last executing test programs: 11.216662353s ago: executing program 0 (id=1723): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000003c0)={0xa, 0x100, 0x0, {0x80000004, 0x1, 0x2, 0x7}}) prctl$PR_GET_KEEPCAPS(0x7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001000010000904b8070096d1ca00bfdab609e4193d464dc6"], 0x0) read$FUSE(r6, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r5, 0xff08, 0x0) r7 = gettid() r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r8, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r8, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfb"], 0x1c}}, 0x0) 8.928679497s ago: executing program 3 (id=1727): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r8, &(0x7f0000002340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0xfffffffd}}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xc, 0x8, 0x4, 0x3}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x14) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRESOCT=0x0, @ANYRESHEX=r3, @ANYRES16=r1]) 7.993214597s ago: executing program 1 (id=1729): alarm(0x1000000001) alarm(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd1a}, 0x48) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060102000000000000000000000000050001000700000009000200001400078005001500800000000800124001000000050004000000000012000300686173683a6e65742c706f7274000000050005000a000000"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r2, 0x14, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x3c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xd, 0x2}, {0x1, 0xe}}, [@TCA_RATE={0x6, 0x5, {0xf2, 0x7}}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000108004d000048006500000f06907864010101ac7f0000017f000001ac1414aaac1414aa0a0101020000004e2200"/70, @ANYRESDEC=r5, @ANYRESHEX=r6, @ANYRESDEC], 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r8, &(0x7f0000000140)="a9c72f", 0x3, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmmsg$unix(r7, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file3\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 7.865955605s ago: executing program 3 (id=1730): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 7.700855423s ago: executing program 4 (id=1731): syz_emit_ethernet(0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c0000000000019078ac1e0001ffffff00907800000000"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) 7.65287182s ago: executing program 0 (id=1732): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) io_setup(0x8, &(0x7f00000001c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000300)="87992d800d80", 0x6, 0x4}]) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 7.576997734s ago: executing program 3 (id=1733): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x16, "4372070000000000476fb2940acfbe4c3f9725f0"}}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000240)="9ac247f3453d59133e6ec7cb31e5b52ca7", 0x11}, {0x0}], 0x2) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000400)=0x10000002) read$dsp(r3, &(0x7f00000001c0)=""/95, 0x5f) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x5, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SET_NAME(0x4, 0x0) r6 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000000600)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, &(0x7f0000000940)=[{&(0x7f0000000680)=""/120, 0x78}], 0x1, 0x0) syz_usb_connect(0x1, 0x3f, &(0x7f0000004500)={{0x12, 0x1, 0x250, 0xfb, 0xb2, 0xfd, 0x8, 0x6be, 0xd001, 0x5119, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x2, 0x4, 0x40, 0x3, [{{0x9, 0x4, 0xb2, 0xf3, 0x2, 0xcb, 0xf2, 0xa6, 0x6, [], [{{0x9, 0x5, 0xc, 0x4, 0x20, 0x2, 0x5, 0x6a}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x8b, 0xe8, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x4}, @generic={0x2, 0x2}]}}]}}]}}]}}, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 7.518785112s ago: executing program 0 (id=1734): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000040)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000300)=r6, 0x4) r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x3}}) sendmsg$nl_xfrm(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000280039030000000000000000e000000000000000000000000000000000000000ffff000000000000003ec9c2777e984c7d00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000"], 0xf8}}, 0x0) 7.469168432s ago: executing program 4 (id=1736): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='task\x00') connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 'vxcan1\x00'}}, 0x1e) r1 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000100)={0x8, @sdr={0x31364d59, 0x8}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) fsetxattr(r0, 0x0, &(0x7f00000000c0)='[\x00', 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x8c1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000200)=0x8) 7.467197077s ago: executing program 1 (id=1737): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x1, 0xff, 0x9}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) close(0xffffffffffffffff) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000040)=r7, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) fcntl$setlease(r8, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b33, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x98a4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x4b755bcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 7.340769283s ago: executing program 4 (id=1738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14) 7.073759174s ago: executing program 4 (id=1739): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000040)={0x100000000000000, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000002}]) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) 6.529237086s ago: executing program 2 (id=1740): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) 5.95007168s ago: executing program 2 (id=1741): openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/hardlockup_count', 0x0, 0x178) rename(0x0, &(0x7f0000002140)='./file0\x00') syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 5.620924523s ago: executing program 1 (id=1742): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r8, &(0x7f0000002340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0xfffffffd}}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xc, 0x8, 0x4, 0x3}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x14) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRESOCT=0x0, @ANYRESHEX=r3, @ANYRES16=r1]) 4.061148114s ago: executing program 0 (id=1743): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 4.006622884s ago: executing program 2 (id=1744): openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/hardlockup_count', 0x0, 0x178) rename(0x0, &(0x7f0000002140)='./file0\x00') syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) (fail_nth: 1) 3.913896236s ago: executing program 3 (id=1745): madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)="b1c72d80ad30999f8efe6c9a98a62de988cd0dc8ebd7290c4e1a875bbeae129f5e82091bcc20b2ec013d1b5b17ebfbfc64d4672076009469a55e9c58e8af9b086038fcc6e8339f45cf2ec43b0038e32f8cd9167a10d4472b3d7592aca1ad0acf4aa1c4c0388d592c8bd32501941a2d2de6309fafcd6f0f17e98df3e5fd9b856981111311fd6a87a4561d30b80c7a137e232b65ccf608a13e94f5f4160de10ab36af1086ac01ca34458fb2a81f79dcfd2d8da8055db6ccf6691d378", 0xbb}, 0x64) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_usb_connect$uac1(0x6, 0x106, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x3acaf298b9b8dd2, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x3, 0x1, 0x0, 0x30, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x301, 0x6, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x5, 0x9, 0x10, 0x5, 0xfa}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0x8, "31eb00491e42"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x0, "165dac8a1c"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x3, 0x2, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x2b, 0x6, 'o.'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x3, 0x1002}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x9, 0x3, "07c0f843"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x61, 0x2, 0x6, 0x1, "ef5a", "e07d"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xd, 0x2, 0x1, 0x3, "", "c0"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3, 0x9, "6880c6c9facb5a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x1, 0x6, {0x7, 0x25, 0x1, 0x80, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3, 0x4, "f5"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x91, 0x3, 0x0, 0x2c, "f7251a73245926b2"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xf0, 0xff, 0x3, {0x7, 0x25, 0x1, 0x82, 0x7, 0x100}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x3, 0x4, 0x32, 0x20, 0x2}, 0x1a, &(0x7f00000002c0)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x81, 0x8, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xd2, 0x9, 0xc5, 0xe}]}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x861}}, {0xb6, &(0x7f0000000340)=@string={0xb6, 0x3, "defb232e81bd50bc220bf079e530555f59414444e14110db5751c5d986370aba65e976646d66ae803e87a60e5a1e3088488f7d6b5c477bdeb7c8954175fe9c53c91e6217f973c4ba3df8e47cf65038089728140a9730dcafbdbd961ab247bb6a567172ce560afcdd0ab1a9250939036da9c1b9b642e86184acb3c66dd32a705ef076b04ae893a5c5e74bacee9995fc1fd43afc0b5aef9e7ce174e3fa320b3e4ecc7c952aa61fbf3c5b8ef26fff40deb00ed8da43"}}, {0xb0, &(0x7f0000000400)=@string={0xb0, 0x3, "302af9086b68fbd634cd3134c77bc9ce3f499852bc10e4e924d569ad31cb8735b8095adc1229374ef2b31c1f142724ae175b9ce9048e3219c6efe688ca2357eabbbadd73d3baf1f54e98cc867749fdb2572fa6ff74a2e3afd74cfea6cccf5201f93b45dc475acf390aeb3a18ab2a01a78da68ae08344d82965a451874a76c89aa2514a9e87c39ef752425ad702e35a9a4bef6ca5f36e6ab74d5bf2ed8ef2f721420d84da27ce71c45bd80730a381"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x81d}}, {0xd5, &(0x7f0000000500)=@string={0xd5, 0x3, "73eb50b449a15f3d606ddd86b5e433b5509589a11105fa7d070216a956ce2c44ec960f4e9bf2b19a1579b9258d627c6cf448dd880fa56768f8dbd29db3ca2a3158c1f0d5bbdd7bb35988d40c0ea84f248c32284e2f3cf6df161238a26ed1f75c0f9d6b5762c774e822485508b790aea1b9073568af2014f9d182c574cdd9044b6a92b1b1e5b997b5d53058da43bcf644cd2b69cc14c8be4c9f8928c6398a82660366fecac484bf5785c7f162a62053c7233d993ff200e633fc62ecda6f0cb75b7b9531bc6880cb18eb80ae6bcd6892d3acff50"}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000700)={0xc, &(0x7f0000000640)={0x40, 0x23, 0x4d, {0x4d, 0x1d, "73aadeaf1a2d3387690b7d2dca06a01ce972b45c346f857541ac7edfac5c62b421b04fe07ce714ebe0d315bcfddf12f4fd5980d835cf97571e546a800e0af926480eb66bd80d5d361cde9a"}}, &(0x7f00000006c0)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "203f821726b671ec4ffa869488c934be2bc6d958be0a31fa1548acbcce4decde90189e7b8ccad8a6759841"}}}, &(0x7f0000000980)={0x24, &(0x7f0000000740)={0x40, 0x13, 0x4f, "a24d8dce75f30441c39fbf91db4666bfa7d9175218e627db580578d3106322c7da839ba752a605ac9f540aae7dc9833031a186599ad09732913f4d8d97cf5f441eb7053cebf9a64670be871ceb05bc"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x81, 0x2, "976f"}, &(0x7f0000000880)={0x20, 0x82, 0x3, "9ce5d8"}, &(0x7f00000008c0)={0x20, 0x83, 0x1, "01"}, &(0x7f0000000900)={0x20, 0x84, 0x4, "eb4b8305"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "701cca"}}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000009c0)) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000bc0)={0xc, &(0x7f0000000a00)={0x20, 0xa, 0xbf, {0xbf, 0xe, "f98585a74551ade9ff9878e982cd32b273a3720d0e3f39eaf6e0b41b24253c3c4b8dbf21cd69fce7b53b06d8aee592385eea4f5fe0dc248d8ba11ca0d6c271e7607441f980d87d7e608a0339c59b90e6de49fdfd5157effee48b96a57da2732f74a2dd2dec5cd4e8a7f19082b3899382a61eb98116537c13e72b08b86dade31a8ad10a701408bbe2b9d3b8d15ce570317029a827da7bf435e9963421c0b56cf10129fd96f60527fafa062870d5ecd817d5cd58bf432061566685b8599e"}}, &(0x7f0000000b00)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "e4ad98ffdf980a69457aaa8921605466a069d70368f9a148128b3529eed1cb9e524ee90345cab60fc8a29106a723a5e8064e9232d4a3173c76f8429530e21c861f564c6973a938932d5edc9746c7ce8b5931a69510507dc0dee5a44f15630c015a5546b91860090e9ec9f1a946d984f04f08d43ef3709193ea2006e16cfc43db181a6680f80dff40fd510f5c37b294de54ee56e28d9f2eaf6a7f21da"}}}, &(0x7f0000000d80)={0x1c, &(0x7f0000000c00)={0x0, 0x34, 0x35, "10c0b06040a3bd9e733b9c5369422e6edf9a33141066923a49c7e6a9922c76dc8edf85791de67675c65a854d8711c0eb995be18a43"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000cc0)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000d00)={0x40, 0xa0, 0x4, 0x10f}, &(0x7f0000000d40)={0xc0, 0xa2, 0x2f, "fc93bfdb379d823d56ddcd51fce3f00ef30fddaf084eabf68f55b85a1f7251f7ed1e8136d609049c5f72f04bc5daab"}}) r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5016, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x140, 0x6, [{{0x9, 0x4, 0x0, 0xa8, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0x6c4}}, {{{0x9, 0x5, 0x81, 0x3, 0x3bf, 0x6, 0x5, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x6, 0x7, 0x6}}]}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x200, 0xa7, 0x7, 0x5, 0x40, 0xc}, 0x36, &(0x7f0000000e40)={0x5, 0xf, 0x36, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x8, 0xa, 0x2, 0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0xf, 0x4, 0x3, 0x81}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0x5, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0x9, 0x5, 0x4, 0x92}]}, 0x4, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x42c}}, {0x7d, &(0x7f0000000f40)=@string={0x7d, 0x3, "1efdd91c72286d862a86b629a65b0ec1e075dfb9455172534fd2787f73d090bc914a2d2f50544a4e168c3d3c63b799fc6f8247ce517758526bd67232378bd5366f4bd42d49a55fcb421e3dedbb1f8bfbb3ca070592d100073cc0187528915ad9fc4560caf858f5d7dc2cedcc9adf2fb2d470f79c1a511da374afa2"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001140)={0x14, &(0x7f0000001000)={0x0, 0x8, 0x6c, {0x6c, 0x1, "21ac173ddb83265dccaeb2932b4c63dbb6340c580064a2cc354b2637cc31271ad378df0c018dafc8895f20b043b850a1a3349fc8bb0432aeac6b991e2a523d7cc46c832e011db172cf8406e1ad97fc8698ecb9525ca1e5489d3548ecd5358538c33d742bb7e2eba73ed5"}}, &(0x7f0000001080)={0x0, 0x3, 0x13, @string={0x13, 0x3, "631a80adc68ec5ef9aec1fa615f83b5b05"}}, &(0x7f00000010c0)={0x0, 0x22, 0x15, {[@local=@item_012={0x0, 0x2, 0x6}, @main=@item_012={0x2, 0x0, 0xb, 'xr'}, @local=@item_012={0x2, 0x2, 0x8, "eb6b"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x7, "1ee4e060"}, @global=@item_4={0x3, 0x1, 0x9, "59ed3fd6"}, @global=@item_012={0x2, 0x1, 0x6, "ae3f"}]}}, &(0x7f0000001100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xcc5}}}}, &(0x7f0000001340)={0x18, &(0x7f0000001180)={0x20, 0x5, 0x1, "e9"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001240)={0x20, 0x1, 0x9b, "20626422f7c0399c4d62bc5cb8c1744627240a1ebbad1c2c29d55e8b173f6c1c69f4a6f8f329df9f9cd8a3eef943cff1740699434d3ea7161971279c103463f45f1005ed8212acc489535e8a68e1244d0dbb2082e566ee1a1c828a5be3ab61f087dca88b9d85118384f9e9c98c1326e6fd40dd588891fe0c05bf63f195b4810b6bcbc9521b87458563250d9fea5321efa27582a404d6a1fc3f86d1"}, &(0x7f0000001300)={0x20, 0x3, 0x1, 0x9}}) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000001380)=0x51, 0x7, 0xd) syz_usb_ep_write(r2, 0x0, 0x73, &(0x7f00000013c0)="f01a8474f5003a11eeb8c01f6dbde100b1a642461ba260f1c8165cbe8cc4d6b8e1d3a628ae06ddf9f29264dffab7fc8543af8a00962fd9e0cadb80da84c4f383802ea74034aef5bbd95d7027bfc70617282b46ded42344bd84af5bd0770964755fcb8325e0f5797ecc8a785ff1e0e94292aa0d") r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000001440)={0x1, 0x8}, 0x8) r4 = syz_usb_connect$cdc_ecm(0x4, 0x63, &(0x7f0000001480)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x81, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xfa, {{0xb, 0x24, 0x6, 0x0, 0x0, "921d5803fdac"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0xfe, 0x80}, [@dmm={0x7, 0x24, 0x14, 0x2, 0xc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x53, 0xa, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2b, 0x8}}}}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x310, 0x7, 0x5, 0x2, 0xff, 0x73}, 0x5e, &(0x7f0000001540)={0x5, 0xf, 0x5e, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x9d, 0xf78f, 0x1, [0x0, 0xc0, 0xc0, 0xff0000]}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x2, 0x0, 0x401, [0xff000f, 0x0, 0xc0ff]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x8, 0x0, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x9, 0xff00, 0x5, [0x90, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x8, 0x7, 0x2}]}, 0x6, [{0xa2, &(0x7f00000015c0)=@string={0xa2, 0x3, "e3637e10fc7ca45ca25830a56eb8ff4de2ea0d2be723b4e4b69bb52d9481beac23ea537d1b41a1d808391806850ef6ecbd65396d24a18499d054298d1a291e0de7fc2805553daf13bbe224e04a57d16ab8fd830e1b774e8bad1d2c2cda15ee4ff1d7ffb1ed168f724bc319844fc9a016959eae485f6131a5c828e89d90cb12789be4101819857f43bffd25466ecebc925792940a86413a02e36b1d2233b3e486"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x100a}}, {0xf6, &(0x7f00000016c0)=@string={0xf6, 0x3, "4e49860649c7f90a331bebb0f8803fa804c5e82123fd06978b94e15225ad5e1ea61c877633fbfb029ca3db8a164ff4b0f8d2ce766ef0cb7788be4e01642a441041fa84b59d7b380535a4ff06b9d1fedddae435efffcf318b8c616092c7798a1899185a336b369a72dc0e060ee4daaa6cbca46211fab9073ca1795eb5cde7bfc58ee218efb7174d49e61226ee1b25b50c3bc68abd53d0d095a2ddc95ba8f0dc7394327114f7978c8bbde6b6f1f1c19a877f502b3a55f3a0d483f3deada36f5d7b04f9cd17df112b9c91f94ec1613fcdd354c3e5cbb0866e2129e385f27756010962bf908ef672daf2ac7d746abc18a2a1993054ec"}}, {0x11, &(0x7f00000017c0)=@string={0x11, 0x3, "21f187a9b61ee126abd0d346007fdb"}}, {0xa5, &(0x7f0000001800)=@string={0xa5, 0x3, "21b30a711c385b807c0feb76c54d8a16fc87cfefa0b8930c29dfe7e500c1bde3f6fb7fbf7ce3fb2ed655dd5cc643529386aa9d72c4a406b2af1ca6117769eae114ee365ecba8d7e6ea210b6d71513662211ab33cdd96442fce0e1aed01ab95b764b44417a10b5024daca1b376a26d2f915df02b424373666cfb6906427bf9ed3e2876d78cb25b5692a7f705739e63dc222c3c2a2b974d6fd57a703da411820c78e22ee"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x416}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000001a40)={0xc, &(0x7f0000001980)={0x0, 0x22, 0x66, {0x66, 0x30, "a2d58be2afda02618726f831318d4ed58c3515f00e159062394806ec5b48f3c19d44d45b9707277711265633f0dab9ac045ad61bb2d3b219d0d485c67a7babbefc61e377300cfef741ccff52d8aae9345071b28f7a4dbab026553536bcaa4a1c25801573"}}, &(0x7f0000001a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001c00)={0x10, &(0x7f0000001a80)={0x20, 0xe, 0xe5, "c910dad669763e3fbda12a69fc93e835ef5b4dd8d5c0ad80dee1c7396693a23702d086a300b3d1d4ad152ede30b21a16a08c3ce75aa25a5c41a27e6553cc14b278968de7dc121263bebd92c758d6c61ed30d015d0f65d3b3acf706add4bf8108ece50ea0370ccb7db9c6aa6a07a5b8758ddde6437cf4c1a07d9daac6fd27d88f66a378b38e07ac075ba31de7fce050cb56ff11dcc60d40ba20961a35b99d41de77044064a8e9204db4da4a20456622d61b2717fd30b6174684cd76189cc39232e6b224f2b0185385ba88a405d251399017bdd2a3c473b45753d5f1b4d09e5fd1e5d656ddb0"}, &(0x7f0000001b80)={0x0, 0xa, 0x1, 0x3c}, &(0x7f0000001bc0)={0x0, 0x8, 0x1, 0x2}}) syz_clone3(&(0x7f0000003fc0)={0x10000c80, &(0x7f0000003dc0), &(0x7f0000003e00), &(0x7f0000003e40)=0x0, {0x1f}, &(0x7f0000003e80)=""/146, 0x92, &(0x7f0000003f40)=""/11, &(0x7f0000003f80)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000041c0)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f00000042c0)=0xe4) getresgid(&(0x7f0000004300), &(0x7f0000004340)=0x0, &(0x7f0000004380)) r8 = geteuid() r9 = getegid() getresuid(&(0x7f0000004580), &(0x7f00000045c0), &(0x7f0000004600)=0x0) r11 = getegid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004640)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004680)={0x0, 0x0, 0x0}, &(0x7f00000046c0)=0xc) r14 = getuid() r15 = getegid() fstat(r0, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004780)='./file0\x00', &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000004840)=[0xee01]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001c40)="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", 0x2000, &(0x7f0000006f40)={&(0x7f0000003c40)={0x50, 0x0, 0x5526, {0x7, 0x2b, 0x1, 0x10480, 0x9, 0x401, 0x5, 0x1, 0x0, 0x0, 0x1, 0x7}}, &(0x7f0000003cc0)={0x18, 0x0, 0x0, {0x2}}, &(0x7f0000003d00)={0x18, 0xffffffffffffffda, 0x8, {0x8de}}, &(0x7f0000003d40)={0x18, 0xfffffffffffffffe, 0x7fffffff, {0xfffffbf4}}, &(0x7f0000003d80)={0x18, 0x0, 0x5776, {0xd5}}, &(0x7f0000004040)={0x28, 0xfffffffffffffff5, 0x3, {{0x9, 0xff, 0x1, r5}}}, &(0x7f0000004080)={0x60, 0x0, 0x9, {{0x4, 0xff, 0x7f, 0x20, 0x74, 0x2, 0x76071886, 0x9}}}, &(0x7f0000004100)={0x18, 0x0, 0x4, {0x7f}}, &(0x7f0000004140)={0x14, 0x0, 0x10, {'++,\x00'}}, &(0x7f0000004180)={0x20, 0x0, 0x5, {0x0, 0x1c}}, &(0x7f00000043c0)={0x78, 0xfffffffffffffff5, 0x0, {0xd, 0x81, 0x0, {0x6, 0x0, 0x5, 0x8, 0xf6, 0x2, 0x8000, 0x9, 0x8, 0x1000, 0xc, r6, r7, 0x8, 0x4}}}, &(0x7f0000004440)={0x90, 0x0, 0xfff, {0x6, 0x3, 0x62ff, 0x8, 0xfffffff9, 0x5, {0x4, 0x600, 0x9, 0x5, 0x7fffffff, 0x800, 0x5, 0x3, 0x9, 0x6000, 0x3, r8, r9, 0x47f6, 0x40ed}}}, &(0x7f0000004500)={0x70, 0xfffffffffffffffe, 0x4, [{0x0, 0xbd, 0x3, 0xc2, '(\\['}, {0x5, 0x9, 0x10, 0x8, '\x87^/*\xf4&^,[@),-{{.'