last executing test programs: 16.074156284s ago: executing program 4 (id=597): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169b82, 0x189) socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) fsopen(&(0x7f00000007c0)='erofs\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r2, 0x47bc, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 14.564307795s ago: executing program 4 (id=605): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000ca32c7329458e68a330a721f000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000674ae874c8a3ac27c779eb0000000000000000000000000000000000000000000000000000000000000000fcffffff00"/139]}, 0x103) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r4 = open(0x0, 0x280040, 0x389b0d52417bb3a1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x200408b4}, 0x40040c4) pwritev2(r4, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) socket$qrtr(0x2a, 0x2, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x92e82) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socket$inet6(0xa, 0x2, 0x0) 14.152649206s ago: executing program 3 (id=608): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4080810) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a242) poll(&(0x7f0000000040)=[{r3, 0x1}], 0x1, 0x101) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x692401) ioctl$EVIOCSREP(r4, 0x40084503, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r4, @ANYRESOCT=r4, @ANYRESHEX, @ANYRES8=r4], 0x0) 13.672114746s ago: executing program 2 (id=609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f00000000c0)) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) fchmod(r7, 0x60) socket(0x10, 0x3, 0x0) capset(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigsuspend(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f00004f0000/0x3000)=nil, 0x3000, 0x17) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)=0x14) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x101000d) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) 11.337990561s ago: executing program 4 (id=611): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x680, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x3, 0x0, 0x21, 0x0, 0x0, 0x7}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x70}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x20004000) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000002c0)={0x2, 0x2, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000080)={0x6, 0x2, 0x0, 0x0, 0x3}) munlockall() r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000000)={0xc, r7}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0x1f}) ioctl$IOMMU_DESTROY$ioas(r6, 0x3b80, &(0x7f0000000340)={0x8, r7}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000380)={0x4448bc, 0x401, 0x200, {0x7fff, 0x80000000}, 0x7}) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff], [0x0, 0x0, 0x0, 0xfffffffd], [0x9]}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c000400010000010002800008000500feffff7f08000500", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 11.231514167s ago: executing program 3 (id=612): syz_usb_connect(0x2, 0x6b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = io_uring_setup(0x649, &(0x7f0000000a40)={0x0, 0xd66b, 0x40, 0x3, 0x2ba}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x1) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000040)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20044045) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4) syz_io_uring_setup(0x5733, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) close(r4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\vjk\xdf\a\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) 11.096895032s ago: executing program 2 (id=614): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) bind$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2, 0x1}, 0x10) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = timerfd_create(0x0, 0x80800) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000040)=0x4) ioctl$KVM_CAP_SYNC_REGS(r1, 0x4068aea3, &(0x7f0000000200)) sendmsg$key(r0, 0x0, 0x24000840) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r4, &(0x7f0000000480), 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000440)={0x1d, r6}, 0x10) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, &(0x7f0000000180)) syz_open_dev$audion(&(0x7f0000000140), 0x7fffffffffffffff, 0x100) unshare(0x22020400) socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r7 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000001c0)={'Wc9\t', 0x0, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", "000200", "00ff0200", "798a202d", ["c2fffedbff00ffdfffffffff", "ffff08000000000000042371", "070500110800c1024b00", "38a70ed483c99b9f1600d333"]}) 8.366190605s ago: executing program 2 (id=620): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './control\x00'}, 0x6e) set_mempolicy(0x0, &(0x7f0000000080)=0x80000001, 0x381b1c76) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r2, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) syz_usb_connect(0x2, 0xb6, &(0x7f0000000640)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932c070000464040507250103"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="7aaf765d137f516400"/22]}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x8b, &(0x7f0000000480)=ANY=[@ANYRES16=0x0]}, {0x5b, &(0x7f0000002700)=ANY=[@ANYBLOB="5b03b81cd1ef"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x440a}}, {0x0, 0x0}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) inotify_init1(0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x2f) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x947}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x2b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r3], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b80"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) unshare(0x40000000) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) 8.133124552s ago: executing program 4 (id=622): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f00004fa000/0x3000)=nil, 0x3000, 0x92}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r2 = mq_open(0x0, 0x2, 0x48, &(0x7f0000000080)={0x7f, 0x9c1, 0x6, 0x80}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r5 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r5, 0x110, 0x6, 0x0, &(0x7f00000003c0)) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) copy_file_range(r2, &(0x7f00000000c0)=0x3, r6, &(0x7f0000000140)=0x39, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000180)={0x8}) syz_open_dev$loop(&(0x7f00000001c0), 0x7a21, 0x509600) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) recvmmsg(r8, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40000002, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x201, 0x4800003e, r9, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x6, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0xd209f6d814827b17) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)=@ethtool_channels={0x3c, 0x5, 0x5, 0x80, 0x1000, 0xfffffffb, 0x1c00, 0x2, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) 7.4559414s ago: executing program 3 (id=625): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fadvise64(r2, 0xd7, 0x2, 0x5) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000002c0)="26363626640f235f0f20c06635000001000f22c066deed0f20e06635000004000f22e00f01c90f420606000f38060b2aa700000f20e06635000100000f22e0f30f09", 0x42}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r7 = dup(r6) sendfile(r7, r7, 0x0, 0xffffffff) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xa49, 0x3, 0x69c9, 0x2000000004, 0x0, 0x385a2d2f, 0x4, 0x100008000}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'team_slave_1\x00', 0xdd46}) 6.280297993s ago: executing program 3 (id=627): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x20000000000000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x4, 0x9, 0x9, 0xbe9, 0x7f]}, &(0x7f00000001c0)=0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f0000001540)=""/4096, 0x1000}, &(0x7f0000000240)=0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x1, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xb}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00 \x00', 0x8) r8 = accept(r7, 0x0, 0x0) sendmmsg$inet_sctp(r8, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000003800)="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", 0x1000}, {&(0x7f0000000180)="cf", 0x1}], 0x3, 0x0, 0x0, 0x800}], 0x1, 0x20008000) syz_emit_ethernet(0x8d, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd, 0x27, 0x0, [], "20226f1a86609d8f57ad212589f8031c500760fa7a49c6fa36c68fcee0691ab1ee571477594804"}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 4.77841246s ago: executing program 4 (id=629): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1e3a00, 0x0) ioctl$BLKALIGNOFF(r1, 0x40101287, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r6 = syz_io_uring_setup(0xbd9, &(0x7f0000000000)={0x0, 0xd20a, 0x40, 0x3, 0x40004334}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x1c}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000140)={@broadcast, @empty}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3a18003365e17a2de07ab01aa0933700000039020000000000000026919d2177804317ff2aeeaf311c00000000000000000000000040b4", @ANYRES64=0x0, @ANYBLOB="000128bd7000fddbdf25050000000800050093530000080005000c000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, &(0x7f0000000600)=[{0x0}, {&(0x7f0000001000)=""/4096, 0x1000}], 0x2}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) listen(0xffffffffffffffff, 0xb) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x7fff) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) 4.483928589s ago: executing program 0 (id=630): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) bind$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2, 0x1}, 0x10) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = timerfd_create(0x0, 0x80800) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000040)=0x4) ioctl$KVM_CAP_SYNC_REGS(r1, 0x4068aea3, &(0x7f0000000200)) sendmsg$key(r0, 0x0, 0x24000840) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r4, &(0x7f0000000480), 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000440)={0x1d, r6}, 0x10) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, &(0x7f0000000180)) syz_open_dev$audion(&(0x7f0000000140), 0x7fffffffffffffff, 0x100) unshare(0x22020400) socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r7 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000001c0)={'Wc9\t', 0x0, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", "000200", "00ff0200", "798a202d", ["c2fffedbff00ffdfffffffff", "ffff08000000000000042371", "070500110800c1024b00", "38a70ed483c99b9f1600d333"]}) 4.361970679s ago: executing program 2 (id=631): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e65766500001400028005000d0002000000050004000100000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.21389548s ago: executing program 0 (id=632): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0) geteuid() timer_create(0x1, &(0x7f0000000400)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6, 0x80000000, 0x3, 0x1, 0x3, 0x8000, 0x0, 0x8}, &(0x7f0000000180)={0x2, 0xeb0f, 0x1, 0xc991, 0x13, 0x0, 0x100000001, 0xac5}, &(0x7f0000000300)={0x1, 0x9, 0x4, 0x8000000000000000, 0x4, 0x100000000, 0x4, 0x400}, &(0x7f0000000380), &(0x7f0000000840)={&(0x7f00000003c0)={[0x101]}, 0x8}) 3.920075403s ago: executing program 3 (id=633): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xa, 0x3}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xc, 0x8, 0x9, 0x82}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0xffff4180, 0x0, 0x1bb, 0x4}}]}}}]}, 0x90}}, 0x4000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x575e84e267d84a90) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b02, 0x0) read$char_usb(r5, 0x0, 0x62) syz_usb_disconnect(r3) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r7 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000140), 0x4) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.872567999s ago: executing program 2 (id=634): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)={0x20, 0x6, 0xcb, {0xcb, 0x31, "e60b265273908dd44aad23b319ff7ddba446031430f1e5f7f4b1bec4f866d39abf0b5c7ab2d8c61166b054baf9a738c356adf53a01bacd75b447111f944aab560ee0838fe3a8100ebc9aa59ca41503e152bb4de9a5ea31bf633d0b08636ba5b16d06832d5855c70cdcd9104e87aecd7a1a34360bf96167415aa9575efe7bd8ec2496a08c09cb61443638dc7eba69f68fa7b8f508b9ce826c41f075dd6a04ae693cb1eeb98233d06e8be794c35f07d1f37d1fae2aa6330c4bb2d7abf19cb4d443c9fe015cd06fb77aa3"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, &(0x7f0000000300)={0x0, 0xf, 0x13d, {0x5, 0xf, 0x13d, 0x2, [@generic={0xa1, 0x10, 0x1498d16ac1272eed, "ed25c509c99dba006756c8196adaafa4302b75bb6af4debe3598b04733d58c52543a4492522326552a96a8a57489c887fc29f6ca34f2148992917744e3a5b676440c9eb09feafc4035be3c50886972b58f5655e46c6911af881dc3fef83991284b9354a1872b226dcbaaba684e2ed8eba0608da85fa5fbd9cf717d15d509748b77e4007847fdba820082ca0eca790b5d697de74adab44bc96d4fede7285b"}, @generic={0x97, 0x10, 0xf, "6a6d2f938b9c61bc1e27799f42acc883d46f14d46c98698e3b0a7a328b14679381c04d645b11ce1e4c1119f4898cc20f0d2f922d966a5289e0663e92019d3b67f1d09cbe0889bf57c580512529f3bce43818931610451fb880ce3129e99583624331ba3af37de5ee6ac97104e153cc756e2e54c6acb97354673e82b5b7c0550165fe93a24dc027977828d8638258e22d188a458d"}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7a, 0x4, 0x7f, 0x1, "dbb144de", "217df32e"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x3, 0x7, 0x1, 0x0, 0x9, 0x3}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x6c, "faffaf71ff0e2741e0b1ae4f0bd5cac9a0bfef6d0bd2c929d4623c7af87f5647c723a660f6b27f4e27d647b7cbffaa0983eabcd63f6e14b179829c4ae1f75763d7754526f6becb55c7c6b6808b5294464dde53ceebe73fe0b44538cca3149c4a8b62047cc29a28fbbc8462ac"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00\r\x00\x00\x00\x00\a'], &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5cb1"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000700)={0x40, 0x17, 0x6, @local}, &(0x7f0000000740)={0x40, 0x19, 0x2, '5}'}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xea}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x4}}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0xf) wait4(r1, 0x0, 0x2, 0x0) tkill(r1, 0x3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x40180, 0x0) read$FUSE(r2, &(0x7f0000004300)={0x2020}, 0x2020) r3 = syz_open_dev$vcsa(&(0x7f0000000940), 0x2, 0x800) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000980), 0x4) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002222000000962313060204ffc1349bc9ede501800c0000002a5a08070900be008300000000bbc4"], 0x0}, 0x0) 3.531345366s ago: executing program 1 (id=635): syz_usb_connect(0x2, 0x6b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = io_uring_setup(0x649, &(0x7f0000000a40)={0x0, 0xd66b, 0x40, 0x3, 0x2ba}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x1) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000040)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20044045) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4) syz_io_uring_setup(0x5733, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) close(r4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\vjk\xdf\a\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) 3.201797981s ago: executing program 0 (id=636): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/247, 0xf7}], 0x1) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r2 = socket(0xb, 0xa, 0xf90f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0xb47, 0x9, 0xf629, 0x80000001, 0x7}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100003, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x40000000000, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x1, 0xfffffffffffffffc, 0x4]}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000400)={{0x80}, 'port0\x00', 0xee, 0x1a1c17, 0x6, 0x0, 0x100000, 0xffffffff, 0x8}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f0000000240)={0x6, 0x1}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="cf", 0x1}], 0x1}, 0x1) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xd, r9, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r9, 0x80000001, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r8, 0xffffffffffffffff, 0x51, 0x0, @void}, 0x10) connect$can_bcm(r7, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20000078}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r9, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES8=r1, @ANYRES32=r6, @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8080, 0x0) 3.195943101s ago: executing program 4 (id=637): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './control\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) syz_usb_connect(0x2, 0xb6, &(0x7f0000000640)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932c070000464040507250103"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x2, &(0x7f0000000040)=@string={0x2}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x8b, &(0x7f0000000480)=ANY=[@ANYRES16=0x0]}, {0x5b, &(0x7f0000002700)=ANY=[@ANYBLOB="5b03b81cd1ef"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x440a}}, {0x0, 0x0}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) inotify_init1(0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x2f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x947}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x2b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r2], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b80"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) unshare(0x40000000) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) 1.496461646s ago: executing program 0 (id=638): r0 = socket(0x1e, 0x7038e68ab90af86e, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x8, 