last executing test programs: 9m13.818639225s ago: executing program 3 (id=1432): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x468d0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r1, 0x8cee000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}], 0x1, 0x40000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x30, 0x1, 0x0}, &(0x7f0000000100)=0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000002c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000190081054e81f782db4cb9051c1400fe007c05e8fe55a10a0015000200142603600e12080005007f370419e4cf3a29c07fc6d401d84701a800060a200002400400027c035c0461c1d67f6f94007134cf6efb8000a0078990457f018005906707d07f62ce8017cbec4c2ee5a7cef4090000001fb791483a5ee4ce1b14d6d930dfe122fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00f7000000262f3d40fac9ea2c5d533b7e87f9a3bcbe809f98ee5667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1, 0x0, 0x0, 0x98ffffff}, 0x4000880) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000440)=@add_del={0x2, &(0x7f0000000400)='nicvf0\x00'}) 9m13.681508541s ago: executing program 3 (id=1433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf251900000008000300", @ANYRES32=r2, @ANYBLOB="050024"], 0x34}, 0x1, 0x0, 0x0, 0x2004c051}, 0x14) 9m13.644840514s ago: executing program 3 (id=1434): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4008000) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="beb19f3f52da1bb0e2fd0ce606596a90d6", 0x11}, 0x1, 0x0, 0x0, 0x4000044}, 0x80) 9m13.550533997s ago: executing program 3 (id=1435): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) r1 = fsopen(&(0x7f0000000000)='dax\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x8, 0x0, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r3, 0x200, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0x3}}, {0xffffffffffffffe9, 0xb, 0x1}, {0x6, 0x11, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0xf4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r5, 0x4068aea3, &(0x7f0000000340)={0x9f, 0x0, 0x1}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)=@known='trusted.overlay.redirect\x00', &(0x7f0000000440)=""/108, 0x6c) 9m12.895860222s ago: executing program 3 (id=1440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xeb) r1 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_generic(r1, &(0x7f0000002840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12082802}, 0xc, &(0x7f0000002800)={&(0x7f0000002500)={0x2dc, 0x1f, 0x100, 0x70bd27, 0x25dfdbfe, {0x19}, [@nested={0x110, 0x89, 0x0, 0x1, [@typed={0x78, 0x54, 0x0, 0x0, @binary="a0f7037d61b4464a7de34c0e0d4b92afb41d2a95fb98fa6743827c93938dfbfa07a3b55efb60cae0ea494fbd8eb8b8ffc69620be3528c8da51a8a6882d18c6e4f67fde3d327579f9f50df63a48386a264ae7d9022a1598ddebef751bc521545a0119fde7a5b3feb7c3e930beef6faac3d470339e"}, @typed={0xc, 0x97, 0x0, 0x0, @u64}, @nested={0x4, 0x102}, @typed={0x8, 0x106, 0x0, 0x0, @pid=r2}, @generic, @nested={0x4, 0x14d}, @generic="2c0a5ccfa4d25f4db65ce4692ba2ad93ae5e3137bceb9b930a389b1b661c1da0a6604966bc9a2fc2aa56c0596d3fe81fcc6a526f97167d6e77553a3d6834d0a621588dac99bf30062ece38adadac6b7ddf64033fb9d9dedfdab56536e4894870a0993b8a0fb20b1153cd65b6b9eb15cb1f392aead8bb034a"]}, @nested={0x1b7, 0x76, 0x0, 0x1, [@generic="4ec0a850940bd0166208f3959f8b9f2ccb5829acfeca1a4560ba14f2f607fb5a4c820fc7adcd1aa73b17fc69c3117d6d9786b39d38de8b52cc95c228d25894b025495bffdc4cc881dbf36c6963421dba3568eb398fbfd3f9ace67dd0c6300b1c1fe35d2840c42655e679f963007b98c053cc68fc5d5e265539adb2d448bd406c03bde3c08cfc33b970830f725888a6976d58bcacb216543656b28d60186cc021254644c713f93122f5427f0c8b45b5c6c0c86f67814115d2fedd92140e487738d5375e4768b0c4087557ec16", @nested={0x4, 0x11d}, @generic="372b917d7867e815d319604b48d4f2ac953c22759ae65f6a07d44bd8ef0e537e6a208c1effe41dbe6926927cd03340b695286636f3d36b4b1ea72eef45b6590b70f653d1e9a9afa538ba4a5dcafa7ee5a9ee8f01639eceffa35a3ac915afdfcd5a6423dc5d58e1d5712bf1968b1963b5815efb216f02cdefe32cf512ac785ad1a99cd8bb17", @generic="2582c72afa4393bf7ffadbc8e9080e5979ee62198157ff76e008b47a50843cfc26ebcd09e929a9e05168b26635d5ee974177b978bc46ef7030d46d7c4135963806bde69eeffb3e7e258d173cc775150d8d6203baaf2e3d369d15c2233f6c"]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x8000}, 0x2000000) r3 = syz_open_dev$usbmon(&(0x7f0000000240), 0x7, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r3, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x49cdee) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)={0x103c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x1024, 0x1, 0x0, 0x1, [@nested={0x1020, 0x1c, 0x0, 0x1, [@typed={0x4, 0x125}, @nested={0x1015, 0x91, 0x0, 0x1, [@typed={0x4, 0x90}, @generic="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", @typed={0x8, 0x2a, 0x0, 0x0, @fd}, @generic="bedd1b2fd2"]}]}]}]}, 0x103c}, 0x1, 0x0, 0x0, 0x84}, 0xc000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xfce777890675258c, 0x0) 9m12.269492207s ago: executing program 3 (id=1448): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000080)=[r5], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xc154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00000000000300"}}) 9m12.09615151s ago: executing program 32 (id=1448): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000080)=[r5], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xc154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00000000000300"}}) 6m30.453669722s ago: executing program 0 (id=2548): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000080)=[r5], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xc154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f0000000000000000000000000100"}}) 6m30.166004461s ago: executing