}, {0x3, 0xd, 0x0, 0x1498}]}, &(0x7f00000068c0)={0x3d8, 0x0, 0x8, [{{0x1, 0x1, 0xa, 0x6, 0x4ec, 0x2, {0x1, 0xd2, 0xb0, 0x80000000, 0x80000000, 0x1cf, 0x6, 0x8, 0xffffff07, 0xc000, 0x1, r10, r11, 0x3887, 0x1}}, {0x3, 0xfbe, 0x5, 0x464f, ')&+)]'}}, {{0x1, 0x1, 0x1efe, 0x779, 0xe024, 0x10d, {0x0, 0xc, 0x3, 0x2, 0x0, 0x5, 0x6, 0x3, 0x7, 0x4000, 0x3, r12, r13, 0xfffffff7, 0xffffffff}}, {0x5, 0x3e7c, 0x0, 0x1}}, {{0x4, 0x0, 0x5, 0x6, 0x9, 0x1, {0x6, 0x9, 0x2, 0x100, 0x5, 0x100, 0x8, 0x100, 0x2, 0x1000, 0x6, r14, r15, 0x3118688f, 0x40}}, {0x0, 0x4, 0x9, 0x1, '^#\\**.\\\x9d^'}}, {{0x1, 0x2, 0x80000000, 0x7, 0xfffffffd, 0x7, {0x2, 0x2, 0x9, 0x0, 0x0, 0x2, 0x5b54, 0x7, 0x0, 0x4000, 0x7ff, r16, r17, 0x7, 0xfffffff5}}, {0x0, 0xa1, 0x1, 0x10000, ':'}}, {{0x4, 0x1, 0x200, 0x101, 0xa, 0x6, {0x4, 0x5, 0xc1be, 0x9, 0x9, 0x7, 0x4, 0x80000, 0x8001, 0x1000, 0x7fffffff, 0xee01, r18, 0x0, 0x951}}, {0x2, 0xfff, 0x1, 0x3, '.'}}, {{0x6, 0x0, 0x2, 0x5, 0xda7, 0x4, {0x3, 0xb649, 0x7, 0x7, 0x2466, 0x4, 0x1, 0x8, 0x947, 0x8000, 0x6, 0x0, 0x0, 0x2, 0xb26f}}, {0x1, 0x0, 0xb, 0x8, '}]^}}.^&(}\x93'}}]}, &(0x7f0000006d00)={0xa0, 0xfffffffffffffffe, 0x8, {{0x6, 0x1, 0x1, 0x8, 0x8, 0x9, {0x2, 0x9, 0x6, 0x7, 0x0, 0x4, 0xfffffffd, 0x4, 0x6fff, 0x6000, 0xa, 0x0, 0xffffffffffffffff, 0x1, 0x4}}, {0x0, 0x7}}}, &(0x7f0000006dc0)={0x20, 0xfffffffffffffffe, 0x1, {0x800, 0x4, 0x7, 0xffffffff}}, &(0x7f0000006e00)={0x130, 0x0, 0x801f, {0x0, 0xfffffff8, 0x0, '\x00', {0x8, 0x699, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xee01, 0x2000, '\x00', 0x0, 0xf, 0x7, 0x2, {0x2d, 0xffffffff}, {0x3e, 0x4}, {0x7, 0xf7}, {0x6, 0x1c2f}, 0xfffffff9, 0x76c53215, 0x0, 0xffff0000}}}}) 3.827846121s ago: executing program 1 (id=1746): syz_emit_ethernet(0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c0000000000019078ac1e0001ffffff00907800000000"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) 2.760938951s ago: executing program 4 (id=1747): alarm(0x1000000001) alarm(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd1a}, 0x48) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060102000000000000000000000000050001000700000009000200001400078005001500800000000800124001000000050004000000000012000300686173683a6e65742c706f7274000000050005000a000000"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r2, 0x14, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x3c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000108004d000048006500000f06907864010101ac7f0000017f000001ac1414aaac1414aa0a0101020000004e2200"/70, @ANYRESDEC=r5, @ANYRESHEX=r6, @ANYRESDEC], 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r8, &(0x7f0000000140)="a9c72f", 0x3, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmmsg$unix(r7, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file3\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 2.760623958s ago: executing program 1 (id=1748): openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000000c0)={0x0, 0xe7, {0x1, 0x1, 0x101c, 0x9, 0x0, 0x0, 0x5, 0x3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/hardlockup_count', 0x0, 0x178) rename(0x0, &(0x7f0000002140)='./file0\x00') r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0x3cfa, 0x0, 0x2, 0x3b5, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x1f, &(0x7f0000000100), 0x120) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.882142219s ago: executing program 4 (id=1749): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000400)={0xa0, 0x19, 0x2, {0x1000, {0x0, 0x0, 0x7}, 0x60, 0x0, r4, 0x3, 0x6, 0x0, 0x400, 0x8001, 0x6e, 0x6, 0xfdd, 0x9, 0x2, 0x8, 0x100000000, 0x8, 0x1ff, 0x1500}}, 0xa0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f00000001c0)={0x2, [0x0, 0x0]}) r5 = dup(r3) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r6, 0x200004) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r10, 0x4068aea3, 0x0) ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, &(0x7f0000000140)={0x8080000, 0x4, 0x44, 0x1, 0x80000003}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r5, r6, 0x0, 0x80001d00c0d1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000000), 0x83, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) 1.679393469s ago: executing program 1 (id=1750): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x23, &(0x7f0000000140)="c0b740d0f48b845a4795e13359a46dc4ae1f3468ac77ccc9d27e97ea3a06d94cd9162f") readv(r1, 0x0, 0x0) 1.383961801s ago: executing program 0 (id=1751): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) 1.268905853s ago: executing program 3 (id=1752): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540), 0x23) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x1b52, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x21, 0xa, 0x101, 0x0, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40804) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xd528}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "4a620761efe46bde"}, 0x10}}, 0x1) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex=r2, @empty}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0xfc, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 1.215662387s ago: executing program 2 (id=1753): r0 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddf9, 0x2, 0xfffffffe, 0x183}) io_setup(0x1, &(0x7f00000004c0)=0x0) close_range(r0, r0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0x22, 0x2, 0x21) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x20}]) 848.198504ms ago: executing program 0 (id=1754): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42800) r4 = fanotify_init(0x200, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r5, 0x0) syz_io_uring_setup(0x580e, &(0x7f0000000fc0)={0x0, 0x2271, 0x300, 0x3, 0x287}, &(0x7f0000001040), &(0x7f0000001080)) fanotify_mark(r4, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) unshare(0x68040200) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) 674.696191ms ago: executing program 2 (id=1755): socket(0x10, 0x80002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) r5 = dup(r4) (async) syz_open_dev$media(0x0, 0x66, 0x4800) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=':\a\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x11, &(0x7f00000002c0)={0x39, 0x5, 0x5}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xe8, 0xa2, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) (async) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) 133.14171ms ago: executing program 3 (id=1756): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x50, 0x28, 0xd27, 0x1004001, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0xffff}, {0xf}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x579, 0x7, 0x8}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8810}, 0x4000090) (fail_nth: 6) 0s ago: executing program 2 (id=1757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x0, 0x200000003, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in6=@mcast2, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000}, {}, 0x70bd27, 0x0, 0x2, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x0) kernel console output (not intermixed with test programs): 20746][T10403] Call Trace: [ 486.920755][T10403] [ 486.920763][T10403] dump_stack_lvl+0x189/0x250 [ 486.920790][T10403] ? __pfx____ratelimit+0x10/0x10 [ 486.920816][T10403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.920831][T10403] ? __pfx__printk+0x10/0x10 [ 486.920848][T10403] ? __pfx___might_resched+0x10/0x10 [ 486.920858][T10403] ? fs_reclaim_acquire+0x7d/0x100 [ 486.920884][T10403] should_fail_ex+0x414/0x560 [ 486.920914][T10403] should_failslab+0xa8/0x100 [ 486.920942][T10403] __kmalloc_noprof+0xcb/0x4f0 [ 486.920965][T10403] ? tomoyo_encode+0x28b/0x550 [ 486.920984][T10403] tomoyo_encode+0x28b/0x550 [ 486.920998][T10403] tomoyo_realpath_from_path+0x58d/0x5d0 [ 486.921011][T10403] ? tomoyo_domain+0xd9/0x130 [ 486.921026][T10403] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 486.921048][T10403] tomoyo_path_number_perm+0x1e8/0x5a0 [ 486.921076][T10403] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 486.921120][T10403] ? __lock_acquire+0xab9/0xd20 [ 486.921152][T10403] ? __fget_files+0x2a/0x420 [ 486.921171][T10403] ? __fget_files+0x3a0/0x420 [ 486.921185][T10403] ? __fget_files+0x2a/0x420 [ 486.921214][T10403] security_file_ioctl_compat+0xcb/0x2d0 [ 486.921241][T10403] __ia32_compat_sys_ioctl+0x128/0x840 [ 486.921267][T10403] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 486.921289][T10403] ? __fget_files+0x3a0/0x420 [ 486.921309][T10403] ? fput+0xa0/0xd0 [ 486.921321][T10403] ? ksys_write+0x22a/0x250 [ 486.921341][T10403] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.921368][T10403] __do_fast_syscall_32+0xb6/0x2b0 [ 486.921408][T10403] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.921437][T10403] do_fast_syscall_32+0x34/0x80 [ 486.921456][T10403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.921473][T10403] RIP: 0023:0xf705e539 [ 486.921483][T10403] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 486.921493][T10403] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 486.921511][T10403] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008933 [ 486.921524][T10403] RDX: 0000000080004400 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.921536][T10403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.921546][T10403] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 486.921557][T10403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.921586][T10403] [ 486.921611][T10403] ERROR: Out of memory at tomoyo_realpath_from_path. [ 487.483246][ T10] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 487.580530][ T7012] usbhid 2-1:0.0: can't add hid device: -71 [ 487.604980][ T7012] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 487.634494][ T7012] usb 2-1: USB disconnect, device number 60 [ 487.893514][ T10] usb 1-1: device descriptor read/64, error -71 [ 488.243312][ T10] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 488.463400][ T10] usb 1-1: device descriptor read/64, error -71 [ 488.575742][ T10] usb usb1-port1: attempt power cycle [ 488.973507][ T10] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 489.018853][ T10] usb 1-1: device descriptor read/8, error -71 [ 489.443343][ T919] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 489.453444][ T10] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 489.536543][ T10] usb 1-1: device descriptor read/8, error -71 [ 489.607451][ T919] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 489.618899][ T919] usb 4-1: config 0 has no interface number 0 [ 489.636600][ T919] usb 4-1: New USB device found, idVendor=12d6, idProduct=0467, bcdDevice=29.3d [ 489.656357][ T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.673832][ T10] usb usb1-port1: unable to enumerate USB device [ 489.684570][ T919] usb 4-1: Product: syz [ 489.697803][ T919] usb 4-1: Manufacturer: syz [ 489.722594][ T919] usb 4-1: SerialNumber: syz [ 489.794321][ T919] usb 4-1: config 0 descriptor?? [ 490.152498][ T919] usb 4-1: USB disconnect, device number 88 [ 490.654084][T10440] tipc: Cannot configure node identity twice [ 491.153542][ T5991] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 491.660755][ T5991] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 491.670023][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.763238][ T5991] usb 4-1: config 0 descriptor?? [ 491.809395][ T5991] cp210x 4-1:0.0: cp210x converter detected [ 491.988077][T10449] netlink: 'syz.0.1272': attribute type 7 has an invalid length. [ 491.996440][T10449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1272'. [ 492.263078][ T5991] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 492.283293][ T5991] cp210x 4-1:0.0: querying part number failed [ 492.361764][ T5991] usb 4-1: cp210x converter now attached to ttyUSB0 [ 492.468910][ T5991] usb 4-1: USB disconnect, device number 89 [ 492.519613][ T5991] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 492.584010][ T5991] cp210x 4-1:0.0: device disconnected [ 492.695355][T10460] input: syz0 as /devices/virtual/input/input26 [ 493.028474][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 493.255054][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.302332][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 493.348501][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.444218][ T10] usb 2-1: config 0 descriptor?? [ 493.473360][ T7012] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 493.613430][ T919] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 493.636221][ T7012] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 493.660554][ T7012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.674441][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 493.683308][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 493.702550][ T7012] usb 4-1: config 0 descriptor?? [ 493.714715][ T7012] cp210x 4-1:0.0: cp210x converter detected [ 493.743558][ T10] usb 2-1: USB disconnect, device number 61 [ 493.766663][ T919] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 493.783956][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.822818][ T919] usb 1-1: config 0 descriptor?? [ 493.842358][ T919] cp210x 1-1:0.0: cp210x converter detected [ 493.954341][ T7012] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 493.975593][ T7012] cp210x 4-1:0.0: querying part number failed [ 494.004145][ T7012] usb 4-1: cp210x converter now attached to ttyUSB0 [ 494.031117][ T7012] usb 4-1: USB disconnect, device number 90 [ 494.056377][ T5871] udevd[5871]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 494.057433][ T7012] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 494.079138][ T5871] udevd[5871]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 494.102471][ T7012] cp210x 4-1:0.0: device disconnected [ 494.143357][ T919] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 494.178225][ T919] cp210x 1-1:0.0: querying part number failed [ 494.203821][ T919] usb 1-1: cp210x converter now attached to ttyUSB0 [ 494.213505][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 494.226214][ T919] usb 1-1: USB disconnect, device number 81 [ 494.252481][ T919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 494.267035][ T919] cp210x 1-1:0.0: device disconnected [ 494.373397][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 494.385474][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.463359][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40 [ 494.481484][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.552305][ T10] usb 2-1: config 0 descriptor?? [ 495.124090][T10487] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1285'. [ 495.433313][ T919] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 495.441176][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'. [ 495.536608][T10499] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 495.644051][ T919] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 495.661075][ T919] usb 4-1: config 0 has no interface number 0 [ 495.677650][ T919] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 495.691957][ T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.711132][ T919] usb 4-1: Product: syz [ 495.720668][ T919] usb 4-1: Manufacturer: syz [ 495.726106][ T919] usb 4-1: SerialNumber: syz [ 495.740581][ T919] usb 4-1: config 0 descriptor?? [ 495.964564][ T919] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 495.978878][ T919] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 495.990662][ T919] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 495.999389][ T919] usb 4-1: media controller created [ 496.058192][ T919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.191351][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 496.202311][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 496.250438][ T10] usb 2-1: USB disconnect, device number 62 [ 496.913631][ T919] usb 4-1: USB disconnect, device number 91 [ 497.383510][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 497.545724][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 497.563342][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.632468][ T10] usb 3-1: config 0 descriptor?? [ 497.650933][ T10] cp210x 3-1:0.0: cp210x converter detected [ 498.016662][ T10] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 498.068124][ T10] cp210x 3-1:0.0: querying part number failed [ 