0x4) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="040180ff", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542b0000880ac000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00fffc00000000ff020000000000000000000000000001000000001400040002000000ac1414aa00000000000000004800098028000080060001000a0000001400020000000000000000000000ffffe000000205000300000000001cbcb47def472350ce00000008000200e0000002050003000000000014000200776730"], 0x104}}, 0x0) fsopen(&(0x7f0000000080)='hpfs\x00', 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r8, 0x7af, &(0x7f0000000140)={@hyper, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f0000000080)={&(0x7f0000000800)=[0xfffff801, 0x4, 0x401, 0x3, 0x7, 0x2, 0x7fffffff, 0x1, 0x7, 0x2, 0x9, 0x6, 0xffffffff, 0x10001, 0x6, 0x6, 0xcad9, 0x636b79c1, 0x9, 0xf, 0x1, 0x3, 0xad67, 0x5, 0x5, 0x8000, 0x4, 0x8000, 0x3ff, 0x6, 0x1, 0x7, 0x99, 0x4, 0x9, 0xffff1e1b, 0xd5f, 0x1df000, 0x500, 0xb, 0x6a0, 0x0, 0x8, 0x4, 0x7, 0xffff8000, 0x7, 0x9, 0x6, 0x0, 0x10, 0xfffffff7, 0x0, 0xe36, 0xffff18f9, 0x7fff, 0x4, 0x200, 0x8000, 0x0, 0xd, 0x8f8a, 0x200, 0x3, 0xa2, 0x3, 0x8, 0xfffffffd, 0x1aac, 0x4, 0x9, 0x1, 0x5, 0xd, 0x7, 0x2, 0x3, 0xc1, 0x7, 0x1, 0x6, 0x100, 0x6, 0x40, 0x5, 0xff, 0x9, 0x2, 0x101, 0x81, 0x21, 0x7, 0x7fffffff, 0x1ff, 0x0, 0xe29c, 0x2, 0x9, 0x7, 0xebd4, 0x8, 0x80000001, 0x4c, 0x3, 0x5, 0xffff, 0x3, 0x0, 0x8, 0x9, 0x6, 0x6, 0xd10, 0x80, 0xffffff40, 0x101, 0x1000, 0xab48, 0xe92, 0x9, 0x4f97, 0x9, 0xbb78, 0x7, 0x7, 0x4, 0x6, 0xffffffff, 0x5, 0x559c, 0x10000, 0x2, 0x8, 0x8, 0x5, 0x80, 0x5, 0x1, 0x2, 0xfffffffb, 0x10, 0x6, 0x0, 0x80, 0x7, 0x1fee0412, 0x58a, 0x7, 0x0, 0x7, 0x1b, 0x0, 0x6, 0x2, 0x0, 0x4, 0x4, 0x10001, 0x237, 0x80000001, 0x5, 0x9, 0x8, 0x400, 0x8, 0x3, 0xffffffff, 0x8000, 0x5, 0x400, 0x536, 0x1ff, 0x64b, 0x80, 0x8000, 0xa, 0xb8e, 0x4, 0x7f, 0x0, 0x2, 0x8000, 0x4, 0x8, 0x6, 0x9, 0x1, 0x9, 0x7, 0x5, 0x6, 0x81, 0xa, 0x3, 0x9, 0x6, 0xe, 0x5, 0xeb4b, 0x8, 0x7fffffff, 0x3, 0xc73, 0x6, 0x0, 0x6, 0x5, 0x6, 0xeaab1946, 0x0, 0x5, 0x8, 0x94b, 0x1a76, 0x7, 0x3, 0x4, 0x7fffffff, 0x5, 0x8001, 0x7fffffff, 0x5, 0xc960000, 0x9, 0x80000000, 0xc, 0x1, 0x80000001, 0x1, 0xc, 0x5, 0x2, 0x1f, 0xffffffff, 0x2, 0x0, 0x5, 0x6e, 0x80000001, 0x4, 0x3, 0x9, 0x20, 0x1, 0xe, 0xbf, 0x9, 0x19344b89, 0x655, 0x0, 0x3, 0x1ff, 0x8, 0x3, 0x2, 0x1000, 0x9, 0x2, 0x7ff, 0x1, 0x3, 0x1004000, 0x4, 0x0, 0x4, 0x80, 0x3, 0x60000000, 0x10, 0x4, 0x1ff, 0x0, 0xfc000000, 0x5, 0x31b, 0x1ff, 0xa, 0xdfe, 0x7, 0x7, 0x3, 0x8, 0x4, 0x7ff, 0x1000, 0xffffff42, 0x2, 0x4, 0x3, 0x4, 0x7, 0x5, 0x3, 0x7, 0x7, 0x4, 0xe029, 0x0, 0x6, 0x7, 0x0, 0x49cd, 0xffffffff, 0x6, 0x3, 0x9, 0x20000000, 0x3, 0x8, 0x6, 0x9, 0x3, 0x80000000, 0x8ca, 0x9, 0x101, 0x5, 0xfffffe01, 0x3, 0x7f, 0x3, 0xdd5, 0xed, 0x3, 0x1ff, 0x3, 0x1, 0x7, 0x5, 0xe0c2, 0xe85, 0xff, 0x10001, 0x3ff, 0x9, 0x5, 0xb, 0x9, 0x5, 0x3, 0x80000001, 0x6, 0x10000, 0xf, 0x1, 0x3, 0x2a96de3d, 0x2, 0x89c, 0x80000000, 0x0, 0x5, 0x0, 0xfff, 0x1800000, 0x7, 0xd2, 0xb802, 0x80000000, 0x9, 0x30000, 0x7fff, 0x0, 0x2, 0x2, 0x9, 0x5, 0x9, 0x7, 0x1, 0x9, 0xffffffff, 0x0, 0x80000000, 0x5, 0x400, 0x7, 0xa73, 0x7, 0x8, 0x8, 0x6, 0x4, 0x1ff, 0x3, 0x2183, 0xdf1, 0xff, 0xff, 0x3bf317c9, 0x2, 0x8, 0x0, 0x4, 0xd, 0x3, 0x6, 0xf33, 0x8, 0x7, 0x8, 0x7, 0xffffffff, 0x10, 0x8000, 0x3, 0x350, 0x4, 0x5, 0xe, 0x80000000, 0x3, 0x445, 0x2184, 0x9, 0x1, 0x5, 0x4, 0xffffffff, 0x200, 0x6, 0x2, 0x400003, 0x7, 0x6, 0x3, 0x0, 0x6, 0xfffffeda, 0x0, 0x6, 0x4, 0x401, 0x1, 0x400, 0x9, 0x8, 0x2, 0x4, 0x5, 0x1, 0x81b, 0x9, 0x80, 0x9, 0xff, 0x6, 0x9, 0x4, 0x9, 0xffffffff, 0x7, 0x4, 0x9, 0x2, 0x3, 0x5d, 0x3, 0x3, 0x1b, 0x6, 0x15, 0xd87, 0x7, 0x40, 0x13, 0x845, 0x8000, 0x2, 0x824, 0x7, 0x80000001, 0x6, 0x23, 0x8, 0x1000, 0x1, 0xbf10, 0xe, 0x4, 0x7, 0x9, 0x2b, 0x8, 0xda0, 0x5, 0x3, 0x1dc, 0x6, 0x7, 0x7, 0xc, 0xfffffff9, 0xfffffffc, 0x400, 0x3, 0x3, 0xb, 0xffff4696, 0x61, 0xe0000000, 0xfffffff6, 0x9, 0x5, 0x9, 0x8, 0x0, 0x6, 0xfa, 0x8, 0x7, 0x8, 0x5, 0xe, 0x0, 0x4, 0x4, 0x0, 0x5, 0x7f, 0x2000, 0x10000, 0x10001, 0x6, 0x7, 0x6, 0x8, 0xc10, 0x7, 0xaabc, 0x5fc3, 0x6, 0x81, 0x7d094b8, 0x7, 0x9, 0x2, 0x1, 0x1, 0x7, 0x800, 0x8, 0xfffffff8, 0xfffffff8, 0x0, 0x0, 0x45e8, 0xc, 0x0, 0xcb4b, 0x3, 0x1, 0x2, 0x7, 0x3, 0xd12, 0x6, 0x9, 0x6, 0xffff45dd, 0x6, 0x8000, 0x0, 0x0, 0x6, 0x3, 0x5, 0x9, 0xd743, 0x6, 0x0, 0x7, 0x5, 0xfffffff7, 0xdd, 0x9, 0x1, 0x9, 0x6, 0x3, 0x8, 0x5, 0x8001, 0x4, 0xd, 0x6, 0x0, 0x5, 0x7, 0x919, 0x80000001, 0x9, 0x0, 0x7ff, 0x4, 0x1, 0x8, 0x2c000000, 0x7, 0x6, 0x1, 0x1, 0x0, 0x3, 0xe, 0x0, 0x2, 0x6, 0xffff, 0x1, 0x10001, 0x101, 0x41c1, 0x3, 0x8000, 0x4, 0x2, 0x5, 0xb, 0x5, 0x671e, 0x9, 0xba, 0x2, 0x1, 0x8001, 0x8, 0x2000, 0x4, 0x2ab, 0x5, 0x1, 0x80, 0x80000000, 0xfffffffd, 0x4, 0xb, 0xeaa, 0x6, 0x10000, 0x11, 0x9, 0x2, 0xfffeffff, 0x4, 0x3, 0x80, 0x0, 0x9, 0x800, 0x7, 0x67, 0x2, 0x4, 0xfffffffc, 0x6, 0x1, 0xe, 0x40, 0x8, 0x800, 0x6, 0x3, 0x8, 0x4, 0x3, 0x7, 0x7, 0x10000, 0x2, 0xfffffffd, 0x7, 0x4fad94f8, 0x2, 0xffff, 0xd8b7ea2, 0x4, 0xe, 0x8, 0x8, 0x8e63, 0x9, 0x0, 0x0, 0x14, 0xf, 0xffff, 0x0, 0x84, 0x8000, 0x9, 0x2, 0x9, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x0, 0x9, 0x4, 0x9, 0xd2, 0x8dcc, 0x401, 0x8, 0x80, 0xfab6, 0x1c11, 0x4, 0x7, 0x9, 0x4, 0x9, 0xff, 0x1943, 0x84, 0x8001, 0x7ff, 0x1, 0x8000, 0xffffffff, 0x1, 0x4, 0x196a, 0x1, 0x9, 0x7, 0x3, 0x1, 0x6, 0x2, 0x5, 0x1ff, 0x166304f4, 0x4, 0x5, 0x8626, 0x2378, 0x3, 0x3, 0x4, 0x4, 0xce6a, 0x3, 0x17a000, 0x3, 0x4, 0x9, 0x1, 0x8, 0x5, 0x65, 0x2, 0xe, 0x40000000, 0x2, 0x4, 0xccd1, 0x3, 0x10000, 0x8, 0x8, 0x80000, 0x8, 0x10, 0x2, 0x0, 0x1, 0x7, 0x4ed, 0x3b1, 0x1, 0xff, 0x401, 0x10, 0x5, 0x2, 0x10000, 0x5, 0x80, 0x2, 0xffff, 0x825d, 0x10000, 0x6, 0x95, 0x6, 0x4, 0x1, 0x3, 0x0, 0x9, 0x7, 0x7, 0x5000000, 0x5, 0x10, 0x1, 0xfffffff8, 0x6, 0x106, 0x3, 0x80000000, 0x0, 0x1, 0x0, 0x7, 0x7, 0x480, 0x7, 0x250, 0xe, 0x8, 0x7f, 0xfffffbff, 0xfff, 0x2293, 0x91, 0x5, 0x9, 0x400, 0x0, 0x5, 0x3, 0x42, 0xfffffeff, 0x848, 0x8, 0x7, 0x48000, 0x7fffffff, 0x2d62, 0x2, 0x80000000, 0x35, 0x2, 0x9, 0x2, 0x2, 0x7, 0x5, 0x2b5, 0xd96d, 0x3, 0x6, 0x2, 0x10000, 0x38, 0x1, 0x0, 0x5, 0x800, 0xecc7, 0x4, 0x2, 0x81, 0x7, 0x6, 0x72bd3e53, 0x9, 0xca9e, 0x2523, 0x101, 0x7, 0x556c, 0x1, 0xbdfb, 0x9c1, 0x8, 0xfffffc01, 0x9, 0x3, 0x649, 0x6, 0x1, 0x0, 0x8, 0x0, 0xb25, 0x9, 0xa5, 0x10001, 0xfffffff8, 0x6, 0x2, 0x4, 0x2, 0x200, 0xb, 0x4, 0x9, 0x0, 0xffff, 0xffffff60, 0x5, 0xc, 0x200, 0x0, 0x8, 0x0, 0xfffffff9, 0xaedf, 0x3, 0x1, 0x0, 0xfff, 0x96c000, 0xffff, 0x40, 0xce42, 0x945, 0xffffffff, 0x2, 0x9, 0x1, 0x9, 0x6, 0x133d540c, 0x7, 0x10000, 0xffffa2f1, 0x1, 0x6, 0x6, 0xc, 0x9, 0x8f3, 0x8, 0x2, 0x7, 0x10000, 0x6d4d13b0, 0x3f2, 0xfffffff7, 0x9, 0xfffffffd, 0x5, 0x3, 0xd7b, 0x10001, 0x7, 0x6b5, 0x80000000, 0xab1c, 0x6, 0x1d, 0x8000, 0x6, 0x5, 0x5, 0x8, 0xe3d, 0x3, 0xfffffffb, 0xfe, 0xba19, 0xff, 0x1, 0x2, 0x3, 0x8f, 0x3, 0x1, 0xfffffff7, 0x1, 0x6, 0x8001, 0x0, 0x1, 0x80, 0xe, 0x0, 0x2, 0x3, 0xfffffffc, 0x6, 0x24000000, 0x1287, 0x1, 0x401, 0xa, 0x4, 0x7, 0xfffffff7, 0x0, 0x101, 0x0, 0x20000000, 0x100, 0x200, 0x0, 0x1, 0x35, 0x0, 0x80000000, 0x7f, 0xfffffffb, 0x30000000, 0x1, 0xfffffffe, 0x3ff, 0x10001, 0x7, 0x4, 0x86, 0xe85, 0x6, 0xe0000000, 0x8, 0x100, 0xc, 0x9, 0x80000001, 0x56620000, 0x0, 0x7ff, 0x395b, 0xc00000, 0x2, 0x1, 0x3, 0xb24, 0x1000], 0x1, 0x400, 0x7e}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) 1.482571343s ago: executing program 1 (id=639): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002100)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0xfffffffd) socket(0x28, 0xa, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x28c, 0x38, 0x20, 0x70bd26, 0x25dfdbfc, {0x1e}, [@generic="7afaf8fa314e67c3206e5acc22f2302426d57a52bceed58b027d216edd95252610d043f629d633ec8322640321", @typed={0xfc, 0x69, 0x0, 0x0, @binary="94094a9104afdbde6523d4b6630b2f0d9a991e3216c36531ce722de173e90cb83882567a2944762c07e7eea8d5d6d1cee507570c9f0514902dc450fc4b381e152e4aa7339c1c9c925e6d902234877f7ed7923537c81ee9791496d6c8844fc16b74a04e233042494d53def436e8df65ef50e7004ef4a82e743bbccc00bd3f9670dfa671a1ee1adb1a0a2e18ab1e3f2b18c8e8265b5bad75ea12f1f84240f490943a1370ebce664bbd3ef2265b759b353ee767f507fa64031540a5373c8d3fbd939d3c64943ff1d488aa1c4193092dd663c162a22296e7f85aa86fb170ae74b192101b2b9387273aac5a47e53a58b1a4b179ca50e3a86c3e48"}, @generic="778863b102fe063fc918ad9eb5a08e4408251d143ae0cf102859c1900df51dce5f264b107e1f9c95e6acd8837db5d238c0c454088cbef25dc91cc23564c0df563ab9bc192ae81eee823c7fb9b88a83cb8173eb9a90b83ddb83b9015d87b29b26aaa98018deac2327241d5748ea8c0b2c0de3a8c1dc87514dbac474625ae6993f589962d60742884c3a12b48c880c57e9a62dc7d8d13ae56b3afc46dc4654e296ab2c6f9bd09180f9a870416ed0f702", @nested={0x9f, 0xf4, 0x0, 0x1, [@typed={0x8, 0x148, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x94}, @generic="6e1cb1825ba81d78a07a5d35e5095425c944e60f924a1d3608b73e819ed1a42dda104dbb43138feaf563b6ab3ddc654a5f4a51a90e7ed89e51dacaa60d54fab3bf899ddf71f3239da599b4b186499fb9d705b45f56d4bc8908266c352346ba6b4b428ec60ad3aefdcf71c10d4cc7d12afa9c8783ef2c93795ae9b689263cdf7e2d0a17ae7274f545949e7cc4157d36"]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x206a2e2c, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 1.248501038s ago: executing program 1 (id=640): r0 = fsopen(&(0x7f00000001c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x40000000015, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000c14010026bd7000fddbdf2508003d0005000000080003000000000008003d0002000000080e03000400000008003d000300000008003d0001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x44080) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0xf7ffffff}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) unlinkat(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) ioctl$TUNSETLINK(r3, 0x400454cd, 0x104) mq_open(&(0x7f0000000300)='&\x00w\xb4N6Bf\xa9\xc2\xb5U\xa2\x7f^\xdb\xd9\xf8\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\x98\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z9B[B\xf63\xaa|\x86\xa5\t\xb5\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa0\x02K\xdd\xb8og\xdcJ\xe2]\xef\x87\xafs\x1f\x9e\xa5', 0x1, 0x1a2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000002c0)={0x6, 0x5, 0x0, 0x800, 0x3, [0xd, 0xff, 0x2, 0x9]}) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000190001090000000020000000021800000002fd010000000008000100ac1414000800050064010100100000000000000000000000000000006f67c7c4d0d5f0184e726177a85934f513d9e48ec141f2d78fa3dda0689ff2f32004613fab4078460d7964c7d62ca60a50c71e1e10f4ba476743f5bc6df7c1790917f897b1138b72bc9496f24ccf1c1a54a4967440bf8a668f99a23867275a37a0b44d173283a9f97026"], 0x3c}}, 0x0) 1.136972562s ago: executing program 1 (id=641): unshare(0x2a020400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000072, 0x0, 0x7ff}]}) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x841, 0x1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) 881.679042ms ago: executing program 1 (id=642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, r1, 0x21, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 684.256112ms ago: executing program 1 (id=643): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x20000000000000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x4, 0x9, 0x9, 0xbe9, 0x7f]}, &(0x7f00000001c0)=0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f0000001540)=""/4096, 0x1000}, &(0x7f0000000240)=0x40) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc0200"/108], 0x84}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x1, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xb}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00 \x00', 0x8) r8 = accept(r7, 0x0, 0x0) sendmmsg$inet_sctp(r8, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000003800)="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", 0x1000}, {&(0x7f0000000180)="cf", 0x1}], 0x3, 0x0, 0x0, 0x800}], 0x1, 0x20008000) syz_emit_ethernet(0x8d, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd, 0x27, 0x0, [], "20226f1a86609d8f57ad212589f8031c500760fa7a49c6fa36c68fcee0691ab1ee571477594804"}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 619.822853ms ago: executing program 2 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xdd, 0xb, 0x1}}}}]}, 0x40}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000001c0)={"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"}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x0, 0x97, 0x40, 0xa4}}]}}]}}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) 600.75813ms ago: executing program 0 (id=645): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000780)=""/101, 0x65}, {&(0x7f0000000040)=""/49, 0x31}, {&(0x7f0000002000)=""/4089, 0xff9}, {&(0x7f0000000800)=""/237, 0xed}, {&(0x7f0000000c00)=""/80, 0x50}, {&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000001f40)=""/170, 0xaa}], 0xb}, 0x40010022) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffc3}, 0x10182) 170.08387ms ago: executing program 3 (id=646): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (async) mmap(&(0x7f000073c000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0xfbf2b000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 64) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r7 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) (rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100ffffffff000000002f0000000e0001006e657464657673696df8ffff0e0002006e547464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0xd}) (async, rerun: 64) io_uring_enter(r7, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r12 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 0s ago: executing program 0 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) futex(&(0x7f0000000700)=0x2, 0x85, 0x2, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d", 0x7313485bca3e9141}], 0x1}}], 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x100010d, &(0x7f0000000540)={0x0, 0x0, 0x20, 0x1, 0x0, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) fchdir(r7) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r10 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x20000002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r13 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r8, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) sendmsg$nl_generic(r13, 0x0, 0xc000) kernel console output (not intermixed with test programs): form/dummy_hcd.1/usb2/2-1/input/input19 [ 162.652136][ T6789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.654610][ T5833] usb 3-1: USB disconnect, device number 18 [ 162.718209][ T5907] dvb-usb: schedule remote query interval to 400 msecs. [ 162.733626][ T6809] FAULT_INJECTION: forcing a failure. [ 162.733626][ T6809] name failslab, interval 1, probability 0, space 0, times 0 [ 162.756335][ T5907] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 162.777267][ T5907] usb 2-1: USB disconnect, device number 12 [ 162.783904][ T6809] CPU: 1 UID: 0 PID: 6809 Comm: syz.4.203 Not tainted syzkaller #0 PREEMPT(full) [ 162.783924][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.783933][ T6809] Call Trace: [ 162.783945][ T6809] [ 162.783952][ T6809] dump_stack_lvl+0xe8/0x150 [ 162.783976][ T6809] should_fail_ex+0x414/0x560 [ 162.784003][ T6809] should_failslab+0xa8/0x100 [ 162.784024][ T6809] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 162.784048][ T6809] ? __alloc_skb+0x198/0x3a0 [ 162.784063][ T6809] ? __alloc_skb+0x1dc/0x3a0 [ 162.784077][ T6809] ? __local_bh_enable_ip+0xd0/0x130 [ 162.784093][ T6809] ? __alloc_skb+0x198/0x3a0 [ 162.784109][ T6809] __alloc_skb+0x1dc/0x3a0 [ 162.784127][ T6809] netlink_sendmsg+0x5c6/0xb30 [ 162.784154][ T6809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.784176][ T6809] ? aa_sock_msg_perm+0xf1/0x1b0 [ 162.784196][ T6809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.784210][ T6809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.784230][ T6809] __sock_sendmsg+0x21c/0x270 [ 162.784255][ T6809] ____sys_sendmsg+0x505/0x820 [ 162.784277][ T6809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.784301][ T6809] ? import_iovec+0x74/0xa0 [ 162.784321][ T6809] ___sys_sendmsg+0x21f/0x2a0 [ 162.784341][ T6809] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.784383][ T6809] ? __fget_files+0x2a/0x420 [ 162.784402][ T6809] ? __fget_files+0x3a0/0x420 [ 162.784428][ T6809] __x64_sys_sendmsg+0x19b/0x260 [ 162.784448][ T6809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.784473][ T6809] ? __pfx_ksys_write+0x10/0x10 [ 162.784496][ T6809] do_syscall_64+0xec/0xf80 [ 162.784511][ T6809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.784525][ T6809] ? trace_irq_disable+0x37/0x100 [ 162.784545][ T6809] ? clear_bhb_loop+0x60/0xb0 [ 162.784563][ T6809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.784578][ T6809] RIP: 0033:0x7fdfec98f749 [ 162.784592][ T6809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.784604][ T6809] RSP: 002b:00007fdfed75e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.784620][ T6809] RAX: ffffffffffffffda RBX: 00007fdfecbe5fa0 RCX: 00007fdfec98f749 [ 162.784631][ T6809] RDX: 0000000000000804 RSI: 0000200000000040 RDI: 0000000000000003 [ 162.784641][ T6809] RBP: 00007fdfed75e090 R08: 0000000000000000 R09: 0000000000000000 [ 162.784650][ T6809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.784659][ T6809] R13: 00007fdfecbe6038 R14: 00007fdfecbe5fa0 R15: 00007fdfecd0fa28 [ 162.784682][ T6809] [ 163.151312][ T5907] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 163.281725][ T6812] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.336470][ T6817] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 163.469404][ T6817] bond1: entered promiscuous mode [ 163.562645][ T6817] bond1: entered allmulticast mode [ 163.596680][ T6817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.617199][ T6823] loop2: detected capacity change from 0 to 7 [ 163.625336][ T6823] Dev loop2: unable to read RDB block 7 [ 163.632346][ T6823] loop2: unable to read partition table [ 163.642792][ T6823] loop2: partition table beyond EOD, truncated [ 163.656488][ T6823] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 164.049328][ T5893] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 164.521135][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 164.547042][ T5893] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 164.590322][ T5893] usb 2-1: config 179 has no interface number 0 [ 164.608837][ T5893] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 