000f544db40 [ 349.493919][ T9140] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 349.500584][ T9140] CR2: 000055b44236e008 CR3: 000000007e3fe000 CR4: 00000000003526f0 [ 349.508604][ T9140] Call Trace: [ 349.511887][ T9140] [ 349.514957][ T9140] ? __mutex_lock+0x335/0x1350 [ 349.519730][ T9140] ? __mutex_trylock_common+0x153/0x260 [ 349.525286][ T9140] ? dvb_usbv2_generic_write+0x26/0x60 [ 349.530854][ T9140] ? mxl111sf_ctrl_msg+0xad/0x2e0 [ 349.535984][ T9140] ? __pfx___mutex_lock+0x10/0x10 [ 349.541007][ T9140] ? __pfx___mutex_lock+0x10/0x10 [ 349.546029][ T9140] ? rcu_is_watching+0x15/0xb0 [ 349.550787][ T9140] ? is_bpf_text_address+0x292/0x2b0 [ 349.556070][ T9140] ? is_bpf_text_address+0x26/0x2b0 [ 349.561263][ T9140] dvb_usbv2_generic_write+0x26/0x60 [ 349.566544][ T9140] mxl111sf_ctrl_msg+0x16a/0x2e0 [ 349.571466][ T9140] mxl111sf_write_reg+0xa0/0x180 [ 349.576394][ T9140] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 349.581919][ T9140] ? debug_mutex_lock_common+0xa/0xb0 [ 349.587291][ T9140] mxl111sf_i2c_xfer+0x461/0x4f00 [ 349.592414][ T9140] ? __lock_acquire+0xab9/0xd20 [ 349.597956][ T9140] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 349.604657][ T9140] ? is_bpf_text_address+0x26/0x2b0 [ 349.610138][ T9140] ? is_bpf_text_address+0x292/0x2b0 [ 349.615964][ T9140] ? is_bpf_text_address+0x26/0x2b0 [ 349.621188][ T9140] ? kernel_text_address+0xa5/0xe0 [ 349.626356][ T9140] ? __kernel_text_address+0xd/0x40 [ 349.631545][ T9140] ? unwind_get_return_address+0x4d/0x90 [ 349.637161][ T9140] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 349.643305][ T9140] ? arch_stack_walk+0xfc/0x150 [ 349.648156][ T9140] ? stack_trace_save+0x9c/0xe0 [ 349.653093][ T9140] ? __pfx_stack_trace_save+0x10/0x10 [ 349.658596][ T9140] ? look_up_lock_class+0x74/0x170 [ 349.663721][ T9140] ? register_lock_class+0x51/0x320 [ 349.668912][ T9140] ? __lock_acquire+0xab9/0xd20 [ 349.673746][ T9140] ? do_raw_spin_lock+0x121/0x290 [ 349.678778][ T9140] __i2c_transfer+0x874/0x2170 [ 349.683559][ T9140] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.688769][ T9140] ? __pfx___i2c_transfer+0x10/0x10 [ 349.693970][ T9140] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 349.699332][ T9140] ? i2c_transfer+0x120/0x3a0 [ 349.704001][ T9140] i2c_transfer+0x25b/0x3a0 [ 349.708517][ T9140] ? __pfx_i2c_transfer+0x10/0x10 [ 349.713560][ T9140] ? _copy_from_user+0x94/0xb0 [ 349.718326][ T9140] i2cdev_ioctl_rdwr+0x460/0x740 [ 349.723794][ T9140] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 349.728912][ T9140] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 349.734553][ T9140] ? __fget_files+0x3a0/0x420 [ 349.739228][ T9140] ? __fget_files+0x2a/0x420 [ 349.743978][ T9140] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 349.749987][ T9140] __ia32_compat_sys_ioctl+0x543/0x840 [ 349.755548][ T9140] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 349.761676][ T9140] ? __se_sys_futex_time32+0x360/0x3e0 [ 349.767317][ T9140] ? __pfx_do_sys_openat2+0x10/0x10 [ 349.772521][ T9140] ? rcu_is_watching+0x15/0xb0 [ 349.777275][ T9140] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 349.783949][ T9140] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.789157][ T9140] __do_fast_syscall_32+0xb6/0x2b0 [ 349.794339][ T9140] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.799525][ T9140] do_fast_syscall_32+0x34/0x80 [ 349.804454][ T9140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.810813][ T9140] RIP: 0023:0xf705d539 [ 349.814980][ T9140] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 349.834794][ T9140] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 349.843202][ T9140] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 349.851166][ T9140] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.859153][ T9140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.867220][ T9140] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 349.875276][ T9140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.883433][ T9140] [ 349.886492][ T9140] Modules linked in: [ 349.890422][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.897126][ T9140] ---[ end trace 0000000000000000 ]--- [ 349.917131][ T5940] set interface failed [ 349.920963][ T9140] RIP: 0010:__mutex_lock+0x13b/0x1350 [ 349.930597][ T9140] Code: 60 93 79 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 2b 10 00 00 83 3d 43 a6 31 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 49 d8 dd f6 4d 39 64 24 60 0f 85 51 0f 00 [ 349.954108][ T5903] DVB: Unable to find symbol cx22700_attach() [ 349.978104][ T9140] RSP: 0018:ffffc9000b0ef160 EFLAGS: 00010202 [ 349.990285][ T9140] RAX: 0000000000000019 RBX: ffffc9000b0ef240 RCX: ffffffff99799303 [ 349.998840][ T9140] RDX: ffff88802e56bc80 RSI: ffffffff8d8f50e4 RDI: 00000000000000c8 [ 350.007068][ T9140] RBP: ffffc9000b0ef318 R08: ffffc9000b0ef287 R09: 0000000000000000 [ 350.040863][ T9140] R10: ffffc9000b0ef260 R11: fffff5200161de51 R12: 0000000000000068 [ 350.068293][ T9140] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.076455][ T5903] DVB: Unable to find symbol tda10046_attach() [ 350.082717][ T5903] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 350.093875][ T9140] FS: 0000000000000000(0000) GS:ffff88812623b000(0063) knlGS:00000000f544db40 [ 350.106358][ T9140] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 350.113235][ T9140] CR2: 000000003120cffc CR3: 000000007e3fe000 CR4: 00000000003526f0 [ 350.122019][ T9140] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 350.130150][ T9140] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 350.138362][ T9140] Kernel panic - not syncing: Fatal exception [ 350.144938][ T9140] Kernel Offset: disabled [ 350.149265][ T9140] Rebooting in 86400 seconds..