498.145719][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 498.239907][ T10] usb 3-1: USB disconnect, device number 65 [ 498.297469][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 498.337810][ T10] cp210x 3-1:0.0: device disconnected [ 498.425168][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 498.863373][ T5991] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 499.028776][ T5991] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 499.060737][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.102016][ T5991] usb 4-1: config 0 descriptor?? [ 499.135550][ T5991] cp210x 4-1:0.0: cp210x converter detected [ 499.375000][ T5991] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 499.382727][ T5991] cp210x 4-1:0.0: querying part number failed [ 499.436697][ T5991] usb 4-1: cp210x converter now attached to ttyUSB0 [ 499.456456][ T5991] usb 4-1: USB disconnect, device number 92 [ 499.467568][ T5991] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 499.479258][ T5991] cp210x 4-1:0.0: device disconnected [ 499.713859][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 499.879460][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 499.892148][ T10] usb 1-1: config 0 has no interface number 0 [ 499.906930][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 499.916844][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.932851][ T10] usb 1-1: Product: syz [ 499.937559][ T10] usb 1-1: Manufacturer: syz [ 499.942263][ T10] usb 1-1: SerialNumber: syz [ 499.959521][ T10] usb 1-1: config 0 descriptor?? [ 500.311534][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 500.356735][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 500.367666][T10577] input: syz0 as /devices/virtual/input/input27 [ 500.401761][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 500.444985][ T10] usb 1-1: media controller created [ 500.621925][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.103378][ T5956] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 501.207272][ T10] usb 1-1: USB disconnect, device number 82 [ 501.348456][ T5956] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 501.383491][ T5956] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 501.404741][ T5956] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 501.433430][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.469723][T10579] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 501.524881][ T5956] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 501.633394][ T5991] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 501.797964][ T5956] usb 2-1: USB disconnect, device number 63 [ 501.830026][ T5991] usb 3-1: Using ep0 maxpacket: 16 [ 501.840651][ T9] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 501.858497][ T5991] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 501.867657][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.883790][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.912456][ T9] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 501.937502][ T9] usb 5-1: USB disconnect, device number 50 [ 501.969222][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 502.009431][T10590] veth0_to_bond: entered allmulticast mode [ 502.031665][ T5991] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 502.061265][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.094472][ T5991] usb 3-1: Product: syz [ 502.113749][ T5991] usb 3-1: Manufacturer: syz [ 502.127403][ T5991] usb 3-1: SerialNumber: syz [ 502.146938][ T5991] usb 3-1: config 0 descriptor?? [ 502.174128][ T5991] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 502.191097][ T5991] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 502.233338][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 502.334513][T10597] netlink: 'syz.0.1322': attribute type 7 has an invalid length. [ 502.342820][T10597] netlink: 'syz.0.1322': attribute type 5 has an invalid length. [ 502.351107][T10597] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1322'. [ 502.370338][T10598] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1321'. [ 502.374833][T10584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.386805][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.428369][T10584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.429021][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 502.494683][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.537991][ T10] usb 4-1: config 0 descriptor?? [ 502.540725][T10584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.598643][T10584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.796092][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 502.802368][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 502.844850][ T10] usb 4-1: USB disconnect, device number 93 [ 503.147950][T10606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.157464][T10606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.623590][ T5991] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 503.630902][ T5991] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 503.645263][ T5991] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 503.654230][ T5991] em28xx 3-1:0.0: No AC97 audio processor [ 503.657086][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 503.683551][ T5991] usb 3-1: USB disconnect, device number 66 [ 503.715262][ T5991] em28xx 3-1:0.0: Disconnecting em28xx [ 503.723897][ T5991] em28xx 3-1:0.0: Freeing device [ 503.883372][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 503.900746][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.929125][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 503.938445][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.989403][ T10] usb 4-1: config 0 descriptor?? [ 504.006432][ T10] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 504.217499][ T10] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 504.409981][ T5956] usb 4-1: USB disconnect, device number 94 [ 504.454484][ T5956] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 504.633347][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 505.234897][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 505.255572][ T10] usb 3-1: config 0 has no interface number 0 [ 505.307789][ T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 505.336899][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.361273][ T10] usb 3-1: Product: syz [ 505.377881][ T10] usb 3-1: Manufacturer: syz [ 505.391776][ T10] usb 3-1: SerialNumber: syz [ 505.444575][ T10] usb 3-1: config 0 descriptor?? [ 505.452983][T10623] veth0_to_bond: entered allmulticast mode [ 505.683592][ T10] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 505.728316][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 505.763522][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 505.780192][ T10] usb 3-1: media controller created [ 505.819315][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.118390][ T10] usb 3-1: USB disconnect, device number 67 [ 506.243324][ T5991] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 506.420639][ T5991] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 506.449908][ T5991] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 506.623472][ T5991] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 506.719481][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.763760][T10638] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 506.784844][ T5991] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 507.013796][T10653] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.1337'. [ 507.592506][ T5991] usb 2-1: USB disconnect, device number 64 [ 508.993241][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 509.255632][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.274521][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 509.446489][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.489965][ T10] usb 3-1: config 0 descriptor?? [ 509.989616][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 510.070643][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 510.563534][ T10] usb 3-1: USB disconnect, device number 68 [ 510.846776][T10691] kvm: user requested TSC rate below hardware speed [ 510.855093][T10691] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2205475325 (8821901300 ns) > initial count (6564024732 ns). Using initial count to start timer. [ 510.963464][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 510.973271][ T5991] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 511.214763][ T5991] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.223026][ T5991] usb 5-1: config 0 has no interface number 0 [ 511.223218][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 511.236154][ T5991] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 511.293362][ T5954] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 511.303266][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.313922][ T5991] usb 5-1: Product: syz [ 511.320020][ T5991] usb 5-1: Manufacturer: syz [ 511.324918][ T5991] usb 5-1: SerialNumber: syz [ 511.327066][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.367981][ T5991] usb 5-1: config 0 descriptor?? [ 511.397559][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 511.416496][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.463294][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 511.472317][ T5954] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.486174][ T5954] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.487452][ T10] usb 3-1: config 0 descriptor?? [ 511.504866][ T10] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 511.525765][ T10] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 511.538626][ T5954] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 511.558666][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.581287][ T5954] usb 4-1: Product: syz [ 511.592307][ T5954] usb 4-1: Manufacturer: syz [ 511.615589][ T5954] usb 4-1: SerialNumber: syz [ 511.754198][ T5953] usb 3-1: USB disconnect, device number 69 [ 511.768167][ T5953] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 511.806498][ T5991] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 512.064593][ T5991] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 512.104748][ T5991] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 512.113953][ T5991] usb 5-1: media controller created [ 512.191972][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.423526][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 512.463504][ T5956] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 512.469377][ T5991] usb 5-1: USB disconnect, device number 51 [ 512.613330][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.677258][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 512.702734][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.713052][ T5956] usb 3-1: config 5 has an invalid interface number: 159 but max is 1 [ 512.728751][ T5956] usb 3-1: config 5 has no interface number 1 [ 512.736836][ T10] usb 2-1: config 0 descriptor?? [ 512.743312][ T5956] usb 3-1: config 5 interface 159 has no altsetting 0 [ 512.763285][ T5956] usb 3-1: New USB device found, idVendor=0582, idProduct=0004, bcdDevice=6b.64 [ 512.772679][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.785738][ T5956] usb 3-1: Product: syz [ 512.789974][ T5956] usb 3-1: Manufacturer: syz [ 512.801261][ T5956] usb 3-1: SerialNumber: syz [ 512.964245][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 512.970297][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 513.042015][ T5954] usb 4-1: 0:2 : does not exist [ 513.069610][ T10] usb 2-1: USB disconnect, device number 65 [ 513.092983][ T5954] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 513.265864][ T5954] usb 4-1: USB disconnect, device number 95 [ 513.572450][ T5956] usb 3-1: USB disconnect, device number 70 [ 513.619045][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.666047][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 513.898501][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 513.938262][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.018637][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 514.063328][ T5954] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 514.096295][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.142408][ T10] usb 2-1: config 0 descriptor?? [ 514.185756][ T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 514.289648][ T5954] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 514.307835][ T5954] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 514.328099][ T5954] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 514.356794][ T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 514.357714][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.478505][T10737] netlink: 'syz.2.1357': attribute type 10 has an invalid length. [ 514.513277][T10737] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 514.560310][T10717] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 514.586865][ T5954] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.607973][ T9] usb 2-1: USB disconnect, device number 66 [ 514.635475][ T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 515.838248][ T5954] usb 4-1: USB disconnect, device number 96 [ 516.683261][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 517.320353][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 517.334190][ T9] usb 2-1: config 0 has no interface number 0 [ 517.404086][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 517.473347][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.491595][ T9] usb 2-1: Product: syz [ 517.584896][ T9] usb 2-1: Manufacturer: syz [ 517.589554][ T9] usb 2-1: SerialNumber: syz [ 517.765042][ T9] usb 2-1: config 0 descriptor?? [ 517.937705][T10755] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 517.983275][ T9] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 518.006372][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 518.017785][T10757] bond2: entered allmulticast mode [ 518.023878][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 518.032151][ T9] usb 2-1: media controller created [ 518.063330][ T5956] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 518.094540][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 518.215721][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.243254][ T5956] usb 3-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 518.277435][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.330685][ T5956] usb 3-1: config 0 descriptor?? [ 518.542504][ T9] usb 2-1: USB disconnect, device number 67 [ 518.878346][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1369'. [ 518.956498][ T5956] ortek 0003:05A4:8003.0007: unknown main item tag 0x0 [ 518.980672][ T5956] ortek 0003:05A4:8003.0007: unknown main item tag 0x0 [ 519.010573][ T5956] ortek 0003:05A4:8003.0007: unknown main item tag 0x0 [ 519.039863][ T5956] ortek 0003:05A4:8003.0007: unknown main item tag 0x0 [ 519.208361][T10755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.227019][T10755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.440127][ T5956] ortek 0003:05A4:8003.0007: unknown main item tag 0x0 [ 519.519857][ T5956] ortek 0003:05A4:8003.0007: hidraw0: USB HID v0.00 Device [HID 05a4:8003] on usb-dummy_hcd.2-1/input0 [ 520.799907][ T7012] usb 3-1: USB disconnect, device number 71 [ 521.149556][T10805] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1381'. [ 522.123342][ T7012] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 522.495830][ T7012] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 522.543396][ T7012] usb 4-1: config 0 has no interface number 0 [ 522.573356][ T5954] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 522.587276][ T7012] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 522.621232][ T7012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.659856][ T7012] usb 4-1: Product: syz [ 522.671806][ T7012] usb 4-1: Manufacturer: syz [ 522.680782][ T7012] usb 4-1: SerialNumber: syz [ 522.716118][ T7012] usb 4-1: config 0 descriptor?? [ 522.825308][ T5954] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 522.858149][ T5954] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 522.868558][ T5954] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 522.895601][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.940862][T10817] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 522.963971][ T7012] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 522.991145][ T5954] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 523.033177][ T7012] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 523.089931][ T7012] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 523.158705][ T7012] usb 4-1: media controller created [ 523.187555][ T7012] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.357335][ T5954] usb 5-1: USB disconnect, device number 52 [ 523.664426][ T7012] usb 4-1: USB disconnect, device number 97 [ 524.165798][T10832] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 524.461011][T10833] bond1: entered allmulticast mode [ 524.553784][ T7012] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 524.747187][ T7012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.790357][ T7012] usb 1-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 524.874400][ T7012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.941424][ T7012] usb 1-1: config 0 descriptor?? [ 525.823268][ T7012] ortek 0003:05A4:8003.0008: unknown main item tag 0x0 [ 525.887645][T10832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.923280][ T5954] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 526.077989][T10832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.095049][ T7012] ortek 0003:05A4:8003.0008: unknown main item tag 0x0 [ 526.103793][ T7012] ortek 0003:05A4:8003.0008: unknown main item tag 0x0 [ 526.112872][ T7012] ortek 0003:05A4:8003.0008: unknown main item tag 0x0 [ 526.134757][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.158570][ T5954] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 526.169005][ T7012] ortek 0003:05A4:8003.0008: unknown main item tag 0x0 [ 526.229789][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.236563][ T7012] ortek 0003:05A4:8003.0008: hidraw0: USB HID v0.00 Device [HID 05a4:8003] on usb-dummy_hcd.0-1/input0 [ 526.325943][ T5954] usb 2-1: config 0 descriptor?? [ 526.578487][ T5954] usbhid 2-1:0.0: can't add hid device: -71 [ 526.606402][ T5954] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 526.648717][ T5954] usb 2-1: USB disconnect, device number 68 [ 527.323490][ T5954] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 