164.736425][ T5893] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 164.765726][ T5893] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 164.788594][ T5893] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 164.800180][ T5893] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 164.815787][ T5893] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 164.824896][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.839202][ T6830] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 165.136671][ T5893] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input20 [ 165.397587][ T6830] syzkaller0: entered promiscuous mode [ 165.425786][ T6830] syzkaller0: entered allmulticast mode [ 165.657565][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 165.665944][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 165.704123][ T5893] usb 2-1: USB disconnect, device number 13 [ 166.502246][ T6878] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 166.623436][ T6881] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 166.748225][ T6878] team0: Port device dummy0 added [ 166.885847][ T6881] team0: Port device dummy0 removed [ 167.003882][ T6881] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 167.547583][ T6887] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 169.735713][ T5834] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 170.055692][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 170.068474][ T5834] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 170.133944][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 170.150959][ T6924] hub 9-0:1.0: USB hub found [ 170.170922][ T5834] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 170.223528][ T6924] hub 9-0:1.0: 1 port detected [ 170.230511][ T5834] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 170.270677][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.281670][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.237'. [ 170.294703][ T5834] usb 2-1: Product: syz [ 170.303022][ T5834] usb 2-1: Manufacturer: syz [ 170.308117][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.237'. [ 170.319361][ T5834] usb 2-1: SerialNumber: syz [ 170.361450][ T5834] usb 2-1: config 0 descriptor?? [ 170.383034][ T6929] team0: entered promiscuous mode [ 170.388308][ T6911] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.412875][ T5834] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 170.425683][ T6929] team_slave_0: entered promiscuous mode [ 170.431667][ T6929] team_slave_1: entered promiscuous mode [ 170.439108][ T5834] mceusb 2-1:0.0: probe with driver mceusb failed with error -12 [ 170.457503][ T6929] bond0: entered promiscuous mode [ 170.475751][ T6929] bond_slave_0: entered promiscuous mode [ 170.504190][ T6929] bond_slave_1: entered promiscuous mode [ 170.513308][ T6929] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 170.698137][ T6939] netlink: zone id is out of range [ 170.741086][ T6911] Cannot find del_set index 286 as target [ 170.750902][ T5834] usb 2-1: USB disconnect, device number 14 [ 172.420060][ T6975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.907585][ T6983] capability: warning: `syz.4.256' uses 32-bit capabilities (legacy support in use) [ 173.020092][ T6985] syzkaller1: entered promiscuous mode [ 173.042819][ T6985] syzkaller1: entered allmulticast mode [ 173.355863][ T5834] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 173.495746][ T5834] usb 5-1: device descriptor read/64, error -71 [ 173.547423][ T6993] FAULT_INJECTION: forcing a failure. [ 173.547423][ T6993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.563920][ T6993] CPU: 1 UID: 0 PID: 6993 Comm: syz.2.261 Not tainted syzkaller #0 PREEMPT(full) [ 173.563957][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.563970][ T6993] Call Trace: [ 173.563979][ T6993] [ 173.563988][ T6993] dump_stack_lvl+0xe8/0x150 [ 173.564019][ T6993] should_fail_ex+0x414/0x560 [ 173.564057][ T6993] _copy_to_user+0x31/0xb0 [ 173.564085][ T6993] simple_read_from_buffer+0xe1/0x170 [ 173.564115][ T6993] proc_fail_nth_read+0x1b3/0x220 [ 173.564140][ T6993] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.564166][ T6993] ? rw_verify_area+0x2a6/0x4d0 [ 173.564197][ T6993] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.564221][ T6993] vfs_read+0x200/0xa30 [ 173.564238][ T6993] ? fdget_pos+0x247/0x320 [ 173.564269][ T6993] ? __pfx___mutex_lock+0x10/0x10 [ 173.564292][ T6993] ? __pfx_vfs_read+0x10/0x10 [ 173.564313][ T6993] ? __fget_files+0x2a/0x420 [ 173.564344][ T6993] ? __fget_files+0x3a0/0x420 [ 173.564369][ T6993] ? __fget_files+0x2a/0x420 [ 173.564404][ T6993] ksys_read+0x145/0x250 [ 173.564427][ T6993] ? __pfx_ksys_read+0x10/0x10 [ 173.564444][ T6993] ? fput+0xa0/0xd0 [ 173.564479][ T6993] do_syscall_64+0xec/0xf80 [ 173.564501][ T6993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.564522][ T6993] ? trace_irq_disable+0x37/0x100 [ 173.564549][ T6993] ? clear_bhb_loop+0x60/0xb0 [ 173.564575][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.564594][ T6993] RIP: 0033:0x7fb177b8e15c [ 173.564613][ T6993] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 173.564630][ T6993] RSP: 002b:00007fb178af0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.564652][ T6993] RAX: ffffffffffffffda RBX: 00007fb177de5fa0 RCX: 00007fb177b8e15c [ 173.564670][ T6993] RDX: 000000000000000f RSI: 00007fb178af00a0 RDI: 0000000000000005 [ 173.564680][ T6993] RBP: 00007fb178af0090 R08: 0000000000000000 R09: 0000000000000000 [ 173.564689][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.564697][ T6993] R13: 00007fb177de6038 R14: 00007fb177de5fa0 R15: 00007fb177f0fa28 [ 173.564721][ T6993] [ 173.825716][ T5907] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 173.908861][ T5834] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 174.058066][ T5907] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.068900][ T6997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.077078][ T5834] usb 5-1: device descriptor read/64, error -71 [ 174.086576][ T5907] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 174.102770][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.122745][ T7000] binder: BINDER_SET_CONTEXT_MGR already set [ 174.132495][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 174.155477][ T7000] binder: 6999:7000 ioctl 4018620d 200000000100 returned -16 [ 174.163346][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 174.182164][ T7001] binder: BINDER_SET_CONTEXT_MGR already set [ 174.189633][ T5834] usb usb5-port1: attempt power cycle [ 174.195349][ T7001] binder: 6999:7001 ioctl 4018620d 200000000040 returned -16 [ 174.203285][ T5907] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.215951][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.244352][ T5907] usb 1-1: Product: syz [ 174.262485][ T5907] usb 1-1: Manufacturer: syz [ 174.280488][ T5907] cdc_wdm 1-1:1.0: skipping garbage [ 174.288367][ T5907] cdc_wdm 1-1:1.0: skipping garbage [ 174.300583][ T7003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.266'. [ 174.310158][ T5907] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 174.317094][ T5907] cdc_wdm 1-1:1.0: Unknown control protocol [ 174.399615][ T7018] xt_recent: Unsupported userspace flags (000000de) [ 174.483645][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.513913][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.555249][ T5834] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 174.576322][ T5834] usb 5-1: device descriptor read/8, error -71 [ 174.803414][ T5907] usb 1-1: USB disconnect, device number 13 [ 174.815706][ T5834] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 174.837006][ T5834] usb 5-1: device descriptor read/8, error -71 [ 174.946213][ T5834] usb usb5-port1: unable to enumerate USB device [ 175.605729][ T5907] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 175.629229][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 175.765676][ T5907] usb 4-1: device descriptor read/64, error -32 [ 176.100123][ T5893] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 176.275658][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 176.383451][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 176.396185][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 176.495323][ T5907] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 176.571649][ T5893] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 176.586858][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.674378][ T5907] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 176.685775][ T5907] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 176.731494][ T5893] usb 2-1: Product: syz [ 176.749217][ T5893] usb 2-1: Manufacturer: syz [ 176.756650][ T5907] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 176.766576][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.774722][ T5907] usb 4-1: Product: syz [ 176.781428][ T5907] usb 4-1: Manufacturer: syz [ 176.789563][ T5907] usb 4-1: SerialNumber: syz [ 176.924580][ T5907] usb 4-1: config 0 descriptor?? [ 176.929955][ T5893] usb 2-1: SerialNumber: syz [ 176.958791][ T5893] usb 2-1: config 0 descriptor?? [ 176.986899][ T7032] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 176.995655][ T7032] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 177.011886][ T5893] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 177.105834][ T5893] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 177.824164][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.887831][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.001065][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.014327][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.053761][ T5893] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 178.061683][ T5893] em28xx 2-1:0.0: Config register raw data: 0x00 [ 178.755689][ T5833] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 178.941086][ T5833] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 178.958130][ T5833] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 179.009324][ T5833] usb 1-1: config 171 has no interface number 0 [ 179.030692][ T5833] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 179.056290][ T5833] usb 1-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.082669][ T5833] usb 1-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 179.119789][ T5833] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 179.139230][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.155876][ T5833] usb 1-1: Product: syz [ 179.160543][ T5833] usb 1-1: Manufacturer: syz [ 179.165204][ T5833] usb 1-1: SerialNumber: syz [ 179.187322][ T7058] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 179.305786][ T5893] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 179.335145][ T5834] usb 2-1: USB disconnect, device number 15 [ 179.379633][ T5834] em28xx 2-1:0.0: Disconnecting em28xx [ 179.415725][ T5908] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 179.475635][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 179.480505][ T5834] em28xx 2-1:0.0: Freeing device [ 179.508336][ T5893] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.535079][ T5907] dm9601 4-1:0.0: probe with driver dm9601 failed with error -71 [ 179.555170][ T5907] usb 4-1: USB disconnect, device number 12 [ 179.563422][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 179.591184][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 179.609517][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.625650][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 179.646982][ T5908] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 179.668915][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 179.687159][ T5908] usb 5-1: config 8 has no interface number 0 [ 179.695643][ T5908] usb 5-1: config 8 interface 255 has no altsetting 0 [ 179.706441][ T7068] netlink: 'syz.0.276': attribute type 21 has an invalid length. [ 179.720097][ T5908] usb 5-1: string descriptor 0 read error: -22 [ 179.732490][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.745376][ T5908] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 179.756360][ T7068] netlink: 156 bytes leftover after parsing attributes in process `syz.0.276'. [ 179.777318][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 179.787872][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.807296][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 179.835874][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 179.855760][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 179.895505][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.931430][ T5893] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 179.950945][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.969399][ T5893] usb 3-1: Product: Ðœ [ 179.978779][ T5893] usb 3-1: Manufacturer: ᢼƗ泜ᙀ篟í¥á•­ï¬€à¼¦æ—亞䙋᧜뵧⮄㲄腋ح殩磄ë¶êœ¼ê¤‰ì™·ê뛾앚é•ãž¶çœŽâ˜‹â€ˆâ å€Šá†Ÿã«ç¬¬ì«½áŒºà±‚᎕뫅鎸á§ç‰†å¯Ÿé‰·ã»¥â¢¸è´»æ¾£äµ™ï…°âš½à·Ÿáƒ˜ì”玂儲άì«æ«œá¶”펤䷊奓鿓ងﶗ渹뮽头ꦘـ忬é©ç™”᧸ [ 180.048146][ T5893] usb 3-1: SerialNumber: syz [ 180.069328][ T5893] usb 3-1: config 0 descriptor?? [ 180.102326][ T5893] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.236227][ T5833] ath6kl: Failed to submit usb control message: -110 [ 180.246027][ T5833] ath6kl: unable to send the bmi data to the device: -110 [ 180.253224][ T5833] ath6kl: Unable to send get target info: -110 [ 180.269228][ T5833] ath6kl: Failed to init ath6kl core: -110 [ 180.277091][ T5833] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 180.309027][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.345878][ T5907] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 180.369976][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.384082][ T5893] usb 3-1: USB disconnect, device number 19 [ 180.465496][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.503852][ T5907] usb 4-1: device descriptor read/64, error -71 [ 180.660198][ T5908] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.4-1, 00:00:00:00:00:00. [ 180.745792][ T5907] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 180.757027][ T5908] usb 5-1: USB disconnect, device number 16 [ 180.796265][ T5893] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 180.915686][ T5907] usb 4-1: device descriptor read/64, error -71 [ 180.978587][ T5893] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 180.998080][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.026400][ T5907] usb usb4-port1: attempt power cycle [ 181.033956][ T5893] usb 3-1: config 0 descriptor?? [ 181.061309][ T5893] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 181.314737][ T5908] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 181.396536][ T5907] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 181.450427][ T5907] usb 4-1: device descriptor read/8, error -71 [ 181.465722][ T1210] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 181.630095][ T5833] usb 1-1: USB disconnect, device number 14 [ 181.705674][ T1210] usb 2-1: Using ep0 maxpacket: 16 [ 181.736280][ T5907] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 181.780884][ T5907] usb 4-1: device descriptor read/8, error -71 [ 181.798297][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.832066][ T5908] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 181.841141][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.860668][ T5908] usb 5-1: can't read configurations, error -71 [ 181.879864][ T5893] usb 3-1: USB disconnect, device number 20 [ 181.901209][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.936128][ T5907] usb usb4-port1: unable to enumerate USB device [ 181.938299][ T1210] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 181.995587][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.021113][ T1210] usb 2-1: config 0 descriptor?? [ 183.007966][ T5908] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 183.177520][ T5908] usb 5-1: device descriptor read/64, error -71 [ 183.317849][ T5908] usb usb5-port1: attempt power cycle [ 183.780503][ T30] audit: type=1800 audit(1766323783.934:49): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.286" name="bus" dev="ramfs" ino=15392 res=0 errno=0 [ 183.815782][ T5908] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 183.856390][ T5908] usb 5-1: device descriptor read/8, error -71 [ 184.075396][ T1210] usbhid 2-1:0.0: can't add hid device: -71 [ 184.092849][ T1210] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 184.149031][ T1210] usb 2-1: USB disconnect, device number 16 [ 184.165672][ T5908] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 184.213738][ T5908] usb 5-1: device descriptor read/8, error -71 [ 184.456325][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 184.510788][ T5908] usb usb5-port1: unable to enumerate USB device [ 184.655957][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.284'. [ 185.155835][ T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 187.372627][ T7103] team0 (unregistering): Port device team_slave_0 removed [ 187.409577][ T7103] team0 (unregistering): Port device team_slave_1 removed [ 187.678705][ T7124] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 187.761991][ T7124] batadv1: entered promiscuous mode [ 187.781552][ T7124] team0: Port device batadv1 added [ 189.175642][ T5908] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 189.412332][ T5908] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 189.429253][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.462345][ T5908] usb 1-1: Product: syz [ 189.480532][ T5908] usb 1-1: Manufacturer: syz [ 189.492008][ T5908] usb 1-1: SerialNumber: syz [ 189.650040][ T5908] usb 1-1: config 0 descriptor?? [ 189.803673][ T30] audit: type=1800 audit(1766323789.964:50): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.299" name="bus" dev="ramfs" ino=15544 res=0 errno=0 [ 190.482332][ T5908] usb 1-1: Firmware version (0.0) predates our first public release. [ 190.505450][ T5908] usb 1-1: Please update to version 0.2 or newer [ 190.735166][ T7167] tipc: Started in network mode [ 190.766872][ T7167] tipc: Node identity c605c222ef3, cluster identity 4711 [ 190.813428][ T30] audit: type=1326 audit(1766323790.974:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb177b8f749 code=0x0 [ 190.814641][ T7167] tipc: Enabled bearer , priority 0 [ 190.837757][ T5908] usb 1-1: USB disconnect, device number 15 [ 190.900901][ T7175] syzkaller0: entered promiscuous mode [ 190.926585][ T7175] syzkaller0: entered allmulticast mode [ 191.051432][ T7167] tipc: Resetting bearer [ 191.084891][ T7165] tipc: Resetting bearer [ 191.110430][ T7165] tipc: Disabling bearer [ 191.256054][ T5893] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 191.407541][ T5893] usb 3-1: config 0 has no interfaces? [ 191.413298][ T5893] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 191.479197][ T7195] openvswitch: netlink: Multiple metadata blocks provided [ 191.528087][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.551331][ T5893] usb 3-1: config 0 descriptor?? [ 191.654230][ T7197] netlink: 76 bytes leftover after parsing attributes in process `syz.1.310'. [ 191.893373][ T5893] usb 3-1: USB disconnect, device number 22 [ 191.953726][ T7205] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 192.592824][ T7218] netlink: 'syz.1.315': attribute type 1 has an invalid length. [ 192.667407][ T30] audit: type=1800 audit(1766323792.804:52): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.314" name="bus" dev="ramfs" ino=15640 res=0 errno=0 [ 193.117411][ T5833] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 193.134794][ T7218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.185806][ T7219] bond1: (slave geneve2): making interface the new active one [ 193.238712][ T7219] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 193.296558][ T5893] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 193.305747][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 193.314530][ T5833] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 193.334737][ T5833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.370351][ T5833] usb 3-1: config 0 has no interface number 0 [ 193.406216][ T5833] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 193.437639][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.448408][ T5833] usb 3-1: Product: syz [ 193.455714][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 193.465162][ T5833] usb 3-1: Manufacturer: syz [ 193.470428][ T5833] usb 3-1: SerialNumber: syz [ 193.480925][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.496350][ T5833] usb 3-1: config 0 descriptor?? [ 193.511615][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.535777][ T5893] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 193.572560][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.607306][ T5893] usb 5-1: config 0 descriptor?? [ 193.661957][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 193.747521][ T7222] 8021q: VLANs not supported on vcan0 [ 193.761239][ T6381] usb 3-1: USB disconnect, device number 23 [ 193.837783][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 193.847055][ T10] usb 4-1: config 0 has no interfaces? [ 193.852703][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 193.880836][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.911193][ T10] usb 4-1: config 0 descriptor?? [ 194.144246][ T5908] usb 4-1: USB disconnect, device number 17 [ 194.635732][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 194.787548][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.817182][ T10] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 194.842332][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.879172][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.721359][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.732674][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.744404][ T10] usb 1-1: Product: syz [ 195.750695][ T10] usb 1-1: Manufacturer: syz [ 195.783354][ T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 196.036698][ T7255] FAULT_INJECTION: forcing a failure. [ 196.036698][ T7255] name failslab, interval 1, probability 0, space 0, times 0 [ 196.077517][ T7255] CPU: 1 UID: 0 PID: 7255 Comm: syz.1.328 Not tainted syzkaller #0 PREEMPT(full) [ 196.077547][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.077561][ T7255] Call Trace: [ 196.077569][ T7255] [ 196.077579][ T7255] dump_stack_lvl+0xe8/0x150 [ 196.077612][ T7255] should_fail_ex+0x414/0x560 [ 196.077651][ T7255] should_failslab+0xa8/0x100 [ 196.077679][ T7255] __kmalloc_noprof+0xdf/0x800 [ 196.077701][ T7255] ? kfree+0x4d/0x660 [ 196.077728][ T7255] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 196.077763][ T7255] tomoyo_realpath_from_path+0xe3/0x5d0 [ 196.077794][ T7255] ? tomoyo_domain+0xd8/0x130 [ 196.077827][ T7255] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 196.077850][ T7255] tomoyo_path_number_perm+0x1e8/0x5a0 [ 196.077876][ T7255] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 196.077898][ T7255] ? __lock_acquire+0x6b6/0x2cf0 [ 196.077935][ T7255] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 196.077983][ T7255] ? __fget_files+0x2a/0x420 [ 196.078012][ T7255] ? __fget_files+0x2a/0x420 [ 196.078036][ T7255] ? __fget_files+0x3a0/0x420 [ 196.078056][ T7255] ? __fget_files+0x2a/0x420 [ 196.078081][ T7255] security_file_ioctl+0xcb/0x2d0 [ 196.078100][ T7255] __se_sys_ioctl+0x47/0x170 [ 196.078130][ T7255] do_syscall_64+0xec/0xf80 [ 196.078148][ T7255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.078164][ T7255] ? trace_irq_disable+0x37/0x100 [ 196.078187][ T7255] ? clear_bhb_loop+0x60/0xb0 [ 196.078208][ T7255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.078225][ T7255] RIP: 0033:0x7f9f1d18f749 [ 196.078240][ T7255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.078256][ T7255] RSP: 002b:00007f9f1e086038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.078275][ T7255] RAX: ffffffffffffffda RBX: 00007f9f1d3e6090 RCX: 00007f9f1d18f749 [ 196.078288][ T7255] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 196.078298][ T7255] RBP: 00007f9f1e086090 R08: 0000000000000000 R09: 0000000000000000 [ 196.078309][ T7255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.078319][ T7255] R13: 00007f9f1d3e6128 R14: 00007f9f1d3e6090 R15: 00007f9f1d50fa28 [ 196.078346][ T7255] [ 196.078705][ T7255] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.586539][ T10] usb 1-1: USB disconnect, device number 16 [ 196.980383][ T30] audit: type=1800 audit(1766323797.064:53): pid=7254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.327" name="bus" dev="ramfs" ino=15006 res=0 errno=0 [ 197.045172][ T7279] tipc: Enabled bearer , priority 10 [ 197.121301][ T7267] could not allocate digest TFM handle sha224-arm64 [ 197.410095][ T7283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.333'. [ 197.490559][ T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 197.713732][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.743649][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.766887][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 197.896501][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.961667][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.037658][ T5908] tipc: Node number set to 691388962 [ 198.045946][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.061923][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.186170][ T5835] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 198.325691][ T5835] usb 2-1: device descriptor read/64, error -71 [ 198.575659][ T5835] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 198.731668][ T5835] usb 2-1: device descriptor read/64, error -71 [ 198.876406][ T5835] usb usb2-port1: attempt power cycle [ 198.877790][ T5893] usbhid 5-1:0.0: can't add hid device: -32 [ 198.891852][ T5893] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 199.465677][ T5835] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 199.486537][ T5835] usb 2-1: device descriptor read/8, error -71 [ 199.600112][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.606557][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.735677][ T5835] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 199.766585][ T5835] usb 2-1: device descriptor read/8, error -71 [ 199.894481][ T5835] usb usb2-port1: unable to enumerate USB device [ 201.208350][ T5893] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 201.336167][ T7315] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 201.365652][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 201.427872][ T5893] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 201.442835][ T5893] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 201.452266][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.461649][ T5893] usb 4-1: Product: syz [ 201.470334][ T5893] usb 4-1: Manufacturer: syz [ 201.474994][ T5893] usb 4-1: SerialNumber: syz [ 201.516496][ T5893] usb 4-1: config 0 descriptor?? [ 201.528676][ T5893] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 201.540914][ T5893] usb 4-1: Detected FT232R [ 201.746082][ T5893] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 201.775777][ T5835] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 201.893536][ T7330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.919409][ T7330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.973878][ T7330] netlink: 44 bytes leftover after parsing attributes in process `syz.4.346'. [ 201.986340][ T5893] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32 [ 202.015880][ T5835] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 202.113957][ T5835] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 202.115347][ T5893] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 202.147300][ T5835] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 202.169268][ T5835] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.400176][ T5835] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.434799][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.466389][ T5893] usb 4-1: USB disconnect, device number 18 [ 202.509707][ T5893] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 202.545439][ T7320] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 202.564875][ T5893] ftdi_sio 4-1:0.0: device disconnected [ 202.579382][ T5835] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.618143][ T5835] usb 1-1: invalid MIDI out EP 0 [ 202.822526][ T5835] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 204.775678][ T7353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.350'. [ 204.795865][ T5893] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 205.438512][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.470569][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.502005][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.352'. [ 206.788278][ T5835] usb 1-1: USB disconnect, device number 18 [ 207.246085][ T5908] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 207.455729][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 207.505784][ T5908] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 207.530360][ T5908] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 207.575738][ T5908] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.630476][ T5908] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 207.780494][ T5908] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 207.805198][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.855049][ T5908] usb 1-1: Product: syz [ 207.882659][ T5908] usb 1-1: Manufacturer: syz [ 207.895920][ T5908] usb 1-1: SerialNumber: syz [ 207.971440][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 208.049609][ T5908] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input22 [ 208.154735][ T30] audit: type=1326 audit(1766323808.244:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb177b8f749 code=0x7ffc0000 [ 208.248955][ T5908] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 208.258698][ T30] audit: type=1326 audit(1766323808.244:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb177b8f749 code=0x7ffc0000 [ 208.371815][ T5908] (id 0x00) [ 208.394364][ T30] audit: type=1326 audit(1766323808.244:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb177b8f749 code=0x7ffc0000 [ 208.573064][ T30] audit: type=1326 audit(1766323808.244:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb177b8f749 code=0x7ffc0000 [ 208.628735][ T5908] rc_core: IR keymap rc-imon-pad not found [ 208.634631][ T5908] Registered IR keymap rc-empty [ 208.649001][ T5908] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 208.667075][ T5908] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 208.716660][ T5908] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 208.803981][ T5908] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input23 [ 208.830377][ T30] audit: type=1326 audit(1766323808.244:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb177b8f749 code=0x7ffc0000 [ 208.843496][ T5908] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:19> initialized [ 208.964581][ T30] audit: type=1326 audit(1766323808.244:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb177b8f749 code=0x7ffc0000 [ 209.004943][ T7394] fuse: Bad value for 'fd' [ 209.042472][ T30] audit: type=1326 audit(1766323808.244:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb177b8f749 code=0x7ffc0000 [ 209.113892][ T30] audit: type=1326 audit(1766323808.244:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb177b8f749 code=0x7ffc0000 [ 209.198310][ T7374] imon:send_packet: packet tx failed (-71) [ 209.205730][ T1210] usb 1-1: USB disconnect, device number 19 [ 209.230598][ T30] audit: type=1326 audit(1766323808.244:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb177b8f749 code=0x7ffc0000 [ 209.253171][ T7374] imon:vfd_write: send packet #1 failed [ 209.380599][ T30] audit: type=1326 audit(1766323808.244:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb177b8f749 code=0x7ffc0000 [ 209.957617][ T7402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.978466][ T7402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.355639][ T5893] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 210.465644][ T1210] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 210.473425][ T5833] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 210.515659][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 210.521564][ T5893] usb 3-1: no configurations [ 210.526584][ T5893] usb 3-1: can't read configurations, error -22 [ 210.637840][ T5833] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 210.649766][ T5833] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 210.663102][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.676473][ T5893] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 210.693419][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.705065][ T5833] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 210.725393][ T1210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.742127][ T5833] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.776429][ T1210] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.789024][ T5833] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.809480][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.820229][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.836856][ T1210] usb 4-1: config 0 descriptor?? [ 210.845629][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 210.853065][ T5893] usb 3-1: no configurations [ 210.864653][ T7407] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 210.866683][ T5893] usb 3-1: can't read configurations, error -22 [ 210.905455][ T5893] usb usb3-port1: attempt power cycle [ 210.932280][ T5833] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.978418][ T5833] usb 1-1: invalid MIDI out EP 0 [ 211.157759][ T1210] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 211.311988][ T5893] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 211.357332][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 211.365269][ T5893] usb 3-1: no configurations [ 211.373541][ T5893] usb 3-1: can't read configurations, error -22 [ 211.424866][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.467528][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.875982][ T5893] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 211.899856][ T5833] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 211.931862][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 211.931885][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 211.940881][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 211.944744][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 211.967248][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 211.975332][ T5893] usb 3-1: no configurations [ 211.980858][ T5893] usb 3-1: can't read configurations, error -22 [ 211.988900][ T5893] usb usb3-port1: unable to enumerate USB device [ 213.020830][ T7417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.030052][ T7417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.057528][ T7417] netlink: 32 bytes leftover after parsing attributes in process `syz.4.368'. [ 213.110422][ T24] usb 4-1: USB disconnect, device number 19 [ 213.616958][ T1210] usb 1-1: USB disconnect, device number 20 [ 214.186348][ T7433] FAULT_INJECTION: forcing a failure. [ 214.186348][ T7433] name failslab, interval 1, probability 0, space 0, times 0 [ 214.235396][ T7433] CPU: 0 UID: 0 PID: 7433 Comm: syz.2.373 Not tainted syzkaller #0 PREEMPT(full) [ 214.235427][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.235441][ T7433] Call Trace: [ 214.235450][ T7433] [ 214.235459][ T7433] dump_stack_lvl+0xe8/0x150 [ 214.235493][ T7433] should_fail_ex+0x414/0x560 [ 214.235536][ T7433] should_failslab+0xa8/0x100 [ 214.235563][ T7433] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 214.235599][ T7433] ? __alloc_skb+0x1dc/0x3a0 [ 214.235618][ T7433] ? __local_bh_enable_ip+0xd0/0x130 [ 214.235641][ T7433] ? __alloc_skb+0x198/0x3a0 [ 214.235665][ T7433] __alloc_skb+0x1dc/0x3a0 [ 214.235692][ T7433] alloc_skb_with_frags+0xca/0x890 [ 214.235721][ T7433] ? unwind_next_frame+0xa5/0x23d0 [ 214.235757][ T7433] tcp_send_rcvq+0x13e/0x520 [ 214.235787][ T7433] ? __pfx_tcp_send_rcvq+0x10/0x10 [ 214.235817][ T7433] ? tcp_rate_check_app_limited+0x1ab/0x350 [ 214.235853][ T7433] tcp_sendmsg_locked+0x4d9d/0x5520 [ 214.235883][ T7433] ? is_bpf_text_address+0x292/0x2b0 [ 214.235924][ T7433] ? is_bpf_text_address+0x26/0x2b0 [ 214.235960][ T7433] ? kernel_text_address+0xa5/0xe0 [ 214.235992][ T7433] ? __kernel_text_address+0xd/0x40 [ 214.236021][ T7433] ? unwind_get_return_address+0x4d/0x90 [ 214.236046][ T7433] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 214.236079][ T7433] ? arch_stack_walk+0xfc/0x150 [ 214.236117][ T7433] ? stack_trace_save+0x9c/0xe0 [ 214.236149][ T7433] ? __pfx_stack_trace_save+0x10/0x10 [ 214.236184][ T7433] ? stack_depot_save_flags+0x33/0x810 [ 214.236227][ T7433] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 214.236252][ T7433] ? kfree+0x1c0/0x660 [ 214.236287][ T7433] ? gcm_process_assoc+0x4f1/0x6a0 [ 214.236315][ T7433] ? memcpy_to_scatterwalk+0x300/0x480 [ 214.236355][ T7433] ? __asan_memset+0x22/0x50 [ 214.236388][ T7433] ? iov_iter_bvec+0xb8/0x180 [ 214.236416][ T7433] tls_push_sg+0x247/0x810 [ 214.236455][ T7433] ? __pfx_tls_push_sg+0x10/0x10 [ 214.236505][ T7433] ? __lock_acquire+0x6b6/0x2cf0 [ 214.236532][ T7433] tls_tx_records+0x36f/0x5c0 [ 214.236568][ T7433] tls_push_record+0x1f87/0x3770 [ 214.236626][ T7433] ? __pfx_tls_push_record+0x10/0x10 [ 214.236658][ T7433] ? __pfx_sk_psock_get+0x10/0x10 [ 214.236697][ T7433] bpf_exec_tx_verdict+0xefb/0x15e0 [ 214.236746][ T7433] ? stack_trace_save+0x9c/0xe0 [ 214.236778][ T7433] ? __pfx_bpf_exec_tx_verdict+0x10/0x10 [ 214.236889][ T7433] ? iov_iter_extract_bvec_pages+0x72e/0x7d0 [ 214.236931][ T7433] tls_sw_sendmsg+0x1552/0x2280 [ 214.237002][ T7433] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 214.237033][ T7433] ? __pfx_aa_sk_perm+0x10/0x10 [ 214.237058][ T7433] ? sock_rps_record_flow+0x19/0x410 [ 214.237089][ T7433] ? __pfx_inet_send_prepare+0x7/0x10 [ 214.237121][ T7433] ? inet6_sendmsg+0x101/0x120 [ 214.237144][ T7433] __sock_sendmsg+0xe5/0x270 [ 214.237180][ T7433] sock_sendmsg+0x158/0x230 [ 214.237213][ T7433] ? __pfx_sock_sendmsg+0x10/0x10 [ 214.237258][ T7433] ? __asan_memset+0x22/0x50 [ 214.237297][ T7433] ? iov_iter_bvec+0xb8/0x180 [ 214.237324][ T7433] splice_to_socket+0x8f5/0xf00 [ 214.237375][ T7433] ? __pfx_splice_to_socket+0x10/0x10 [ 214.237429][ T7433] ? touch_atime+0x384/0x6d0 [ 214.237461][ T7433] ? shmem_file_splice_read+0xa63/0xbd0 [ 214.237516][ T7433] ? __pfx_splice_to_socket+0x10/0x10 [ 214.237545][ T7433] direct_splice_actor+0x101/0x160 [ 214.237577][ T7433] splice_direct_to_actor+0x5a8/0xcc0 [ 214.237627][ T7433] ? __pfx_direct_splice_actor+0x10/0x10 [ 214.237655][ T7433] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 214.237694][ T7433] do_splice_direct+0x181/0x270 [ 214.237725][ T7433] ? __pfx_do_splice_direct+0x10/0x10 [ 214.237751][ T7433] ? common_file_perm+0x1b5/0x220 [ 214.237778][ T7433] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 214.237810][ T7433] ? bpf_lsm_file_permission+0x9/0x20 [ 214.237832][ T7433] ? security_file_permission+0x75/0x290 [ 214.237855][ T7433] ? rw_verify_area+0x255/0x4d0 [ 214.237899][ T7433] do_sendfile+0x4da/0x7e0 [ 214.237937][ T7433] ? __pfx_do_sendfile+0x10/0x10 [ 214.237979][ T7433] __se_sys_sendfile64+0xd9/0x190 [ 214.238009][ T7433] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 214.238047][ T7433] do_syscall_64+0xec/0xf80 [ 214.238070][ T7433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.238090][ T7433] ? trace_irq_disable+0x37/0x100 [ 214.238119][ T7433] ? clear_bhb_loop+0x60/0xb0 [ 214.238147][ T7433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.238169][ T7433] RIP: 0033:0x7fb177b8f749 [ 214.238190][ T7433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.238210][ T7433] RSP: 002b:00007fb178af0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 214.238233][ T7433] RAX: ffffffffffffffda RBX: 00007fb177de5fa0 RCX: 00007fb177b8f749 [ 214.238251][ T7433] RDX: 0000200000000100 RSI: 0000000000000004 RDI: 0000000000000003 [ 214.238264][ T7433] RBP: 00007fb178af0090 R08: 0000000000000000 R09: 0000000000000000 [ 214.238285][ T7433] R10: 000000000000fffd R11: 0000000000000246 R12: 0000000000000002 [ 214.238298][ T7433] R13: 00007fb177de6038 R14: 00007fb177de5fa0 R15: 00007fb177f0fa28 [ 214.238333][ T7433] [ 215.125663][ T5908] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 215.420632][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 215.450367][ T30] audit: type=1326 audit(1766323815.584:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8f749 code=0x7ffc0000 [ 215.572784][ T5908] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 215.603471][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.641902][ T30] audit: type=1326 audit(1766323815.584:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcffab8f749 code=0x7ffc0000 [ 215.724391][ T5908] usb 2-1: Product: syz [ 215.731251][ T5908] usb 2-1: Manufacturer: syz [ 215.741948][ T5908] usb 2-1: SerialNumber: syz [ 215.808199][ T5908] usb 2-1: config 0 descriptor?? [ 215.832817][ T30] audit: type=1326 audit(1766323815.584:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8f749 code=0x7ffc0000 [ 215.874536][ T5908] hub 2-1:0.0: bad descriptor, ignoring hub [ 215.893320][ T5908] hub 2-1:0.0: probe with driver hub failed with error -5 [ 215.951910][ T30] audit: type=1326 audit(1766323815.584:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcffab8f749 code=0x7ffc0000 [ 216.055746][ T30] audit: type=1326 audit(1766323815.584:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8f749 code=0x7ffc0000 [ 216.159641][ T30] audit: type=1326 audit(1766323815.584:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcffab8f749 code=0x7ffc0000 [ 216.368658][ T30] audit: type=1326 audit(1766323815.584:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8f749 code=0x7ffc0000 [ 216.415762][ T5907] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 216.464376][ T30] audit: type=1326 audit(1766323815.584:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8f749 code=0x7ffc0000 [ 216.576848][ T5908] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 216.611164][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.629721][ T30] audit: type=1326 audit(1766323815.584:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcffab8f749 code=0x7ffc0000 [ 216.665368][ T5908] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 216.694031][ T5908] usb 2-1: media controller created [ 216.700051][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 216.708697][ T5907] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 216.750586][ T5907] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 216.766060][ T30] audit: type=1326 audit(1766323815.584:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffab8f749 code=0x7ffc0000 [ 216.804555][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.819000][ T5907] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.877799][ T5907] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 216.988538][ T5907] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 217.008156][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.045692][ T5907] usb 3-1: Product: syz [ 217.060434][ T5907] usb 3-1: Manufacturer: syz [ 217.080778][ T5907] usb 3-1: SerialNumber: syz [ 217.100775][ T5908] DVB: Unable to find symbol dib7000p_attach() [ 217.121453][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 217.145640][ T5908] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 217.156228][ T5907] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input24 [ 217.320492][ T5907] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 217.335621][ T5908] rc_core: IR keymap rc-dib0700-rc5 not found [ 217.341907][ T5907] (id 0x00) [ 217.355758][ T5908] Registered IR keymap rc-empty [ 217.366663][ T5908] dvb-usb: could not initialize remote control. [ 217.395714][ T5908] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 217.525607][ T5907] rc_core: IR keymap rc-imon-pad not found [ 217.539498][ T5908] usb 2-1: USB disconnect, device number 21 [ 217.559591][ T5907] Registered IR keymap rc-empty [ 217.564585][ T5907] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 217.645629][ T5907] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 217.666878][ T5908] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 217.708138][ T5907] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc1 [ 217.750566][ T5907] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc1/input26 [ 217.815494][ T5907] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:29> initialized [ 218.157735][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 218.187454][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 218.203048][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 218.227870][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 218.241035][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 218.272072][ T7445] imon:send_packet: packet tx failed (-71) [ 218.279587][ T6381] usb 3-1: USB disconnect, device number 29 [ 218.295601][ T7445] imon:vfd_write: send packet #1 failed [ 218.309395][ T7466] AppArmor: change_hat: Invalid input '0x000000000000' [ 219.138833][ T7488] netlink: 'syz.3.388': attribute type 2 has an invalid length. [ 219.164552][ T7488] : entered promiscuous mode [ 220.064899][ T6381] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 220.378868][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 220.561080][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 220.570447][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 220.584968][ T10] usb 1-1: config 5 has an invalid interface number: 215 but max is 0 [ 220.593675][ T10] usb 1-1: config 5 has no interface number 0 [ 220.615394][ T10] usb 1-1: config 5 interface 215 has no altsetting 0 [ 220.637643][ T10] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 220.647330][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.669487][ T10] usb 1-1: Product: syz [ 220.686188][ T10] usb 1-1: Manufacturer: syz [ 220.700017][ T10] usb 1-1: SerialNumber: syz [ 220.978047][ T10] cypress_m8 1-1:5.215: DeLorme Earthmate USB converter detected [ 220.990197][ T10] earthmate ttyUSB0: required endpoint is missing [ 221.030608][ T10] usb 1-1: USB disconnect, device number 21 [ 221.074083][ T10] cypress_m8 1-1:5.215: device disconnected [ 221.842495][ T7517] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 221.973020][ T7517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.325779][ T7521] netlink: 'syz.2.398': attribute type 5 has an invalid length. [ 222.652587][ T7525] netlink: 'syz.2.400': attribute type 13 has an invalid length. [ 222.919246][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 223.110864][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 223.128111][ T24] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 223.140449][ T24] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 223.152824][ T24] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.222539][ T24] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 223.305129][ T24] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 223.364393][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.425723][ T24] usb 1-1: Product: syz [ 223.429958][ T24] usb 1-1: Manufacturer: syz [ 223.434602][ T24] usb 1-1: SerialNumber: syz [ 223.459385][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 223.470041][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input27 [ 223.748578][ T24] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 223.760513][ T24] (id 0x00) [ 224.080093][ T24] rc_core: IR keymap rc-imon-pad not found [ 224.105915][ T24] Registered IR keymap rc-empty [ 224.141620][ T24] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 224.215680][ T24] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 224.269006][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 224.343424][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input28 [ 224.416743][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 224.439972][ T24] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:22> initialized [ 224.625598][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 224.637504][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.650704][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.675862][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.709095][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.725853][ T7528] imon:send_packet: packet tx failed (-71) [ 224.731897][ T1210] usb 1-1: USB disconnect, device number 22 [ 224.745599][ T7528] imon:vfd_write: send packet #1 failed [ 224.765668][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.798747][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.104089][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 225.120143][ T10] usbtmc 3-1:16.0: can't read capabilities [ 225.228812][ T7552] netlink: 104 bytes leftover after parsing attributes in process `syz.3.407'. [ 225.791377][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.800629][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.809723][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.821340][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.830499][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.839691][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.848788][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.858520][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.867647][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.876777][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.949498][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.961807][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.971115][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.980233][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.989334][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.998402][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.026811][ T24] usb 3-1: USB disconnect, device number 30 [ 226.830244][ T5948] IPVS: starting estimator thread 0... [ 226.927644][ T7568] IPVS: using max 28 ests per chain, 67200 per kthread [ 227.087510][ T7571] netlink: 'syz.4.412': attribute type 1 has an invalid length. [ 227.155703][ T10] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 227.220078][ T7571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.266509][ T7565] netlink: 'syz.3.409': attribute type 2 has an invalid length. [ 228.249128][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 228.708277][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.721706][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.577081][ T10] usb 4-1: device descriptor read/all, error -71 [ 229.858507][ T6381] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 229.887047][ T1210] IPVS: starting estimator thread 0... [ 230.006389][ T7610] IPVS: using max 27 ests per chain, 64800 per kthread [ 230.025605][ T6381] usb 2-1: Using ep0 maxpacket: 32 [ 230.066776][ T6381] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 230.116039][ T6381] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 230.141371][ T7615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.156247][ T6381] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.171410][ T6381] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 230.186108][ T7615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.207220][ T6381] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 230.217043][ T6381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.245647][ T6381] usb 2-1: Product: syz [ 230.253052][ T6381] usb 2-1: Manufacturer: syz [ 230.261544][ T6381] usb 2-1: SerialNumber: syz [ 230.304289][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 230.417479][ T6381] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input29 [ 230.589940][ T7629] fuse: Unknown parameter '#' [ 230.615736][ T6381] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 230.624739][ T6381] (id 0x00) [ 230.635649][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 230.776358][ T6381] rc_core: IR keymap rc-imon-pad not found [ 230.782664][ T6381] Registered IR keymap rc-empty [ 230.793159][ T6381] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 230.807013][ T6381] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 230.818298][ T10] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 230.818334][ T10] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.818358][ T10] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 230.818392][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.823484][ T10] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 230.924533][ T6381] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 230.937605][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.950239][ T10] usb 4-1: Product: syz [ 230.960574][ T6381] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input30 [ 230.965827][ T10] usb 4-1: Manufacturer: syz [ 230.996082][ T1210] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 231.129098][ T10] usb 4-1: SerialNumber: syz [ 231.154566][ T10] usb 4-1: config 0 descriptor?? [ 231.166244][ T6381] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:22> initialized [ 231.166965][ T7613] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 231.297866][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8541, setting to 1024 [ 231.341519][ T1210] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 231.370216][ T1210] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 231.395006][ T1210] usb 1-1: Manufacturer: syz [ 231.419500][ T1210] usb 1-1: config 0 descriptor?? [ 231.433235][ T6381] usb 4-1: USB disconnect, device number 22 [ 231.517417][ T7634] imon:send_packet: packet tx failed (-71) [ 231.518424][ T5900] usb 2-1: USB disconnect, device number 22 [ 231.566411][ T7634] imon:vfd_write: send packet #1 failed [ 231.867627][ T1210] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 231.874574][ T1210] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 231.881653][ T1210] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 