last executing test programs: 12.547127885s ago: executing program 0 (id=1229): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8800) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="caaf29216d1efac6d6a6064a55ab72920d400e5317451dde4c3ff5d32453b74070a995fc8f5ca2010c11e99797a03669d62217fa8ef2c6d2e54ae37c98ce6da514d17c0e83885c593a2c1a64fd5f4d3ab6f530533d580162c805d66a1462b78185293cdc42caabf6750476041c2095a814ec2374cf91c7a0a663bba7131696c2e54e30991c22e0520aec6f76768238522899bf09aeab7738bed6abb1381ddb7c31851291aa667d0fb88c8909562378847f5040e211585b617d730b9e3cf24da0ac1b", 0xc2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xa, 0x12, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ftruncate(r1, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x3a8}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) 12.292675882s ago: executing program 0 (id=1231): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)={0x28, 0x4, 0x0, {0x4, 0xfffffffffffffffc}}, 0x28) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) wait4(0x0, 0x0, 0x2, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6040, 0x4042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 10.63897629s ago: executing program 0 (id=1237): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x28, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000007000390229bd7000fbdbdf2507000000", @ANYRES32=r6, @ANYBLOB="39dba35434555162dc009ad7e5b39412e074a39305fa76adeb12eceb5db255c3f412a0dc47671c2bd40e000000f653c5c9b63cf88165d5ff75e3c698945026eacff340e9352aff7dd60d61ae39237b04f6641e333e0f0204f844b9d8ccfe4a6c9bd61f57595d5bae271e8f86ac806122e04016b33729eda93cfbf16806e27b38d27b2ec9dfbe7ad5295e3118e26cd2a116699a8bf36eb129187eb3e0ce0c472572a86486f8b4208650dd94c244af92191dcaec709fdbc391525201df1fb1f333bc6519e22c7a3c6e0c1e6deb32019690918fbdfc1f9b740f12fb78014838102aad5a0c2c77660cb1c6666cf364bebff4761fef077abe07ac8ca7885e8762fff1116bedc1bb598025ff149918c50ce602ee699b0e3740732fed8ce70301000bd3a0ab8e38ac74a5e159fff5e7e4fcbb06f1ceecb429ceecccb9a1ae3d6d081db319e25bfbbae60bf434fe375260a0e440efe07a642494e50cf4e46b7800a7b8c09018f06ef2b0fad03803ec9755c2ed0ec404f4fd72d14094f3478d6e28fd039550925503e7fc1d03caebd7e38ae2658872845c449593b0f54acf18a95c537e4f1a9c75aa6f6673422335bf2d26fda0a619cf76f403c794e0924b3bc10944f670380b233d39a3f072a7f310c1ded3ac7d9e3b44d98944e96c94958398fd91aa6d9a19febb9b77b35cc2b120e5a2f49b04a625b9308450e5727a3e4fd25a08"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.331002603s ago: executing program 3 (id=1245): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x7ffffffb, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 9.085316s ago: executing program 3 (id=1246): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$midi(0x0, 0xdd, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x1, 0x1, 0x84, 0x30, 0x3a, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x7, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0xb, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9, 0xc5}], [{{0x9, 0x5, 0xc, 0x0, 0x7ff, 0xcb, 0x9, 0x0, {0xc, 0x25, 0x1, 0x8, "7f8323c708535ec6"}}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x9, 0xf9, 0x32, {0x7, 0x25, 0x1, 0x3, 'vKX'}}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x9, 0x7f, 0x5, {0xa, 0x25, 0x1, 0x6, "928cf78bb1b0"}}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x7, 0x42, 0x3, {0x6, 0x25, 0x1, 0x2, 'KK'}}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xc, 0x2, 0xe8, {0x10, 0x25, 0x1, 0xc, "1a2521d00824cc7f2a8fc0b0"}}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0xff, 0x1, 0x5, {0x13, 0x25, 0x1, 0xf, "6f6cded69833400c110a22b516ede4"}}}, {{0x9, 0x5, 0xd, 0x12, 0x40, 0xff, 0x8b, 0x3, {0x4}}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xa, 0x25, 0x0, {0xe, 0x25, 0x1, 0xa, "e185b899d4ad8ead032e"}}}]}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x3, 0x5, 0xf, 0x8, 0x2}, 0x8, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x9, [{0xaa, &(0x7f0000000380)=@string={0xaa, 0x3, "9ebeb8267517b3f8ce5f50578d511ce5a43cce16638a177183a3a1f8b7c9154c645b300be7b3e351847b8002295346612b608377c234da16a3e3f82adcfe610a8caff8fde2487eb287be9f022173a8ac91669718616ee0671ec9fc8dd50143796c68470c646e927eedfabbd9d5856fcc4167f78e52533bb4c8ea6cc2bfa6f96b97b9cd2a1c888b8cb53521c5ceb4c3c2ce46625593854eb9e9978148844884df48721daacfeea1e7"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x6f, &(0x7f0000000100)=ANY=[@ANYBLOB="6f03133cb515507043ac9e89d18c24f4fa7a3e1d186e0a3d332dd2b161ad78ee5bc1666dd858f7a4189ca4aeb07e9696488f15d8698f7198f26518c9561ef52607f3ea0dfe94ba2b653bbfa436beece2f18ed3bca43809bbd17c01a92ff8b4a2c9c02e33a4cc0ac02048e84efc0329"]}, {0xe6, &(0x7f0000000680)=@string={0xe6, 0x3, "2e257977739879e6912094a4499fb74c8115506fb1b5e4692ccdbccd1db222dd1537d7dc73e57ea874a0ae0132ad37eb9f7ae0d5fc803cb365ebc6df5b71c1177413237373dfdfe819804124ec77fd623fc073a6a894fff682cb2bed1e1b07fb28f45d5335f447c71bec5ba192ea3c36efb7170d047f41bcaeda793e9253b1e3402fbc0b57fc7db2f4e231ce616c1ebe311e86a839de92cf1abaa5563a30279049da8785ae17e4ce126d6ff61079f191de04ab8f0beeeab6297ebf07219030d39c1b3c9e8ef137f543573fb6d6e27710489b4420a19827a8a5060668d72a86f6b9cafc2c"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x90, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0xc1a}}]}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x40, {0x0, 0x0, 0x4, 0x0, 0x20a02}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 9.0411808s ago: executing program 0 (id=1247): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x11}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x86}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000240)={0x0, 0x16}, 0x0, 0x0}) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2719, 0x0, &(0x7f00000000c0)=0xfffffe58) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x29c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55a0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38981edf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcf4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa123}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc84}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xaaa0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 7.117231608s ago: executing program 3 (id=1253): openat$autofs(0xffffffffffffff9c, 0x0, 0x420002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000300)="3955a1d47b1cef79a5786ccbe47d55690b70041c6b36b1d0b15ce5ae14a6", 0x1e) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0011680000006821dfc63af909352445a17be4ebe06b91018d4bdf20a142ebdea3f77a190db2fa41838f9b8a6cbb5962162f4a56a0fd17b2fc7e58d083c6b29e9f2eb201c22b48752f0500c9db68d468ab7531961686a42b0886954adcbb1f385ec8a4ba1e7c801373ab64e8a96ca9c9dac73d4fa1aadf8bd707a9c53dd1a184b02e5012726f5aa56417e4f413ad69df99ab72b3fc60b333468d88e80cc393306f359401bb4b647e129ea57607175f8d8a6bc0bddf477e85819fa4fa9617eed7e8a6"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="000126bd7000ffdbdf250200000008000400778e00004000018008000900590000000800060077727200140003000000000000000000000000000000000008000800ffffffff060002001600000008000b007369700008000600050000005800038014000600fc010000000000000000000000000000060007004e22000014000600fe8000000000000000000000000000aa0800050064010100060004000300000014000600fc0100"/182], 0xbc}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x3}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x5, 0xef, 0x8d, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0xfc, 0x2, '\x00', 0x5}, {0x0, 0x3, 0x2, '\x00', 0x3}, {0xf, 0x0, 0x8, '\x00', 0x5}, {0x9, 0xdb, 0x1, '\x00', 0xff}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0xb, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x3, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcd}, {0x6c, 0x3f, 0x0, '\x00', 0x3}, {0x6e, 0x4, 0x1, '\x00', 0xb}, {0x7, 0x2, 0x8, '\x00', 0xf9}, {0x5f, 0x7, 0x0, '\x00', 0xf3}, {0x1, 0x6, 0x9, '\x00', 0x2}, {0x8, 0x6, 0x1, '\x00', 0x49}, {0xae, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc7}, {0xbd, 0x9, 0x54, '\x00', 0x9}]}}) r6 = socket(0x40000000015, 0x5, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4000009d, 0x0, 0x3ff}]}) ioctl$SIOCGETVIFCNT(r6, 0x8911, &(0x7f00000003c0)={0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a0400ac00128009000100766c616e000000009c000280060001000400000004000380400004800c000100080000002b4a00000c000100fc0fabb2400000000c00010003000000040000000c00010066000000800000000c000100080000000e0000004c0003800c00010000000000530a00000c00010006000000ff0f00000c00010000000080ff0f00000c00010000000000050000000c0001000300000038da00000c000100fbffffff2103000008000500", @ANYRES32=r11], 0xd4}}, 0x8000002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, 0x0, 0x20000110) socket$nl_route(0x10, 0x3, 0x0) 6.445962126s ago: executing program 4 (id=1257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a090000000000000000000a0000040900010073797a31eb00000008000540000000020900020073797a310000000008000a4000000002200009801c0002800c"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$inet_buf(r1, 0x0, 0x16a6113f93cd98d2, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x8, 0x80000000) memfd_secret(0x80000) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0xbad689febb22c699, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x500c) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/126) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x9}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) pipe(&(0x7f0000000080)) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000640)=@sg0, 0x0, &(0x7f0000000700)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) 6.197421294s ago: executing program 4 (id=1259): r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x4}, [], {0x10, 0x2}}, 0x24, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x11e, 0x1, 0x0, 0x53) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)={0x20, 0x9, 0x3, "0fa70c"}, 0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000840)={{r1, &(0x7f0000000100)=',\'\xe6@%\x00', 0x20800, &(0x7f00000002c0)={@_ha_fsid={[0x0, 0x3]}, {0xfffe, 0x4, 0xc, 0xe}}, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x3}, {[0x1, 0x3, 0x2, 0x24d]}, 0x8, 0x49, &(0x7f0000000680)=""/73}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x8, 0x7800, 0x5, 0x8000, {{0xf, 0x4, 0x1, 0x3, 0x3c, 0x67, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @local, {[@lsrr={0x83, 0x27, 0xa, [@multicast2, @local, @loopback, @remote, @local, @rand_addr=0x64010102, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000980)={@loopback, r5}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000340)) 5.693290517s ago: executing program 2 (id=1260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="01000000030000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)="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", &(0x7f0000000180), 0xd4, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001a80)={r0, &(0x7f0000000a40), &(0x7f0000001a40)=""/48}, 0x20) 5.617844234s ago: executing program 2 (id=1261): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x0, 0xd, 0x4, 0x80, 0x2, {0x0, 0x2710}, {0x3, 0xc, 0x3c, 0x5, 0x3, 0x5, ']EVv'}, 0x9cf, 0x3, {0x0}, 0x2}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xed, 0x207fff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000001cc0)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x250, 0xb2, 0x25, 0x7, 0x40, 0x96}, 0x95, &(0x7f0000001380)=ANY=[@ANYBLOB="050f9500060b10010cae0008010001051410040334e85c8f6f181c451c2b7a643255ac3e03100b2e100b5cedcff9a96681ac319d477488d63e7157d0ef22976b3e7ab028ab2e57f5330448a63953b7a4b6161356d224100a96060020000f780800c0000000000000003f3fff00c00000006f00ff00000000001c100a04a4bc1b000f00"], 0x5, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0xca3e3a43493e1508}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x44d}}, {0xf4, &(0x7f0000001140)=ANY=[@ANYBLOB="f4034527be8a1cb45db394ce43ce3cf66e86a1f3718f9995896010ef00b5b0a76f5178cf00abffa08409f90600000000000000f681445f6600313b6196cbf74d06a98a9f4740cb3240c63efcf54b1af16b301057d49068617fdd042fe04847595ba9ffbc7cee5543578a4b176f7ed00f5d0f979339c6a1592282e36d4131c911915495875740e44f81253768fcf1d8071ad8224dbb70ece71a9f6fdfb71dba17c5959cbba9f69631ab4c60b70863c4dde2092d6194b70576c10278abff5bd9a641d9c5095fb98e43fd09e21d17f1d938402de9ff9f6ed799fb9d6187a2445ccfc5bcd0bbc6aaf7f9099c2f92b2"]}, {0x59, &(0x7f0000001c00)=@string={0x59, 0x3, "48e9c11f966279087fb005073d085caf7fd5b377150b4b6565324c843ce8598cb47b4273e708a667d1d781340efdaf73451952d25170bda5dfd9914c74cedcb9b8f1551fd99c2f64b78d015ab4990ca4b20b9cd6149d78"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x414}}]}) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0043020000000203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f00000101c0)={0x0, 0x2, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x8001, 0x0, 0x1000000, "64f778ddcf2907e63600"}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000000c0)={0xe000, 0x201000, 0x8}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES16, @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d36726567300000000000"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc43671", 0x96}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) write(r9, 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) 5.548169781s ago: executing program 0 (id=1262): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x11}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x86}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000240)={0x0, 0x16}, 0x0, 0x0}) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2719, 0x0, &(0x7f00000000c0)=0xfffffe58) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x29c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55a0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38981edf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcf4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa123}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc84}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xaaa0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_usb_control_io$uac2(r0, &(0x7f0000000740)={0x14, &(0x7f0000000280)={0x0, 0xc, 0xb9, {0xb9, 0x24, "00f482757e299ea76b32e4b8a5271e395d7591a86fde9bf8021ae22e8784ad64a0f1f66b7e8ef8736336ecc991d8a2062b83716473b973281fb46e141f7613ee20c9fa402655f93337ee9ac626015c0c9cb19524aa1409dcfa3e0e719bf7b0e907608a9137652161c3e7ff720ae67ace69d8050e582f4914647eba1f5fd6b916054f7e3b0797c24577ef92c1e9c5c86779bee3bd62f3cacb49f9e33a74439d0c125677038f76876071019cb077fe974d66c88d0e3b32ff"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000780)={0x0, 0x1, 0x71, "a4f430010e4d43185b48b8ef83361f3516891bb8d4655552e6651b6effb578fd491eea66387575c03cba6d0cf5960101965640487e9db66a06db368aa0384c6339a4c29fc450ea190543c4e3e9a264aa0aca533de2db447400f795e8991c3874c575ea2298257d480b9a50fca48fa2f19b"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xb1}, &(0x7f0000000880)={0x20, 0x81, 0x3, "46b07e"}, &(0x7f00000008c0)={0x20, 0x82, 0x1, "ac"}, &(0x7f0000000900)={0x20, 0x83, 0x2, "c826"}, &(0x7f0000000940)={0x20, 0x84, 0x4, "1cdc9dd2"}, &(0x7f0000000980)={0x20, 0x85, 0x3, '2>\''}}) 5.020676843s ago: executing program 3 (id=1264): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010300795d6c08450c3a616dc4010203010902120001000000e1089233fe04"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x101, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x1, 0x1, 0x8, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x1, 0x3, 0x90}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0xc, 0x7a}, @acm={0x4, 0x24, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x401, 0x2, 0x9}, @mdlm_detail={0x6e, 0x24, 0x13, 0x75, "d8299073832e855a196dc99d07978d4826cbb2f57a8e8fecbdd6f78a674feb6c9c38dd0b00438329f4ad991dfdf92fcfc35d55b262c8fa986f411be8d1606e6e6a006a846caa471749340070b582e20f3fa6e35e82cfe5213d6a4bbf923beda91a76fb4e985572900b8e"}, @mdlm={0x15, 0x24, 0x12, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xe, 0x8, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x95, 0x7, 0x6}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xf8, 0x1, 0x4, 0x10, 0x8}, 0x103, &(0x7f00000009c0)=ANY=[@ANYBLOB="050f030105c61003089d1c739b6de713f772dd106b6c200deba97ae513747de3093fb4073119966dbf196cb14313e37759e0bafce16186457e7aee02f47a785796935dc5bdf5e407d45beb479792708113bfe2d131dc3d757af0153ac5fa3cd883a4d8346aca6014161d7e3439849ce485b70b0b0e79f74e6cdeb9412284cc4173a5b9eb06713a0a6e91d84268941739222518648cc4897a833d5852a567a11841226e3164bdb7af618f01686a136f30be04682d90b7fce595cc3936e8c4dd83707a2fa8b1721e0c8a613c20100a0d050000000000ff7f00c0000078000000f03fff0000c00000f0c0ff000a1003000000ff0006000b100104020005000300a503100b97bf25"], 0x6, [{0xb3, &(0x7f0000000580)=@string={0xb3, 0x3, "4a56c8e7ac162d7a79450749b5a5b3529b8d1282880e08c753945d8a37e322a626dffb10eff41374e71f75355da6aa254236d0084f61b7e69824ec561acddc6ac82d46841662176a5400cca3ba556f249ab9af2f1867f4001bc90820137b69e9de10705854f7dd1efd222a3812f91344af545fd57f760e0d53070bc38596d7ef8048a200234cc5a7799b085518099be570ce963e0d91a68695d2280bff1069a141d09b43f0a00567183321f2db3d685bdc"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x457}}, {0xeb, &(0x7f0000000700)=@string={0xeb, 0x3, "627c6a363fdcc2019151c084f8ac0591b1af158273a3c8599d4bf11467c80c0a42e52eae71899df01bd8fc9653ac681abc204f631558c472a1ee1eb132da81a471dccc73a5f10552a949335cacf56747fcc32dfd49e6f853cf776c15dd223edbf41da864356608b02dec2c698d65fd5a3a309a7e2eca1a6a3bd2b776cd03165926dab7b26221d43955fd0db084490d41ef288796e2c953a5b5a052726292f40c70b42bb48b0ff775fc1cde72615b5675d0a0b41155671e85c492363f6f9c547076d7f4c695f3e97533b71f325b74b2d2f119f58c0b609f7748b02c9d31e7d28721a504cd3ca74d6500"}}, {0x80, &(0x7f00000008c0)=@string={0x80, 0x3, "55f882afae5cb12de53c2ce03393271c04969cb68718b490ec7bfdc5369dcdb6547ff29502191dd340fe2c2a47826652d0edb3e70c0cef2eb049e915b54a95539cce1b8e39dfb6092e1ee33358467f38c0fd7c027f53e0ee45f12cb0ed2e136b47a26cef630aa4f1ead82b7566a33dfd6589f77b99f87322fc28a14ad697"}}]}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f0000000280)={0x14, 0x0, 0x0}, 0x0) 4.218726193s ago: executing program 2 (id=1267): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000001c0)={0x190, 0x140, 0x300, 0x600, 0x8, 0x80, 0x1, 0x2, {0x7, 0x8, 0x1}, {0xd7a, 0x4}, {0x1, 0x1, 0x1}, {0x7, 0x4}, 0x0, 0x53, 0x80000000, 0x6, 0x1, 0x9709, 0x2, 0x334, 0x1a3, 0x7, 0x197, 0x0, 0x25, 0x1, 0x2, 0xa}) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="002206"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 3.999922704s ago: executing program 4 (id=1269): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8802b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe06ef1de2", 0x26, 0xffffffffffffffc0, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x8000000009}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f0000000740)="370fbbbaa820db32fd589160c1e2463564ea737b23aed29df3e6d2b32d3ec92f62cd7eb63e9e63d26916ab690f83d5f10cd47c47efaf572e316ea381fe6c2f274eac59c42e464cbff8c2ed77a570727a0b42f783a317160e9ee30b0d939d4d097253757910410c9b408b0126a8a556c842577041aea7fff6671edd", 0x7b, 0x4, 0x106}], 0x3e0000) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca46", 