527.400866][ T5991] usb 1-1: USB disconnect, device number 83 [ 527.504054][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 527.625681][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.697565][ T5954] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 527.718657][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.049775][ T919] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 528.206682][ T5954] usb 2-1: config 0 descriptor?? [ 528.230786][ T5954] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 528.260164][ T5954] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 528.623263][ T919] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 528.667539][ T919] usb 3-1: config 0 has no interface number 0 [ 528.699963][ T919] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 528.752721][ T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.766866][ T919] usb 3-1: Product: syz [ 528.771920][ T919] usb 3-1: Manufacturer: syz [ 528.777067][ T919] usb 3-1: SerialNumber: syz [ 528.810130][ T919] usb 3-1: config 0 descriptor?? [ 529.041080][ T919] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 529.081622][ T919] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 529.121848][ T919] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 529.149696][ T919] usb 3-1: media controller created [ 529.242963][ T919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.549611][T10887] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1407'. [ 529.581299][ T919] usb 3-1: USB disconnect, device number 72 [ 529.774190][ T7012] usb 2-1: USB disconnect, device number 69 [ 529.786124][ T7012] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 530.098554][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 530.614512][T10908] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 530.711867][T10915] kvm: user requested TSC rate below hardware speed [ 530.743338][ T7012] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 531.019581][T10909] bond1: entered allmulticast mode [ 531.028898][ T5954] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 531.034970][ T7012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.047697][ T7012] usb 2-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 531.081048][ T7012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.131201][ T7012] usb 2-1: config 0 descriptor?? [ 531.270102][ T5954] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.285891][ T5954] usb 3-1: config 1 interface 0 has no altsetting 0 [ 531.885526][ T5954] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 531.902125][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.910883][ T5954] usb 3-1: Product: ⠖朎Ԓ皞刬䓒宊ோ춡氃〶馯ᆠ [ 531.923352][ T5954] usb 3-1: Manufacturer: В [ 531.927994][ T5954] usb 3-1: SerialNumber: Ї [ 531.960402][T10914] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 532.657484][T10914] fuse: Bad value for 'user_id' [ 532.673553][T10914] fuse: Bad value for 'user_id' [ 532.692656][ T7012] ortek 0003:05A4:8003.0009: unknown main item tag 0x0 [ 532.700107][ T7012] ortek 0003:05A4:8003.0009: unknown main item tag 0x0 [ 532.719814][ T7012] ortek 0003:05A4:8003.0009: unknown main item tag 0x0 [ 532.744015][ T7012] ortek 0003:05A4:8003.0009: unknown main item tag 0x0 [ 532.762353][ T7012] ortek 0003:05A4:8003.0009: unknown main item tag 0x0 [ 532.852081][ T7012] ortek 0003:05A4:8003.0009: hidraw0: USB HID v0.00 Device [HID 05a4:8003] on usb-dummy_hcd.1-1/input0 [ 532.869230][ T5954] usb 3-1: USB disconnect, device number 73 [ 533.039032][T10908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.088546][T10908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.387981][T10930] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1420'. [ 533.593305][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 533.775203][ T30] audit: type=1326 audit(1756087997.364:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 533.845403][ T30] audit: type=1326 audit(1756087997.364:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 533.872632][ T30] audit: type=1326 audit(1756087997.384:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 533.902856][T10943] kvm: user requested TSC rate below hardware speed [ 533.990934][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.004264][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 534.023289][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.051336][ T9] usb 3-1: config 0 descriptor?? [ 534.054515][ T30] audit: type=1326 audit(1756087997.384:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 534.120963][ T30] audit: type=1326 audit(1756087997.384:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 534.145424][ T30] audit: type=1326 audit(1756087997.384:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 534.225260][ T30] audit: type=1326 audit(1756087997.384:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 534.255106][ T30] audit: type=1326 audit(1756087997.384:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 534.281053][ T30] audit: type=1326 audit(1756087997.384:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 534.298816][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 534.309644][ T30] audit: type=1326 audit(1756087997.384:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 534.358692][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 534.538960][ T7012] usb 2-1: USB disconnect, device number 70 [ 534.558614][ T9] usb 3-1: USB disconnect, device number 74 [ 534.573395][ T5991] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 534.752784][ T5991] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 534.761154][ T5991] usb 5-1: config 0 has no interface number 0 [ 534.834481][ T5991] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 534.867818][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.046410][ T5991] usb 5-1: Product: syz [ 535.050640][ T5991] usb 5-1: Manufacturer: syz [ 535.085715][ T5991] usb 5-1: SerialNumber: syz [ 535.113751][ T5991] usb 5-1: config 0 descriptor?? [ 535.163244][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 535.333300][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 535.339455][ T5991] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 535.345501][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.369759][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 535.389790][ T5991] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 535.393187][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.426837][ T5991] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 535.448925][ T5991] usb 5-1: media controller created [ 535.462360][ T9] usb 3-1: config 0 descriptor?? [ 535.484849][ T9] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 535.529955][ T9] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 535.670698][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.035412][ T5991] usb 5-1: USB disconnect, device number 53 [ 536.106249][T10972] kvm: user requested TSC rate below hardware speed [ 536.231591][T10961] input: syz0 as /devices/virtual/input/input28 [ 537.216318][ T5954] usb 3-1: USB disconnect, device number 75 [ 537.228214][ T5954] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 537.409628][T10978] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1434'. [ 538.503248][T10994] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1439'. [ 538.638699][T10994] tipc: Started in network mode [ 538.664959][T10994] tipc: Node identity 22a8c1de2f3e, cluster identity 4711 [ 538.672583][T10994] tipc: Enabled bearer , priority 0 [ 538.686283][T10994] syzkaller0: entered promiscuous mode [ 538.691941][T10994] syzkaller0: entered allmulticast mode [ 538.727674][T10994] tipc: Resetting bearer [ 538.740268][T11005] input: syz1 as /devices/virtual/input/input29 [ 538.973403][ T7012] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 539.134939][ T7012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.157095][ T7012] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 539.183330][ T5954] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 539.197249][ T7012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.234160][ T7012] usb 3-1: config 0 descriptor?? [ 539.479267][ T7012] usbhid 3-1:0.0: can't add hid device: -71 [ 539.506640][ T7012] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 539.534540][ T7012] usb 3-1: USB disconnect, device number 76 [ 539.576022][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 539.602189][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 539.663414][ T5954] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 539.672674][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.717021][ T5954] usb 1-1: config 0 descriptor?? [ 539.725193][ T919] tipc: Node number set to 227983838 [ 539.742010][T11011] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 539.748574][T11011] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 539.757908][T10994] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 539.809201][T11010] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 539.815768][T11010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 539.863521][T11011] vhci_hcd vhci_hcd.0: Device attached [ 539.885099][T11010] vhci_hcd vhci_hcd.0: Device attached [ 539.915062][T11014] vhci_hcd: connection closed [ 539.917221][ T49] vhci_hcd: stop threads [ 539.923837][T11012] vhci_hcd: connection closed [ 539.950582][ T49] vhci_hcd: release socket [ 539.970576][ T49] vhci_hcd: disconnect device [ 539.985072][ T7012] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 540.007076][ T5954] usb 1-1: string descriptor 0 read error: -71 [ 540.017432][ T49] vhci_hcd: stop threads [ 540.021749][ T49] vhci_hcd: release socket [ 540.037570][T10993] tipc: Resetting bearer [ 540.044121][ T919] vhci_hcd: vhci_device speed not set [ 540.095336][ T5954] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30 [ 540.109808][ T49] vhci_hcd: disconnect device [ 540.137964][ T5219] bcm5974 1-1:0.0: could not read from device [ 540.149706][T10993] tipc: Disabling bearer [ 540.173405][ T919] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 540.183250][ T919] usb 39-1: enqueue for inactive port 0 [ 540.184751][ T5219] bcm5974 1-1:0.0: could not read from device [ 540.196957][ T7012] usb 3-1: Using ep0 maxpacket: 32 [ 540.234718][ T7012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.245619][ T5954] usb 1-1: USB disconnect, device number 84 [ 540.263344][ T919] vhci_hcd: vhci_device speed not set [ 540.272261][ T7012] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 540.290157][ T5868] bcm5974 1-1:0.0: could not read from device [ 540.296666][ T7012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.308687][ T7012] usb 3-1: config 0 descriptor?? [ 540.339290][ T5219] bcm5974 1-1:0.0: could not read from device [ 540.348902][ T7012] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 540.364616][T11023] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1448'. [ 540.385108][ T5868] udevd[5868]: Error opening device "/dev/input/event4": No such device [ 540.390041][ T7012] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 540.419481][ T5868] udevd[5868]: Unable to EVIOCGABS device "/dev/input/event4" [ 540.463367][ T5868] udevd[5868]: Unable to EVIOCGABS device "/dev/input/event4" [ 540.472712][ T5868] udevd[5868]: Unable to EVIOCGABS device "/dev/input/event4" [ 540.491185][ T5868] udevd[5868]: Unable to EVIOCGABS device "/dev/input/event4" [ 540.767821][ T7012] usb 3-1: USB disconnect, device number 77 [ 540.775452][ T7012] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 540.896398][T11035] input: syz0 as /devices/virtual/input/input31 [ 541.673384][ T919] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 541.847334][T11050] kvm: user requested TSC rate below hardware speed [ 541.888633][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.900359][ T919] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 541.925938][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.019582][ T919] usb 1-1: config 0 descriptor?? [ 542.220954][T11055] FAULT_INJECTION: forcing a failure. [ 542.220954][T11055] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 542.296294][T11055] CPU: 0 UID: 0 PID: 11055 Comm: syz.1.1455 Not tainted syzkaller #0 PREEMPT(full) [ 542.296324][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 542.296336][T11055] Call Trace: [ 542.296344][T11055] [ 542.296362][T11055] dump_stack_lvl+0x189/0x250 [ 542.296390][T11055] ? __pfx____ratelimit+0x10/0x10 [ 542.296425][T11055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.296447][T11055] ? __pfx__printk+0x10/0x10 [ 542.296474][T11055] ? fs_reclaim_acquire+0x7d/0x100 [ 542.296511][T11055] should_fail_ex+0x414/0x560 [ 542.296542][T11055] prepare_alloc_pages+0x213/0x610 [ 542.296571][T11055] __alloc_frozen_pages_noprof+0x123/0x370 [ 542.296595][T11055] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 542.296625][T11055] ? policy_nodemask+0x27c/0x720 [ 542.296656][T11055] alloc_pages_mpol+0x232/0x4a0 [ 542.296689][T11055] vma_alloc_folio_noprof+0xe4/0x200 [ 542.296719][T11055] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 542.296756][T11055] folio_prealloc+0x30/0x180 [ 542.296785][T11055] do_wp_page+0x1231/0x5800 [ 542.296834][T11055] ? __pfx_do_wp_page+0x10/0x10 [ 542.296853][T11055] ? do_raw_spin_lock+0x121/0x290 [ 542.296880][T11055] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 542.296914][T11055] __handle_mm_fault+0x1033/0x5440 [ 542.296957][T11055] ? __pfx___handle_mm_fault+0x10/0x10 [ 542.297005][T11055] ? find_vma+0xe7/0x160 [ 542.297028][T11055] ? __pfx_find_vma+0x10/0x10 [ 542.297053][T11055] handle_mm_fault+0x40a/0x8e0 [ 542.297090][T11055] do_user_addr_fault+0x764/0x1390 [ 542.297137][T11055] exc_page_fault+0x76/0xf0 [ 542.297166][T11055] asm_exc_page_fault+0x26/0x30 [ 542.297184][T11055] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 542.297205][T11055] Code: 09 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 542.297221][T11055] RSP: 0018:ffffc9001c6b7818 EFLAGS: 00050206 [ 542.297240][T11055] RAX: ffffffff84c59b01 RBX: ffff888033742000 RCX: 0000000000000500 [ 542.297255][T11055] RDX: 0000000000000000 RSI: ffff888033742b00 RDI: 0000000080006000 [ 542.297269][T11055] RBP: ffffc9001c6b79a0 R08: ffff888033742fff R09: 1ffff110066e85ff [ 542.297283][T11055] R10: dffffc0000000000 R11: ffffed10066e8600 R12: 1ffff920038d6fc7 [ 542.297297][T11055] R13: 0000000080005500 R14: ffffc9001c6b7e48 R15: 0000000000001000 [ 542.297325][T11055] ? _copy_to_iter+0x181/0x1790 [ 542.297359][T11055] _copy_to_iter+0x24f/0x1790 [ 542.297396][T11055] ? __pfx__copy_to_iter+0x10/0x10 [ 542.297413][T11055] ? __free_frozen_pages+0x691/0xd30 [ 542.297451][T11055] ? __folio_put+0x21b/0x2c0 [ 542.297468][T11055] ? splice_from_pipe_next+0x608/0x660 [ 542.297490][T11055] ? page_copy_sane+0x4e/0x280 [ 542.297512][T11055] copy_page_to_iter+0x10c/0x1c0 [ 542.297537][T11055] pipe_to_user+0xa8/0x140 [ 542.297567][T11055] __splice_from_pipe+0x34d/0x920 [ 542.297610][T11055] ? __pfx_pipe_to_user+0x10/0x10 [ 542.297641][T11055] __se_sys_vmsplice+0x316/0x10d0 [ 542.297667][T11055] ? get_pid_task+0x20/0x1f0 [ 542.297710][T11055] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 542.297757][T11055] ? ksys_write+0x1cb/0x250 [ 542.297785][T11055] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 542.297812][T11055] ? __pfx_vfs_write+0x10/0x10 [ 542.297840][T11055] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 542.297882][T11055] ? fput+0xa0/0xd0 [ 542.297902][T11055] ? ksys_write+0x22a/0x250 [ 542.297935][T11055] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.297964][T11055] __do_fast_syscall_32+0xb6/0x2b0 [ 542.297991][T11055] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.298020][T11055] do_fast_syscall_32+0x34/0x80 [ 542.298048][T11055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.298069][T11055] RIP: 0023:0xf7f45539 [ 542.298085][T11055] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 542.298109][T11055] RSP: 002b:00000000f544555c EFLAGS: 00000206 ORIG_RAX: 000000000000013c [ 542.298127][T11055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 542.298140][T11055] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.298151][T11055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.298162][T11055] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 542.298174][T11055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.298204][T11055] [ 543.412228][ T919] usbhid 1-1:0.0: can't add hid device: -71 [ 543.424619][ T919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 543.438537][ T919] usb 1-1: USB disconnect, device number 85 [ 543.783860][ T919] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 544.053497][ T919] usb 1-1: Using ep0 maxpacket: 32 [ 544.069276][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.493246][ T919] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 544.507830][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.516584][T11079] input: syz1 as /devices/virtual/input/input32 [ 544.533683][ T919] usb 1-1: config 0 descriptor?? [ 544.708016][ T919] usb 1-1: can't set config #0, error -71 [ 544.755481][ T919] usb 1-1: USB disconnect, device number 86 [ 545.157465][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1464'. [ 545.243614][T11093] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1465'. [ 546.783268][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 546.853662][ T5956] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 546.947970][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 546.959319][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 546.999909][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 547.015228][ T5956] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 547.023705][ T5956] usb 2-1: config 0 has no interface number 0 [ 547.050480][ T5956] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 547.073600][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.082427][ T5956] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 547.109156][T11113] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 547.125832][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.147637][ T5956] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 547.158548][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.167587][ T5956] usb 2-1: Product: syz [ 547.171984][ T5956] usb 2-1: Manufacturer: syz [ 547.180480][ T5956] usb 2-1: SerialNumber: syz [ 547.198544][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 547.210115][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 547.272548][ T5956] usb 2-1: config 0 descriptor?? [ 