231.889704][ T1210] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 231.896852][ T1210] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 231.903714][ T1210] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 231.911180][ T1210] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 231.921018][ T1210] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 231.986116][ T6381] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 232.145636][ T6381] usb 3-1: Using ep0 maxpacket: 32 [ 232.154335][ T6381] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 232.165306][ T6381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.185073][ T6381] usb 3-1: config 0 descriptor?? [ 232.437667][ T6381] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 232.463901][ T6381] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 232.482688][ T6381] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 232.529467][ T7641] netlink: 'syz.3.432': attribute type 2 has an invalid length. [ 232.545634][ T5908] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 233.034623][ T7647] io-wq is not configured for unbound workers [ 233.638036][ T1210] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 233.668159][ T1210] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 233.722867][ T1210] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 233.757620][ T1210] usb 1-1: USB disconnect, device number 23 [ 234.122929][ T7664] fido_id[7664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 234.265430][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.307880][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.675666][ T1210] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 234.836741][ T1210] usb 1-1: Using ep0 maxpacket: 32 [ 234.845822][ T1210] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 234.857002][ T1210] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 234.873035][ T1210] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.887161][ T1210] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 234.929519][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 234.951426][ T1210] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 234.961036][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.969383][ T1210] usb 1-1: Product: syz [ 234.979037][ T1210] usb 1-1: Manufacturer: syz [ 234.986124][ T1210] usb 1-1: SerialNumber: syz [ 235.004403][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 235.004421][ T30] audit: type=1804 audit(1766323835.164:140): pid=7684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.445" name="/newroot/94/file1" dev="fuse" ino=1 res=1 errno=0 [ 235.023767][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 235.095658][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 235.107914][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.118903][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.136846][ T1210] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input31 [ 235.175603][ T10] usb 2-1: Product: syz [ 235.179847][ T10] usb 2-1: Manufacturer: syz [ 235.214343][ T10] usb 2-1: SerialNumber: syz [ 235.248832][ T10] usb 2-1: config 0 descriptor?? [ 235.281672][ T1210] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 235.293998][ T1210] (id 0x00) [ 235.457670][ T1210] rc_core: IR keymap rc-imon-pad not found [ 235.467914][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 235.483718][ T1210] Registered IR keymap rc-empty [ 235.500304][ T1210] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 235.513923][ T1210] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 235.564283][ T1210] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 235.589319][ T1210] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input32 [ 235.626987][ T1210] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:24> initialized [ 235.844886][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.864332][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.070050][ T7700] 8021q: VLANs not supported on vcan0 [ 236.167095][ T7703] imon:send_packet: packet tx failed (-71) [ 236.179042][ T24] usb 1-1: USB disconnect, device number 24 [ 236.188359][ T7703] imon:vfd_write: send packet #1 failed [ 236.536670][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 236.554455][ T10] usb 2-1: USB disconnect, device number 23 [ 236.655754][ T5908] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 236.805660][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 237.364403][ T5908] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 237.388144][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.411996][ T5908] usb 4-1: config 0 has no interfaces? [ 237.425727][ T5908] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 237.451274][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.479890][ T7709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.491894][ T5908] usb 4-1: config 0 descriptor?? [ 237.535768][ T7709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.701205][ T5908] usb 4-1: string descriptor 0 read error: -71 [ 237.719131][ T5908] usb 4-1: USB disconnect, device number 24 [ 238.026977][ T7730] FAULT_INJECTION: forcing a failure. [ 238.026977][ T7730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.040392][ T7730] CPU: 1 UID: 0 PID: 7730 Comm: syz.1.459 Not tainted syzkaller #0 PREEMPT(full) [ 238.040413][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.040423][ T7730] Call Trace: [ 238.040430][ T7730] [ 238.040438][ T7730] dump_stack_lvl+0xe8/0x150 [ 238.040462][ T7730] should_fail_ex+0x414/0x560 [ 238.040491][ T7730] _copy_from_user+0x2d/0xb0 [ 238.040510][ T7730] kstrtouint_from_user+0xc4/0x170 [ 238.040527][ T7730] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 238.040554][ T7730] proc_fail_nth_write+0x88/0x200 [ 238.040571][ T7730] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 238.040591][ T7730] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 238.040608][ T7730] vfs_write+0x27e/0xb30 [ 238.040630][ T7730] ? __pfx_vfs_write+0x10/0x10 [ 238.040645][ T7730] ? __fget_files+0x2a/0x420 [ 238.040667][ T7730] ? __fget_files+0x3a0/0x420 [ 238.040685][ T7730] ? __fget_files+0x2a/0x420 [ 238.040710][ T7730] ksys_write+0x145/0x250 [ 238.040723][ T7730] ? __fget_files+0x3a0/0x420 [ 238.040743][ T7730] ? __pfx_ksys_write+0x10/0x10 [ 238.040765][ T7730] do_syscall_64+0xec/0xf80 [ 238.040782][ T7730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.040796][ T7730] ? trace_irq_disable+0x37/0x100 [ 238.040816][ T7730] ? clear_bhb_loop+0x60/0xb0 [ 238.040834][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.040849][ T7730] RIP: 0033:0x7f9f1d18e1ff [ 238.040864][ T7730] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 238.040876][ T7730] RSP: 002b:00007f9f1e086030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 238.040892][ T7730] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9f1d18e1ff [ 238.040910][ T7730] RDX: 0000000000000001 RSI: 00007f9f1e0860a0 RDI: 0000000000000006 [ 238.040920][ T7730] RBP: 00007f9f1e086090 R08: 0000000000000000 R09: 0000000000000000 [ 238.040929][ T7730] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 238.040938][ T7730] R13: 00007f9f1d3e6128 R14: 00007f9f1d3e6090 R15: 00007f9f1d50fa28 [ 238.040962][ T7730] [ 238.280514][ T7728] netlink: 'syz.0.458': attribute type 2 has an invalid length. [ 238.305876][ T7728] : entered promiscuous mode [ 238.455651][ T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 239.025699][ T5948] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 239.203032][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 239.221851][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.250493][ T5948] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 239.266112][ T5908] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 239.274957][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.308852][ T5948] usb 2-1: config 0 descriptor?? [ 239.428926][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 239.444398][ T5908] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 239.457950][ T5908] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 239.483963][ T5908] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.526909][ T5908] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 239.572822][ T5908] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 239.582893][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.591537][ T5908] usb 4-1: Product: syz [ 239.596329][ T5908] usb 4-1: Manufacturer: syz [ 239.601959][ T5908] usb 4-1: SerialNumber: syz [ 239.626727][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 239.655032][ T5908] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input33 [ 239.861248][ T5948] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 239.876038][ T5908] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 239.884362][ T5908] (id 0x00) [ 240.045632][ T5908] rc_core: IR keymap rc-imon-pad not found [ 240.052032][ T5908] Registered IR keymap rc-empty [ 240.068423][ T7758] ip6tnl1: entered allmulticast mode [ 240.075384][ T5908] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 240.107120][ T5908] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 240.156815][ T5908] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 240.188999][ T5908] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input34 [ 240.216425][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.252835][ T5908] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:25> initialized [ 240.262240][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.282887][ T7741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.375597][ T7764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.385780][ T7764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.426160][ T1210] usb 2-1: USB disconnect, device number 24 [ 240.779160][ T9] usb 4-1: USB disconnect, device number 25 [ 240.789807][ T7771] imon:send_packet: packet tx failed (-71) [ 240.815620][ T7771] imon:vfd_write: send packet #1 failed [ 240.917297][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 242.336717][ T7790] FAULT_INJECTION: forcing a failure. [ 242.336717][ T7790] name failslab, interval 1, probability 0, space 0, times 0 [ 242.352320][ T7790] CPU: 1 UID: 0 PID: 7790 Comm: syz.3.477 Not tainted syzkaller #0 PREEMPT(full) [ 242.352351][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.352365][ T7790] Call Trace: [ 242.352374][ T7790] [ 242.352384][ T7790] dump_stack_lvl+0xe8/0x150 [ 242.352421][ T7790] should_fail_ex+0x414/0x560 [ 242.352461][ T7790] should_failslab+0xa8/0x100 [ 242.352490][ T7790] kmem_cache_alloc_noprof+0x88/0x710 [ 242.352522][ T7790] ? __netlink_lookup+0xbd/0x8a0 [ 242.352553][ T7790] ? skb_clone+0x212/0x3a0 [ 242.352592][ T7790] skb_clone+0x212/0x3a0 [ 242.352623][ T7790] __netlink_deliver_tap+0x404/0x850 [ 242.352664][ T7790] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.352694][ T7790] netlink_deliver_tap+0x19c/0x1b0 [ 242.352724][ T7790] netlink_unicast+0x7fa/0x9e0 [ 242.352758][ T7790] ? __pfx_netlink_unicast+0x10/0x10 [ 242.352782][ T7790] ? __alloc_skb+0x198/0x3a0 [ 242.352804][ T7790] ? netlink_sendmsg+0x642/0xb30 [ 242.352830][ T7790] ? skb_put+0x11b/0x210 [ 242.352858][ T7790] netlink_sendmsg+0x805/0xb30 [ 242.352902][ T7790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.352934][ T7790] ? aa_sock_msg_perm+0xf1/0x1b0 [ 242.352965][ T7790] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 242.352985][ T7790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.353015][ T7790] __sock_sendmsg+0x21c/0x270 [ 242.353050][ T7790] ____sys_sendmsg+0x505/0x820 [ 242.353083][ T7790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.353119][ T7790] ? import_iovec+0x74/0xa0 [ 242.353149][ T7790] ___sys_sendmsg+0x21f/0x2a0 [ 242.353177][ T7790] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.353241][ T7790] ? __fget_files+0x2a/0x420 [ 242.353268][ T7790] ? __fget_files+0x3a0/0x420 [ 242.353306][ T7790] __x64_sys_sendmsg+0x19b/0x260 [ 242.353336][ T7790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.353373][ T7790] ? __pfx_ksys_write+0x10/0x10 [ 242.353407][ T7790] do_syscall_64+0xec/0xf80 [ 242.353430][ T7790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.353450][ T7790] ? trace_irq_disable+0x37/0x100 [ 242.353479][ T7790] ? clear_bhb_loop+0x60/0xb0 [ 242.353505][ T7790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.353526][ T7790] RIP: 0033:0x7fd4d898f749 [ 242.353545][ T7790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.353571][ T7790] RSP: 002b:00007fd4d6bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.353595][ T7790] RAX: ffffffffffffffda RBX: 00007fd4d8be5fa0 RCX: 00007fd4d898f749 [ 242.353612][ T7790] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 242.353625][ T7790] RBP: 00007fd4d6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.353639][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.353652][ T7790] R13: 00007fd4d8be6038 R14: 00007fd4d8be5fa0 R15: 00007fd4d8d0fa28 [ 242.353687][ T7790] [ 242.745822][ T10] usb 1-1: device descriptor read/64, error -71 [ 243.185623][ T10] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 243.316549][ T5900] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 243.347413][ T5900] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 243.379730][ T10] usb 1-1: device descriptor read/64, error -71 [ 243.450091][ T7802] tipc: Enabling of bearer rejected, failed to enable media [ 243.568219][ T10] usb usb1-port1: attempt power cycle [ 243.796907][ T7805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.823740][ T7805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.925629][ T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 243.956267][ T10] usb 1-1: device descriptor read/8, error -71 [ 244.216231][ T10] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 244.248990][ T10] usb 1-1: device descriptor read/8, error -71 [ 244.365898][ T10] usb usb1-port1: unable to enumerate USB device [ 245.289761][ T7823] netlink: 'syz.2.488': attribute type 4 has an invalid length. [ 245.324471][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 245.341836][ T7827] netlink: 'syz.2.488': attribute type 4 has an invalid length. [ 245.821577][ T7833] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 245.968160][ T7838] FAULT_INJECTION: forcing a failure. [ 245.968160][ T7838] name failslab, interval 1, probability 0, space 0, times 0 [ 245.984190][ T7838] CPU: 1 UID: 0 PID: 7838 Comm: syz.3.493 Not tainted syzkaller #0 PREEMPT(full) [ 245.984219][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.984232][ T7838] Call Trace: [ 245.984241][ T7838] [ 245.984250][ T7838] dump_stack_lvl+0xe8/0x150 [ 245.984283][ T7838] should_fail_ex+0x414/0x560 [ 245.984322][ T7838] should_failslab+0xa8/0x100 [ 245.984348][ T7838] kmem_cache_alloc_noprof+0x88/0x710 [ 245.984380][ T7838] ? __netlink_lookup+0xbd/0x8a0 [ 245.984410][ T7838] ? skb_clone+0x212/0x3a0 [ 245.984441][ T7838] skb_clone+0x212/0x3a0 [ 245.984473][ T7838] __netlink_deliver_tap+0x404/0x850 [ 245.984512][ T7838] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.984540][ T7838] netlink_deliver_tap+0x19c/0x1b0 [ 245.984568][ T7838] netlink_unicast+0x7fa/0x9e0 [ 245.984602][ T7838] ? __pfx_netlink_unicast+0x10/0x10 [ 245.984625][ T7838] ? __alloc_skb+0x198/0x3a0 [ 245.984647][ T7838] ? netlink_sendmsg+0x642/0xb30 [ 245.984672][ T7838] ? skb_put+0x11b/0x210 [ 245.984700][ T7838] netlink_sendmsg+0x805/0xb30 [ 245.984737][ T7838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.984769][ T7838] ? aa_sock_msg_perm+0xf1/0x1b0 [ 245.984799][ T7838] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.984819][ T7838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.984848][ T7838] __sock_sendmsg+0x21c/0x270 [ 245.984883][ T7838] ____sys_sendmsg+0x505/0x820 [ 245.984916][ T7838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.984951][ T7838] ? import_iovec+0x74/0xa0 [ 245.984981][ T7838] ___sys_sendmsg+0x21f/0x2a0 [ 245.985010][ T7838] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.985074][ T7838] ? __fget_files+0x2a/0x420 [ 245.985108][ T7838] ? __fget_files+0x3a0/0x420 [ 245.985145][ T7838] __x64_sys_sendmsg+0x19b/0x260 [ 245.985173][ T7838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.985209][ T7838] ? __pfx_ksys_write+0x10/0x10 [ 245.985241][ T7838] do_syscall_64+0xec/0xf80 [ 245.985262][ T7838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.985281][ T7838] ? trace_irq_disable+0x37/0x100 [ 245.985308][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 245.985333][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.985353][ T7838] RIP: 0033:0x7fd4d898f749 [ 245.985370][ T7838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.985389][ T7838] RSP: 002b:00007fd4d6bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.985412][ T7838] RAX: ffffffffffffffda RBX: 00007fd4d8be5fa0 RCX: 00007fd4d898f749 [ 245.985427][ T7838] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 245.985440][ T7838] RBP: 00007fd4d6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.985454][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.985466][ T7838] R13: 00007fd4d8be6038 R14: 00007fd4d8be5fa0 R15: 00007fd4d8d0fa28 [ 245.985506][ T7838] [ 246.426860][ T7838] netlink: 32 bytes leftover after parsing attributes in process `syz.3.493'. [ 246.455843][ T7838] netem: unknown loss type 13 [ 246.461800][ T7838] netem: change failed [ 246.707708][ T7848] pimreg0: tun_chr_ioctl cmd 1074812118 [ 246.713658][ T7848] pimreg0: tun_chr_ioctl cmd 1074025681 [ 246.720886][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 246.787174][ T7840] netlink: 'syz.0.492': attribute type 2 has an invalid length. [ 246.815569][ T9] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 247.385812][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 247.535603][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 247.544715][ T10] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 247.553770][ T10] usb 4-1: config 0 has no interface number 0 [ 247.560515][ T10] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.906297][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 247.947494][ T10] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 248.021237][ T10] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 248.040272][ T7860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.061294][ T10] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 248.081668][ T7860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.103387][ T10] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 248.154630][ T10] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 248.185238][ T10] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 248.364191][ T10] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.364217][ T10] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.374817][ T10] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 248.374842][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.374858][ T10] usb 4-1: Product: syz [ 248.374869][ T10] usb 4-1: Manufacturer: syz [ 248.374898][ T10] usb 4-1: SerialNumber: syz [ 248.407240][ T10] usb 4-1: config 0 descriptor?? [ 248.408420][ T7853] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 248.410470][ T10] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 248.410485][ T10] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 249.128776][ T1210] usb 4-1: USB disconnect, device number 26 [ 250.017017][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 251.243670][ T7894] skbuff: bad partial csum: csum=65506/2 headroom=162 headlen=65526 [ 251.295597][ T10] delete_channel: no stack [ 251.712471][ T7902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.511'. [ 251.897172][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.954522][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.337570][ T7924] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 252.531688][ T7930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.516'. [ 253.709377][ T7943] netlink: 212 bytes leftover after parsing attributes in process `syz.0.523'. [ 253.918383][ T30] audit: type=1800 audit(1766323854.084:141): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.525" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 254.001035][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 254.040044][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 254.162745][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.186301][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.546417][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 254.979262][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 254.991254][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 255.045674][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.056340][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 255.092618][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 255.105856][ T9] usb 1-1: Product: syz [ 255.110770][ T9] usb 1-1: Manufacturer: syz [ 255.120662][ T9] usb 1-1: SerialNumber: syz [ 255.236180][ T9] usb 1-1: config 0 descriptor?? [ 255.279067][ T9] usb 1-1: selecting invalid altsetting 0 [ 255.728419][ T7975] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.571197][ T7983] FAULT_INJECTION: forcing a failure. [ 256.571197][ T7983] name failslab, interval 1, probability 0, space 0, times 0 [ 256.602292][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.2.534 Not tainted syzkaller #0 PREEMPT(full) [ 256.602323][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.602336][ T7983] Call Trace: [ 256.602345][ T7983] [ 256.602354][ T7983] dump_stack_lvl+0xe8/0x150 [ 256.602387][ T7983] should_fail_ex+0x414/0x560 [ 256.602432][ T7983] should_failslab+0xa8/0x100 [ 256.602460][ T7983] __kmalloc_cache_noprof+0x84/0x700 [ 256.602484][ T7983] ? snd_seq_port_connect+0x6b/0x460 [ 256.602517][ T7983] snd_seq_port_connect+0x6b/0x460 [ 256.602543][ T7983] ? do_raw_read_unlock+0x3d/0x80 [ 256.602571][ T7983] ? _raw_read_unlock+0x28/0x50 [ 256.602595][ T7983] snd_seq_ioctl_subscribe_port+0x36a/0x7a0 [ 256.602631][ T7983] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 256.602675][ T7983] snd_seq_ioctl+0x260/0x450 [ 256.602712][ T7983] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 256.602760][ T7983] ? __fget_files+0x3a0/0x420 [ 256.602786][ T7983] ? __fget_files+0x2a/0x420 [ 256.602816][ T7983] ? bpf_lsm_file_ioctl+0x9/0x20 [ 256.602845][ T7983] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 256.602882][ T7983] __se_sys_ioctl+0xfc/0x170 [ 256.602918][ T7983] do_syscall_64+0xec/0xf80 [ 256.602941][ T7983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.602963][ T7983] ? clear_bhb_loop+0x60/0xb0 [ 256.602989][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.603010][ T7983] RIP: 0033:0x7fb177b8f749 [ 256.603029][ T7983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.603048][ T7983] RSP: 002b:00007fb178af0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.603071][ T7983] RAX: ffffffffffffffda RBX: 00007fb177de5fa0 RCX: 00007fb177b8f749 [ 256.603087][ T7983] RDX: 0000200000000040 RSI: 0000000040505330 RDI: 000000000000000a [ 256.603101][ T7983] RBP: 00007fb178af0090 R08: 0000000000000000 R09: 0000000000000000 [ 256.603114][ T7983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.603127][ T7983] R13: 00007fb177de6038 R14: 00007fb177de5fa0 R15: 00007fb177f0fa28 [ 256.603161][ T7983] [ 257.095597][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 257.265646][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 257.279005][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 257.288304][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 257.305965][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.328374][ T9] usb 2-1: config 0 descriptor?? [ 257.407801][ T5893] usb 1-1: USB disconnect, device number 30 [ 257.562745][ T7992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.537'. [ 257.764272][ T7984] bridge_slave_0: left allmulticast mode [ 257.794252][ T7997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.538'. [ 257.806767][ T7984] bridge_slave_0: left promiscuous mode [ 257.812653][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.880516][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.903246][ T8000] netlink: 136 bytes leftover after parsing attributes in process `syz.3.538'. [ 257.932416][ T7984] bridge_slave_1: left allmulticast mode [ 257.960398][ T7984] bridge_slave_1: left promiscuous mode [ 257.971148][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.973497][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.539'. [ 257.990997][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.042366][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 258.165781][ T8003] netlink: 40 bytes leftover after parsing attributes in process `syz.0.539'. [ 258.195341][ T7984] bond0: (slave bond_slave_0): Releasing backup interface [ 258.246320][ T7984] bond0: (slave bond_slave_1): Releasing backup interface [ 258.316164][ T7984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.367606][ T7984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.407031][ T7984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.415807][ T7984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.443932][ T7984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 258.520435][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 258.560933][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 258.643444][ T9] usb 2-1: USB disconnect, device number 25 [ 259.099844][ T8009] process 'memfd:-BÕN4¦EyÛѧ±Sñ:)' started with executable stack [ 259.553648][ T8019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.656088][ T8019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.116941][ T8020] netlink: 'syz.1.543': attribute type 2 has an invalid length. [ 260.143098][ T8020] : entered promiscuous mode [ 260.207871][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 260.395674][ T980] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 260.565637][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 260.576822][ T980] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 260.587627][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.600593][ T980] usb 4-1: Product: syz [ 260.610829][ T980] usb 4-1: Manufacturer: syz [ 260.621481][ T980] usb 4-1: SerialNumber: syz [ 260.644906][ T980] usb 4-1: config 0 descriptor?? [ 261.049694][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.056228][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.063158][ T980] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 261.091391][ T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.123609][ T980] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 261.211076][ T980] usb 4-1: media controller created [ 261.256519][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.330053][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.357259][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.818660][ T980] zl10353_read_register: readreg error (reg=127, ret==0) [ 261.826680][ T980] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 261.891383][ T980] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 261.950507][ T980] usb 4-1: USB disconnect, device number 27 [ 262.085809][ T980] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 262.485623][ T5948] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 262.628500][ T8046] netlink: 36 bytes leftover after parsing attributes in process `syz.3.553'. [ 262.686516][ T5948] usb 1-1: device descriptor read/64, error -71 [ 262.791610][ T30] audit: type=1326 audit(1766323862.954:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d898f749 code=0x7ffc0000 [ 262.931142][ T30] audit: type=1326 audit(1766323862.954:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd4d898f749 code=0x7ffc0000 [ 262.946540][ T5948] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 263.045635][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 263.069682][ T30] audit: type=1326 audit(1766323862.954:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d898f749 code=0x7ffc0000 [ 263.139745][ T30] audit: type=1326 audit(1766323862.964:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d898f749 code=0x7ffc0000 [ 263.189932][ T5948] usb 1-1: device descriptor read/64, error -71 [ 263.204447][ T30] audit: type=1326 audit(1766323862.964:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd4d898f749 code=0x7ffc0000 [ 263.215777][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 263.288330][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 263.296552][ T30] audit: type=1326 audit(1766323862.964:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d898f749 code=0x7ffc0000 [ 263.326869][ T5948] usb usb1-port1: attempt power cycle [ 263.332455][ T10] usb 4-1: config 179 has no interface number 0 [ 263.351770][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 263.362535][ T30] audit: type=1326 audit(1766323862.964:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d898f749 code=0x7ffc0000 [ 263.399663][ T30] audit: type=1326 audit(1766323862.974:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4d898df90 code=0x7ffc0000 [ 263.461939][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 263.493801][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 263.494388][ T30] audit: type=1326 audit(1766323862.974:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4d898f34b code=0x7ffc0000 [ 263.539972][ T30] audit: type=1326 audit(1766323862.974:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4d898f34b code=0x7ffc0000 [ 263.706507][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 263.725890][ T10] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 263.818689][ T5948] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 263.868525][ T5948] usb 1-1: device descriptor read/8, error -71 [ 263.879348][ T10] usb 4-1: config 179 interface 65 has no altsetting 0 [ 263.888464][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 263.898831][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.937491][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input36 [ 264.025281][ T5184] input input36: unable to receive magic message: -110 [ 264.043316][ T5184] input input36: unable to receive magic message: -32 [ 264.057680][ T5184] input input36: unable to receive magic message: -32 [ 264.086444][ T5184] input input36: unable to receive magic message: -32 [ 264.105980][ T5948] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 264.150031][ T5948] usb 1-1: device descriptor read/8, error -71 [ 264.186242][ T5184] input input36: unable to receive magic message: -32 [ 264.266976][ T5948] usb usb1-port1: unable to enumerate USB device [ 264.380045][ T5893] usb 4-1: USB disconnect, device number 28 [ 264.380058][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 264.856257][ T8074] usb usb8: usbfs: process 8074 (syz.4.559) did not claim interface 0 before use [ 265.166011][ T8077] netlink: 'syz.3.560': attribute type 10 has an invalid length. [ 265.217399][ T8077] bond0: (slave dummy0): Releasing backup interface [ 265.265324][ T8077] team0: Port device dummy0 added [ 265.813212][ T8085] ipip0: entered promiscuous mode [ 265.944496][ T8085] ipip0: entered allmulticast mode [ 266.035661][ T980] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 266.195623][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 266.202544][ T980] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.255418][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.304460][ T980] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 266.329983][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 266.394077][ T980] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.444906][ T980] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.477013][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.817697][ T980] usb 1-1: GET_CAPABILITIES returned 0 [ 266.844779][ T980] usbtmc 1-1:16.0: can't read capabilities [ 266.969502][ T8104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.023037][ T5948] usb 1-1: USB disconnect, device number 35 [ 267.136814][ T8107] lo: entered promiscuous mode [ 267.290295][ T8112] FAULT_INJECTION: forcing a failure. [ 267.290295][ T8112] name failslab, interval 1, probability 0, space 0, times 0 [ 267.315351][ T8112] CPU: 1 UID: 0 PID: 8112 Comm: syz.3.572 Not tainted syzkaller #0 PREEMPT(full) [ 267.315378][ T8112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.315391][ T8112] Call Trace: [ 267.315399][ T8112] [ 267.315409][ T8112] dump_stack_lvl+0xe8/0x150 [ 267.315443][ T8112] should_fail_ex+0x414/0x560 [ 267.315481][ T8112] should_failslab+0xa8/0x100 [ 267.315512][ T8112] __kmalloc_cache_noprof+0x84/0x700 [ 267.315533][ T8112] ? __pfx_stack_trace_save+0x10/0x10 [ 267.315565][ T8112] ? rtnl_newlink+0xfb/0x1c90 [ 267.315592][ T8112] rtnl_newlink+0xfb/0x1c90 [ 267.315615][ T8112] ? kasan_save_track+0x4f/0x80 [ 267.315635][ T8112] ? kasan_save_track+0x3e/0x80 [ 267.315654][ T8112] ? kasan_save_free_info+0x46/0x50 [ 267.315682][ T8112] ? __kasan_slab_free+0x5c/0x80 [ 267.315703][ T8112] ? kmem_cache_free+0x197/0x620 [ 267.315721][ T8112] ? nlmon_xmit+0xb0/0x100 [ 267.315746][ T8112] ? dev_hard_start_xmit+0x2cd/0x800 [ 267.315771][ T8112] ? __dev_queue_xmit+0x1493/0x3140 [ 267.315798][ T8112] ? __netlink_deliver_tap+0x5ad/0x850 [ 267.315823][ T8112] ? netlink_deliver_tap+0x19c/0x1b0 [ 267.315847][ T8112] ? netlink_unicast+0x7fa/0x9e0 [ 267.315876][ T8112] ? netlink_sendmsg+0x805/0xb30 [ 267.315903][ T8112] ? __pfx_rtnl_newlink+0x10/0x10 [ 267.315923][ T8112] ? do_syscall_64+0xec/0xf80 [ 267.315944][ T8112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.316000][ T8112] ? kasan_quarantine_put+0xbb/0x1f0 [ 267.316020][ T8112] ? lockdep_hardirqs_on+0x7b/0x110 [ 267.316046][ T8112] ? kmem_cache_free+0x197/0x620 [ 267.316064][ T8112] ? nlmon_xmit+0xb0/0x100 [ 267.316099][ T8112] ? __lock_acquire+0x6b6/0x2cf0 [ 267.316130][ T8112] ? __local_bh_enable_ip+0xd0/0x130 [ 267.316152][ T8112] ? lockdep_hardirqs_on+0x7b/0x110 [ 267.316173][ T8112] ? __dev_queue_xmit+0x289/0x3140 [ 267.316199][ T8112] ? __local_bh_enable_ip+0xd0/0x130 [ 267.316219][ T8112] ? __dev_queue_xmit+0x289/0x3140 [ 267.316254][ T8112] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 267.316291][ T8112] ? __pfx_rtnl_newlink+0x10/0x10 [ 267.316313][ T8112] rtnetlink_rcv_msg+0x7cf/0xb70 [ 267.316339][ T8112] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 267.316359][ T8112] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 267.316390][ T8112] ? ref_tracker_free+0x63a/0x7d0 [ 267.316412][ T8112] ? __asan_memcpy+0x40/0x70 [ 267.316444][ T8112] ? __pfx_ref_tracker_free+0x10/0x10 [ 267.316463][ T8112] ? __skb_clone+0x63/0x7a0 [ 267.316500][ T8112] netlink_rcv_skb+0x208/0x470 [ 267.316528][ T8112] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 267.316553][ T8112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 267.316591][ T8112] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.316626][ T8112] netlink_unicast+0x82f/0x9e0 [ 267.316660][ T8112] ? __pfx_netlink_unicast+0x10/0x10 [ 267.316683][ T8112] ? __alloc_skb+0x198/0x3a0 [ 267.316705][ T8112] ? netlink_sendmsg+0x642/0xb30 [ 267.316730][ T8112] ? skb_put+0x11b/0x210 [ 267.316755][ T8112] netlink_sendmsg+0x805/0xb30 [ 267.316793][ T8112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.316825][ T8112] ? aa_sock_msg_perm+0xf1/0x1b0 [ 267.316862][ T8112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.316882][ T8112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.316911][ T8112] __sock_sendmsg+0x21c/0x270 [ 267.316946][ T8112] ____sys_sendmsg+0x505/0x820 [ 267.316977][ T8112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.317021][ T8112] ? import_iovec+0x74/0xa0 [ 267.317050][ T8112] ___sys_sendmsg+0x21f/0x2a0 [ 267.317079][ T8112] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.317141][ T8112] ? __fget_files+0x2a/0x420 [ 267.317168][ T8112] ? __fget_files+0x3a0/0x420 [ 267.317204][ T8112] __x64_sys_sendmsg+0x19b/0x260 [ 267.317234][ T8112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.317269][ T8112] ? __pfx_ksys_write+0x10/0x10 [ 267.317301][ T8112] do_syscall_64+0xec/0xf80 [ 267.317323][ T8112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.317343][ T8112] ? clear_bhb_loop+0x60/0xb0 [ 267.317368][ T8112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.317389][ T8112] RIP: 0033:0x7fd4d898f749 [ 267.317409][ T8112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.317427][ T8112] RSP: 002b:00007fd4d6bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.317450][ T8112] RAX: ffffffffffffffda RBX: 00007fd4d8be5fa0 RCX: 00007fd4d898f749 [ 267.317466][ T8112] RDX: 0000000020008040 RSI: 0000200000000280 RDI: 0000000000000003 [ 267.317481][ T8112] RBP: 00007fd4d6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.317494][ T8112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.317507][ T8112] R13: 00007fd4d8be6038 R14: 00007fd4d8be5fa0 R15: 00007fd4d8d0fa28 [ 267.317541][ T8112] [ 268.215638][ T5900] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 268.365578][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 268.378698][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.390508][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.403073][ T5900] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 268.412293][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.424225][ T5900] usb 4-1: config 0 descriptor?? [ 268.442916][ T5900] usbhid 4-1:0.0: can't add hid device: -22 [ 268.451237][ T5900] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 268.615735][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 268.635097][ T8116] macvtap0: entered allmulticast mode [ 268.662830][ T8116] veth0_macvtap: entered allmulticast mode [ 268.699150][ T8117] netlink: 104 bytes leftover after parsing attributes in process `syz.3.574'. [ 268.709936][ T8116] netlink: 104 bytes leftover after parsing attributes in process `syz.3.574'. [ 268.797572][ T5900] usb 4-1: USB disconnect, device number 29 [ 268.915768][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 269.069411][ T8139] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 269.129514][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 269.153936][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.165349][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.216882][ T8129] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 269.224388][ T8129] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 269.262700][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 269.280090][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 269.290308][ T10] usb 1-1: can't read configurations, error -71 [ 269.631523][ T8145] raw_sendmsg: syz.3.584 forgot to set AF_INET. Fix it! [ 270.098355][ T8152] input: syz1 as /devices/virtual/input/input37 [ 270.816068][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 271.417363][ T8160] bridge_slave_1: left allmulticast mode [ 271.423083][ T8160] bridge_slave_1: left promiscuous mode [ 271.593653][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.687068][ T8160] bridge_slave_0: left allmulticast mode [ 271.692790][ T8160] bridge_slave_0: left promiscuous mode [ 271.721532][ T8165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.745768][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.534701][ T8185] Cannot find set identified by id 0 to match [ 272.615611][ T5893] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 272.711731][ T8190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.722747][ T8190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.865637][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 272.874071][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.887551][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.902476][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 272.939176][ T5893] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 272.955370][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.987643][ T5893] usb 4-1: config 0 descriptor?? [ 273.413385][ T5893] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 273.422098][ T5893] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 273.431329][ T5893] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 273.440859][ T5893] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 273.450099][ T5893] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 273.476424][ T5893] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 273.487390][ T5893] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 273.494697][ T5893] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 273.505678][ T5893] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 273.514990][ T5893] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 273.618108][ T5893] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input38 [ 273.699069][ T8205] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 273.738351][ T5893] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 273.754623][ T5893] usb 4-1: USB disconnect, device number 30 [ 273.795724][ T5900] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 273.827646][ T8205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.914940][ T8208] fido_id[8208]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 273.995953][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 274.023196][ T5900] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 274.036625][ T5900] usb 1-1: config 0 has no interface number 0 [ 274.101121][ T5900] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 274.186005][ T1210] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 274.222799][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.377595][ T8216] binder: 8215:8216 ioctl c018620c 200000000000 returned -22 [ 274.379884][ T5900] usb 1-1: Product: syz [ 274.408595][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 274.435610][ T5900] usb 1-1: Manufacturer: syz [ 274.440290][ T5900] usb 1-1: SerialNumber: syz [ 274.475995][ T5900] usb 1-1: config 0 descriptor?? [ 274.513574][ T8209] netlink: 'syz.1.600': attribute type 2 has an invalid length. [ 274.653683][ T5900] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 274.931167][ T5893] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.570733][ T5900] usb 1-1: qt2_attach - failed to power on unit: -71 [ 275.596285][ T5900] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 275.784105][ T5900] usb 1-1: USB disconnect, device number 38 [ 276.487907][ T8237] syzkaller0: entered promiscuous mode [ 276.509374][ T8237] syzkaller0: entered allmulticast mode [ 277.516669][ T1210] usb 2-1: unable to get BOS descriptor or descriptor too short [ 277.540059][ T1210] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 277.565620][ T1210] usb 2-1: can't read configurations, error -71 [ 277.715136][ T8242] mmap: syz.4.611 (8242) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 277.896295][ T5893] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 278.100983][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 278.119015][ T5893] usb 4-1: not running at top speed; connect to a high speed hub [ 278.130784][ T5893] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 278.140319][ T5893] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 278.155767][ T5893] usb 4-1: config 4 has no interface number 0 [ 278.201985][ T5893] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 278.248292][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.258592][ T5893] usb 4-1: Product: syz [ 278.262938][ T5893] usb 4-1: Manufacturer: syz [ 278.271177][ T5893] usb 4-1: SerialNumber: syz [ 278.643451][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.658398][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.639059][ T5893] uvcvideo 4-1:4.147: Found multiple Units with ID 6 [ 280.652516][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.621'. [ 280.662826][ T5893] uvcvideo 4-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 280.693512][ T5893] uvcvideo 4-1:4.147: No streaming interface found for terminal 65535. [ 280.724194][ T5893] usb 4-1: USB disconnect, device number 31 [ 280.813376][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.852306][ T8275] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 280.861706][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.883527][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.898268][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.621'. [ 280.909704][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.986376][ T8276] netlink: 'syz.2.620': attribute type 2 has an invalid length. [ 281.003079][ T8276] : entered promiscuous mode [ 282.978367][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.628'. [ 284.586385][ T8319] netlink: 'syz.2.631': attribute type 1 has an invalid length. [ 284.711848][ T8319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.447148][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 285.585808][ T5948] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 285.617169][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 285.628004][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 285.636810][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.646813][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.657199][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.667383][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.681447][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.739570][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.771519][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.786035][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.812496][ T8338] netlink: 'syz.4.637': attribute type 2 has an invalid length. [ 285.973523][ T5948] usb 2-1: unable to get BOS descriptor or descriptor too short [ 285.983474][ T5948] usb 2-1: not running at top speed; connect to a high speed hub [ 286.151120][ T5948] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 286.159837][ T5948] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 286.171106][ T5948] usb 2-1: config 4 has no interface number 0 [ 286.211108][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 286.226105][ T10] usbtmc 4-1:16.0: can't read capabilities [ 286.254504][ T5948] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 286.263897][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.280382][ T5948] usb 2-1: Product: syz [ 286.285001][ T5948] usb 2-1: Manufacturer: syz [ 286.295761][ T5948] usb 2-1: SerialNumber: syz [ 286.576348][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.585389][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.607551][ T8325] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 286.608169][ T5907] usb 4-1: USB disconnect, device number 32 [ 286.629119][ T8344] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 286.712612][ T5948] uvcvideo 2-1:4.147: Found multiple Units with ID 6 [ 286.724015][ T5948] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 286.746942][ T5948] uvcvideo 2-1:4.147: No streaming interface found for terminal 65535. [ 286.782742][ T5948] usb 2-1: USB disconnect, device number 29 [ 287.736208][ T8325] sctp: [Deprecated]: syz.3.633 (pid 8325) Use of int in maxseg socket option. [ 287.736208][ T8325] Use struct sctp_assoc_value instead [ 288.284856][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 288.347983][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 288.396617][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 288.958381][ T8372] [ 288.960758][ T8372] ====================================================== [ 288.967823][ T8372] WARNING: possible circular locking dependency detected [ 288.974876][ T8372] syzkaller #0 Not tainted [ 288.979336][ T8372] ------------------------------------------------------ [ 288.986360][ T8372] syz.0.647/8372 is trying to acquire lock: [ 288.992256][ T8372] ffff8880259d8420 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 289.001012][ T8372] [ 289.001012][ T8372] but task is already holding lock: [ 289.008382][ T8372] ffff88803403a0a8 (&ctx->uring_lock){+.+.}-{4:4}, at: __se_sys_io_uring_enter+0x2d5/0x2b60 [ 289.018495][ T8372] [ 289.018495][ T8372] which lock already depends on the new lock. [ 289.018495][ T8372] [ 289.028919][ T8372] [ 289.028919][ T8372] the existing dependency chain (in reverse order) is: [ 289.037945][ T8372] [ 289.037945][ T8372] -> #2 (&ctx->uring_lock){+.+.}-{4:4}: [ 289.045693][ T8372] __mutex_lock+0x187/0x1350 [ 289.050810][ T8372] io_uring_del_tctx_node+0xf0/0x2c0 [ 289.056643][ T8372] io_uring_clean_tctx+0xd4/0x1a0 [ 289.062248][ T8372] io_uring_cancel_generic+0x6ca/0x7d0 [ 289.068299][ T8372] begin_new_exec+0x10ed/0x2440 [ 289.073716][ T8372] load_elf_binary+0x9f8/0x2d70 [ 289.079155][ T8372] bprm_execve+0x92e/0x1400 [ 289.084229][ T8372] do_execveat_common+0x510/0x6a0 [ 289.089811][ T8372] __x64_sys_execveat+0xc4/0xe0 [ 289.095245][ T8372] do_syscall_64+0xec/0xf80 [ 289.100321][ T8372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.106769][ T8372] [ 289.106769][ T8372] -> #1 (&sig->cred_guard_mutex){+.+.}-{4:4}: [ 289.115157][ T8372] __mutex_lock+0x187/0x1350 [ 289.120305][ T8372] proc_pid_attr_write+0x547/0x630 [ 289.125959][ T8372] vfs_write+0x27e/0xb30 [ 289.130739][ T8372] ksys_write+0x145/0x250 [ 289.135611][ T8372] do_syscall_64+0xec/0xf80 [ 289.140661][ T8372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.147090][ T8372] [ 289.147090][ T8372] -> #0 (sb_writers#3){.+.+}-{0:0}: [ 289.154537][ T8372] __lock_acquire+0x15a6/0x2cf0 [ 289.159937][ T8372] lock_acquire+0x107/0x340 [ 289.165004][ T8372] sb_start_write+0x4d/0x1c0 [ 289.170147][ T8372] mnt_want_write+0x41/0x90 [ 289.175197][ T8372] path_openat+0xadd/0x3dd0 [ 289.180240][ T8372] do_filp_open+0x1fa/0x410 [ 289.187162][ T8372] io_openat2+0x3e0/0x5c0 [ 289.192082][ T8372] __io_issue_sqe+0x181/0x4b0 [ 289.197336][ T8372] io_issue_sqe+0x165/0x1060 [ 289.202479][ T8372] io_submit_sqes+0xbf4/0x2140 [ 289.207795][ T8372] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 289.213887][ T8372] do_syscall_64+0xec/0xf80 [ 289.218940][ T8372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.225378][ T8372] [ 289.225378][ T8372] other info that might help us debug this: [ 289.225378][ T8372] [ 289.235677][ T8372] Chain exists of: [ 289.235677][ T8372] sb_writers#3 --> &sig->cred_guard_mutex --> &ctx->uring_lock [ 289.235677][ T8372] [ 289.249284][ T8372] Possible unsafe locking scenario: [ 289.249284][ T8372] [ 289.256837][ T8372] CPU0 CPU1 [ 289.262225][ T8372] ---- ---- [ 289.267699][ T8372] lock(&ctx->uring_lock); [ 289.272243][ T8372] lock(&sig->cred_guard_mutex); [ 289.279806][ T8372] lock(&ctx->uring_lock); [ 289.286881][ T8372] rlock(sb_writers#3); [ 289.291165][ T8372] [ 289.291165][ T8372] *** DEADLOCK *** [ 289.291165][ T8372] [ 289.299333][ T8372] 1 lock held by syz.0.647/8372: [ 289.304286][ T8372] #0: ffff88803403a0a8 (&ctx->uring_lock){+.+.}-{4:4}, at: __se_sys_io_uring_enter+0x2d5/0x2b60 [ 289.314856][ T8372] [ 289.314856][ T8372] stack backtrace: [ 289.320771][ T8372] CPU: 0 UID: 0 PID: 8372 Comm: syz.0.647 Not tainted syzkaller #0 PREEMPT(full) [ 289.320795][ T8372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.320807][ T8372] Call Trace: [ 289.320814][ T8372] [ 289.320823][ T8372] dump_stack_lvl+0xe8/0x150 [ 289.320850][ T8372] print_circular_bug+0x2e2/0x300 [ 289.320876][ T8372] check_noncircular+0x12e/0x150 [ 289.320900][ T8372] __lock_acquire+0x15a6/0x2cf0 [ 289.320922][ T8372] ? do_raw_spin_lock+0x121/0x290 [ 289.320951][ T8372] ? mnt_want_write+0x41/0x90 [ 289.320976][ T8372] lock_acquire+0x107/0x340 [ 289.320992][ T8372] ? mnt_want_write+0x41/0x90 [ 289.321022][ T8372] sb_start_write+0x4d/0x1c0 [ 289.321046][ T8372] ? mnt_want_write+0x41/0x90 [ 289.321071][ T8372] mnt_want_write+0x41/0x90 [ 289.321097][ T8372] path_openat+0xadd/0x3dd0 [ 289.321116][ T8372] ? __kernel_text_address+0xd/0x40 [ 289.321149][ T8372] ? arch_stack_walk+0xfc/0x150 [ 289.321175][ T8372] ? __pfx_path_openat+0x10/0x10 [ 289.321190][ T8372] ? __lock_acquire+0x6b6/0x2cf0 [ 289.321212][ T8372] do_filp_open+0x1fa/0x410 [ 289.321227][ T8372] ? __pfx_do_filp_open+0x10/0x10 [ 289.321251][ T8372] ? _raw_spin_unlock+0x28/0x50 [ 289.321277][ T8372] ? alloc_fd+0x64c/0x6c0 [ 289.321300][ T8372] io_openat2+0x3e0/0x5c0 [ 289.321318][ T8372] ? __pfx_io_openat2+0x10/0x10 [ 289.321334][ T8372] ? getname_flags+0x1e5/0x540 [ 289.321357][ T8372] __io_issue_sqe+0x181/0x4b0 [ 289.321379][ T8372] io_issue_sqe+0x165/0x1060 [ 289.321404][ T8372] io_submit_sqes+0xbf4/0x2140 [ 289.321436][ T8372] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 289.321464][ T8372] ? __mm_populate+0x308/0x380 [ 289.321487][ T8372] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 289.321507][ T8372] ? do_futex+0x333/0x420 [ 289.321527][ T8372] ? __pfx_do_futex+0x10/0x10 [ 289.321543][ T8372] ? vm_mmap_pgoff+0x387/0x4d0 [ 289.321568][ T8372] ? __se_sys_futex+0x36f/0x400 [ 289.321588][ T8372] ? __pfx___se_sys_futex+0x10/0x10 [ 289.321609][ T8372] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 289.321631][ T8372] do_syscall_64+0xec/0xf80 [ 289.321649][ T8372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.321666][ T8372] ? trace_irq_disable+0x37/0x100 [ 289.321689][ T8372] ? clear_bhb_loop+0x60/0xb0 [ 289.321707][ T8372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.321725][ T8372] RIP: 0033:0x7fcffab8f749 [ 289.321742][ T8372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.321758][ T8372] RSP: 002b:00007fcffb980038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 289.321778][ T8372] RAX: ffffffffffffffda RBX: 00007fcffade5fa0 RCX: 00007fcffab8f749 [ 289.321792][ T8372] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000009 [ 289.321803][ T8372] RBP: 00007fcffac13f91 R08: 0000000000000000 R09: 00000000fffffdcf [ 289.321815][ T8372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.321826][ T8372] R13: 00007fcffade6038 R14: 00007fcffade5fa0 R15: 00007fcffaf0fa28 [ 289.321846][ T8372] [ 296.891911][ T6381] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 296.907513][ T6381] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 296.919076][ T6381] usb 3-1: USB disconnect, device number 31