0x15}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f00000034c0)="10d68ff0b9491f79af761d074baa2a5ae916a74bc9adc7357d2d1d67ea62c69e7db0b724603e38f8c070d04a8ee42acbfd87175a7da591982aef6aa221efb741bd0ba50fed029c16293add9e0f4b1ca75efad40dcad9296e7298647ec6ba28266b9343aa01909124cb4fa25c07625fbfcdccda7feca3e183986eec9de233dd84989e7458bc4ff9a00e5937d1e0b568358441694f791b68d87f57e207e10faddbf762b79984d9bf75f5a931f619949ca50e58200dc9cbabbc16d5547007f31a28a8a3d24044047f0ce94b46086e0ebb8fe51dc44c8241778855b1b4a24e2949713f3c2443c9408093347254e3b60088b40793c8c4ab9fa174a77fe9c6bb9981e88e4e1d85dac97b2e45a67b42d35295307ddc3e843987ddfae26e5f69ebab57c550c5b8af881344a7b3e57f4645d56b986d7d0d6f1efde85337b6990770d2dbe4fb6e7e56bae8d1bcb4e01959b42f4b884792677d911d11d83c9a3e83a4c431049e586396dd8278265c09b1f40d1d27fb3533e7320fcbc78238a52041f6d38c1064f5f71b55a494af0906b7a790f62027c09f88e71524156f55059f2ef08c6ba7ecc348feaba18a67010d616d935913b1757c07cfaf583b7b75f873f924b496cdfb7aff2a091e31b5c48480de9727fabf7165949fb74eec0a1b32201c9b64af79226e40d535460d9410f0a1016acad9d8d010dba48a5d06f0dc9e12c7dddfa5d2d0d8909d025571f78ca1836ab98262e88bce08e5d5ed46bd8d71f27a6f501708a87b5c3116c002f11a3d67dd119a147418ff71bf90bcfd25fc5925f3e1b331101ccb1412de45f623805d2e95afc2d19a73b83e1a409125c1772ee16c2702a65b5ed78220c7b197c14e5aa2892ecf1f1a1b46a42c44a4b8f65379719c57d4bca4acec58477048c387f309f0af26209e89987c5074c0e63dbf9e74a9d8964838de3365ae75e9b13a3ea933a3af7a0d34c9a1c1d112d7d410fc00668b2727bc7f7f44b927095f407c06cb17557b5b8374649ad5faebcdeaa1c923b021621175ab935de5be50efb0effb63520401d1039934bb8bbdbaf19e1e8debf2f8831017a6d03a87a9607d49d2fb9a0d952c5b7a85b32af0e65968ad1188cce1128a5dd3aa0b8c5d0e4ce954fa2f09d47961892ae0fd266dc7de738e4857a2cee0b6065b0c53b13d433a00114f3197513ddcf46a6839a4e48fc0b17fb99da36923ea2f31aa60e9903d19e3bbc06b68f271b5bfbc3223379c5cbba8a5ab792faec38e3586956fe0d4f52d40884b6bdbd2c0b771c36c2922b95c7645599bfb3e8c11608101059af717d20b5c92a3f19fb8cd5d08e1d07f709ae34092fb8977d8e7b64874ab12d3220558ae9450fa6c06b15b99454eb8b4b22cec36d427c3b5aceb594c4fe894d85991f14f906199abd0da58b259329c6c32e5ccd374041f44000381f58e3dab86f80389695c7c06209a4d5f8cdc24c81c4c415659b8b9c448f40e07bae0f148812e2a1aef789963d60c4cbfa9b258921c7120fdc69bd65f15612af014c538a4026b6742fd258022594844cf4a81df33dc638ce1cd9706012bd0aa181bbb993d3812348191162276463e26d3dc6c9219362ef176130729784edc5a6ce006d7c5db9f94ce727caa96c5b7978bd52849faae6f519485e93dae48c500c6a26ba3d489f536cb3abb3b7d1b586d21c023539c79523631129c82541b208124f45faf3d2f56", 0x4c1}], 0x1}}], 0x1, 0x8000) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 3.805128379s ago: executing program 4 (id=1270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300001020050b391740000102030109026000030102d0090904000000010100000a240101000a0002010209040100000102000009040101010102000009050109ff030908040725010001070009040200000102000009040201010102000009058209000207000707250104080800"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 3.519942914s ago: executing program 1 (id=1271): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) rseq(0x0, 0x0, 0x10000, 0x0) r0 = io_uring_setup(0x7b8b, &(0x7f0000000280)={0x0, 0x22bd, 0x1000, 0x1, 0x31a}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000700300801280102d52a000000010902", @ANYRES32, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRES16=r2], 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000117000/0x2000)=nil, 0x7) unshare(0x26020480) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x10000}) msgget$private(0x0, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x1}) r6 = socket(0x25, 0xa, 0x3ff) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) pipe2(0x0, 0x80000) futex(&(0x7f0000000240)=0x2, 0xb, 0x0, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) 2.589393697s ago: executing program 1 (id=1272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000010010003bbbbbbbbbbbb3aef3f0b6daaaaaaaaaabbca6584c08c483f599b6a6e8ce3bca34554015fc624ddb10020731f25ad956589347b8f1a986753017b888a8d5a94dc8c8be628aa5583f17b2a49b57ff1617fa484838774d770d191a34cd28b378ec4f76c4ed86818ce7379e7b59155e9a39042be7fc343733c5dead559bbd64e6092c14e64106547da0e0a35cff83dc4220e6eb8868801c99149b0902d0212c5825d85e842c94b6115d47a2b6945799e57911b366f4885c831299cef9d824493c5c2b69f444ee35f72a210bb3de0657030789e8eec334e466fafaa91a5"], 0x27) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000180)) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(r2, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="a8c38ac4695b1d3ccb603c6461c6883d2ef5d027aa10cfeec2016694f70aef6904bcad390fe47ef6299df446055d13e6fd6745e1378318dc470550f5d32f8e69567e11b3ec01a124c4527d9ed82d78aa6bbdb2bda50bccf299a78920dd83d5fce42c058027d5eaad7716536cbe21be5925312753c84bfc8bdf7dcd071f143b207b5d931b214003d999b56fabbd0ac81b9743fda83077dbf5b051ef86ff706a342bcc0a402f0def", 0xa7}], 0x1}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000480)="9ea44933d2f9645c238f79dbca789cccabb204c3300512c3c06ceb79e3ddf40f057ef976c0e2dd6d92eb507358b70dad66fdffcda74701353915835236878720181ba40bf26afa6c263fe2cc8725f9e2c250fb5039f68dadae600c12044ffcc87735d952b2ea8d6054e6efbc7cab3c6ccbda2d603dacb6540b34d2f3610a06ccb7ab26d9df44209004", 0x89}, {&(0x7f0000000540)="2db3a849ab72de4c470161fb6e6c2ebebe41bf38b44ff69fbe6b4e566f2d0781f5c2f2d98c3ecf486eb2dd192af19f2f0c13555813ef954c8007fcaf5f77080bf2e0f7a54a68aea922a37e12017c7d40fc718ca29baff7ec2f24bf6d128e10287903626fa1d2f375c8768fd10831df53e131457e34ada76829f51589c9c5a86ae556faee9903ec2442dd2f345461539ce939302354ad7b950de19540c6d3326dd668c537d951e00f4b3b0d46b20b89a70474ee7cf5ecc530f744379eb87d5d45806f74c66356ae69cea90a3fba0a9e546f97e136c328c02bc9d88479e0fda77cc2", 0xe1}, {&(0x7f0000000640)="20af8842bbab5bfbcc48d9a00ffac203898d2e92cf7c587c6406adf863cf480302cb0b347118de431e6245f0d5801182d6968d59122feb901dea7933f12bf567e05d12816428c66b933b8d44e657897a17bb33a06f18c3ad08ecf206c3041e44c217ab43858feb7ba68915fc51f83e0b8c47d0f48a5a2696ef4882cd35cfa11a0cf22e09a01b256092d7e18dc65230da1a0c8fa5336e815cc3a2d86974beb51a7b18", 0xa2}, {&(0x7f0000000700)="50ca003740dcfbd7a478b848bf3413780b282cc034de20a4094e6b43d00a0eb02e2199196088a21994728d527095ddb87bb2e93c635d782e04e458b021b8d070275226f8c3d0f2f10af9136aad8a816333052dce34e669cc0c638de8c7ebf130db9c45e6cc768a59b6bee6201a2649259818eee71dbb32581ca72900895ad6dad1b19292e758e480ebef611fa6d7fe9f6c850582012fcd16ce62d3d3d1e6c6509fdc99f02afd7e82edf36c9db9afc56cf1891a5282f80af022c35555451b714c256dcee2dadf5311c9d0d5efe9f18b87a620f018596a43b0fa42e97d6b9317f5ec5595021e07400ff5", 0xe9}, {&(0x7f0000000800)="0392ed74ee72958d9a59d750b92bbd18ea54fd571187ac4d63d1e47dc917c80a10645bb4e5002a773f4bcedcce4ac221f66957b6f61e29a83d74da9230ace91b3bbd39326f9c3428298802a57b04146045e65e54484dba1a1bb63eaa748218065889e1c586b11beca02d", 0x6a}, {&(0x7f0000000880)="f9921657d2cd5e92675a8e21d0cfa2fd2fb83a645df8d2c61b6318193a4df31eee98380029718433decbf970c5c0a646989d15c6ba521b116f6910ef2cd954f4b253b8cd10a5a7a9ab3f1020559e65f70526fb93fdb09fd519bd9797a7bf2d638f141c25fc6b70c7ed55622c230704b2264de284d7ebeda5a2d1d48fd3432359cdd2a1fb1e63a466e93e535e4a3fc3c17d187f0ac5a647e07c73807c51f86b045ce8b27c85f6153a5a06d01bde3f2eda3443784c8ac4161abe8f98406995e89b0ddae0b653eaeaa061a7b48c3c9dc71adad609f1eaf3b2dd8d0e722a0baaaa334ab9dc4a445d5558d02e0b", 0xeb}, {&(0x7f0000000980)="54d5561e20efeb19ccd6a4105cf3852afd608ffe31e10572329086e85bc89c045ac1a441514b6a4ad887be278e6d4274d9f069738944730d27f45f35c3a1bb54e166ac4108cedee2ec361c1a2e57e9", 0x4f}, {&(0x7f0000000a00)="9f48becd972b796d37672ce0e11ee34d071d00434f74d9add77973f68a22abc885eeede7842d8b3b1aff8a0e210076eb4ab02e426f210389b5d4731e5e7b23acdb27d63d5bb2bc9f3734b82d73532e13bbec7978fabdcf296c6b3f822b600e269550ea66d11546247a6c9d7dfbd4e65f71f9a16242f1e89f54ac89c825ce62f12f898893bed6ea83e9a06a", 0x8b}, {&(0x7f0000001600)="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", 0x1000}], 0x9, &(0x7f00000026c0)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x376c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @timestamp={0x44, 0xc, 0x73, 0x0, 0x4, [0x7, 0x1ee]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xf0}}], 0x2, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.513558409s ago: executing program 4 (id=1273): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) rseq(0x0, 0x0, 0x10000, 0x0) r1 = io_uring_setup(0x7b8b, &(0x7f0000000280)={0x0, 0x22bd, 0x1000, 0x1, 0x31a}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x7fff, 0x400) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000700300801280102d52a000000010902", @ANYRES32=r0, @ANYRES16=r3, @ANYRESDEC=r2, @ANYRES16=r3], 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000117000/0x2000)=nil, 0x7) unshare(0x26020480) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x10000}) msgget$private(0x0, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x1}) r7 = socket(0x25, 0xa, 0x3ff) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) pipe2(0x0, 0x80000) futex(&(0x7f0000000240)=0x2, 0xb, 0x0, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) 2.408484379s ago: executing program 0 (id=1274): bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$packet(0x11, 0x3, 0x300) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 2.032895074s ago: executing program 1 (id=1275): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000640)={0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x0, 0x80}, [@RTA_DST={0x8, 0x1, @loopback}]}, 0x24}}, 0x20000050) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x80082102, &(0x7f0000000280)={r3, 0x0, 0xffffffffffffffff, 0xf}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = fsopen(0x0, 0x1) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, 0x0) r9 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r9, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) get_mempolicy(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000006000/0x2000)=nil, 0x2) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendfile(r10, r0, 0x0, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="0f01c9660f38cf91cf7ebaf80c66b884b1cb8866efbafc0c66b8fc3c0e2e66ef0f01c5f2a566b8004000000f23c80f21f866350c0030000f23f80fc71cbaf80c66b8b785148066efbafc0cb0bcee66b8240000000f23d00f21f866352000000e0f23f8672e67f082200f", 0x6a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.30506375s ago: executing program 4 (id=1276): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac020000100007190008000000000000ff020000000000000000000000000001e000000200002f5d006700000000372000000004fffd00000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000030000000000000001000000000000000200000000e04e0000000000000000000000001000000000010000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002fe3400000000000000240009008f6b0000000000000100000000000080b400000000000000050000000000000008001e00000800000800180006000000080016"], 0x2ac}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x3, 0x6, &(0x7f0000000000)={0x11, "9124be917ea944c214b5367c2fe313c4c005671fc56af43014ffef1e156e7d73ec"}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x0, 0x0, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000affffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) mmap$snddsp(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x5, 0x11, r4, 0x2000) syz_usb_connect$uac3(0x6, 0xbe, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x5a, 0x80, 0x81, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x30, 0x6a}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x33, 0x4}, [@extension_unit={0x1d, 0x24, 0xa, 0x2, 0x3, [0x0, 0x3, 0x1, 0x1, 0x2, 0x3]}, @source_unit={0xc, 0x24, 0xb, 0x4, 0x1, 0x9801, 0x9, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x250, 0x10, 0x7, 0xc, {0xa, 0x25, 0x25, 0x6, 0x42, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0x1, 0x3, 'S'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x66, 0x2, 0x5d, 0x8, 'PG-~'}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb6, 0xd, 0x5, {0xa, 0x25, 0x25, 0x662afd21, 0x3, 0x1000}}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0xd, 0x10, 0x0, 0x10, 0x3}, 0x1be, &(0x7f0000000600)={0x5, 0xf, 0x1be, 0x3, [@generic={0xbe, 0x10, 0x1, "4af091ce83b3279094040041cf807d947b414617184fc73bf796cdb1c091448e7bdf63fa19fdc5e3a7126cd46b4ddccc670d5b30cbaa1badc7373a551a9786905b5fb9e4b6cc3b68a4307f6cb1ba01896598d8b83a746122cf20d165d2b76fe9b1ad6ec1c50c97657107f0993a85216a0052556235cd41752427e9cbc4c94d3499860d19b9f32c2c69f44cf302d14b74124d5db66f27585b1378484fc591727d06e14c93c81377be5f4b88d7b660a063807a8e03cfd67436f3d047"}, @generic={0xf1, 0x10, 0x1, "5cef115ad742569fb3bb9ea97ec4fc129a8b5a2b484510e1c8e4fb6754bd4dbb7acf4fc5837e0aef90630d1770f0d8a6ed86d05524e3c23e0a7f20c9cecd8842d66c0d2e8acb8e31879302515d9876f235350b4a9da9007389ea9678a4e9a0c1fff1d2c9e74c970b89d042d4d4aae7d93b37bd53f85323daee015f31ba98fca3799e63a18c95eb15b358161042eb796dad4c0d390eeb12d062a31090307e50852a56e267ca8354e2eb1c9a46f5d4fc6e50db13fd7cd6bc6237ddc1b2ac10b8c33ad715a7d649bef3b5b26245700dc97f253f312ac06ff283a4f0efc4ca99f1af791a9e7825b237d92cfca6876a05"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x3, 0xd7f5}]}, 0x4, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x416}}, {0x3d, &(0x7f0000000a00)=ANY=[@ANYBLOB="3d0314f67784b9c5a6e6af33249e7fe3bcbc1cf33288eaf6a23bb3a917035be981bd37f763a787ac0d1aa04144e25474af33c910dcbee3c5dcaf97eeee060000007f21028638fede6d390d"]}, {0x4, &(0x7f0000000840)=@string={0x4, 0x3, "a921"}}, {0xe2, &(0x7f0000000880)=@string={0xe2, 0x3, "47b019a651936bd8b445eb7d78954e91c53df85e3f323efd94585608d0c2370dafe7d6546f89072deb4e4db0fb6fd5863eed9782f3dd7c21cff612d02d7c9b02a95a337c47f160749dcd13eb539fe220a50b71c4689e7a1d1e5f605006a27c6028c1d437f6884ea1f6a58e4291ce84ba8e19b96ce98fe4f2c36e0d84130d4c38f3a0cfc7ad36f27a99cff1ee5e345ff2782a6272aaeaee7bc14846849dace36c9038177490d5a750311972708263c8effcafed2cc308887af02b791db5761c1accd1872f86458eaba4f708436a868a101af8fc90db65ca930fbd8f4caaaf1230"}}]}) mremap(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f000000c000/0x2000)=nil) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_getanyicast={0x14, 0x3e, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000000) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r6, &(0x7f0000001180)=""/4096, 0x1000) pipe(&(0x7f0000000040)) 1.248106163s ago: executing program 3 (id=1277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x1, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.130436788s ago: executing program 3 (id=1278): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x0, 0xd, 0x4, 0x80, 0x2, {0x0, 0x2710}, {0x3, 0xc, 0x3c, 0x5, 0x3, 0x5, ']EVv'}, 0x9cf, 0x3, {0x0}, 0x2}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xed, 0x207fff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000001cc0)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x250, 0xb2, 0x25, 0x7, 0x40, 0x96}, 0x95, &(0x7f0000001380)=ANY=[@ANYBLOB="050f9500060b10010cae0008010001051410040334e85c8f6f181c451c2b7a643255ac3e03100b2e100b5cedcff9a96681ac319d477488d63e7157d0ef22976b3e7ab028ab2e57f5330448a63953b7a4b6161356d224100a96060020000f780800c0000000000000003f3fff00c00000006f00ff00000000001c100a04a4bc1b000f00"], 0x5, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0xca3e3a43493e1508}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x44d}}, {0xf4, &(0x7f0000001140)=ANY=[@ANYBLOB="f4034527be8a1cb45db394ce43ce3cf66e86a1f3718f9995896010ef00b5b0a76f5178cf00abffa08409f90600000000000000f681445f6600313b6196cbf74d06a98a9f4740cb3240c63efcf54b1af16b301057d49068617fdd042fe04847595ba9ffbc7cee5543578a4b176f7ed00f5d0f979339c6a1592282e36d4131c911915495875740e44f81253768fcf1d8071ad8224dbb70ece71a9f6fdfb71dba17c5959cbba9f69631ab4c60b70863c4dde2092d6194b70576c10278abff5bd9a641d9c5095fb98e43fd09e21d17f1d938402de9ff9f6ed799fb9d6187a2445ccfc5bcd0bbc6aaf7f9099c2f92b2"]}, {0x59, &(0x7f0000001c00)=@string={0x59, 0x3, "48e9c11f966279087fb005073d085caf7fd5b377150b4b6565324c843ce8598cb47b4273e708a667d1d781340efdaf73451952d25170bda5dfd9914c74cedcb9b8f1551fd99c2f64b78d015ab4990ca4b20b9cd6149d78"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x414}}]}) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0043020000000203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f00000101c0)={0x0, 0x2, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x8001, 0x0, 0x1000000, "64f778ddcf2907e63600"}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000000c0)={0xe000, 0x201000, 0x8}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES16, @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d36726567300000000000"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc43671", 0x96}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) write(r9, &(0x7f0000000580), 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) 945.280369ms ago: executing program 1 (id=1279): r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x4}, [], {0x10, 0x2}}, 0x24, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x11e, 0x1, 0x0, 0x53) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)={0x20, 0x9, 0x3, "0fa70c"}, 0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000840)={{r1, &(0x7f0000000100)=',\'\xe6@%\x00', 0x20800, &(0x7f00000002c0)={@_ha_fsid={[0x0, 0x3]}, {0xfffe, 0x4, 0xc, 0xe}}, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x3}, {[0x1, 0x3, 0x2, 0x24d]}, 0x8, 0x49, &(0x7f0000000680)=""/73}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x8, 0x7800, 0x5, 0x8000, {{0xf, 0x4, 0x1, 0x3, 0x3c, 0x67, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @local, {[@lsrr={0x83, 0x27, 0xa, [@multicast2, @local, @loopback, @remote, @local, @rand_addr=0x64010102, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000980)={@loopback, r5}, 0x14) syz_usb_control_io$uac2(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x22, 0xf, {0xf, 0x36, "6bc96819dea2563e9481aa1795"}}, &(0x7f0000000580)={0x0, 0x3, 0x57, @string={0x57, 0x3, "183a4b1e667499521504c8bc7ff7a8e143b685459b10ecd76e141d2abb0db85e73315c77353771cf2bbc7a161a8b2fdcd9b901faba6237f877ea8cf3560d9d6c7b2232b28f61b84e25bdd364eec7e54db7d199b540"}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0x2e, 0x61, "33ee17d7b04898486f9cef7c94a2e6f266484e9b059b7d07b51053f00d24488c808f6a85407a72ad725455d1bdb478b79d26b131b9579e703b714f2b83259e8e8d464b94ad97ccda5893203d88e17075a92314e0d41af17e61f206f050284b1303"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000280)={0x20, 0x81, 0x1, 'F'}, &(0x7f00000004c0)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f0000000a80)=ANY=[@ANYBLOB="212b32da931edefc610abe1dbbf0a2529f0a8d0b019f00d1ae00"/35], &(0x7f0000000380)={0x20, 0x84, 0x1, "c2"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "08add6"}}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000340)) 841.424178ms ago: executing program 2 (id=1280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 772.555939ms ago: executing program 2 (id=1281): shmget$private(0x41000000, 0x4000, 0x78000c04, &(0x7f0000ff9000/0x4000)=nil) 772.121162ms ago: executing program 2 (id=1282): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x28, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000007000390229bd7000fbdbdf2507000000", @ANYRES32=r4, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) dup(r3) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_route(0x10, 0x3, 0x0) 284.98902ms ago: executing program 1 (id=1283): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 1 (id=1284): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x11}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x86}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000240)={0x0, 0x16}, 0x0, 0x0}) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2719, 0x0, &(0x7f00000000c0)=0xfffffe58) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x29c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55a0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38981edf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcf4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa123}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc84}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xaaa0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_usb_control_io$uac2(r0, &(0x7f0000000740)={0x14, &(0x7f0000000280)={0x0, 0xc, 0xb9, {0xb9, 0x24, "00f482757e299ea76b32e4b8a5271e395d7591a86fde9bf8021ae22e8784ad64a0f1f66b7e8ef8736336ecc991d8a2062b83716473b973281fb46e141f7613ee20c9fa402655f93337ee9ac626015c0c9cb19524aa1409dcfa3e0e719bf7b0e907608a9137652161c3e7ff720ae67ace69d8050e582f4914647eba1f5fd6b916054f7e3b0797c24577ef92c1e9c5c86779bee3bd62f3cacb49f9e33a74439d0c125677038f76876071019cb077fe974d66c88d0e3b32ff"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000780)={0x0, 0x1, 0x71, "a4f430010e4d43185b48b8ef83361f3516891bb8d4655552e6651b6effb578fd491eea66387575c03cba6d0cf5960101965640487e9db66a06db368aa0384c6339a4c29fc450ea190543c4e3e9a264aa0aca533de2db447400f795e8991c3874c575ea2298257d480b9a50fca48fa2f19b"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xb1}, &(0x7f0000000880)={0x20, 0x81, 0x3, "46b07e"}, &(0x7f00000008c0)={0x20, 0x82, 0x1, "ac"}, &(0x7f0000000900)={0x20, 0x83, 0x2, "c826"}, &(0x7f0000000940)={0x20, 0x84, 0x4, "1cdc9dd2"}, &(0x7f0000000980)={0x20, 0x85, 0x3, '2>\''}}) kernel console output (not intermixed with test programs): , Product=0, SerialNumber=0 [ 356.509109][ T42] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 356.519145][ T5755] usb 5-1: config 0 descriptor?? [ 356.544931][ T5755] mos7840 5-1:0.0: missing endpoints [ 356.689256][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 356.699664][ T42] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 356.708408][ T42] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.719356][ T42] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 356.729703][ T42] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 356.740164][ T42] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.754112][ T42] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 356.766834][ T5721] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 356.777619][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.788449][ T5721] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 356.819878][ T5721] usb 4-1: USB disconnect, device number 88 [ 356.834884][ T5721] mos7840 4-1:0.0: device disconnected [ 357.007720][ T42] usb 3-1: GET_CAPABILITIES returned 0 [ 357.013892][ T42] usbtmc 3-1:16.0: can't read capabilities [ 357.737026][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.747371][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.754039][ T42] usb 3-1: USB disconnect, device number 71 [ 357.796695][ T5721] usb 5-1: USB disconnect, device number 75 [ 357.953016][T10552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.426712][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 358.463932][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 358.489902][T10558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.503789][T10558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.518336][T10558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.528255][T10558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.638882][ T5755] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 358.798839][ T5755] usb 3-1: Using ep0 maxpacket: 16 [ 358.808974][ T5755] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 358.818318][ T5755] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 358.827712][ T5755] usb 3-1: config 166 has no interface number 0 [ 358.834843][ T5755] usb 3-1: config 166 has no interface number 1 [ 358.845541][ T5755] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 358.857453][ T5755] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 358.871219][ T5755] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 358.908897][ T5721] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 358.917671][ T5755] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 358.944885][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 358.957511][ T5755] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 358.994930][ T5755] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 359.015276][T10567] fuse: Bad value for 'fd' [ 359.028509][ T5755] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 359.058686][ T5755] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 359.083080][ T5755] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 359.117116][ T5755] usb 3-1: config 166 interface 177 has no altsetting 0 [ 359.167380][ T5755] usb 3-1: config 166 interface 34 has no altsetting 0 [ 359.169748][ T5721] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 359.196880][ T5721] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 359.215496][ T5721] usb 4-1: config 150 has no interface number 0 [ 359.223544][ T5755] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 359.226933][ T5721] usb 4-1: config 150 interface 204 has no altsetting 0 [ 359.236552][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.250444][ T5721] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 359.262750][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.271804][ T5755] usb 3-1: Product: syz [ 359.275971][ T5721] usb 4-1: Product: syz [ 359.288184][ T5721] usb 4-1: Manufacturer: syz [ 359.288899][ T5755] usb 3-1: Manufacturer: syz [ 359.300077][ T5721] usb 4-1: SerialNumber: syz [ 359.321606][ T5755] usb 3-1: SerialNumber: syz [ 359.607975][ T5755] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 359.822245][ T5755] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 360.075707][ T5755] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 360.226906][ T5755] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 360.250821][ T5755] uvcvideo 3-1:166.34: No valid video chain found. [ 360.405884][T10593] syzkaller0: entered promiscuous mode [ 360.411871][T10593] syzkaller0: entered allmulticast mode [ 360.551545][ T5740] usb 3-1: USB disconnect, device number 72 [ 361.024702][T10600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.052567][T10600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.337050][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'. [ 361.502581][T10609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.345325][ T5721] xr_serial 4-1:150.204: skipping garbage [ 362.364273][ T5721] xr_serial 4-1:150.204: xr_serial converter detected [ 362.407170][ T5721] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 362.453162][ T5721] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 362.519947][ T5721] usb 4-1: USB disconnect, device number 89 [ 362.544806][ T5721] xr_serial 4-1:150.204: device disconnected [ 363.531595][T10645] FAULT_INJECTION: forcing a failure. [ 363.531595][T10645] name failslab, interval 1, probability 0, space 0, times 0 [ 363.545272][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.3.1047 Not tainted syzkaller #0 PREEMPT(full) [ 363.545291][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.545298][T10645] Call Trace: [ 363.545303][T10645] [ 363.545308][T10645] dump_stack_lvl+0xe8/0x150 [ 363.545328][T10645] should_fail_ex+0x412/0x560 [ 363.545344][T10645] should_failslab+0xa8/0x100 [ 363.545358][T10645] __kvmalloc_node_noprof+0x178/0x8a0 [ 363.545376][T10645] ? io_alloc_cache_init+0x42/0x140 [ 363.545390][T10645] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 363.545410][T10645] io_alloc_cache_init+0x42/0x140 [ 363.545424][T10645] io_rsrc_cache_init+0x43/0x50 [ 363.545450][T10645] io_ring_ctx_alloc+0x4d9/0xc50 [ 363.545469][T10645] io_uring_create+0x50/0x9a0 [ 363.545490][T10645] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 363.545516][T10645] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 363.545553][T10645] ? __pfx_ksys_write+0x10/0x10 [ 363.545584][T10645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.545598][T10645] do_syscall_64+0x174/0x580 [ 363.545610][T10645] ? trace_irq_disable+0x3b/0x140 [ 363.545628][T10645] ? clear_bhb_loop+0x40/0x90 [ 363.545643][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.545655][T10645] RIP: 0033:0x7f3f0699ce59 [ 363.545669][T10645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.545679][T10645] RSP: 002b:00007f3f0781fee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 363.545695][T10645] RAX: ffffffffffffffda RBX: 00002000000002c8 RCX: 00007f3f0699ce59 [ 363.545703][T10645] RDX: 0000200000000348 RSI: 00002000000002c8 RDI: 0000000000000e50 [ 363.545710][T10645] RBP: 00002000000002c0 R08: 0000200000001540 R09: 0000000000000000 [ 363.545718][T10645] R10: 0000200000000350 R11: 0000000000000206 R12: 0000200000000348 [ 363.545725][T10645] R13: 0000200000000350 R14: 00007f3f0781ffd8 R15: 0000000000000000 [ 363.545742][T10645] [ 363.755573][ T5699] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 363.808877][ T5755] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 363.842904][T10647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.926067][ T5699] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 363.930997][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 363.935373][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.948329][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 363.952567][ T5699] usb 1-1: Product: syz [ 363.952694][ T5699] usb 1-1: Manufacturer: syz [ 363.952711][ T5699] usb 1-1: SerialNumber: syz [ 363.988216][ T5699] usb 1-1: config 0 descriptor?? [ 363.997874][ T5755] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 364.008005][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.016458][ T5755] usb 5-1: Product: syz [ 364.029756][ T5755] usb 5-1: Manufacturer: syz [ 364.034874][ T5755] usb 5-1: SerialNumber: syz [ 364.054438][ T5755] usb 5-1: config 0 descriptor?? [ 364.989224][ T5699] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 365.139023][ T5699] usb 4-1: device descriptor read/64, error -71 [ 365.378959][ T5699] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 365.508914][ T5699] usb 4-1: device descriptor read/64, error -71 [ 365.619273][ T5699] usb usb4-port1: attempt power cycle [ 365.892564][T10674] fuse: Bad value for 'fd' [ 365.912298][T10674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.921417][T10674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.933377][T10674] tipc: Bearer : already 2 bearers with priority 10 [ 365.941280][T10674] tipc: Bearer : trying with adjusted priority [ 365.952903][T10674] tipc: Enabled bearer , priority 9 [ 365.959844][ T5699] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 365.981793][ T5699] usb 4-1: device descriptor read/8, error -71 [ 366.238973][ T5699] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 366.259541][ T5699] usb 4-1: device descriptor read/8, error -71 [ 366.343267][ T42] usb 1-1: USB disconnect, device number 83 [ 366.369955][ T5699] usb usb4-port1: unable to enumerate USB device [ 366.428489][T10676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1054'. [ 366.454345][ T5755] usb 5-1: USB disconnect, device number 76 [ 366.748949][ T42] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 366.759900][T10681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.926199][ T42] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 366.944570][ T42] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 366.958464][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.973377][ T42] usb 1-1: Product: syz [ 366.980861][ T42] usb 1-1: Manufacturer: syz [ 366.988706][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.006506][ T42] usb 1-1: SerialNumber: syz [ 367.021223][ T42] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 367.024668][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.044141][ T5755] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 367.067037][ T5699] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 367.211724][ T5755] usb 3-1: unable to get BOS descriptor or descriptor too short [ 367.224277][ T5755] usb 3-1: config 1 has an invalid interface number: 43 but max is 1 [ 367.232798][ T5755] usb 3-1: config 1 has no interface number 1 [ 367.239967][ T5755] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 367.253495][ T5755] usb 3-1: config 1 interface 0 has no altsetting 0 [ 367.263313][ T5755] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 367.272839][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.281348][T10676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.281401][ T5755] usb 3-1: Product: syz [ 367.293884][T10676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.295446][ T5755] usb 3-1: Manufacturer: syz [ 367.306927][ T5755] usb 3-1: SerialNumber: syz [ 367.310666][T10676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.311768][ T10] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 367.325027][T10676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.348186][T10676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.360812][T10676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.381700][ T5721] usb 1-1: USB disconnect, device number 84 [ 367.491712][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.502138][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 367.511701][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 367.522827][ T10] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 367.532263][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.544761][T10691] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 367.569645][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.571687][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 367.601278][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.608857][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 367.627975][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 367.630363][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.641978][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 367.660828][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.673566][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 367.693042][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 367.711918][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.760377][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.048671][ T5755] smsusb:smsusb_probe: board id=8, interface number 0 [ 368.068177][ T5755] smsusb:smsusb_probe: board id=8, interface number 43 [ 368.091288][ T5755] usb 3-1: USB disconnect, device number 73 [ 368.119523][ T5699] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 368.142193][ T5699] ath9k_htc: Failed to initialize the device [ 368.180713][ T5721] usb 1-1: ath9k_htc: USB layer deinitialized [ 368.229023][ T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 368.266008][T10703] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 368.286641][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 368.388890][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 368.396445][ T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 368.405189][ T24] usb 4-1: config 0 has no interface number 0 [ 368.411892][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.423102][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 368.435300][ T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 368.447053][ T24] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 368.461296][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 368.470509][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.481649][ T24] usb 4-1: config 0 descriptor?? [ 368.494068][ T24] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 368.628954][ T5721] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 368.731311][ T42] usb 5-1: USB disconnect, device number 77 [ 368.737730][T10700] cdc_wdm 5-1:1.0: Error autopm - -16 [ 368.783369][ T5634] usb 4-1: USB disconnect, device number 94 [ 368.802236][ T5721] usb 1-1: unable to get BOS descriptor or descriptor too short [ 368.814338][ T5634] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 368.822753][ T5721] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 368.841558][ T5721] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 368.853027][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 368.863361][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.876028][ T5721] usb 1-1: Product: syz [ 368.880456][ T42] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 368.888535][ T5721] usb 1-1: Manufacturer: syz [ 368.894020][ T5721] usb 1-1: SerialNumber: syz [ 369.020756][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.032179][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.042382][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 369.056144][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 369.065549][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 369.072174][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.082190][ T42] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 369.093753][ T42] usb 5-1: config 0 has no interfaces? [ 369.100989][ T24] usb 3-1: config 0 descriptor?? [ 369.114184][ T5721] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 369.121232][ T42] usb 5-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 369.135193][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.147022][ T42] usb 5-1: config 0 descriptor?? [ 369.198940][ T5634] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 369.353979][ T5634] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 369.363906][ T5634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.372659][ T5634] usb 4-1: Product: syz [ 369.377223][ T5634] usb 4-1: Manufacturer: syz [ 369.382528][ T5634] usb 4-1: SerialNumber: syz [ 369.397084][ T5634] usb 4-1: config 0 descriptor?? [ 369.553670][ T24] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 369.912225][ T5721] usb 1-1: failed to enable PITCH for EP 0x82 [ 369.923706][ T5721] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 369.936459][ T5721] usb 1-1: clock source 0 is not valid, cannot use [ 369.966362][ T5721] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 369.979849][ T42] usb 5-1: string descriptor 0 read error: -71 [ 369.987033][ T5721] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 370.020336][ T42] usb 5-1: USB disconnect, device number 78 [ 370.137137][ T5721] usb 1-1: USB disconnect, device number 85 [ 370.216548][ T29] audit: type=1326 audit(1780103225.384:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.4.1065" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb74fb9ce59 code=0x0 [ 370.274015][ T5706] udevd[5706]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.597378][T10731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.622591][T10731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.899314][T10731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.911550][T10731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.198861][ T5721] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 371.369053][ T5721] usb 1-1: Using ep0 maxpacket: 32 [ 371.376282][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 371.399680][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25970, setting to 1024 [ 371.418900][ T5721] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 371.428893][ T5755] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 371.438845][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.451273][ T5721] usb 1-1: config 0 descriptor?? [ 371.458000][T10740] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 371.471399][ T5721] hub 1-1:0.0: USB hub found [ 371.563924][ T5755] usb 5-1: device descriptor read/64, error -71 [ 371.576002][ T5699] usb 3-1: USB disconnect, device number 74 [ 371.676337][ T5721] hub 1-1:0.0: 1 port detected [ 371.699291][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 371.710721][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'. [ 371.720894][T10749] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1072'. [ 371.818673][ T29] audit: type=1326 audit(1780103226.984:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10750 comm="syz.2.1073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d5eb9ce59 code=0x0 [ 371.850407][ T5755] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 371.906953][ T5737] usb 4-1: USB disconnect, device number 95 [ 371.979042][T10759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.010486][T10759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.018427][ T5755] usb 5-1: device descriptor read/64, error -71 [ 372.129401][ T5755] usb usb5-port1: attempt power cycle [ 372.465715][ T5721] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 372.475259][ T5721] usb 1-1: USB disconnect, device number 86 [ 372.482598][ T13] usb 1-1: Failed to suspend device, error -71 [ 372.492201][ T5755] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 372.525779][ T5755] usb 5-1: device descriptor read/8, error -71 [ 372.609957][ T5737] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 372.779986][ T5755] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 372.800232][ T5755] usb 5-1: device descriptor read/8, error -71 [ 372.919416][ T5755] usb usb5-port1: unable to enumerate USB device [ 372.948929][ T5721] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 373.118874][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 373.133348][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 373.144844][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25970, setting to 1024 [ 373.156905][ T5721] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 373.166559][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.176984][ T5721] usb 3-1: config 0 descriptor?? [ 373.186382][T10768] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 373.202829][ T5721] hub 3-1:0.0: USB hub found [ 373.360896][ T5737] usb 4-1: device descriptor read/64, error -71 [ 373.402203][ T5721] hub 3-1:0.0: 1 port detected [ 373.598956][ T5737] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 373.598985][ T5699] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 373.748901][ T5737] usb 4-1: Using ep0 maxpacket: 8 [ 373.757363][ T5737] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.758848][ T5699] usb 1-1: Using ep0 maxpacket: 32 [ 373.768311][ T5737] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 373.776223][ T5699] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 373.782657][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.791846][ T5699] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.810043][ T5699] usb 1-1: config 0 has no interface number 0 [ 373.811655][ T5737] usb 4-1: config 0 descriptor?? [ 373.816320][ T5699] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.838052][ T5737] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 373.842486][ T5699] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 373.857404][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.865637][ T5699] usb 1-1: Product: syz [ 373.870115][ T5699] usb 1-1: Manufacturer: syz [ 373.874798][ T5699] usb 1-1: SerialNumber: syz [ 373.883378][ T5699] usb 1-1: config 0 descriptor?? [ 373.894871][ T5699] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 373.902698][ T5699] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 374.047121][ T5737] gspca_vc032x: reg_r err -32 [ 374.053134][ T5737] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 374.104063][ T24] usb 3-1: USB disconnect, device number 75 [ 374.110975][ T5721] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 374.123127][ T5699] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 374.150674][ T5699] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 374.178165][ T5699] usb 1-1: USB disconnect, device number 87 [ 374.415956][T10781] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1081'. [ 374.468053][ T29] audit: type=1400 audit(1780103229.634:7303): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 374.759210][ T5699] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 374.772252][T10788] netlink: 'syz.2.1084': attribute type 10 has an invalid length. [ 374.786944][T10788] dummy0: entered promiscuous mode [ 374.795260][T10788] team0: Port device dummy0 added [ 374.802310][T10788] FAULT_INJECTION: forcing a failure. [ 374.802310][T10788] name failslab, interval 1, probability 0, space 0, times 0 [ 374.817709][T10788] CPU: 0 UID: 0 PID: 10788 Comm: syz.2.1084 Not tainted syzkaller #0 PREEMPT(full) [ 374.817728][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.817736][T10788] Call Trace: [ 374.817741][T10788] [ 374.817747][T10788] dump_stack_lvl+0xe8/0x150 [ 374.817767][T10788] should_fail_ex+0x412/0x560 [ 374.817785][T10788] should_failslab+0xa8/0x100 [ 374.817798][T10788] ? skb_clone+0x212/0x3a0 [ 374.817811][T10788] kmem_cache_alloc_noprof+0x87/0x650 [ 374.817829][T10788] ? __netlink_lookup+0xc6/0x8b0 [ 374.817845][T10788] skb_clone+0x212/0x3a0 [ 374.817860][T10788] __netlink_deliver_tap+0x404/0x850 [ 374.817885][T10788] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.817905][T10788] netlink_deliver_tap+0x19c/0x1b0 [ 374.817924][T10788] netlink_unicast+0x730/0x8e0 [ 374.817947][T10788] netlink_sendmsg+0x813/0xb40 [ 374.817971][T10788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.817992][T10788] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.818011][T10788] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.818030][T10788] ____sys_sendmsg+0x972/0x9f0 [ 374.818044][T10788] ? __might_fault+0xaf/0x130 [ 374.818066][T10788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.818084][T10788] ? import_iovec+0x73/0xa0 [ 374.818101][T10788] ___sys_sendmsg+0x2a5/0x360 [ 374.818113][T10788] ? __lock_acquire+0x6b5/0x2cf0 [ 374.818130][T10788] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.818162][T10788] ? __fget_files+0x2a/0x420 [ 374.818185][T10788] ? __fget_files+0x3a0/0x420 [ 374.818303][T10788] __x64_sys_sendmsg+0x1bd/0x2a0 [ 374.818327][T10788] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.818355][T10788] ? __pfx_ksys_write+0x10/0x10 [ 374.818379][T10788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.818392][T10788] do_syscall_64+0x174/0x580 [ 374.818405][T10788] ? trace_irq_disable+0x3b/0x140 [ 374.818424][T10788] ? clear_bhb_loop+0x40/0x90 [ 374.818439][T10788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.818452][T10788] RIP: 0033:0x7f6d5eb9ce59 [ 374.818469][T10788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.818482][T10788] RSP: 002b:00007f6d5fb00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.818501][T10788] RAX: ffffffffffffffda RBX: 00007f6d5ee15fa0 RCX: 00007f6d5eb9ce59 [ 374.818513][T10788] RDX: 0000000000008084 RSI: 0000200000000600 RDI: 0000000000000003 [ 374.818522][T10788] RBP: 00007f6d5fb00090 R08: 0000000000000000 R09: 0000000000000000 [ 374.818529][T10788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.818537][T10788] R13: 00007f6d5ee16038 R14: 00007f6d5ee15fa0 R15: 00007f6d5ef3fa48 [ 374.818555][T10788] [ 374.818586][T10788] netlink: 'syz.2.1084': attribute type 10 has an invalid length. [ 374.850569][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.853956][T10788] dummy0: left promiscuous mode [ 374.858568][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 374.956882][T10790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.962248][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 374.968567][T10788] team0: Port device dummy0 removed [ 374.971350][ T24] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 374.984488][T10790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.987205][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 374.997095][T10788] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 374.998084][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.164534][T10795] netlink: 'syz.2.1086': attribute type 10 has an invalid length. [ 375.175476][T10783] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 375.216137][T10797] netlink: 'syz.2.1086': attribute type 10 has an invalid length. [ 375.251015][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 375.251438][T10795] bond0: (slave dummy0): Releasing backup interface [ 375.269197][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 375.271899][T10795] dummy0: entered promiscuous mode [ 375.284292][T10795] team0: Port device dummy0 added [ 375.291547][T10797] dummy0: left promiscuous mode [ 375.292921][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 375.317494][T10797] team0: Port device dummy0 removed [ 375.322504][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 375.332530][T10797] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 375.347002][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 375.363040][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 375.391528][ T5699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 375.408607][ T5699] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 375.419375][ T5699] usb 1-1: can't read configurations, error -71 [ 375.668861][ T5755] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 375.831285][ T5755] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 375.841060][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.852523][ T5755] usb 3-1: config 0 descriptor?? [ 376.061177][ T5755] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 376.077631][ T24] usb 4-1: USB disconnect, device number 97 [ 376.263810][ T5737] usb 5-1: USB disconnect, device number 83 [ 376.281810][ T5755] [drm:udl_init] *ERROR* Selecting channel failed [ 376.328245][ T5755] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 376.345095][ T5755] [drm] Initialized udl on minor 2 [ 376.354243][ T5755] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 376.363869][ T5755] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 376.376317][ T5736] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 376.386974][ T5755] usb 3-1: USB disconnect, device number 76 [ 376.395167][ T5736] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 376.459785][ T5737] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 376.519069][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 376.629046][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 376.635801][ T5737] usb 5-1: config index 0 descriptor too short (expected 65535, got 34) [ 376.644987][ T5737] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 376.655155][ T5737] usb 5-1: config 255 has an invalid descriptor of length 48, skipping remainder of the config [ 376.666137][ T5737] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 376.683789][ T5737] usb 5-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 376.684003][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.694529][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.705490][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.738908][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.754443][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.767412][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.785884][ T24] usb 4-1: config 0 descriptor?? [ 377.209027][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 377.234182][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 377.264203][ T24] usb 4-1: USB disconnect, device number 98 [ 377.468884][ T5721] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 377.604442][ T5737] usb 5-1: string descriptor 0 read error: -71 [ 377.620922][ T5737] usb 5-1: USB disconnect, device number 84 [ 377.632134][ T5721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.643439][ T5721] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 377.654794][ T5721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 377.667266][ T5721] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 377.676881][ T5736] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 377.697590][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.737587][T10822] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 377.757829][ T5721] hub 1-1:1.0: bad descriptor, ignoring hub [ 377.764007][ T5721] hub 1-1:1.0: probe with driver hub failed with error -5 [ 377.771853][ T5721] cdc_wdm 1-1:1.0: skipping garbage [ 377.777171][ T5721] cdc_wdm 1-1:1.0: skipping garbage [ 377.787385][ T5721] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 377.795825][ T5721] cdc_wdm 1-1:1.0: Unknown control protocol [ 377.809248][ T5736] usb 3-1: device descriptor read/64, error -71 [ 377.993247][T10825] netlink: 'syz.4.1095': attribute type 10 has an invalid length. [ 378.013538][T10825] team0: Port device dummy0 added [ 378.031014][ C0] wdm_int_callback: 8464 callbacks suppressed [ 378.031041][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 378.043959][ C0] wdm_int_callback: 8464 callbacks suppressed [ 378.043983][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 378.056376][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 378.066563][ T5736] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 378.199254][ T5736] usb 3-1: device descriptor read/64, error -71 [ 378.245342][T10825] netlink: 'syz.4.1095': attribute type 10 has an invalid length. [ 378.265062][T10825] team0: Port device dummy0 removed [ 378.275437][T10825] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 378.311050][ T5736] usb usb3-port1: attempt power cycle [ 378.320111][ T5755] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 378.358331][T10842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.375584][T10842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.488900][ T5755] usb 4-1: Using ep0 maxpacket: 16 [ 378.496443][ T5755] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 378.507405][ T5755] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 378.517190][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.526250][ T5755] usb 4-1: Product: syz [ 378.530803][ T5755] usb 4-1: Manufacturer: syz [ 378.535474][ T5755] usb 4-1: SerialNumber: syz [ 378.545683][ T5755] r8152-cfgselector 4-1: Unknown version 0x0000 [ 378.552141][ T5755] r8152-cfgselector 4-1: config 0 descriptor?? [ 378.658917][ T5736] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 378.679858][ T5736] usb 3-1: device descriptor read/8, error -71 [ 378.762009][T10832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.771588][T10832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.784291][ T5721] usb 1-1: USB disconnect, device number 90 [ 378.924527][ T5736] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 378.938859][ T5721] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 378.970237][ T5736] usb 3-1: device descriptor read/8, error -71 [ 378.997048][T10846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.017352][T10846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.027614][ T5755] r8152-cfgselector 4-1: Unknown version 0x0000 [ 379.056831][ T5755] r8152-cfgselector 4-1: No union descriptors [ 379.071314][ T5755] r8152-cfgselector 4-1: USB disconnect, device number 99 [ 379.089600][ T5736] usb usb3-port1: unable to enumerate USB device [ 379.119473][ T5721] usb 1-1: Using ep0 maxpacket: 8 [ 379.126383][ T5721] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 379.147421][ T5721] usb 1-1: config 0 has no interfaces? [ 379.153484][ T5721] usb 1-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 379.166274][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.173608][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.181305][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.196428][ T5721] usb 1-1: config 0 descriptor?? [ 379.458870][ T5736] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 379.613364][ T5736] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.629177][ T5736] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 379.641984][ T5736] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 379.653115][ T5736] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 379.662948][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.675543][T10850] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 379.690128][ T5736] hub 5-1:1.0: bad descriptor, ignoring hub [ 379.713095][ T5736] hub 5-1:1.0: probe with driver hub failed with error -5 [ 379.736155][ T5736] cdc_wdm 5-1:1.0: skipping garbage [ 379.761056][ T5736] cdc_wdm 5-1:1.0: skipping garbage [ 379.777579][ T5736] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 379.797019][ T5736] cdc_wdm 5-1:1.0: Unknown control protocol [ 379.891571][T10861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1106'. [ 379.970208][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 379.976947][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 379.983406][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 379.990287][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 380.125267][ T5721] usb 1-1: string descriptor 0 read error: -71 [ 380.167231][ T5721] usb 1-1: USB disconnect, device number 91 [ 380.265865][T10868] tipc: Started in network mode [ 380.287603][T10868] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 380.338954][T10868] tipc: Enabled bearer , priority 10 [ 380.508855][ T5737] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 380.678966][ T5737] usb 4-1: Using ep0 maxpacket: 32 [ 380.708551][ T5737] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 380.731004][ T5755] usb 5-1: USB disconnect, device number 85 [ 380.750802][ T5737] usb 4-1: config 0 has no interface number 0 [ 380.763241][ T5737] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.839227][ T5737] usb 4-1: config 0 interface 85 has no altsetting 0 [ 380.861910][ T5737] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 380.871961][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.890944][ T5737] usb 4-1: Product: syz [ 380.904603][ T5737] usb 4-1: Manufacturer: syz [ 380.913121][ T5737] usb 4-1: SerialNumber: syz [ 380.942572][ T5737] usb 4-1: config 0 descriptor?? [ 380.983850][ T5755] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 381.149331][ T5755] usb 5-1: Using