547.293895][T11101] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 547.407307][ T5956] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 547.426021][ T10] usb 5-1: USB disconnect, device number 54 [ 547.559180][ T5956] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 548.266122][T11101] fuse: Bad value for 'source' [ 548.348723][ T919] usb 2-1: USB disconnect, device number 71 [ 548.370046][ T919] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 548.489034][ T919] cyberjack 2-1:0.69: device disconnected [ 549.198340][T11136] kvm: user requested TSC rate below hardware speed [ 549.215999][T11136] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2205475325 (8821901300 ns) > initial count (6564024732 ns). Using initial count to start timer. [ 549.983379][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 550.361017][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 550.387760][ T10] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 550.396381][ T10] usb 4-1: config 0 has no interface number 0 [ 550.496373][ T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 550.505850][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.513967][ T10] usb 4-1: Product: syz [ 550.522942][ T10] usb 4-1: Manufacturer: syz [ 550.527745][ T10] usb 4-1: SerialNumber: syz [ 550.580364][ T10] usb 4-1: config 0 descriptor?? [ 551.065097][ T10] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 551.083367][ T10] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 551.091208][ T10] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 551.111075][ T10] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 551.221369][ T10] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -22 [ 551.543733][T11160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.595204][T11160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.619053][T11156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1482'. [ 552.996886][T11184] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1488'. [ 553.171675][T11181] input: syz0 as /devices/virtual/input/input34 [ 553.287393][T11184] tipc: Enabled bearer , priority 0 [ 553.296747][T11184] syzkaller0: entered promiscuous mode [ 553.312595][T11184] syzkaller0: entered allmulticast mode [ 553.631271][ T9] usb 4-1: USB disconnect, device number 98 [ 553.637316][ T10] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 553.716640][T11191] tipc: Resetting bearer [ 553.798692][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 553.831060][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 553.841294][ T5956] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 553.874588][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 553.941346][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.989872][T11190] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 554.016150][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 554.030401][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 554.050610][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 554.070363][ T5956] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 554.120649][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.142857][ T5956] usb 2-1: config 0 descriptor?? [ 554.161597][T11187] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 554.283348][ T9] tipc: Node number set to 442907321 [ 554.344296][ T10] usb 1-1: USB disconnect, device number 87 [ 554.416563][ T5956] usb 2-1: string descriptor 0 read error: -71 [ 554.472581][T11177] tipc: Resetting bearer [ 554.571697][ T5956] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 554.597044][T11177] tipc: Disabling bearer [ 554.633859][ T5219] bcm5974 2-1:0.0: could not read from device [ 554.680328][ T5956] usb 2-1: USB disconnect, device number 72 [ 554.827918][ T5881] udevd[5881]: Error opening device "/dev/input/event4": No such file or directory [ 554.868776][ T5881] udevd[5881]: Unable to EVIOCGABS device "/dev/input/event4" [ 554.921670][ T5881] udevd[5881]: Unable to EVIOCGABS device "/dev/input/event4" [ 554.984200][ T5881] udevd[5881]: Unable to EVIOCGABS device "/dev/input/event4" [ 555.026498][ T5881] udevd[5881]: Unable to EVIOCGABS device "/dev/input/event4" [ 555.339305][ T919] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 555.354402][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1490'. [ 555.539701][ T919] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 555.551045][ T919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.598667][ T919] usb 3-1: config 0 descriptor?? [ 555.607704][ T919] cp210x 3-1:0.0: cp210x converter detected [ 556.533559][ T919] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 557.463222][ T7012] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 557.612629][ T5925] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 557.788192][ T5925] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 557.812616][T11236] kvm: user requested TSC rate below hardware speed [ 557.835754][ T7012] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 557.866861][ T7012] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 557.896364][T11237] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2205475325 (8821901300 ns) > initial count (6564024732 ns). Using initial count to start timer. [ 557.899200][ T5925] usb 5-1: config 0 has no interface number 0 [ 557.956660][ T7012] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 557.973830][ T5925] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 557.986648][ T7012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.035931][T11227] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 558.048747][ T5925] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 558.065737][ T7012] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.403669][ T5925] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 558.437327][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.469497][ T5925] usb 5-1: Product: syz [ 558.499726][ T5925] usb 5-1: Manufacturer: syz [ 558.563407][ T919] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 558.563501][ T7012] usb 1-1: USB disconnect, device number 88 [ 558.573178][ T5925] usb 5-1: SerialNumber: syz [ 558.619878][ T919] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 558.631880][ T5925] usb 5-1: config 0 descriptor?? [ 558.643889][T11224] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 558.652301][ T5925] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 558.675111][ T919] usb 3-1: cp210x converter now attached to ttyUSB0 [ 558.721173][ T5925] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB1 [ 558.733562][ T919] usb 3-1: USB disconnect, device number 78 [ 558.781901][ T919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 558.791959][ T919] cp210x 3-1:0.0: device disconnected [ 559.314244][T11224] fuse: Bad value for 'source' [ 559.419497][ T5925] usb 5-1: USB disconnect, device number 55 [ 559.432637][ T5925] cyberjack ttyUSB1: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB1 [ 559.471426][ T5925] cyberjack 5-1:0.69: device disconnected [ 559.817566][ T919] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 559.845127][T11246] batadv_slave_1: entered promiscuous mode [ 559.984855][ T919] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 559.993664][ T919] usb 3-1: config 0 has no interface number 0 [ 560.002005][ T919] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 560.018903][ T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.063381][ T919] usb 3-1: Product: syz [ 560.696856][ T919] usb 3-1: Manufacturer: syz [ 560.823280][ T919] usb 3-1: SerialNumber: syz [ 560.959132][ T919] usb 3-1: config 0 descriptor?? [ 561.471152][ T919] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 561.678581][ T919] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 561.719437][ T919] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 561.763375][ T919] usb 3-1: media controller created [ 561.817409][ T919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 562.002097][ T919] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 562.154402][T11246] batadv_slave_1: left promiscuous mode [ 562.283598][ T919] usb 3-1: USB disconnect, device number 79 [ 562.791734][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'. [ 562.992297][T11280] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1508'. [ 563.405749][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.412346][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.926727][T11297] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 565.044255][ T7012] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 565.232079][T11308] input: syz0 as /devices/virtual/input/input37 [ 565.313830][ T7012] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 565.326551][ T7012] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 565.360442][ T7012] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 565.397989][ T7012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.470287][T11307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 565.516737][ T7012] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 565.653986][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 565.714661][ T7012] usb 2-1: USB disconnect, device number 73 [ 565.805718][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.191949][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 566.484922][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.560735][T11321] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1516'. [ 566.609887][ T10] usb 5-1: config 0 descriptor?? [ 566.741087][T11324] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1520'. [ 566.941661][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 566.950116][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 566.973487][ T919] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 566.986069][ T10] usb 5-1: USB disconnect, device number 56 [ 567.108370][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'. [ 567.136577][ T919] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 567.146161][ T919] usb 4-1: config 0 has no interface number 0 [ 567.158434][ T919] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 567.172403][ T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.190768][ T919] usb 4-1: Product: syz [ 567.216534][ T919] usb 4-1: Manufacturer: syz [ 567.226393][ T919] usb 4-1: SerialNumber: syz [ 567.242143][ T919] usb 4-1: config 0 descriptor?? [ 567.463543][ T919] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 567.473199][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 567.489239][ T919] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 567.662630][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 567.673709][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.697317][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 567.703489][ T919] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 567.826237][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.849285][ T10] usb 5-1: config 0 descriptor?? [ 567.860025][ T10] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 567.875984][T11343] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 568.002230][ T919] usb 4-1: media controller created [ 568.012943][ T10] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 568.340479][ T10] usb 5-1: USB disconnect, device number 57 [ 568.342609][ T919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 568.602604][ T10] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 568.787996][ T919] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 569.127914][ T919] usb 4-1: USB disconnect, device number 99 [ 569.422963][T11352] input: syz0 as /devices/virtual/input/input38 [ 571.763238][ T5925] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 571.947666][ T5925] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 571.959178][ T5925] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 571.980368][ T5925] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 572.009485][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.036877][T11381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 572.074697][ T5925] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 572.885703][ T5925] usb 3-1: USB disconnect, device number 80 [ 574.680837][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 574.809447][T11402] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1544'. [ 574.909063][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.920510][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 574.960087][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.001399][ T10] usb 2-1: config 0 descriptor?? [ 575.288822][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 575.301748][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 575.315147][ T10] usb 2-1: USB disconnect, device number 74 [ 575.332006][T11403] input: syz0 as /devices/virtual/input/input39 [ 575.394472][T11419] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 575.876265][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 576.095405][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 576.123543][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.143456][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 576.163680][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.182243][ T10] usb 2-1: config 0 descriptor?? [ 576.197948][ T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 576.274250][ T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 576.523913][T11427] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1549'. [ 576.993338][ T5991] usb 2-1: USB disconnect, device number 75 [ 577.008795][ T5991] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 577.459790][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1550'. [ 577.967404][T11442] netlink: 'syz.0.1552': attribute type 10 has an invalid length. [ 577.991456][T11442] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.002668][T11442] bond0: (slave team0): Enslaving as an active interface with an up link [ 578.313327][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 578.498080][ T5925] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 578.580417][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 578.616129][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 578.663186][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 578.728310][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.840815][T11462] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 578.874959][ T5925] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 578.883210][T11445] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 578.893152][ T5925] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 578.923190][ T5925] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 579.003308][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.319895][T11453] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 579.514695][ T5925] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 579.860834][T11472] input: syz0 as /devices/virtual/input/input40 [ 579.879274][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 579.886623][ T5925] usb 4-1: USB disconnect, device number 100 [ 580.664064][ T10] usb 2-1: USB disconnect, device number 76 [ 581.080659][T11476] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1563'. [ 582.323301][ T5991] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 582.637390][ T5991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.742275][T11496] input: syz0 as /devices/virtual/input/input41 [ 582.898283][ T5991] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 582.908274][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.919696][ T5991] usb 1-1: config 0 descriptor?? [ 583.140551][ T5991] usbhid 1-1:0.0: can't add hid device: -71 [ 583.148261][ T5991] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 583.186765][T11500] veth0_to_bond: entered allmulticast mode [ 583.199241][ T5991] usb 1-1: USB disconnect, device number 89 [ 583.576857][T11510] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 583.922197][ T5991] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 583.983229][ T5925] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 584.151946][ T5991] usb 1-1: Using ep0 maxpacket: 32 [ 584.171226][ T5991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.193165][ T5991] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 584.230183][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.248155][ T5925] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 584.472030][ T5925] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 584.504999][ T5925] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 584.552379][ T5991] usb 1-1: config 0 descriptor?? [ 584.937136][ T5991] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 584.972154][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.045660][ T5991] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 585.108050][T11511] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 585.140625][ T5925] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 585.164712][ T5991] usb 1-1: USB disconnect, device number 90 [ 585.254408][ T5991] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 585.438069][ T5925] usb 4-1: USB disconnect, device number 101 [ 585.674788][T11520] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1578'. [ 586.397962][T11532] kvm: user requested TSC rate below hardware speed [ 586.407162][T11532] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2205475325 (8821901300 ns) > initial count (6564024732 ns). Using initial count to start timer. [ 587.187502][T11540] input: syz0 as /devices/virtual/input/input42 [ 587.893501][ T5956] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 588.046211][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.078284][ T5956] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 588.121258][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.187598][ T5956] usb 4-1: config 0 descriptor?? [ 588.430144][ T5956] usbhid 4-1:0.0: can't add hid device: -71 [ 588.447088][ T5956] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 588.484534][ T5956] usb 4-1: USB disconnect, device number 102 [ 589.043744][T11567] kvm: user requested TSC rate below hardware speed [ 589.056781][T11567] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2205475325 (8821901300 ns) > initial count (6564024732 ns). Using initial count to start timer. [ 589.076980][ T5956] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 589.243438][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 589.260043][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.397725][ T5956] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 