program 0 (id=2550): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 6m29.95396303s ago: executing program 0 (id=2553): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffff7, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000440)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xef0, 0xfffffffffffffff8, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c522f9a0ca7d4992861ac00", "f4bd0000008019000000000000000100", [0x8, 0xffffffff9673e35d]}}) 6m29.827725495s ago: executing program 0 (id=2554): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) (async) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x91f4d0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 6m29.573121595s ago: executing program 0 (id=2558): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x117) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x208008, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030ff0f00000000000030302c827365725f69643d", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=0x0]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x17, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}}}, 0x108) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f000000028000fe121f", 0x2e}], 0x1}, 0x0) 6m28.337887277s ago: executing program 0 (id=2564): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x403, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xc}, [@typed={0x4}, @typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000380)="4da237a456087290", 0x8}], 0x1}}], 0x1, 0x1) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc0285628, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x1, {0x80}}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) sendto$packet(r4, 0x0, 0x0, 0x400c800, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @local}, 0x14) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000100)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2284, &(0x7f0000000000)) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) syz_open_dev$video4linux(&(0x7f0000000000), 0x403, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x0, 0x800}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xc}, [@typed={0x4}, @typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) sendmmsg(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000380)="4da237a456087290", 0x8}], 0x1}}], 0x1, 0x1) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc0285628, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x1, {0x80}}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) (async) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) (async) sendto$packet(r4, 0x0, 0x0, 0x400c800, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @local}, 0x14) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000100)) (async) ioctl$SG_NEXT_CMD_LEN(r5, 0x2284, &(0x7f0000000000)) (async) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000380)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) 6m27.848152636s ago: executing program 33 (id=2564): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x403, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xc}, [@typed={0x4}, @typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000380)="4da237a456087290", 0x8}], 0x1}}], 0x1, 0x1) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc0285628, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x1, {0x80}}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) sendto$packet(r4, 0x0, 0x0, 0x400c800, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @local}, 0x14) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000100)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2284, &(0x7f0000000000)) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) syz_open_dev$video4linux(&(0x7f0000000000), 0x403, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x0, 0x800}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xc}, [@typed={0x4}, @typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) sendmmsg(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000380)="4da237a456087290", 0x8}], 0x1}}], 0x1, 0x1) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc0285628, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x1, {0x80}}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) (async) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) (async) sendto$packet(r4, 0x0, 0x0, 0x400c800, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @local}, 0x14) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000100)) (async) ioctl$SG_NEXT_CMD_LEN(r5, 0x2284, &(0x7f0000000000)) (async) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000380)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) 1m41.74928987s ago: executing program 4 (id=4743): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632", 0x2a}, {&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f4", 0x54}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb000000000000200004000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003140)=ANY=[], 0x1260}}], 0x1, 0x40080d1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m40.221582005s ago: executing program 4 (id=4746): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x2) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000005ac0)={0x48, 0xb, r2}) pread64(r0, &(0x7f0000000000)=""/16, 0x9600, 0x3ff) r3 = socket$inet6(0xa, 0x2, 0x0) unshare(0x24060400) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2401) syncfs(r4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) 1m39.924387608s ago: executing program 4 (id=4748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000040000002b"]) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)={0x3, 