ep0 maxpacket: 8 [ 381.160994][ T5755] usb 5-1: config index 0 descriptor too short (expected 65535, got 34) [ 381.177972][ T5755] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 381.205694][ T5755] usb 5-1: config 255 has an invalid descriptor of length 48, skipping remainder of the config [ 381.236429][ T5755] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 381.260710][ T5755] usb 5-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 381.293999][ T5755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.452937][ T5740] tipc: Node number set to 4269801488 [ 381.584251][ T5737] appletouch 4-1:0.85: Geyser mode initialized. [ 381.607676][ T5737] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input21 [ 381.842675][ T5721] usb 4-1: USB disconnect, device number 100 [ 381.846265][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 381.921743][ T5721] appletouch 4-1:0.85: input: appletouch disconnected [ 382.313273][ T5755] usb 5-1: string descriptor 0 read error: -71 [ 382.335599][ T5755] usb 5-1: USB disconnect, device number 86 [ 382.778860][ T5755] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 382.940837][ T5755] usb 5-1: Using ep0 maxpacket: 16 [ 382.952607][ T5755] usb 5-1: config 0 has no interfaces? [ 382.971473][ T5755] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 382.987356][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.005759][ T5755] usb 5-1: Product: syz [ 383.019314][ T5755] usb 5-1: Manufacturer: syz [ 383.031210][ T5755] usb 5-1: SerialNumber: syz [ 383.058547][ T5755] usb 5-1: config 0 descriptor?? [ 383.235502][T10927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.251618][T10927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.273324][T10927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.291281][ T5736] usb 5-1: USB disconnect, device number 87 [ 383.307275][T10927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.314674][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'. [ 383.356565][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 383.378848][ T5755] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 383.528879][ T5755] usb 3-1: device descriptor read/64, error -71 [ 383.719381][T10936] FAULT_INJECTION: forcing a failure. [ 383.719381][T10936] name failslab, interval 1, probability 0, space 0, times 0 [ 383.734561][T10936] CPU: 1 UID: 0 PID: 10936 Comm: syz.3.1130 Not tainted syzkaller #0 PREEMPT(full) [ 383.734580][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 383.734587][T10936] Call Trace: [ 383.734592][T10936] [ 383.734599][T10936] dump_stack_lvl+0xe8/0x150 [ 383.734618][T10936] should_fail_ex+0x412/0x560 [ 383.734636][T10936] should_failslab+0xa8/0x100 [ 383.734649][T10936] ? sk_prot_alloc+0x57/0x210 [ 383.734667][T10936] kmem_cache_alloc_noprof+0x87/0x650 [ 383.734684][T10936] ? __pfx_clockevents_program_event+0x10/0x10 [ 383.734703][T10936] sk_prot_alloc+0x57/0x210 [ 383.734720][T10936] ? sk_alloc+0x27/0x390 [ 383.734739][T10936] sk_alloc+0x3a/0x390 [ 383.734768][T10936] unix_create1+0xb0/0x7d0 [ 383.734794][T10936] ? pidfs_register_pid+0x7c/0x190 [ 383.734819][T10936] unix_stream_connect+0x379/0x1050 [ 383.734850][T10936] ? bpf_lsm_socket_connect+0x9/0x20 [ 383.734871][T10936] __sys_connect+0x312/0x450 [ 383.734889][T10936] ? __pfx___sys_connect+0x10/0x10 [ 383.734913][T10936] ? __task_pid_nr_ns+0x28/0x470 [ 383.734931][T10936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.734945][T10936] __x64_sys_connect+0x7a/0x90 [ 383.734979][T10936] do_syscall_64+0x174/0x580 [ 383.734993][T10936] ? clear_bhb_loop+0x40/0x90 [ 383.735009][T10936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.735021][T10936] RIP: 0033:0x7f3f0699ce59 [ 383.735034][T10936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.735044][T10936] RSP: 002b:00007f3f07820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 383.735059][T10936] RAX: ffffffffffffffda RBX: 00007f3f06c15fa0 RCX: 00007f3f0699ce59 [ 383.735068][T10936] RDX: 000000000000006e RSI: 0000200000000000 RDI: 0000000000000007 [ 383.735076][T10936] RBP: 00007f3f07820090 R08: 0000000000000000 R09: 0000000000000000 [ 383.735083][T10936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.735090][T10936] R13: 00007f3f06c16038 R14: 00007f3f06c15fa0 R15: 00007f3f06d3fa48 [ 383.735108][T10936] [ 383.947332][ T5755] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 383.998860][ T5721] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 384.016276][T10939] tipc: Enabling of bearer rejected, already enabled [ 384.032501][T10941] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1131'. [ 384.045079][T10941] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1131'. [ 384.090218][T10943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1133'. [ 384.112339][ T5755] usb 3-1: device descriptor read/64, error -71 [ 384.173577][ T5721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.195057][ T5721] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 384.207975][ T5721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 384.219169][ T5721] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 384.228462][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.229374][ T5755] usb usb3-port1: attempt power cycle [ 384.244665][T10934] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 384.258365][ T5721] hub 1-1:1.0: bad descriptor, ignoring hub [ 384.274508][ T5721] hub 1-1:1.0: probe with driver hub failed with error -5 [ 384.294813][ T5721] cdc_wdm 1-1:1.0: skipping garbage [ 384.308971][ T5721] cdc_wdm 1-1:1.0: skipping garbage [ 384.323174][ T5721] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 384.336218][ T5721] cdc_wdm 1-1:1.0: Unknown control protocol [ 384.410144][ T5699] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 384.578879][ T5699] usb 5-1: Using ep0 maxpacket: 8 [ 384.578993][ T5755] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 384.594866][ T5699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.613226][ T5755] usb 3-1: device descriptor read/8, error -71 [ 384.614723][ T5699] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 384.630496][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.644339][ T5699] usb 5-1: config 0 descriptor?? [ 384.661150][ T5699] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 384.691676][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 384.712502][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'. [ 384.794106][T10962] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1139'. [ 384.868867][ T5755] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 384.899559][ T5755] usb 3-1: device descriptor read/8, error -71 [ 385.009313][ T5755] usb usb3-port1: unable to enumerate USB device [ 385.079114][ T5740] usb 1-1: USB disconnect, device number 92 [ 385.102706][T10970] fuse: Bad value for 'fd' [ 385.235191][T10974] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1145'. [ 385.238950][ T5740] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 385.283912][ T29] audit: type=1400 audit(1780103240.454:7304): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 1-1: Using ep0 maxpacket: 8 [ 385.491429][ T24] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 385.517862][ T5740] usb 1-1: config index 0 descriptor too short (expected 65535, got 34) [ 385.526513][ T5740] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 385.536120][ T5740] usb 1-1: config 255 has an invalid descriptor of length 48, skipping remainder of the config [ 385.563729][ T5699] gspca_vc032x: reg_w err -71 [ 385.565863][ T5740] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 385.580881][ T5699] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 385.600547][ T5699] usb 5-1: USB disconnect, device number 88 [ 385.606548][ T5740] usb 1-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 385.645123][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.662010][ T24] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 385.671033][ T24] usb 4-1: config 0 has no interface number 0 [ 385.679670][ T24] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 385.693092][ T24] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 30468, setting to 64 [ 385.715199][ T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 385.725231][ T24] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 385.735936][ T24] usb 4-1: Product: syz [ 385.740656][ T24] usb 4-1: SerialNumber: syz [ 385.759178][ T24] usb 4-1: config 0 descriptor?? [ 385.765622][T10970] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 385.777795][ T24] cm109 4-1:0.8: invalid payload size 64, expected 4 [ 385.788261][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input22 [ 386.042103][T10970] tipc: Started in network mode [ 386.048348][T10970] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 386.065963][T10970] tipc: Enabled bearer , priority 10 [ 386.102679][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 386.110363][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 386.118347][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 386.125960][ T24] usb 4-1: USB disconnect, device number 101 [ 386.132525][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 386.132553][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 386.156253][ T24] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 386.305240][T10983] netlink: 'syz.1.1147': attribute type 13 has an invalid length. [ 386.314001][T10983] netlink: 'syz.1.1147': attribute type 17 has an invalid length. [ 386.392923][T10983] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.401850][T10983] bridge0: port 2(bridge_slave_1) entered listening state [ 386.411019][T10983] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.418353][T10983] bridge0: port 1(bridge_slave_0) entered listening state [ 386.509892][T10983] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 386.733664][ T5740] usb 1-1: string descriptor 0 read error: -71 [ 386.743399][T10990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.748389][ T5740] usb 1-1: USB disconnect, device number 93 [ 386.770841][T10990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.930420][ T5737] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 387.061004][ T24] tipc: Node number set to 4269801488 [ 387.098814][ T5737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.124138][ T5737] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 387.170451][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 387.186370][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 387.198681][ T5737] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 387.218178][ T5737] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 387.227977][ T5740] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 387.239238][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 387.250055][ T5737] usb 5-1: Product: syz [ 387.254887][ T5737] usb 5-1: Manufacturer: syz [ 387.260561][ T5737] usb 5-1: SerialNumber: syz [ 387.279000][ T5737] usb 5-1: config 0 descriptor?? [ 387.399138][ T5740] usb 1-1: Using ep0 maxpacket: 32 [ 387.411421][ T5740] usb 1-1: unable to get BOS descriptor or descriptor too short [ 387.427829][ T5740] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 387.440932][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.449968][ T5740] usb 1-1: Product: syz [ 387.454447][ T5740] usb 1-1: Manufacturer: syz [ 387.460062][ T5740] usb 1-1: SerialNumber: syz [ 387.496833][ T5737] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 387.514494][ T5737] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 387.539093][ T5699] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 387.620874][T11011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.698938][ T5699] usb 4-1: Using ep0 maxpacket: 8 [ 387.699769][ T5737] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 387.706712][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 387.712359][ T5737] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 387.744802][ T5737] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 387.745515][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.770049][ T5699] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 387.780703][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 387.796846][ T5740] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 387.804013][ T5699] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 387.816774][ T5699] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 387.826868][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.835629][ T5740] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 387.847968][ T5699] usb 4-1: config 0 descriptor?? [ 387.856628][T11008] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 387.879853][ T5755] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 387.913552][ T5737] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 387.956312][ T5740] usb 1-1: USB disconnect, device number 94 [ 388.049292][ T5755] usb 3-1: device descriptor read/64, error -71 [ 388.319299][ T5755] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 388.438903][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 388.446904][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 388.460305][ T5755] usb 3-1: device descriptor read/64, error -71 [ 388.580076][ T5755] usb usb3-port1: attempt power cycle [ 388.929599][ T5755] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 388.959608][ T5755] usb 3-1: device descriptor read/8, error -71 [ 389.199204][ T5755] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 389.222474][ T5755] usb 3-1: device descriptor read/8, error -71 [ 389.340077][ T5755] usb usb3-port1: unable to enumerate USB device [ 389.588241][ T5737] usb 5-1: USB disconnect, device number 89 [ 389.912584][T11035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.922488][T11035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.960825][ T5643] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 390.079250][ T5737] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 390.146230][T11035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.160701][ T5699] usb 4-1: USB disconnect, device number 102 [ 390.176273][T11035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.258990][ T5737] usb 1-1: Using ep0 maxpacket: 32 [ 390.268851][ T5737] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 255, using maximum allowed: 30 [ 390.284765][ T5737] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.301553][ T5737] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 390.314085][ T5737] usb 1-1: config 0 interface 0 altsetting 252 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 390.358547][ T5737] usb 1-1: config 0 interface 0 has no altsetting 0 [ 390.373702][ T5737] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 390.385989][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.405793][ T5737] usb 1-1: config 0 descriptor?? [ 390.470307][ T5755] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 390.513127][T11045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.521900][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.521962][ C0] bridge0: topology change detected, propagating [ 390.524211][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.524237][ C0] bridge0: topology change detected, propagating [ 390.564147][T11045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.628901][ T5755] usb 5-1: Using ep0 maxpacket: 32 [ 390.637176][ T5755] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 390.650031][ T5755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.676504][ T5755] usb 5-1: config 0 descriptor?? [ 390.782436][ T5699] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 390.872162][ T5737] hid_parser_main: 30 callbacks suppressed [ 390.872182][ T5737] elecom 0003:056E:00FD.000D: unknown main item tag 0x0 [ 390.890490][ T5737] elecom 0003:056E:00FD.000D: unknown main item tag 0x0 [ 390.898314][ T5755] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 390.907657][ T5737] elecom 0003:056E:00FD.000D: unknown main item tag 0x0 [ 390.945849][ T5699] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 390.960191][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.978952][ T5699] usb 4-1: Product: syz [ 390.979152][ T5737] elecom 0003:056E:00FD.000D: hidraw0: USB HID v0.02 Device [HID 056e:00fd] on usb-dummy_hcd.0-1/input0 [ 390.988868][ T5699] usb 4-1: Manufacturer: syz [ 390.997232][ T5755] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 391.024881][ T5755] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 391.026136][ T5699] usb 4-1: SerialNumber: syz [ 391.037175][ T5755] usb 5-1: media controller created [ 391.068925][ T5687] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 391.111609][ T5755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.125109][ T5740] usb 1-1: USB disconnect, device number 95 [ 391.252292][ T5755] az6027: usb out operation failed. (-71) [ 391.258851][ T5687] usb 3-1: Using ep0 maxpacket: 8 [ 391.264343][ T5755] az6027: usb out operation failed. (-71) [ 391.271354][ T5755] stb0899_attach: Driver disabled by Kconfig [ 391.278456][ T5755] az6027: no front-end attached [ 391.278456][ T5755] [ 391.287466][ T5755] az6027: usb out operation failed. (-71) [ 391.294072][ T5755] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 391.305595][ T5687] usb 3-1: unable to get BOS descriptor or descriptor too short [ 391.323156][ T5755] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 391.358911][ T5687] usb 3-1: config 7 has an invalid interface number: 70 but max is 0 [ 391.379196][ T5687] usb 3-1: config 7 has an invalid descriptor of length 212, skipping remainder of the config [ 391.393297][ T5755] dvb-usb: schedule remote query interval to 400 msecs. [ 391.407727][ T5755] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 391.419478][ T5687] usb 3-1: config 7 has no interface number 0 [ 391.432787][ T5687] usb 3-1: too many endpoints for config 7 interface 70 altsetting 9: 145, using maximum allowed: 30 [ 391.451337][ T5755] usb 5-1: USB disconnect, device number 90 [ 391.465861][ T5687] usb 3-1: config 7 interface 70 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 145 [ 391.515385][ T5687] usb 3-1: config 7 interface 70 has no altsetting 0 [ 391.516898][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 391.557326][ T5687] usb 3-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=fe.05 [ 391.585472][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 391.591559][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.647510][ T5687] usb 3-1: Product: syz [ 391.680929][ T5687] usb 3-1: Manufacturer: syz [ 391.708164][ T5687] usb 3-1: SerialNumber: syz [ 391.792618][ T5755] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 392.251568][T11065] syzkaller1: entered promiscuous mode [ 392.279481][T11065] syzkaller1: entered allmulticast mode [ 392.673983][T11076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.693699][T11076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.721992][T11077] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1175'. [ 392.811816][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 393.400943][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 