589.415061][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.452435][ T5956] usb 4-1: config 0 descriptor?? [ 589.468810][ T5956] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 589.488322][ T5956] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 590.025671][ T5954] usb 4-1: USB disconnect, device number 103 [ 590.033996][ T5954] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 591.141240][T11584] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1597'. [ 591.232831][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 591.448711][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 591.461095][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 591.471428][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 591.501785][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.532370][T11581] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 591.553535][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 591.772295][ T10] usb 2-1: USB disconnect, device number 77 [ 592.138594][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 592.138619][ T30] audit: type=1400 audit(1756088055.574:668): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11588 comm="syz.4.1599" [ 592.462591][T11602] kvm: user requested TSC rate below hardware speed [ 592.516370][T11602] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2205475325 (8821901300 ns) > initial count (6564024732 ns). Using initial count to start timer. [ 593.704553][T11611] input: syz0 as /devices/virtual/input/input43 [ 593.853193][ T5956] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 594.244639][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.298576][ T5956] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 594.352658][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.407378][ T5956] usb 5-1: config 0 descriptor?? [ 594.633938][ T5956] usbhid 5-1:0.0: can't add hid device: -71 [ 594.640205][ T5956] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 594.712733][ T5956] usb 5-1: USB disconnect, device number 58 [ 595.163269][ T5956] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 595.166003][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1610'. [ 595.170974][ T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 595.347370][ T5956] usb 5-1: Using ep0 maxpacket: 32 [ 595.356003][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.370191][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.381709][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 595.461816][ T5956] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 595.473532][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.495282][ T5956] usb 5-1: config 0 descriptor?? [ 595.506496][ T5956] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 595.522322][ T10] usb 1-1: New USB device found, idVendor=12d6, idProduct=0467, bcdDevice=29.3d [ 595.533381][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.544639][ T5956] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 595.556870][ T10] usb 1-1: Product: syz [ 595.589412][ T10] usb 1-1: Manufacturer: syz [ 595.629936][ T10] usb 1-1: SerialNumber: syz [ 595.650116][ T10] usb 1-1: config 0 descriptor?? [ 595.823236][T11640] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 596.019762][ T10] usb 1-1: USB disconnect, device number 91 [ 596.095567][ T5991] usb 5-1: USB disconnect, device number 59 [ 596.121696][ T5991] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 597.833317][ T5991] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 598.145238][ T5991] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.211456][ T5991] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 598.338996][ T5991] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 598.361072][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.424732][T11670] kvm: user requested TSC rate below hardware speed [ 598.453157][T11670] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2205475325 (8821901300 ns) > initial count (6564024732 ns). Using initial count to start timer. [ 598.508544][T11659] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 598.522193][ T5991] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 598.834877][ T5991] usb 3-1: USB disconnect, device number 81 [ 601.102043][T11692] input: syz0 as /devices/virtual/input/input45 [ 601.566794][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'. [ 601.699729][T11702] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 601.943735][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 602.104945][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.123474][ T7012] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 602.194890][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 602.256001][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.271792][ T10] usb 2-1: config 0 descriptor?? [ 602.425542][ T7012] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.440759][ T7012] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 602.481856][ T7012] usb 4-1: New USB device found, idVendor=12d6, idProduct=0467, bcdDevice=29.3d [ 602.531988][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 602.548355][ T7012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.581633][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 602.602010][ T7012] usb 4-1: Product: syz [ 602.627957][ T7012] usb 4-1: Manufacturer: syz [ 602.633565][ T10] usb 2-1: USB disconnect, device number 78 [ 602.656294][ T7012] usb 4-1: SerialNumber: syz [ 602.686123][ T7012] usb 4-1: config 0 descriptor?? [ 602.972158][ T7012] usb 4-1: USB disconnect, device number 104 [ 603.059746][T11716] fuse: Bad value for 'fd' [ 603.076355][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 603.276820][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 603.348332][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.361034][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 603.419932][ T5954] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 603.435360][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.495609][ T10] usb 2-1: config 0 descriptor?? [ 603.518292][ T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 603.730454][ T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 603.746998][ T5954] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 603.771631][ T5954] usb 3-1: can't read configurations, error -71 [ 603.915529][ T10] usb 2-1: USB disconnect, device number 79 [ 603.992163][ T10] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 604.527003][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1637'. [ 604.582307][T11728] kvm: user requested TSC rate below hardware speed [ 604.606162][T11728] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2205475325 (8821901300 ns) > initial count (6564024732 ns). Using initial count to start timer. [ 604.981181][T11749] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1642'. [ 605.103376][ T5954] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 605.474660][ T5954] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 605.563155][ T10] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 605.781533][ T5954] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 605.791988][ T5954] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 605.887415][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.909087][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.956825][ T10] usb 1-1: config 0 has no interfaces? [ 605.972577][T11740] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 606.014149][ T5954] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 606.061715][T11759] input: syz0 as /devices/virtual/input/input46 [ 606.176929][ T10] usb 1-1: New USB device found, idVendor=12d6, idProduct=0467, bcdDevice=29.3d [ 606.221616][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.292834][ T10] usb 1-1: Product: syz [ 606.315540][ T10] usb 1-1: Manufacturer: syz [ 606.320287][ T10] usb 1-1: SerialNumber: syz [ 606.325637][ T5954] usb 3-1: USB disconnect, device number 84 [ 606.479349][ T10] usb 1-1: config 0 descriptor?? [ 607.145691][ T5954] usb 1-1: USB disconnect, device number 92 [ 607.483822][T11772] netlink: 'syz.4.1648': attribute type 7 has an invalid length. [ 607.501264][T11772] netlink: 'syz.4.1648': attribute type 5 has an invalid length. [ 607.522696][T11772] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1648'. [ 608.112267][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'. [ 608.213757][ T5991] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 608.413378][ T5991] usb 1-1: Using ep0 maxpacket: 8 [ 608.429480][T11787] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1654'. [ 608.431392][ T5991] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 608.477539][ T5991] usb 1-1: config 0 has an invalid interface number: 49 but max is 2 [ 608.501912][ T5991] usb 1-1: config 0 has no interface number 1 [ 608.518545][ T5991] usb 1-1: config 0 has no interface number 2 [ 608.528802][ T5991] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 608.560533][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.586403][ T5991] usb 1-1: config 0 descriptor?? [ 608.620653][ T5991] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 608.818423][T11777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.833975][T11777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.884110][ T5991] usb 1-1: Could not set interface, error -71 [ 608.987731][ T5991] usb 1-1: USB disconnect, device number 93 [ 609.298035][T11802] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 609.393220][ T5925] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 609.633286][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 609.702583][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.715796][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.751459][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 609.773492][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.786815][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1661'. [ 609.797927][ T5925] usb 5-1: config 0 descriptor?? [ 609.822301][ T5925] hub 5-1:0.0: bad descriptor, ignoring hub [ 609.837014][ T5925] hub 5-1:0.0: probe with driver hub failed with error -5 [ 609.855239][ T5925] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 609.933257][ T5991] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 610.028838][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 610.049454][T11798] FAULT_INJECTION: forcing a failure. [ 610.049454][T11798] name failslab, interval 1, probability 0, space 0, times 0 [ 610.097717][T11809] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1662'. [ 610.117338][T11798] CPU: 0 UID: 0 PID: 11798 Comm: syz.4.1658 Not tainted syzkaller #0 PREEMPT(full) [ 610.117357][T11798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.117364][T11798] Call Trace: [ 610.117370][T11798] [ 610.117375][T11798] dump_stack_lvl+0x189/0x250 [ 610.117395][T11798] ? __pfx____ratelimit+0x10/0x10 [ 610.117412][T11798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.117426][T11798] ? __pfx__printk+0x10/0x10 [ 610.117445][T11798] ? __pfx___might_resched+0x10/0x10 [ 610.117456][T11798] ? fs_reclaim_acquire+0x7d/0x100 [ 610.117476][T11798] should_fail_ex+0x414/0x560 [ 610.117495][T11798] should_failslab+0xa8/0x100 [ 610.117512][T11798] __kmalloc_node_noprof+0xd1/0x4e0 [ 610.117527][T11798] ? crypto_create_tfm_node+0x83/0x3f0 [ 610.117547][T11798] crypto_create_tfm_node+0x83/0x3f0 [ 610.117565][T11798] crypto_ahash_init_tfm+0x162/0x770 [ 610.117580][T11798] ? __kmalloc_node_noprof+0x293/0x4e0 [ 610.117599][T11798] crypto_create_tfm_node+0x18c/0x3f0 [ 610.117615][T11798] ? __pfx_hmac_init_ahash_tfm+0x10/0x10 [ 610.117631][T11798] crypto_spawn_tfm2+0x5c/0x90 [ 610.117644][T11798] hmac_init_ahash_tfm+0x44/0x130 [ 610.117658][T11798] ? __pfx_hmac_init_ahash_tfm+0x10/0x10 [ 610.117672][T11798] crypto_ahash_init_tfm+0x35b/0x770 [ 610.117691][T11798] crypto_create_tfm_node+0x18c/0x3f0 [ 610.117710][T11798] crypto_alloc_tfm_node+0x172/0x3f0 [ 610.117731][T11798] ah6_init_state+0x140/0x680 [ 610.117750][T11798] __xfrm_init_state+0xa73/0x13f0 [ 610.117764][T11798] ? __xfrm_init_state+0x7ef/0x13f0 [ 610.117781][T11798] xfrm_add_sa+0x2f5b/0x4070 [ 610.117800][T11798] ? __pfx_xfrm_add_sa+0x10/0x10 [ 610.117817][T11798] ? __nla_parse+0x40/0x60 [ 610.117843][T11798] xfrm_user_rcv_msg+0x7a0/0xab0 [ 610.117861][T11798] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 610.117896][T11798] ? __pfx___mutex_trylock_common+0x10/0x10 [ 610.117912][T11798] ? rcu_is_watching+0x15/0xb0 [ 610.117925][T11798] ? trace_contention_end+0x39/0x120 [ 610.117938][T11798] ? __mutex_lock+0x335/0x1350 [ 610.117958][T11798] netlink_rcv_skb+0x208/0x470 [ 610.117976][T11798] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 610.117991][T11798] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.118016][T11798] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.118032][T11798] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.118050][T11798] xfrm_netlink_rcv+0x79/0x90 [ 610.118064][T11798] netlink_unicast+0x82f/0x9e0 [ 610.118084][T11798] ? __pfx_netlink_unicast+0x10/0x10 [ 610.118100][T11798] ? netlink_sendmsg+0x642/0xb30 [ 610.118115][T11798] ? skb_put+0x11b/0x210 [ 610.118130][T11798] netlink_sendmsg+0x805/0xb30 [ 610.118152][T11798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.118170][T11798] ? __import_iovec+0x5d4/0x7f0 [ 610.118183][T11798] ? aa_sock_msg_perm+0xf1/0x1d0 [ 610.118195][T11798] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 610.118207][T11798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.118225][T11798] __sock_sendmsg+0x21c/0x270 [ 610.118242][T11798] ____sys_sendmsg+0x505/0x830 [ 610.118258][T11798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.118281][T11798] ___sys_sendmsg+0x21f/0x2a0 [ 610.118294][T11798] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.118329][T11798] ? __fget_files+0x2a/0x420 [ 610.118345][T11798] ? __fget_files+0x3a0/0x420 [ 610.118373][T11798] __sys_sendmsg+0x164/0x220 [ 610.118387][T11798] ? __pfx___sys_sendmsg+0x10/0x10 [ 610.118410][T11798] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.118428][T11798] __do_fast_syscall_32+0xb6/0x2b0 [ 610.118445][T11798] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.118463][T11798] do_fast_syscall_32+0x34/0x80 [ 610.118480][T11798] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 610.118494][T11798] RIP: 0023:0xf707e539 [ 610.118505][T11798] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 610.118515][T11798] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 610.118529][T11798] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 610.118538][T11798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 610.118545][T11798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 610.118551][T11798] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 610.118558][T11798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 610.118576][T11798] [ 610.223494][ T5954] usb 5-1: USB disconnect, device number 60 [ 610.808653][ T5991] usb 4-1: config 0 has no interfaces? [ 610.818037][ T5991] usb 4-1: New USB device found, idVendor=12d6, idProduct=0467, bcdDevice=29.3d [ 610.837252][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.847779][ T5991] usb 4-1: Product: syz [ 610.851998][ T5991] usb 4-1: Manufacturer: syz [ 611.035212][ T5991] usb 4-1: SerialNumber: syz [ 611.059986][ T5991] usb 4-1: config 0 descriptor?? [ 611.291849][ T9] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 611.599893][ T5925] usb 4-1: USB disconnect, device number 105 [ 611.673180][ T5991] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 611.729945][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 611.773433][ T7012] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 611.784002][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 611.849327][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 611.863268][ T5991] usb 3-1: Using ep0 maxpacket: 32 [ 611.892140][ T5991] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.902509][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.912961][ T5991] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 611.929896][ T5991] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 611.941650][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.978634][T11822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 611.999488][ T7012] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 612.017115][ T5991] usb 3-1: config 0 descriptor?? [ 612.030541][ T7012] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 612.034046][ T5991] hub 3-1:0.0: bad descriptor, ignoring hub [ 612.049867][ T5991] hub 3-1:0.0: probe with driver hub failed with error -5 [ 612.049933][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.236405][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 612.375043][ T5991] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 612.393201][ T7012] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.515352][ T7012] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 612.553399][ T7012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.573737][ T5925] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 612.676117][ T5991] usb 3-1: USB disconnect, device number 85 [ 612.788464][ T7012] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.841412][ T9] usb 1-1: USB disconnect, device number 94 [ 613.073549][ T7012] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 613.230064][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 613.246276][ T7012] usb 5-1: USB disconnect, device number 61 [ 614.175796][T11858] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1674'. [ 614.430713][T11861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1677'. [ 614.763683][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 614.780335][T11870] openvswitch: netlink: Unknown nsh attribute 0 [ 614.793173][T11870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.928988][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 617.651537][T11902] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1686'. [ 618.368308][T11920] veth0_to_bond: entered allmulticast mode [ 618.701175][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'. [ 620.887672][T11953] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1699'. [ 620.928480][ T30] audit: type=1326 audit(1756088084.404:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.0.1698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 621.066094][T11956] input: syz0 as /devices/virtual/input/input49 [ 621.167157][ T30] audit: type=1326 audit(1756088084.414:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.0.1698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=229 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 621.213181][ T30] audit: type=1326 audit(1756088084.424:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.0.1698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 621.623327][ T30] audit: type=1326 audit(1756088084.424:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.0.1698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 621.833219][ T30] audit: type=1326 audit(1756088084.424:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.0.1698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 621.981814][ T30] audit: type=1326 audit(1756088084.434:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.0.1698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 622.062147][ T30] audit: type=1326 audit(1756088084.434:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.0.1698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 622.104955][ T30] audit: type=1326 audit(1756088084.434:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.0.1698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 622.207262][ T30] audit: type=1326 audit(1756088084.444:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.0.1698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 622.322847][ T30] audit: type=1326 audit(1756088084.464:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11950 comm="syz.0.1698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 623.244597][T11979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1704'. [ 623.407553][T11986] pimreg: entered allmulticast mode [ 623.430493][T11985] pimreg: left allmulticast mode [ 624.113803][T11999] pim6reg: entered allmulticast mode [ 624.890215][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.896890][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.525536][T11987] pim6reg: left allmulticast mode [ 625.745884][T12011] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 626.596807][T12013] FAULT_INJECTION: forcing a failure. [ 626.596807][T12013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.650183][T12013] CPU: 0 UID: 0 PID: 12013 Comm: syz.1.1713 Not tainted syzkaller #0 PREEMPT(full) [ 626.650204][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 626.650212][T12013] Call Trace: [ 626.650218][T12013] [ 626.650224][T12013] dump_stack_lvl+0x189/0x250 [ 626.650244][T12013] ? __pfx____ratelimit+0x10/0x10 [ 626.650260][T12013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.650274][T12013] ? __pfx__printk+0x10/0x10 [ 626.650297][T12013] should_fail_ex+0x414/0x560 [ 626.650316][T12013] _copy_to_user+0x31/0xb0 [ 626.650331][T12013] simple_read_from_buffer+0xe1/0x170 [ 626.650351][T12013] proc_fail_nth_read+0x1b3/0x220 [ 626.650367][T12013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 626.650381][T12013] ? rw_verify_area+0x2a6/0x4d0 [ 626.650395][T12013] ? __lock_acquire+0xab9/0xd20 [ 626.650409][T12013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 626.650423][T12013] vfs_read+0x1fd/0xa30 [ 626.650437][T12013] ? fdget_pos+0x247/0x320 [ 626.650449][T12013] ? __pfx___mutex_lock+0x10/0x10 [ 626.650467][T12013] ? __pfx_vfs_read+0x10/0x10 [ 626.650483][T12013] ? __fget_files+0x2a/0x420 [ 626.650502][T12013] ? __fget_files+0x3a0/0x420 [ 626.650517][T12013] ? __fget_files+0x2a/0x420 [ 626.650539][T12013] ksys_read+0x145/0x250 [ 626.650555][T12013] ? __pfx_ksys_read+0x10/0x10 [ 626.650572][T12013] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.650590][T12013] __do_fast_syscall_32+0xb6/0x2b0 [ 626.650612][T12013] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.650630][T12013] do_fast_syscall_32+0x34/0x80 [ 626.650647][T12013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.650661][T12013] RIP: 0023:0xf7f45539 [ 626.650672][T12013] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 626.650682][T12013] RSP: 002b:00000000f5466590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 626.650697][T12013] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5466620 [ 626.650706][T12013] RDX: 000000000000000f RSI: 00000000f73d4ff4 RDI: 0000000000000000 [ 626.650713][T12013] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 626.650720][T12013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 626.650727][T12013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 626.650744][T12013] [ 627.336259][ T5991] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 627.538928][ T5991] usb 4-1: Using ep0 maxpacket: 16 [ 627.546152][ T5991] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 627.554853][ T5991] usb 4-1: config 0 has no interface number 0 [ 627.561019][ T5991] usb 4-1: config 0 interface 160 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 627.617157][ T5925] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 627.625146][ T5991] usb 4-1: config 0 interface 160 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 627.641813][ T5991] usb 4-1: New USB device found, idVendor=07aa, idProduct=0017, bcdDevice=6c.f5 [ 627.652657][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.668909][ T5991] usb 4-1: Product: syz [ 627.673306][ T7012] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 627.688493][ T5991] usb 4-1: Manufacturer: syz [ 627.693514][ T5991] usb 4-1: SerialNumber: syz [ 627.706702][ T5991] usb 4-1: config 0 descriptor?? [ 627.715801][T12021] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 627.726830][T12021] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 627.784111][ T5925] usb 2-1: too many configurations: 10, using maximum allowed: 8 [ 627.811400][ T5925] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 627.820691][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.830512][ T5925] usb 2-1: Product: syz [ 627.834890][ T5925] usb 2-1: Manufacturer: syz [ 627.841226][ T5925] usb 2-1: SerialNumber: syz [ 627.843733][ T7012] usb 1-1: Using ep0 maxpacket: 32 [ 627.857580][ T7012] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 627.867109][ T7012] usb 1-1: config 0 has no interface number 0 [ 627.877412][ T7012] usb 1-1: config 0 interface 184 has no altsetting 0 [ 627.889508][ T5925] usb 2-1: config 0 descriptor?? [ 627.941913][T12021] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 627.950633][ T7012] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 627.951518][T12021] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 627.964342][ T7012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.086926][ T7012] usb 1-1: Product: syz [ 628.093283][ T7012] usb 1-1: Manufacturer: syz [ 628.097923][ T7012] usb 1-1: SerialNumber: syz [ 628.099033][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1721'. [ 628.139894][T12032] bond_slave_0: entered promiscuous mode [ 628.145973][T12032] bond_slave_1: entered promiscuous mode [ 628.151813][T12032] team_slave_0: entered promiscuous mode [ 628.157873][T12032] team_slave_1: entered promiscuous mode [ 628.204702][ T7012] usb 1-1: config 0 descriptor?? [ 628.243870][T12032] macvtap1: entered promiscuous mode [ 628.250251][T12032] bond0: entered promiscuous mode [ 628.258753][T12032] team0: entered promiscuous mode [ 628.265783][T12032] macvtap1: entered allmulticast mode [ 628.278003][ T7012] smsc75xx v1.0.0 [ 628.281889][ T7012] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 628.297216][ T7012] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 628.299427][ T5991] asix 4-1:0.160 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 628.312981][T12032] bond0: entered allmulticast mode [ 628.331841][T12032] bond_slave_0: entered allmulticast mode [ 628.342025][T12032] bond_slave_1: entered allmulticast mode [ 628.352167][T12032] team0: entered allmulticast mode [ 628.362358][T12032] team_slave_0: entered allmulticast mode [ 628.372531][T12032] team_slave_1: entered allmulticast mode [ 628.378154][ T5991] asix 4-1:0.160: probe with driver asix failed with error -71 [ 628.381311][T12032] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 628.404399][T12042] FAULT_INJECTION: forcing a failure. [ 628.404399][T12042] name failslab, interval 1, probability 0, space 0, times 0 [ 628.417312][T12042] CPU: 1 UID: 0 PID: 12042 Comm: syz.1.1721 Not tainted syzkaller #0 PREEMPT(full) [ 628.417342][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 628.417354][T12042] Call Trace: [ 628.417363][T12042] [ 628.417373][T12042] dump_stack_lvl+0x189/0x250 [ 628.417402][T12042] ? __pfx____ratelimit+0x10/0x10 [ 628.417431][T12042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 628.417455][T12042] ? __pfx__printk+0x10/0x10 [ 628.417502][T12042] should_fail_ex+0x414/0x560 [ 628.417535][T12042] should_failslab+0xa8/0x100 [ 628.417566][T12042] __kmalloc_cache_noprof+0x70/0x3d0 [ 628.417592][T12042] ? __hw_addr_add_ex+0x1f4/0x770 [ 628.417620][T12042] __hw_addr_add_ex+0x1f4/0x770 [ 628.417650][T12042] dev_uc_sync_multiple+0x208/0x3e0 [ 628.417683][T12042] bond_set_rx_mode+0x2d2/0x4a0 [ 628.417709][T12042] ? bond_set_rx_mode+0x79/0x4a0 [ 628.417730][T12042] ? __pfx_bond_set_rx_mode+0x10/0x10 [ 628.417752][T12042] ? __hw_addr_add_ex+0x3c5/0x770 [ 628.417772][T12042] ? __dev_set_rx_mode+0x1bb/0x260 [ 628.417793][T12042] dev_uc_add+0xc8/0x120 [ 628.417815][T12042] macvlan_sync_address+0x305/0x810 [ 628.417851][T12042] netif_set_mac_address+0x2f9/0x4c0 [ 628.417878][T12042] ? __pfx_netif_set_mac_address+0x10/0x10 [ 628.417899][T12042] ? down_write+0x162/0x1f0 [ 628.417912][T12042] ? finish_task_switch+0x266/0x950 [ 628.417936][T12042] ? validate_linkmsg+0x765/0x950 [ 628.417949][T12042] ? do_setlink+0x874/0x41c0 [ 628.417964][T12042] do_setlink+0x88c/0x41c0 [ 628.417974][T12042] ? rcu_is_watching+0x15/0xb0 [ 628.417993][T12042] ? __lock_acquire+0xab9/0xd20 [ 628.418010][T12042] ? __pfx_do_setlink+0x10/0x10 [ 628.418021][T12042] ? __lock_acquire+0xab9/0xd20 [ 628.418054][T12042] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 628.418072][T12042] ? rcu_is_watching+0x15/0xb0 [ 628.418086][T12042] ? __mutex_lock+0xd3b/0x1350 [ 628.418104][T12042] ? __mutex_lock+0x5bb/0x1350 [ 628.418127][T12042] ? rtnl_newlink+0x8db/0x1c70 [ 628.418146][T12042] ? __pfx___mutex_lock+0x10/0x10 [ 628.418167][T12042] ? ns_capable+0x8a/0xf0 [ 628.418180][T12042] ? rtnl_link_get_net_capable+0x16a/0x350 [ 628.418193][T12042] rtnl_newlink+0x160b/0x1c70 [ 628.418209][T12042] ? netlink_sendmsg+0x805/0xb30 [ 628.418232][T12042] ? __pfx_rtnl_newlink+0x10/0x10 [ 628.418262][T12042] ? kasan_quarantine_put+0xdd/0x220 [ 628.418275][T12042] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.418295][T12042] ? nlmon_xmit+0xb0/0x100 [ 628.418305][T12042] ? kmem_cache_free+0x18f/0x400 [ 628.418324][T12042] ? __local_bh_enable_ip+0x12d/0x1c0 [ 628.418335][T12042] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.418351][T12042] ? __local_bh_enable_ip+0x12d/0x1c0 [ 628.418362][T12042] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 628.418376][T12042] ? __dev_queue_xmit+0x27b/0x3b50 [ 628.418389][T12042] ? __dev_queue_xmit+0x27b/0x3b50 [ 628.418401][T12042] ? __dev_queue_xmit+0x27b/0x3b50 [ 628.418415][T12042] ? __dev_queue_xmit+0x1d79/0x3b50 [ 628.418431][T12042] ? __lock_acquire+0xab9/0xd20 [ 628.418460][T12042] ? __pfx_rtnl_newlink+0x10/0x10 [ 628.418476][T12042] rtnetlink_rcv_msg+0x7cf/0xb70 [ 628.418495][T12042] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 628.418511][T12042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 628.418525][T12042] ? ref_tracker_free+0x63a/0x7d0 [ 628.418541][T12042] ? __asan_memcpy+0x40/0x70 [ 628.418553][T12042] ? __pfx_ref_tracker_free+0x10/0x10 [ 628.418575][T12042] netlink_rcv_skb+0x208/0x470 [ 628.418592][T12042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 628.418609][T12042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.418632][T12042] ? netlink_deliver_tap+0x2e/0x1b0 [ 628.418653][T12042] netlink_unicast+0x82f/0x9e0 [ 628.418677][T12042] ? __pfx_netlink_unicast+0x10/0x10 [ 628.418693][T12042] ? netlink_sendmsg+0x642/0xb30 [ 628.418708][T12042] ? skb_put+0x11b/0x210 [ 628.418721][T12042] netlink_sendmsg+0x805/0xb30 [ 628.418744][T12042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.418762][T12042] ? __import_iovec+0x5d4/0x7f0 [ 628.418774][T12042] ? aa_sock_msg_perm+0xf1/0x1d0 [ 628.418786][T12042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 628.418798][T12042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.418816][T12042] __sock_sendmsg+0x21c/0x270 [ 628.418834][T12042] ____sys_sendmsg+0x505/0x830 [ 628.418849][T12042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.418871][T12042] ___sys_sendmsg+0x21f/0x2a0 [ 628.418885][T12042] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.418924][T12042] ? __fget_files+0x2a/0x420 [ 628.418940][T12042] ? __fget_files+0x3a0/0x420 [ 628.418962][T12042] __sys_sendmsg+0x164/0x220 [ 628.418976][T12042] ? __pfx___sys_sendmsg+0x10/0x10 [ 628.418997][T12042] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.419015][T12042] __do_fast_syscall_32+0xb6/0x2b0 [ 628.419031][T12042] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.419049][T12042] do_fast_syscall_32+0x34/0x80 [ 628.419066][T12042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.419081][T12042] RIP: 0023:0xf7f45539 [ 628.419093][T12042] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 628.419103][T12042] RSP: 002b:00000000f544555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 628.419117][T12042] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000000 [ 628.419126][T12042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.419133][T12042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 628.419140][T12042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 628.419147][T12042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 628.419164][T12042] [ 629.065721][ T5991] usb 4-1: USB disconnect, device number 107 [ 629.117085][T12042] bond0: left allmulticast mode [ 629.122063][T12042] bond_slave_0: left allmulticast mode [ 629.131260][T12042] bond_slave_1: left allmulticast mode [ 629.137184][T12042] team0: left allmulticast mode [ 629.142213][T12042] team_slave_0: left allmulticast mode [ 629.154305][T12042] team_slave_1: left allmulticast mode [ 629.160157][T12042] bond0: left promiscuous mode [ 629.180684][T12039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 629.187291][T12039] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 629.190054][T12042] team0: left promiscuous mode [ 629.202475][T12042] bond_slave_0: left promiscuous mode [ 629.208286][T12042] bond_slave_1: left promiscuous mode [ 629.213909][T12042] team_slave_0: left promiscuous mode [ 629.219737][T12042] team_slave_1: left promiscuous mode [ 629.232032][T12039] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 629.238183][T12039] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 629.269488][ T5925] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 629.300212][ T5925] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 629.309288][ T5925] usb 2-1: USB disconnect, device number 80 [ 629.317374][T12039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 629.361995][T12039] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 629.373530][T12039] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 629.527849][T12039] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 629.595643][T12039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 629.602773][T12039] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 629.772580][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 629.772602][ T30] audit: type=1326 audit(1756088093.354:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12043 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 630.040135][T12052] pim6reg: entered allmulticast mode [ 630.083260][ T30] audit: type=1326 audit(1756088093.394:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12043 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 630.107063][ T30] audit: type=1326 audit(1756088093.394:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12043 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 630.132503][ T30] audit: type=1326 audit(1756088093.444:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12043 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 630.415031][ T30] audit: type=1326 audit(1756088093.444:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12043 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 630.464838][T12043] pim6reg: left allmulticast mode [ 630.501844][ T30] audit: type=1326 audit(1756088093.454:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12043 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 630.527488][ T30] audit: type=1326 audit(1756088093.464:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12043 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 630.553670][ T30] audit: type=1326 audit(1756088093.484:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12043 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 630.576612][ T30] audit: type=1326 audit(1756088093.494:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12043 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 630.599372][ T30] audit: type=1326 audit(1756088093.494:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12043 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 630.778032][T12068] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1729'. [ 630.808431][ T5925] usb 1-1: USB disconnect, device number 95 [ 631.096576][ T5925] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 631.148569][ T5925] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 631.881352][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'. [ 631.890463][T12094] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1734'. [ 632.551232][ T7012] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 632.571768][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 632.703203][ T7012] usb 5-1: device descriptor read/64, error -32 [ 633.103509][ T7012] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 633.177622][ T5991] usb 4-1: new low-speed USB device number 108 using dummy_hcd [ 633.455279][ T5991] usb 4-1: unable to get BOS descriptor or descriptor too short [ 633.469550][ T5991] usb 4-1: config 2 has an invalid interface number: 178 but max is 0 [ 633.483248][ T5991] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 633.509715][ T5991] usb 4-1: config 2 has no interface number 0 [ 633.537866][ T5991] usb 4-1: config 2 interface 178 altsetting 243 endpoint 0xC has invalid maxpacket 32, setting to 8 [ 633.559809][ T7012] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 633.579965][ T7012] usb 5-1: config 0 has