393.440002][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 393.459353][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 393.474147][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 393.497521][ T5699] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 393.542933][ T5699] usb 4-1: USB disconnect, device number 103 [ 393.618989][ T5755] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 393.789210][ T5755] usb 5-1: Using ep0 maxpacket: 32 [ 393.802591][ T5755] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 393.813680][T11082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.827681][ T5755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.853142][ T5755] usb 5-1: config 0 descriptor?? [ 393.868545][ T5755] gspca_main: sunplus-2.14.0 probing 041e:400b [ 393.971260][ T5687] hso 3-1:7.70: Not our interface [ 393.989493][ T5687] usb 3-1: USB disconnect, device number 89 [ 394.092928][T11091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1180'. [ 394.109174][T11089] openvswitch: netlink: Message has 4 unknown bytes. [ 394.128873][ T5699] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 394.258919][ T5699] usb 1-1: device descriptor read/64, error -71 [ 394.338884][ T24] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 394.399164][ T5755] gspca_sunplus: reg_w_riv err -110 [ 394.405069][ T5755] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 394.509017][ T5699] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 394.518669][ T24] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 394.535435][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 394.545514][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.553766][ T24] usb 4-1: Product: syz [ 394.557990][ T24] usb 4-1: Manufacturer: syz [ 394.562747][ T24] usb 4-1: SerialNumber: syz [ 394.574017][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 394.593599][ T5721] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 394.648991][ T5699] usb 1-1: device descriptor read/64, error -71 [ 394.761553][ T5699] usb usb1-port1: attempt power cycle [ 394.797778][T11091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.808433][T11091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.819491][T11091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.829628][T11091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.842650][T11091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.852012][T11091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.867244][ T24] usb 4-1: USB disconnect, device number 104 [ 395.045327][T11097] fuse: Bad value for 'fd' [ 395.129148][ T5699] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 395.161578][ T5699] usb 1-1: device descriptor read/8, error -71 [ 395.298906][ T5755] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 395.408891][ T5699] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 395.430411][ T5699] usb 1-1: device descriptor read/8, error -71 [ 395.450381][ T5755] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 395.458969][ T5755] usb 3-1: config 0 has no interface number 0 [ 395.465229][ T5755] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 395.477774][ T5755] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 30468, setting to 64 [ 395.493474][ T5755] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 395.505628][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 395.514298][ T5755] usb 3-1: Product: syz [ 395.518531][ T5755] usb 3-1: SerialNumber: syz [ 395.525646][ T5755] usb 3-1: config 0 descriptor?? [ 395.531717][T11097] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 395.539856][ T5699] usb usb1-port1: unable to enumerate USB device [ 395.550800][ T5755] cm109 3-1:0.8: invalid payload size 64, expected 4 [ 395.559971][ T5755] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input25 [ 395.639007][ T5721] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 395.647831][ T5721] ath9k_htc: Failed to initialize the device [ 395.655456][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 395.754348][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 395.754826][ T5699] usb 3-1: USB disconnect, device number 90 [ 395.761741][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 395.785960][ T5699] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 395.961414][ T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 396.129255][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 396.141313][ T24] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 396.153012][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 396.179317][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 396.209208][ T24] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 396.229134][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.241084][ T24] usb 4-1: config 0 descriptor?? [ 396.255064][ T24] mos7840 4-1:0.0: missing endpoints [ 396.345766][T11113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1187'. [ 396.385256][T11115] IPVS: length: 232 != 8 [ 396.400812][ T5755] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 396.458052][ T5687] usb 4-1: USB disconnect, device number 105 [ 396.566460][ T5755] usb 1-1: config 1 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 396.585548][ T5755] usb 1-1: config 1 interface 0 altsetting 18 endpoint 0x82 is Bulk; changing to Interrupt [ 396.597723][ T5755] usb 1-1: config 1 interface 0 altsetting 18 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.618422][ T5755] usb 1-1: config 1 interface 0 has no altsetting 0 [ 396.638908][ T5721] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 396.651271][T11121] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1191'. [ 396.660559][ T5687] usb 5-1: USB disconnect, device number 91 [ 396.818860][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 396.830832][ T5721] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 396.845729][ T5721] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 396.857472][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 396.866323][ T5721] usb 3-1: Product: syz [ 396.871266][ T5721] usb 3-1: Manufacturer: syz [ 396.875953][ T5721] usb 3-1: SerialNumber: syz [ 396.883881][ T5721] usb 3-1: config 0 descriptor?? [ 396.893108][T11115] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 396.905348][ T5721] hub 3-1:0.0: bad descriptor, ignoring hub [ 396.911763][ T5721] hub 3-1:0.0: probe with driver hub failed with error -5 [ 396.984462][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.995598][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.069027][ T5687] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 397.208920][ T5687] usb 5-1: device descriptor read/64, error -71 [ 397.318993][ T5736] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 397.448920][ T5687] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 397.468910][ T5736] usb 4-1: Using ep0 maxpacket: 8 [ 397.475887][ T5736] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.488096][ T5736] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 397.501266][ T5736] usb 4-1: config 0 interface 0 has no altsetting 0 [ 397.508147][ T5736] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 397.517466][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.527661][T11115] usb 3-1: reset high-speed USB device number 91 using dummy_hcd [ 397.538316][ T5736] usb 4-1: config 0 descriptor?? [ 397.580753][ T5687] usb 5-1: device descriptor read/64, error -71 [ 397.695131][ T5687] usb usb5-port1: attempt power cycle [ 397.705386][T11115] usb 3-1: device firmware changed [ 397.718020][ T5721] usb 3-1: USB disconnect, device number 91 [ 397.859290][ T5721] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 397.972587][T11132] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1196'. [ 398.028899][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 398.036001][ T5721] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 398.051227][ T5687] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 398.052086][ T5721] usb 3-1: string descriptor 0 read error: -22 [ 398.064263][ T5736] cherry 0003:046A:0023.000E: unknown main item tag 0x0 [ 398.075243][ T5721] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 398.088160][ T5736] cherry 0003:046A:0023.000E: unknown main item tag 0x0 [ 398.095555][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 398.096145][ T5736] cherry 0003:046A:0023.000E: unknown main item tag 0x0 [ 398.112911][ T5736] cherry 0003:046A:0023.000E: unknown main item tag 0x0 [ 398.121729][ T5687] usb 5-1: device descriptor read/8, error -71 [ 398.129298][ T5736] cherry 0003:046A:0023.000E: unknown main item tag 0x0 [ 398.136463][ T5736] cherry 0003:046A:0023.000E: unknown main item tag 0x0 [ 398.144415][ T5736] cherry 0003:046A:0023.000E: unknown main item tag 0x0 [ 398.152605][ T5721] usb 3-1: config 0 descriptor?? [ 398.157724][ T5736] cherry 0003:046A:0023.000E: unknown main item tag 0x0 [ 398.166930][T11133] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 398.171510][ T5736] cherry 0003:046A:0023.000E: unknown main item tag 0x0 [ 398.175971][ T5721] hub 3-1:0.0: bad descriptor, ignoring hub [ 398.188056][ T5721] hub 3-1:0.0: probe with driver hub failed with error -5 [ 398.188600][ T5736] cherry 0003:046A:0023.000E: unknown main item tag 0x0 [ 398.211115][ T5736] cherry 0003:046A:0023.000E: hidraw0: USB HID v0.06 Device [HID 046a:0023] on usb-dummy_hcd.3-1/input0 [ 398.323945][ T5721] usb 4-1: USB disconnect, device number 106 [ 398.368894][ T5687] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 398.390751][ T5687] usb 5-1: device descriptor read/8, error -71 [ 398.399835][T11115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.410124][T11115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.421531][ T29] audit: type=1326 audit(1780103253.594:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.2.1188" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5eb9ce59 code=0x7ffc0000 [ 398.432944][T11115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.451144][ T29] audit: type=1326 audit(1780103253.594:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.2.1188" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5eb9ce59 code=0x7ffc0000 [ 398.457449][T11115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.482304][ T29] audit: type=1326 audit(1780103253.594:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.2.1188" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6d5eb9ce59 code=0x7ffc0000 [ 398.513916][ T5687] usb usb5-port1: unable to enumerate USB device [ 398.521475][ T29] audit: type=1326 audit(1780103253.594:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.2.1188" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5eb9ce59 code=0x7ffc0000 [ 398.547989][ T29] audit: type=1326 audit(1780103253.594:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.2.1188" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d5eb5d68e code=0x7ffc0000 [ 398.573602][ T29] audit: type=1326 audit(1780103253.594:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.2.1188" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5eb9caeb code=0x7ffc0000 [ 398.601444][ T5699] usb 3-1: USB disconnect, device number 92 [ 398.613416][ T29] audit: type=1326 audit(1780103253.594:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.2.1188" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5eb9caeb code=0x7ffc0000 [ 398.661725][ T29] audit: type=1326 audit(1780103253.654:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.2.1188" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5eb9ce59 code=0x7ffc0000 [ 398.691421][ T29] audit: type=1326 audit(1780103253.654:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.2.1188" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5eb9ce59 code=0x7ffc0000 [ 398.731401][T11143] fuse: Bad value for 'fd' [ 398.743250][T11143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.757281][T11143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.964705][T11145] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1199'. [ 399.047759][T11147] FAULT_INJECTION: forcing a failure. [ 399.047759][T11147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.061569][T11147] CPU: 0 UID: 0 PID: 11147 Comm: syz.3.1200 Not tainted syzkaller #0 PREEMPT(full) [ 399.061603][T11147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 399.061615][T11147] Call Trace: [ 399.061624][T11147] [ 399.061632][T11147] dump_stack_lvl+0xe8/0x150 [ 399.061661][T11147] should_fail_ex+0x412/0x560 [ 399.061690][T11147] _copy_from_user+0x2d/0xb0 [ 399.061717][T11147] ____sys_sendmsg+0x308/0x9f0 [ 399.061747][T11147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.061778][T11147] ? import_iovec+0x73/0xa0 [ 399.061807][T11147] ___sys_sendmsg+0x2a5/0x360 [ 399.061826][T11147] ? __lock_acquire+0x6b5/0x2cf0 [ 399.061853][T11147] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.061910][T11147] ? __fget_files+0x2a/0x420 [ 399.061935][T11147] ? __fget_files+0x3a0/0x420 [ 399.061971][T11147] __x64_sys_sendmsg+0x1bd/0x2a0 [ 399.061995][T11147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.062025][T11147] ? __pfx_ksys_write+0x10/0x10 [ 399.062062][T11147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.062085][T11147] do_syscall_64+0x174/0x580 [ 399.062105][T11147] ? trace_irq_disable+0x3b/0x140 [ 399.062135][T11147] ? clear_bhb_loop+0x40/0x90 [ 399.062161][T11147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.062182][T11147] RIP: 0033:0x7f3f0699ce59 [ 399.062201][T11147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.062218][T11147] RSP: 002b:00007f3f07820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.062242][T11147] RAX: ffffffffffffffda RBX: 00007f3f06c15fa0 RCX: 00007f3f0699ce59 [ 399.062257][T11147] RDX: 000000002004c010 RSI: 00002000000006c0 RDI: 0000000000000003 [ 399.062271][T11147] RBP: 00007f3f07820090 R08: 0000000000000000 R09: 0000000000000000 [ 399.062283][T11147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.062295][T11147] R13: 00007f3f06c16038 R14: 00007f3f06c15fa0 R15: 00007f3f06d3fa48 [ 399.062338][T11147] [ 399.778912][ T5699] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 399.881640][T11164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1205'. [ 399.939242][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 399.947863][ T5699] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 399.959064][ T5699] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 399.969857][ T5699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 399.980237][ T5699] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 399.989906][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.998085][ T5699] usb 3-1: Product: syz [ 400.002712][ T5699] usb 3-1: Manufacturer: syz [ 400.007750][ T5699] usb 3-1: SerialNumber: syz [ 400.016864][ T5699] usb 3-1: config 0 descriptor?? [ 400.168986][ T5687] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 400.259540][T11158] geneve2: entered allmulticast mode [ 400.267714][ T5699] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 400.285734][ T5699] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 400.330604][ T5699] usb 3-1: USB disconnect, device number 93 [ 400.331170][ T5687] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 400.360306][ T5755] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 400.384800][ T5687] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 400.401003][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.418877][ T5687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.430219][ T5755] usb 1-1: Product: Г [ 400.437523][ T5687] usb 5-1: Product: syz [ 400.443669][ T5687] usb 5-1: Manufacturer: syz [ 400.448558][ T5687] usb 5-1: SerialNumber: syz [ 400.450527][ T5755] usb 1-1: can't set config #1, error -71 [ 400.468192][ T5687] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 400.495877][ T5755] usb 1-1: USB disconnect, device number 100 [ 400.512318][ T5736] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 400.627837][T11168] xt_hashlimit: size too large, truncated to 1048576 [ 400.714758][T11172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.753658][T11164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.764104][T11172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.779720][T11164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.791001][T11172] random: crng reseeded on system resumption [ 400.827479][T11164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.848898][ T5755] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 400.854463][T11164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.885731][T11164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.913923][T11164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.940910][ T24] usb 5-1: USB disconnect, device number 96 [ 400.987987][T11180] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1210'. [ 401.044546][ T5755] usb 1-1: device descriptor read/64, error -71 [ 401.298894][ T5755] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 401.399209][ T5740] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 401.439018][ T5755] usb 1-1: device descriptor read/64, error -71 [ 401.549382][ T5755] usb usb1-port1: attempt power cycle [ 401.558845][ T5736] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 401.566154][ T5736] ath9k_htc: Failed to initialize the device [ 401.572535][ T5740] usb 3-1: Using ep0 maxpacket: 32 [ 401.578989][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 401.580850][ T5740] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 401.600401][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.639935][ T5740] usb 3-1: config 0 descriptor?? [ 401.739898][T11187] fuse: Bad value for 'fd' [ 401.772422][T11187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.798672][T11187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.862854][ T5740] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 401.886069][ T5740] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 401.914774][ T5740] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 401.928896][ T5755] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 401.940999][ T5740] usb 3-1: media controller created [ 401.970645][ T5755] usb 1-1: device descriptor read/8, error -71 [ 401.981303][ T5740] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.092518][ T5740] az6027: usb out operation failed. (-71) [ 402.132114][ T5740] az6027: usb out operation failed. (-71) [ 402.138078][ T5740] stb0899_attach: Driver disabled by Kconfig [ 402.145732][ T5740] az6027: no front-end attached [ 402.145732][ T5740] [ 402.167604][ T5740] az6027: usb out operation failed. (-71) [ 402.173841][ T5740] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 402.186018][ T5740] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 402.216770][ T5740] dvb-usb: schedule remote query interval to 400 msecs. [ 402.224853][ T5755] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 402.232886][ T5740] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 402.254956][ T5740] usb 3-1: USB disconnect, device number 94 [ 402.263042][ T5755] usb 1-1: device descriptor read/8, error -71 [ 402.346681][ T5740] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 402.379198][ T5755] usb usb1-port1: unable to enumerate USB device [ 402.408888][ T24] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 402.505039][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.516132][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.593035][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 402.616177][ T24] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.634045][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 402.641091][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 402.650947][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.662965][ T24] usb 4-1: config 0 descriptor?? [ 403.008922][ T5699] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 403.098876][ T5721] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 403.161661][ T5699] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 403.171162][ T5699] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 403.183364][ T5699] usb 3-1: config 150 has no interface number 0 [ 403.191617][ T24] mcp2221 0003:04D8:00DD.000F: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 403.202699][ T5699] usb 3-1: config 150 interface 204 has no altsetting 0 [ 403.213411][ T5699] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 403.223218][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.232008][ T5699] usb 3-1: Product: syz [ 403.236972][ T5699] usb 3-1: Manufacturer: syz [ 403.242412][ T5699] usb 3-1: SerialNumber: syz [ 403.258898][ T5721] usb 5-1: Using ep0 maxpacket: 32 [ 403.266709][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 403.266890][T11210] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1221'. [ 403.280040][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25970, setting to 1024 [ 403.320692][ T5721] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 403.336590][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.358271][ T5721] usb 5-1: config 0 descriptor?? [ 403.366374][T11208] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 403.380363][ T5721] hub 5-1:0.0: USB hub found [ 403.540749][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 403.571273][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 403.582722][ T5721] hub 5-1:0.0: 1 port detected [ 403.623311][ T5755] usb 4-1: USB disconnect, device number 107 [ 404.430741][T11228] fuse: Bad value for 'fd' [ 404.739589][ T5740] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 404.820236][ T5634] usb 5-1: USB disconnect, device number 97 [ 404.826655][ T5721] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 404.920981][ T5740] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 404.946065][ T5740] usb 4-1: config 0 has no interface number 0 [ 404.968178][ T5740] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 405.006132][ T5740] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 30468, setting to 64 [ 405.041467][ T5740] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 405.075150][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 405.102155][ T5740] usb 4-1: Product: syz [ 405.117883][ T5740] usb 4-1: SerialNumber: syz [ 405.138012][ T5740] usb 4-1: config 0 descriptor?? [ 405.161295][T11228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 405.182989][ T5740] cm109 4-1:0.8: invalid payload size 64, expected 4 [ 405.211179][ T5740] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input27 [ 405.364758][T11232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.387020][T11232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.400399][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 405.407613][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 405.412823][ T5634] usb 4-1: USB disconnect, device number 108 [ 405.414643][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 405.452927][ T5634] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 405.505212][T11232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.546254][T11232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.632220][T11235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'. [ 405.838865][ T5740] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 406.013635][ T5740] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 406.036513][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.062488][ T5740] usb 5-1: Product: syz [ 406.069934][T11243] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1232'. [ 406.080959][ T5740] usb 5-1: Manufacturer: syz [ 406.087589][ T5740] usb 5-1: SerialNumber: syz [ 406.340421][T11245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1233'. [ 406.476469][ T5699] xr_serial 3-1:150.204: skipping garbage [ 406.494965][ T5699] xr_serial 3-1:150.204: xr_serial converter detected [ 406.527558][ T5699] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 406.541261][ T5699] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 406.554089][ T5740] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 406.580801][ T5699] usb 3-1: USB disconnect, device number 95 [ 406.606627][ T5699] xr_serial 3-1:150.204: device disconnected [ 406.607995][ T5740] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 406.635998][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.657263][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.667691][ T5687] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 406.818963][ T5687] usb 4-1: Using ep0 maxpacket: 32 [ 406.837250][ T5687] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.855816][ T5687] usb 4-1: config 0 has no interface number 0 [ 406.869069][ T5687] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 406.899142][ T5687] usb 4-1: config 0 interface 1 has no altsetting 0 [ 406.912874][ T5687] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 406.934527][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.938819][ T5699] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 406.954564][ T5687] usb 4-1: Product: syz [ 406.964741][ T5687] usb 4-1: Manufacturer: syz [ 406.974923][ T5687] usb 4-1: SerialNumber: syz [ 406.991088][ T5687] usb 4-1: config 0 descriptor?? [ 407.108882][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 407.120916][ T5699] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 407.135767][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.157765][ T5699] usb 3-1: config 0 descriptor?? [ 407.171258][ T5699] gspca_main: sunplus-2.14.0 probing 041e:400b [ 407.232490][ T5687] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 407.282585][ T5687] cx231xx 4-1:0.1: Failed to read PCB config [ 407.291623][ T5687] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 407.312216][ T5687] usb 4-1: USB disconnect, device number 109 [ 407.329970][ T5634] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 407.690149][ T5699] gspca_sunplus: reg_w_riv err -110 [ 407.697148][ T5699] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 407.719148][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1237'. [ 407.861054][ T5740] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 407.884924][ T5740] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 407.992667][ T5740] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 408.015299][ T5740] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 408.079400][ T5740] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 408.099136][ T5740] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 408.147495][ T5740] usb 5-1: USB disconnect, device number 98 [ 408.202577][T11268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.263034][T11268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.413411][T11274] usb usb8: usbfs: process 11274 (syz.3.1241) did not claim interface 0 before use [ 408.544181][T11276] fuse: Bad value for 'fd' [ 408.567337][T11276] tipc: Enabling of bearer rejected, already enabled [ 408.677823][T11278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1243'. [ 408.709882][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.730168][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.752712][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.777487][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.809865][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.827918][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.846523][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.872626][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.058945][ T5740] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 409.097902][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.106777][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.208891][ T5740] usb 5-1: Using ep0 maxpacket: 32 [ 409.215916][ T5740] usb 5-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 409.229420][ T5740] usb 5-1: config 123 interface 0 has no altsetting 0 [ 409.238357][ T5740] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 409.248203][ T5736] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 409.256313][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.264704][ T5740] usb 5-1: Product: syz [ 409.269437][ T5740] usb 5-1: Manufacturer: syz [ 409.274963][ T5740] usb 5-1: SerialNumber: syz [ 409.319304][ T5699] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 409.441131][ T5736] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.451784][ T5736] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 409.463591][ T5736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 409.474825][ T5736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 409.478862][ T5699] usb 4-1: Using ep0 maxpacket: 32 [ 409.491423][ T5736] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 409.508888][ T5736] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 409.509643][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 409.518302][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 409.536847][ T5736] usb 1-1: Product: syz [ 409.537478][T11280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.541331][ T5736] usb 1-1: Manufacturer: syz [ 409.551872][ T5699] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 409.556487][ T5736] usb 1-1: SerialNumber: syz [ 409.567380][ T5699] usb 4-1: config 0 interface 0 has no altsetting 0 [ 409.570218][T11280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.580825][ T5699] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 409.588246][ T5736] usb 1-1: config 0 descriptor?? [ 409.597088][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.612104][ T5699] usb 4-1: Product: syz [ 409.622155][ T5699] usb 4-1: Manufacturer: syz [ 409.630962][ T5699] usb 4-1: SerialNumber: syz [ 409.656615][ T5740] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 409.665711][ T5699] usb 4-1: config 0 descriptor?? [ 409.692772][ T5740] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 409.717557][ T5740] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 409.725868][ T5740] usb 5-1: media controller created [ 409.726430][T11290] FAULT_INJECTION: forcing a failure. [ 409.726430][T11290] name failslab, interval 1, probability 0, space 0, times 0 [ 409.746735][T11290] CPU: 1 UID: 0 PID: 11290 Comm: syz.1.1248 Not tainted syzkaller #0 PREEMPT(full) [ 409.746764][T11290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.746777][T11290] Call Trace: [ 409.746785][T11290] [ 409.746794][T11290] dump_stack_lvl+0xe8/0x150 [ 409.746829][T11290] should_fail_ex+0x412/0x560 [ 409.746857][T11290] should_failslab+0xa8/0x100 [ 409.746881][T11290] __kmalloc_noprof+0xe8/0x760 [ 409.746911][T11290] ? fib6_info_alloc+0x30/0xf0 [ 409.746943][T11290] fib6_info_alloc+0x30/0xf0 [ 409.746969][T11290] ip6_route_info_create+0x142/0x860 [ 409.747004][T11290] ip6_route_add+0x49/0x1b0 [ 409.747035][T11290] inet6_rtm_newroute+0x268/0x19e0 [ 409.747070][T11290] ? kasan_quarantine_put+0xbb/0x1f0 [ 409.747094][T11290] ? lockdep_hardirqs_on+0x7a/0x110 [ 409.747116][T11290] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 409.747138][T11290] ? nlmon_xmit+0xb0/0x100 [ 409.747155][T11290] ? kmem_cache_free+0x182/0x650 [ 409.747191][T11290] ? __lock_acquire+0x6b5/0x2cf0 [ 409.747218][T11290] ? __dev_queue_xmit+0x2b6/0x3950 [ 409.747244][T11290] ? __local_bh_enable_ip+0xd0/0x130 [ 409.747265][T11290] ? lockdep_hardirqs_on+0x7a/0x110 [ 409.747319][T11290] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 409.747345][T11290] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 409.747394][T11290] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 409.747421][T11290] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.747444][T11290] ? ref_tracker_free+0x693/0x840 [ 409.747470][T11290] ? __pfx_ref_tracker_free+0x10/0x10 [ 409.747504][T11290] netlink_rcv_skb+0x232/0x4b0 [ 409.747535][T11290] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.747563][T11290] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.747602][T11290] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.747631][T11290] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.747666][T11290] netlink_unicast+0x75c/0x8e0 [ 409.747703][T11290] netlink_sendmsg+0x813/0xb40 [ 409.747741][T11290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.747774][T11290] ? aa_sock_msg_perm+0xf1/0x1b0 [ 409.747805][T11290] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.747834][T11290] ____sys_sendmsg+0x972/0x9f0 [ 409.747854][T11290] ? __might_fault+0xaf/0x130 [ 409.747885][T11290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.747913][T11290] ? import_iovec+0x73/0xa0 [ 409.747940][T11290] ___sys_sendmsg+0x2a5/0x360 [ 409.747960][T11290] ? __lock_acquire+0x6b5/0x2cf0 [ 409.747985][T11290] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.748011][T11290] ? kstrtouint+0x6e/0xe0 [ 409.748067][T11290] ? __fget_files+0x2a/0x420 [ 409.748092][T11290] ? __fget_files+0x3a0/0x420 [ 409.748127][T11290] __sys_sendmmsg+0x27c/0x4e0 [ 409.748154][T11290] ? __pfx___sys_sendmmsg+0x10/0x10 [ 409.748172][T11290] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 409.748221][T11290] ? ksys_write+0x242/0x270 [ 409.748253][T11290] ? __pfx_ksys_write+0x10/0x10 [ 409.748289][T11290] __x64_sys_sendmmsg+0xa0/0xc0 [ 409.748318][T11290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.748340][T11290] do_syscall_64+0x174/0x580 [ 409.748360][T11290] ? trace_irq_disable+0x3b/0x140 [ 409.748389][T11290] ? clear_bhb_loop+0x40/0x90 [ 409.748414][T11290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.748435][T11290] RIP: 0033:0x7fbe8a79ce59 [ 409.748455][T11290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.748472][T11290] RSP: 002b:00007fbe8b5af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 409.748495][T11290] RAX: ffffffffffffffda RBX: 00007fbe8aa15fa0 RCX: 00007fbe8a79ce59 [ 409.748509][T11290] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 409.748523][T11290] RBP: 00007fbe8b5af090 R08: 0000000000000000 R09: 0000000000000000 [ 409.748535][T11290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.748548][T11290] R13: 00007fbe8aa16038 R14: 00007fbe8aa15fa0 R15: 00007fbe8ab3fa48 [ 409.748579][T11290] [ 409.757151][ T5740] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.759717][T11290] IPv6: Can't replace route, no match found [ 409.806956][ T5740] set interface failed [ 409.892486][T11285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.931313][ T5736] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 409.999321][T11285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.006147][ T5740] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 410.045084][T11295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.059907][ T5736] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 410.080524][T11285] geneve2: entered allmulticast mode [ 410.088631][ T5740] error writing reg: 0xff, val: 0x00 [ 410.098545][T11295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.128985][ T5736] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 410.154281][T11295] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 410.161855][ T5736] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 410.174120][T11295] error writing reg: 0x1a, val: 0x1e [ 410.201803][ T5736] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 410.280773][ T5699] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 410.287647][ T5699] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 410.327376][ T5699] usb 4-1: USB disconnect, device number 110 [ 410.333036][ T5736] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 410.429104][ T5740] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 410.434643][T11299] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1251'. [ 410.463268][ T5721] usb 3-1: USB disconnect, device number 96 [ 410.472091][ T5740] usb 5-1: USB disconnect, device number 99 [ 410.764977][ T29] audit: type=1326 audit(1780103265.934:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11297 comm="syz.4.1251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb74fb9ce59 code=0x0 [ 410.988859][ T5721] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 411.004686][T11308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.016893][T11308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.148970][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 411.157443][ T5721] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 411.167223][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.178887][ T5740] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 411.179122][ T5721] usb 3-1: config 0 descriptor?? [ 411.294333][T11310] fuse: Bad value for 'fd' [ 411.341606][T11310] tipc: Enabling of bearer rejected, failed to enable media [ 411.351964][ T5740] usb 4-1: Using ep0 maxpacket: 16 [ 411.360809][ T5740] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.386617][ T5740] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.397697][ T5740] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.414688][ T5721] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 411.425041][ T5740] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 411.448022][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.475033][ T5721] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.481734][ T5740] usb 4-1: config 0 descriptor?? [ 411.511936][ T5721] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 411.531939][ T5721] usb 3-1: media controller created [ 411.562960][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.662204][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 411.676217][ T5721] az6027: usb out operation failed. (-71) [ 411.693975][ T5721] az6027: usb out operation failed. (-71) [ 411.706715][ T5721] stb0899_attach: Driver disabled by Kconfig [ 411.726951][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 411.732423][ T5721] az6027: no front-end attached [ 411.732423][ T5721] [ 411.748495][ T5721] az6027: usb out operation failed. (-71) [ 411.758784][ T5736] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 411.764908][ T5721] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 411.772624][T11316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.796553][ T5721] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 411.811848][T11316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.829839][ T5736] usb 1-1: USB disconnect, device