no interface number 0 [ 633.582019][ T5991] usb 4-1: config 2 interface 178 altsetting 243 has a duplicate endpoint with address 0xC, skipping [ 633.588965][ T7012] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 633.615499][ T7012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.857549][ T5991] usb 4-1: config 2 interface 178 has no altsetting 0 [ 633.873499][ T5991] usb 4-1: string descriptor 0 read error: -22 [ 633.880131][ T5991] usb 4-1: New USB device found, idVendor=06be, idProduct=d001, bcdDevice=51.19 [ 633.901530][ T7012] usb 5-1: Product: syz [ 633.903547][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.923994][ T7012] usb 5-1: Manufacturer: syz [ 633.936171][ T7012] usb 5-1: SerialNumber: syz [ 633.985339][ T5991] gspca_main: nw80x-2.14.0 probing 06be:d001 [ 634.027123][ T7012] usb 5-1: config 0 descriptor?? [ 634.158270][ T5991] gspca_nw80x: reg_w err -71 [ 634.173331][ T5991] nw80x 4-1:2.178: probe with driver nw80x failed with error -71 [ 634.236996][ T7012] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 634.264591][ T5991] usb 4-1: USB disconnect, device number 108 [ 634.274535][ T7012] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 634.344316][ T7012] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 634.413202][ T7012] usb 5-1: media controller created [ 634.508120][ T7012] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 635.375750][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 635.375772][ T30] audit: type=1326 audit(1756088098.964:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 635.601374][ T30] audit: type=1326 audit(1756088098.994:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 635.693292][ T10] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 635.704289][ T7012] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 635.762761][T12129] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1747'. [ 635.875871][T12124] pim6reg: entered allmulticast mode [ 635.890579][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 635.896212][ T30] audit: type=1326 audit(1756088099.224:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 635.948458][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 635.970679][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.40 [ 635.990262][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.010653][ T7012] usb 5-1: USB disconnect, device number 63 [ 636.030911][ T30] audit: type=1326 audit(1756088099.224:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 636.054211][ T10] usb 4-1: Product: Ь [ 636.089782][ T10] usb 4-1: Manufacturer: Ѓ [ 636.103448][ T10] usb 4-1: SerialNumber: ﴞ᳙⡲虭蘪⦶宦섎痠맟充卲퉏罸큳벐䪑⼭呐乊谖㰽띣ﲙ良칇睑剘홫㉲謷㛕䭯ⷔꕉ쭟ṂΆﮋ쪳ԇ톒܀쀼甘鄨䗼쩠壸ퟵⳜ쳭눯烔鳷儚ꌝ꽴 [ 636.183217][ T30] audit: type=1326 audit(1756088099.224:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 636.244696][ T30] audit: type=1326 audit(1756088099.224:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 636.351271][ T30] audit: type=1326 audit(1756088099.224:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 636.399181][ T30] audit: type=1326 audit(1756088099.224:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 636.495900][ T30] audit: type=1326 audit(1756088099.224:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 636.540555][ T30] audit: type=1326 audit(1756088099.474:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.0.1743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 636.570309][T12114] pim6reg: left allmulticast mode [ 636.702295][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 636.708827][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 636.788879][ T10] usb 4-1: USB disconnect, device number 109 [ 637.504491][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 637.607972][T12146] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 637.631808][T12147] pimreg: entered allmulticast mode [ 637.647748][T12153] pimreg: left allmulticast mode [ 637.655381][T12150] delete_channel: no stack [ 637.713821][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.746239][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 638.352477][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.428782][ T10] usb 2-1: config 0 descriptor?? [ 638.525837][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1756'. [ 638.701806][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 638.709533][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 638.728000][T12169] ================================================================== [ 638.736095][T12169] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 638.744010][T12169] Read of size 1 at addr ffff8880489a8bb0 by task syz.2.1757/12169 [ 638.752475][T12169] [ 638.754811][T12169] CPU: 1 UID: 0 PID: 12169 Comm: syz.2.1757 Not tainted syzkaller #0 PREEMPT(full) [ 638.754826][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 638.754833][T12169] Call Trace: [ 638.754840][T12169] [ 638.754846][T12169] dump_stack_lvl+0x189/0x250 [ 638.754863][T12169] ? __kasan_check_byte+0x12/0x40 [ 638.754880][T12169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.754893][T12169] ? lock_release+0x4b/0x3e0 [ 638.754912][T12169] ? __virt_addr_valid+0x4a5/0x5c0 [ 638.754928][T12169] print_report+0xca/0x240 [ 638.754948][T12169] ? xfrm_state_find+0x2cf2/0x5400 [ 638.754959][T12169] kasan_report+0x118/0x150 [ 638.754974][T12169] ? xfrm_state_find+0x2cf2/0x5400 [ 638.754988][T12169] xfrm_state_find+0x2cf2/0x5400 [ 638.754999][T12169] ? unwind_get_return_address+0x4d/0x90 [ 638.755013][T12169] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 638.755032][T12169] ? xfrm_state_find+0x1da/0x5400 [ 638.755044][T12169] ? __pfx_xfrm_state_find+0x10/0x10 [ 638.755055][T12169] ? kasan_save_stack+0x4d/0x60 [ 638.755069][T12169] ? kasan_save_stack+0x3e/0x60 [ 638.755082][T12169] ? kasan_record_aux_stack+0xbd/0xd0 [ 638.755094][T12169] ? ip_route_output_key_hash_rcu+0x18eb/0x23d0 [ 638.755107][T12169] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 638.755120][T12169] ? __ip4_datagram_connect+0x8f4/0x1270 [ 638.755132][T12169] ? __ip6_datagram_connect+0x9f0/0x1150 [ 638.755146][T12169] ? ip6_datagram_connect_v6_only+0x63/0xa0 [ 638.755161][T12169] ? __ia32_sys_connect+0x7a/0x90 [ 638.755177][T12169] ? __do_fast_syscall_32+0xb6/0x2b0 [ 638.755193][T12169] ? do_fast_syscall_32+0x34/0x80 [ 638.755209][T12169] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 638.755223][T12169] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 638.755244][T12169] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 638.755258][T12169] ? __lock_acquire+0xab9/0xd20 [ 638.755278][T12169] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 638.755294][T12169] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 638.755308][T12169] ? xfrm_expand_policies+0x41f/0x6a0 [ 638.755322][T12169] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 638.755337][T12169] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 638.755351][T12169] ? rcuref_put+0x1b7/0x210 [ 638.755363][T12169] ? __pfx_rcuref_put+0x10/0x10 [ 638.755375][T12169] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 638.755393][T12169] xfrm_lookup_route+0x3c/0x1c0 [ 638.755406][T12169] __ip4_datagram_connect+0x9a5/0x1270 [ 638.755423][T12169] __ip6_datagram_connect+0x9f0/0x1150 [ 638.755440][T12169] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 638.755454][T12169] ? __local_bh_enable_ip+0x12d/0x1c0 [ 638.755466][T12169] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 638.755479][T12169] ip6_datagram_connect_v6_only+0x63/0xa0 [ 638.755494][T12169] __sys_connect+0x316/0x440 [ 638.755511][T12169] ? __pfx___sys_connect+0x10/0x10 [ 638.755532][T12169] __ia32_sys_connect+0x7a/0x90 [ 638.755548][T12169] __do_fast_syscall_32+0xb6/0x2b0 [ 638.755566][T12169] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.755582][T12169] do_fast_syscall_32+0x34/0x80 [ 638.755599][T12169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 638.755613][T12169] RIP: 0023:0xf7f98539 [ 638.755623][T12169] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 638.755634][T12169] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 638.755648][T12169] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 638.755657][T12169] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 638.755664][T12169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 638.755671][T12169] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 638.755679][T12169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 638.755690][T12169] [ 638.755694][T12169] [ 639.130515][T12169] Allocated by task 12003: [ 639.134921][T12169] kasan_save_track+0x3e/0x80 [ 639.139608][T12169] __kasan_slab_alloc+0x6c/0x80 [ 639.144535][T12169] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 639.150421][T12169] kmalloc_reserve+0xbd/0x290 [ 639.155529][T12169] __alloc_skb+0x142/0x2d0 [ 639.159982][T12169] skb_copy+0x188/0x800 [ 639.164141][T12169] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 639.170239][T12169] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 639.175696][T12169] mac80211_hwsim_beacon_tx+0x3f0/0x860 [ 639.181404][T12169] __iterate_interfaces+0x2ab/0x590 [ 639.186621][T12169] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 639.193677][T12169] mac80211_hwsim_beacon+0xbb/0x1c0 [ 639.198965][T12169] __hrtimer_run_queues+0x529/0xc60 [ 639.204177][T12169] hrtimer_run_softirq+0x187/0x2b0 [ 639.209405][T12169] handle_softirqs+0x283/0x870 [ 639.214200][T12169] __irq_exit_rcu+0xca/0x1f0 [ 639.218969][T12169] irq_exit_rcu+0x9/0x30 [ 639.223209][T12169] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 639.228892][T12169] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 639.234865][T12169] [ 639.237288][T12169] Freed by task 3557: [ 639.241270][T12169] kasan_save_track+0x3e/0x80 [ 639.245935][T12169] kasan_save_free_info+0x46/0x50 [ 639.250944][T12169] __kasan_slab_free+0x5b/0x80 [ 639.255697][T12169] kmem_cache_free+0x18f/0x400 [ 639.260467][T12169] skb_release_data+0x62d/0x7c0 [ 639.265304][T12169] sk_skb_reason_drop+0x127/0x170 [ 639.270314][T12169] ieee80211_iface_work+0xb30/0x12d0 [ 639.275585][T12169] cfg80211_wiphy_work+0x2b8/0x470 [ 639.280688][T12169] process_scheduled_works+0xae1/0x17b0 [ 639.286228][T12169] worker_thread+0x8a0/0xda0 [ 639.290905][T12169] kthread+0x70e/0x8a0 [ 639.295068][T12169] ret_from_fork+0x3f9/0x770 [ 639.299660][T12169] ret_from_fork_asm+0x1a/0x30 [ 639.304420][T12169] [ 639.306738][T12169] The buggy address belongs to the object at ffff8880489a89c0 [ 639.306738][T12169] which belongs to the cache skbuff_small_head of size 704 [ 639.321408][T12169] The buggy address is located 496 bytes inside of [ 639.321408][T12169] freed 704-byte region [ffff8880489a89c0, ffff8880489a8c80) [ 639.335192][T12169] [ 639.337517][T12169] The buggy address belongs to the physical page: [ 639.344012][T12169] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x489a8 [ 639.353016][T12169] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 639.361673][T12169] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 639.369217][T12169] page_type: f5(slab) [ 639.373274][T12169] raw: 00fff00000000040 ffff88801daabc80 ffffea00015a1700 dead000000000002 [ 639.382019][T12169] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 639.390588][T12169] head: 00fff00000000040 ffff88801daabc80 ffffea00015a1700 dead000000000002 [ 639.399505][T12169] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 639.408168][T12169] head: 00fff00000000002 ffffea0001226a01 00000000ffffffff 00000000ffffffff [ 639.416923][T12169] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 639.425577][T12169] page dumped because: kasan: bad access detected [ 639.431975][T12169] page_owner tracks the page as allocated [ 639.437674][T12169] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1164, tgid 1164 (kworker/u8:7), ts 582295018149, free_ts 581844836005 [ 639.458803][T12169] post_alloc_hook+0x240/0x2a0 [ 639.463572][T12169] get_page_from_freelist+0x21e4/0x22c0 [ 639.469204][T12169] __alloc_frozen_pages_noprof+0x181/0x370 [ 639.474991][T12169] alloc_pages_mpol+0x232/0x4a0 [ 639.479919][T12169] allocate_slab+0x8a/0x370 [ 639.484416][T12169] ___slab_alloc+0xbeb/0x1410 [ 639.489083][T12169] kmem_cache_alloc_node_noprof+0x280/0x3c0 [ 639.494973][T12169] kmalloc_reserve+0xbd/0x290 [ 639.499632][T12169] __alloc_skb+0x142/0x2d0 [ 639.504037][T12169] xfrm_alloc_compat+0x1a6/0x16f0 [ 639.509136][T12169] xfrm_nlmsg_multicast+0xda/0x1f0 [ 639.514246][T12169] xfrm_send_state_notify+0x11f1/0x18b0 [ 639.519825][T12169] km_state_notify+0x110/0x1f0 [ 639.524613][T12169] xfrm_timer_handler+0x2a0/0xa00 [ 639.529687][T12169] __hrtimer_run_queues+0x529/0xc60 [ 639.534906][T12169] hrtimer_run_softirq+0x187/0x2b0 [ 639.540149][T12169] page last free pid 11475 tgid 11475 stack trace: [ 639.546687][T12169] __free_frozen_pages+0xbc4/0xd30 [ 639.551986][T12169] free_large_kmalloc+0x13a/0x1f0 [ 639.557011][T12169] free_netdev+0x3e2/0x700 [ 639.561879][T12169] netdev_run_todo+0xd0c/0xea0 [ 639.566645][T12169] tun_chr_close+0x13c/0x1c0 [ 639.571238][T12169] __fput+0x44c/0xa70 [ 639.575208][T12169] task_work_run+0x1d4/0x260 [ 639.579793][T12169] exit_to_user_mode_loop+0xec/0x110 [ 639.585168][T12169] __do_fast_syscall_32+0x1f4/0x2b0 [ 639.590376][T12169] do_fast_syscall_32+0x34/0x80 [ 639.595222][T12169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 639.601545][T12169] [ 639.603873][T12169] Memory state around the buggy address: [ 639.609495][T12169] ffff8880489a8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 639.617554][T12169] ffff8880489a8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 639.625714][T12169] >ffff8880489a8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 639.633794][T12169] ^ [ 639.639430][T12169] ffff8880489a8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 639.647477][T12169] ffff8880489a8c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 639.655536][T12169] ================================================================== [ 639.696692][ T10] usb 2-1: USB disconnect, device number 81 [ 639.735191][T12166] FAULT_INJECTION: forcing a failure. [ 639.735191][T12166] name failslab, interval 1, probability 0, space 0, times 0 [ 639.789257][T12169] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 639.796513][T12169] CPU: 1 UID: 0 PID: 12169 Comm: syz.2.1757 Not tainted syzkaller #0 PREEMPT(full) [ 639.805926][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 639.816021][T12169] Call Trace: [ 639.819333][T12169] [ 639.822295][T12169] dump_stack_lvl+0x99/0x250 [ 639.826935][T12169] ? __asan_memcpy+0x40/0x70 [ 639.831531][T12169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.836738][T12169] ? __pfx__printk+0x10/0x10 [ 639.841447][T12169] vpanic+0x281/0x750 [ 639.845456][T12169] ? preempt_schedule+0xae/0xc0 [ 639.850335][T12169] ? __pfx_vpanic+0x10/0x10 [ 639.854936][T12169] ? preempt_schedule_common+0x83/0xd0 [ 639.860392][T12169] ? preempt_schedule+0xae/0xc0 [ 639.865259][T12169] ? __pfx_preempt_schedule+0x10/0x10 [ 639.870624][T12169] panic+0xb9/0xc0 [ 639.874344][T12169] ? __pfx_panic+0x10/0x10 [ 639.878803][T12169] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 639.884723][T12169] ? xfrm_state_find+0x2cf2/0x5400 [ 639.889834][T12169] check_panic_on_warn+0x89/0xb0 [ 639.894792][T12169] ? xfrm_state_find+0x2cf2/0x5400 [ 639.899916][T12169] end_report+0x78/0x160 [ 639.904169][T12169] kasan_report+0x129/0x150 [ 639.908848][T12169] ? xfrm_state_find+0x2cf2/0x5400 [ 639.914061][T12169] xfrm_state_find+0x2cf2/0x5400 [ 639.919005][T12169] ? unwind_get_return_address+0x4d/0x90 [ 639.924670][T12169] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 639.930902][T12169] ? xfrm_state_find+0x1da/0x5400 [ 639.935945][T12169] ? __pfx_xfrm_state_find+0x10/0x10 [ 639.941325][T12169] ? kasan_save_stack+0x4d/0x60 [ 639.946197][T12169] ? kasan_save_stack+0x3e/0x60 [ 639.951085][T12169] ? kasan_record_aux_stack+0xbd/0xd0 [ 639.956450][T12169] ? ip_route_output_key_hash_rcu+0x18eb/0x23d0 [ 639.962697][T12169] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 639.968423][T12169] ? __ip4_datagram_connect+0x8f4/0x1270 [ 639.974247][T12169] ? __ip6_datagram_connect+0x9f0/0x1150 [ 639.979879][T12169] ? ip6_datagram_connect_v6_only+0x63/0xa0 [ 639.985801][T12169] ? __ia32_sys_connect+0x7a/0x90 [ 639.990871][T12169] ? __do_fast_syscall_32+0xb6/0x2b0 [ 639.996195][T12169] ? do_fast_syscall_32+0x34/0x80 [ 640.001411][T12169] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 640.008026][T12169] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 640.014236][T12169] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 640.020828][T12169] ? __lock_acquire+0xab9/0xd20 [ 640.025708][T12169] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 640.031183][T12169] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 640.036565][T12169] ? xfrm_expand_policies+0x41f/0x6a0 [ 640.041981][T12169] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 640.047468][T12169] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 640.053411][T12169] ? rcuref_put+0x1b7/0x210 [ 640.057915][T12169] ? __pfx_rcuref_put+0x10/0x10 [ 640.068764][T12169] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 640.074154][T12169] xfrm_lookup_route+0x3c/0x1c0 [ 640.079046][T12169] __ip4_datagram_connect+0x9a5/0x1270 [ 640.084522][T12169] __ip6_datagram_connect+0x9f0/0x1150 [ 640.090008][T12169] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 640.095905][T12169] ? __local_bh_enable_ip+0x12d/0x1c0 [ 640.101291][T12169] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 640.107029][T12169] ip6_datagram_connect_v6_only+0x63/0xa0 [ 640.112752][T12169] __sys_connect+0x316/0x440 [ 640.117345][T12169] ? __pfx___sys_connect+0x10/0x10 [ 640.122460][T12169] __ia32_sys_connect+0x7a/0x90 [ 640.127308][T12169] __do_fast_syscall_32+0xb6/0x2b0 [ 640.132515][T12169] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.137736][T12169] do_fast_syscall_32+0x34/0x80 [ 640.142596][T12169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 640.148927][T12169] RIP: 0023:0xf7f98539 [ 640.153011][T12169] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 640.172632][T12169] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 640.181152][T12169] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 640.189155][T12169] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 640.197140][T12169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 640.205296][T12169] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 640.213285][T12169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 640.221294][T12169] [ 640.224689][T12169] Kernel Offset: disabled [ 640.229030][T12169] Rebooting in 86400 seconds..