number 106 [ 411.862960][ T5721] dvb-usb: schedule remote query interval to 400 msecs. [ 411.889813][ T5721] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 411.938030][ T5740] hid (null): unknown global tag 0xc [ 411.962230][ T5721] usb 3-1: USB disconnect, device number 97 [ 411.964443][ T5740] hid (null): report_id 11172 is invalid [ 411.988851][ T5740] hid (null): report_id 19093 is invalid [ 412.008280][ T5740] hid (null): nested delimiters [ 412.025466][ T5740] hid (null): unknown global tag 0xd [ 412.035666][ T5740] hid (null): report_id 0 is invalid [ 412.051114][ T5740] hid (null): unknown global tag 0xe [ 412.060586][T11316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.077763][ T5740] hid (null): global environment stack overflow [ 412.086638][T11316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.135933][ T5721] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 412.260995][ T5634] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 412.281934][T11306] vlan2: entered allmulticast mode [ 412.287131][T11306] bond0: entered allmulticast mode [ 412.292496][T11306] ip6gretap1: entered allmulticast mode [ 412.430586][ T5634] usb 5-1: Using ep0 maxpacket: 16 [ 412.431627][ T5736] usb 4-1: USB disconnect, device number 111 [ 412.453045][ T5634] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 412.466807][ T5634] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 412.480883][ T5634] usb 5-1: config 166 has no interface number 0 [ 412.487280][ T5634] usb 5-1: config 166 has no interface number 1 [ 412.493980][ T5634] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 412.505540][ T5634] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 412.517970][ T5634] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 412.529822][ T5634] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 412.542198][ T5634] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 412.553812][ T5634] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 412.564283][ T5634] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 412.575817][ T5634] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 412.586254][ T5634] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 412.601511][ T5634] usb 5-1: config 166 interface 177 has no altsetting 0 [ 412.608582][ T5634] usb 5-1: config 166 interface 34 has no altsetting 0 [ 412.617992][ T5634] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 412.627937][ T5634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.638624][ T5634] usb 5-1: Product: syz [ 412.643007][ T5634] usb 5-1: Manufacturer: syz [ 412.647658][ T5634] usb 5-1: SerialNumber: syz [ 412.658815][ T5721] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 412.748956][ T5740] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 412.819291][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 412.826799][ T5721] usb 3-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 412.841326][ T5721] usb 3-1: config 123 interface 0 has no altsetting 0 [ 412.850595][ T5721] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 412.860858][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.877074][ T5721] usb 3-1: Product: syz [ 412.882605][ T5634] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 412.890464][ T5721] usb 3-1: Manufacturer: syz [ 412.895220][ T5721] usb 3-1: SerialNumber: syz [ 412.901760][ T5740] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.913891][ T5740] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 412.925933][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 412.937892][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 412.950963][ T5740] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 412.971706][ T5740] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 412.981494][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 412.989883][ T5740] usb 1-1: Product: syz [ 412.994457][ T5740] usb 1-1: Manufacturer: syz [ 412.999787][ T5740] usb 1-1: SerialNumber: syz [ 413.008836][ T5740] usb 1-1: config 0 descriptor?? [ 413.084374][ T5634] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 413.139294][T11325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.149474][T11325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.167875][ T5721] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 413.191324][ T5721] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 413.202505][ T5721] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 413.210726][ T5721] usb 3-1: media controller created [ 413.222357][ T5740] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 413.232710][ T5740] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 413.250183][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 413.275952][ T5721] set interface failed [ 413.276015][ T5721] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 413.289552][ T5736] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 413.289777][ T5721] error writing reg: 0xff, val: 0x00 [ 413.335906][ T5634] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 413.359931][ T5721] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 413.380052][ T5721] usb 3-1: USB disconnect, device number 98 [ 413.422982][ T5740] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 413.433674][ T5740] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 413.446706][ T5740] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 413.461080][ T5736] usb 4-1: Using ep0 maxpacket: 8 [ 413.468576][ T5736] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 413.478036][ T5736] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 413.491249][ T5634] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 413.494895][ T5736] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 413.506170][ T5634] uvcvideo 5-1:166.34: No valid video chain found. [ 413.511841][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.522963][ T5634] usb 5-1: USB disconnect, device number 100 [ 413.530182][ T5736] usb 4-1: Product: syz [ 413.530240][ T5736] usb 4-1: Manufacturer: syz [ 413.530258][ T5736] usb 4-1: SerialNumber: syz [ 413.533916][ T5736] usb 4-1: config 0 descriptor?? [ 413.623691][ T5740] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 413.836932][T11342] fuse: Bad value for 'fd' [ 413.847410][T11342] tipc: Enabling of bearer rejected, already enabled [ 413.958537][T11346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.967723][T11346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.099242][ T5736] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 414.254556][ T5736] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 414.265769][ T5736] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 414.275011][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.283302][ T5736] usb 3-1: Product: syz [ 414.287596][ T5736] usb 3-1: Manufacturer: syz [ 414.292598][ T5736] usb 3-1: SerialNumber: syz [ 414.305992][ T5736] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 414.323372][ T5755] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 414.469055][ T5721] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 414.541018][T11354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.553444][T11354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.557299][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.573328][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.589831][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.599092][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.611539][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.620850][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.628856][ T5721] usb 5-1: Using ep0 maxpacket: 32 [ 414.635542][ T5634] usb 3-1: USB disconnect, device number 99 [ 414.646446][ T5721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 414.664775][ T5721] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 414.674247][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.682995][ T5721] usb 5-1: Product: syz [ 414.687447][ T5721] usb 5-1: Manufacturer: syz [ 414.692348][ T5721] usb 5-1: SerialNumber: syz [ 414.770829][T11354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.780008][T11354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.909935][ T5721] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 414.917844][ T5721] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 414.974762][ T5721] usb 5-1: USB disconnect, device number 101 [ 415.022061][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.064424][ T5740] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 415.083946][ T5740] usb 1-1: USB disconnect, device number 107 [ 415.399368][ T5755] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 415.406744][ T5755] ath9k_htc: Failed to initialize the device [ 415.415109][ T5634] usb 3-1: ath9k_htc: USB layer deinitialized [ 415.708882][ T5634] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 415.829597][ T5721] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 415.885151][ T5634] usb 3-1: Using ep0 maxpacket: 32 [ 415.891864][ T5634] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 415.902488][ T5634] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 415.924607][ T5634] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 415.935370][T11370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.945305][ T5634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.954279][T11370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.967178][ T5634] usb 3-1: config 0 descriptor?? [ 415.977183][ T5634] mos7840 3-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 416.001365][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.014570][ T5721] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 416.024468][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.035065][ T5721] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 416.045209][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.071165][ T5721] hub 5-1:1.0: bad descriptor, ignoring hub [ 416.078258][ T5721] hub 5-1:1.0: probe with driver hub failed with error -5 [ 416.086737][ T5721] cdc_wdm 5-1:1.0: skipping garbage [ 416.092734][ T5721] cdc_wdm 5-1:1.0: skipping garbage [ 416.098464][ T5721] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 416.379730][ T5634] mos7840 ttyUSB0: probe with driver mos7840 failed with error -5 [ 416.593251][ T5634] mos7840 ttyUSB1: probe with driver mos7840 failed with error -32 [ 416.636248][ T5634] usb 3-1: USB disconnect, device number 100 [ 416.661231][ T5634] mos7840 3-1:0.0: device disconnected [ 416.766684][ T5755] usb 4-1: USB disconnect, device number 112 [ 417.101035][ T5699] usb 5-1: USB disconnect, device number 102 [ 417.101668][T11388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.120437][T11388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.262524][ T5755] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 417.428905][ T5699] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 417.440071][ T5755] usb 4-1: Using ep0 maxpacket: 32 [ 417.451338][ T5755] usb 4-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 417.472286][ T5755] usb 4-1: config 123 interface 0 has no altsetting 0 [ 417.487147][ T5755] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 417.496511][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.510566][ T5755] usb 4-1: Product: syz [ 417.517381][ T5755] usb 4-1: Manufacturer: syz [ 417.522304][ T5755] usb 4-1: SerialNumber: syz [ 417.588886][ T5699] usb 5-1: Using ep0 maxpacket: 32 [ 417.601946][ T5699] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 417.618544][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.649036][ T5699] usb 5-1: config 0 descriptor?? [ 417.773768][T11386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.796466][T11386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.835974][ T5755] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 417.865800][ T5699] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 417.884074][ T5755] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 417.886899][ T5699] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 417.916839][ T5699] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 417.926663][ T5699] usb 5-1: media controller created [ 417.932979][ T5755] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 417.950894][ T5755] usb 4-1: media controller created [ 418.003509][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.068046][T11381] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 418.080026][T11381] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 418.088673][T11381] CPU: 0 UID: 0 PID: 11381 Comm: syz.4.1276 Not tainted syzkaller #0 PREEMPT(full) [ 418.098424][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.109452][T11381] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 418.114890][T11381] Code: e0 83 43 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d f0 d6 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 c6 60 88 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 418.135140][T11381] RSP: 0018:ffffc9000cadf180 EFLAGS: 00010206 [ 418.141944][T11381] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a438303 [ 418.150229][T11381] RDX: 0000000000000000 RSI: ffffffff8e215d18 RDI: 00000000000000c0 [ 418.159285][T11381] RBP: ffffc9000cadf338 R08: ffffc9000cadf2a7 R09: 0000000000000000 [ 418.167278][T11381] R10: ffffc9000cadf280 R11: fffff5200195be55 R12: 0000000000000068 [ 418.175292][T11381] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200195be48 [ 418.183278][T11381] FS: 00007fb750a086c0(0000) GS:ffff88812529e000(0000) knlGS:0000000000000000 [ 418.192247][T11381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.199048][T11381] CR2: 00007f98bf5ec250 CR3: 0000000042328000 CR4: 00000000003526f0 [ 418.207161][T11381] Call Trace: [ 418.210470][T11381] [ 418.213418][T11381] ? __mutex_lock+0x319/0x1550 [ 418.218201][T11381] ? __mutex_trylock_common+0x158/0x260 [ 418.223775][T11381] ? dvb_usbv2_generic_write+0x26/0x60 [ 418.229248][T11381] ? __pfx___mutex_lock+0x10/0x10 [ 418.234285][T11381] ? __pfx___mutex_lock+0x10/0x10 [ 418.239327][T11381] ? __mutex_lock+0x319/0x1550 [ 418.244118][T11381] dvb_usbv2_generic_write+0x26/0x60 [ 418.249694][T11381] mxl111sf_ctrl_msg+0x160/0x2f0 [ 418.254864][T11381] mxl111sf_write_reg+0xa9/0x1b0 [ 418.259876][T11381] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 418.265636][T11381] ? __lock_acquire+0x6b5/0x2cf0 [ 418.270784][T11381] ? unwind_next_frame+0xa6/0x2550 [ 418.275933][T11381] mxl111sf_i2c_xfer+0x496/0x5100 [ 418.281162][T11381] ? unwind_next_frame+0xa6/0x2550 [ 418.286473][T11381] ? is_bpf_text_address+0x26/0x2b0 [ 418.291803][T11381] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 418.297479][T11381] ? kernel_text_address+0xa5/0xe0 [ 418.302883][T11381] ? __kernel_text_address+0xd/0x30 [ 418.308237][T11381] ? unwind_get_return_address+0x4d/0x90 [ 418.313979][T11381] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 418.320528][T11381] ? arch_stack_walk+0xfb/0x150 [ 418.325678][T11381] ? stack_trace_save+0xa9/0x100 [ 418.330649][T11381] ? __pfx_stack_trace_save+0x10/0x10 [ 418.336346][T11381] ? stack_depot_save_flags+0x33/0x810 [ 418.341847][T11381] ? kasan_save_track+0x4f/0x80 [ 418.346745][T11381] ? kasan_save_track+0x3e/0x80 [ 418.352342][T11381] ? __kasan_kmalloc+0x93/0xb0 [ 418.357174][T11381] ? __kmalloc_cache_noprof+0x31c/0x660 [ 418.362859][T11381] ? __i2c_smbus_xfer+0xea2/0x2050 [ 418.368178][T11381] ? i2c_smbus_xfer+0x1f4/0x310 [ 418.373047][T11381] ? i2cdev_ioctl_smbus+0x434/0x730 [ 418.378561][T11381] ? i2cdev_ioctl+0x615/0x880 [ 418.383379][T11381] ? __se_sys_ioctl+0xfc/0x170 [ 418.388190][T11381] ? do_syscall_64+0x174/0x580 [ 418.393159][T11381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.399378][T11381] __i2c_transfer+0x79a/0x1f70 [ 418.404273][T11381] ? __kasan_kmalloc+0x93/0xb0 [ 418.409343][T11381] __i2c_smbus_xfer+0x1146/0x2050 [ 418.414855][T11381] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 418.420815][T11381] ? lockdep_hardirqs_on+0x7a/0x110 [ 418.426129][T11381] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 418.432365][T11381] ? rt_mutex_lock_nested+0x15c/0x1e0 [ 418.438126][T11381] i2c_smbus_xfer+0x1f4/0x310 [ 418.443396][T11381] i2cdev_ioctl_smbus+0x434/0x730 [ 418.448539][T11381] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 418.454139][T11381] i2cdev_ioctl+0x615/0x880 [ 418.458839][T11381] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 418.464049][T11381] ? __fget_files+0x2a/0x420 [ 418.468660][T11381] ? __fget_files+0x3a0/0x420 [ 418.473442][T11381] ? bpf_lsm_file_ioctl+0x9/0x20 [ 418.478511][T11381] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 418.483659][T11381] __se_sys_ioctl+0xfc/0x170 [ 418.488350][T11381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.494520][T11381] do_syscall_64+0x174/0x580 [ 418.499213][T11381] ? trace_irq_disable+0x3b/0x140 [ 418.504352][T11381] ? clear_bhb_loop+0x40/0x90 [ 418.509209][T11381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.515120][T11381] RIP: 0033:0x7fb74fb9ce59 [ 418.519550][T11381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.539867][T11381] RSP: 002b:00007fb750a08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.548741][T11381] RAX: ffffffffffffffda RBX: 00007fb74fe15fa0 RCX: 00007fb74fb9ce59 [ 418.556719][T11381] RDX: 0000200000000080 RSI: 0000000000000720 RDI: 0000000000000004 [ 418.564781][T11381] RBP: 00007fb74fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 418.572757][T11381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.581000][T11381] R13: 00007fb74fe16038 R14: 00007fb74fe15fa0 R15: 00007fb74ff3fa48 [ 418.589192][T11381] [ 418.592412][T11381] Modules linked in: [ 418.597640][T11381] ---[ end trace 0000000000000000 ]--- [ 418.606627][ T5755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.627241][ T5755] set interface failed [ 418.662527][T11402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.666469][T11381] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 418.667026][T11402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.678195][T11381] Code: e0 83 43 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d f0 d6 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 c6 60 88 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 418.719024][T11381] RSP: 0018:ffffc9000cadf180 EFLAGS: 00010206 [ 418.747366][T11381] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a438303 [ 418.755839][T11381] RDX: 0000000000000000 RSI: ffffffff8e215d18 RDI: 00000000000000c0 [ 418.764238][T11381] RBP: ffffc9000cadf338 R08: ffffc9000cadf2a7 R09: 0000000000000000 [ 418.772702][T11381] R10: ffffc9000cadf280 R11: fffff5200195be55 R12: 0000000000000068 [ 418.780846][T11381] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200195be48 [ 418.790732][T11381] FS: 00007fb750a086c0(0000) GS:ffff88812539e000(0000) knlGS:0000000000000000 [ 418.800620][T11381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.808101][T11381] CR2: 00007f6d5edea2f8 CR3: 0000000042328000 CR4: 00000000003526f0 [ 418.816440][T11381] Kernel panic - not syncing: Fatal exception [ 418.823508][T11381] Kernel Offset: disabled [ 418.827867][T11381] Rebooting in 86400 seconds..