0x0, [{0xd, 0x2, 0x1, 0x1000004, 0xe, 0x8, 0xb}, {0xd, 0x1, 0x0, 0x8, 0xfb, 0x1, 0x7}, {0xc0000001, 0xfffffffd, 0x4, 0xdc0000, 0x1, 0xb2c, 0xee6}]}) 1m39.448396921s ago: executing program 4 (id=4749): sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x4000, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffc, 0x0, 0x0, 0xfffd, 0x0, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x1, 0xfffbfffffffffffe}, {0x1000000, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f7492}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000000000080ffffffffffffff000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(0x0, 0xd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m39.234964462s ago: executing program 4 (id=4750): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) connect$can_bcm(r2, 0x0, 0x0) symlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00') r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(r3, 0x4068aea3, &(0x7f0000000100)) 1m38.967119022s ago: executing program 4 (id=4751): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000080)=[r5], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xc154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 1m22.314346908s ago: executing program 34 (id=4751): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000080)=[r5], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xc154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 11.238012483s ago: executing program 5 (id=5152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x57}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008804}, 0x0) 11.172746391s ago: executing program 5 (id=5153): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000f0ff00000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.733478041s ago: executing program 5 (id=5154): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000006009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000006009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) 10.406700998s ago: executing program 5 (id=5156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 10.202257507s ago: executing program 5 (id=5159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x2400}}, 0xcc}}, 0x0) 10.077886373s ago: executing program 5 (id=5160): sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x4000, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffc, 0x0, 0x0, 0xfffd, 0x0, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x1, 0xfffbfffffffffffe}, {0x1000000, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f7492}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ff000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(0x0, 0xd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 5.184845819s ago: executing program 2 (id=5193): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f00000002c0)={0x49, 0xb49d, 0x4, 0x6, 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.846142398s ago: executing program 2 (id=5195): r0 = syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x20, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd}, {0x6, 0x24, 0x1a, 0x3, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x8, 0x7f, 0xbe}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8}}}}}}}]}}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f00000006c0)='./cgroup\x00', &(0x7f0000000700)={0x302, 0x4, 0x30}, 0x18) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000740)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1122070}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x28, 0x3e, 0xb235333, 0x1, 0x4, 0x4000001, 0x0, 0x0, 0x0, 0xe, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x9, 0x10, 0x5d, 0xfff9, 0x10, 0x80, 0x10, 0xe, 0x10}}, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x1, &(0x7f0000002180)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]}) r3 = socket(0x2a, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000440)={0x24, 0xfffffffd, 0x3, 0x80000000, 0x18, "c279f2db5dfbd3b8c8c93e89f46cd387eee190"}) ioctl$SIOCSIFMTU(r3, 0x891a, 0x0) r5 = syz_usb_connect$cdc_ecm(0x3, 0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000082505a1a440001102030109026c0001010d60080904000e03020600090824060000be6b3c052400c1000d240f01fff7ffff0700090000072414eb00c6910c241b7f000002ff0605007f072414000409000724142f290d000424020709058103e6030101bf09058202400004f502090503020004060004"], &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x40, 0x0, 0x2, 0x8, 0xc}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "21ae061a61268ba9bf4de5d060401579"}]}, 0x1, [{0x95, &(0x7f0000000100)=@string={0x95, 0x3, "8462853072bdc0f859197b3bf6607200485b88a01323e4f9ff25193b6b9cbbdb584af1d5a599726445e2805def535bf3f4e230ea479f82b1d8dd535aa2f14d02b95375c86c11cd4d2d4fa28e96a2777fa50586c15b3761d2bddb739536b33a83676eb3f4e7d10a14c949de0871ce45aadff665dfc5c801752c03da42e4f851f18ce316a5f5bfb9ec1bdac2a72973f4cef17abb"}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000400)={0x14, &(0x7f0000000240)={0x20, 0xa, 0xda, {0xda, 0x4, "72854809b418f86264aa776a240d25472d18d3e46bacb1b4b613581d8af74ee14b2e524bd24785125a0928558994e9b04baa6dbca47df5f5d5624090305454f06e02185984dbbf2f36c9f26bcbb429f6f87011455a121fec59728c06571e19a615e792ffa40b003b3bee93d8c24e5597c2861afac9972c2820699163358784fee235e2d835d6a2b5101c69980e356cebf5f5f6a5961a2274651981956088a40fca67e147ceb27ff624d2060d17d0ee8ea9afd110adbafe9720b3223bc17a17b04ed7c8902917892d21f2c9bb680d772bc8eb015c9bcef6d7"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x1c, &(0x7f00000004c0)={0xb53ea390a11c4e7, 0x10, 0xa0, "58e26bc60fea142b00c1b9a0b441cc030eb4a01b1e543bdf4617359cc6343ba8f95e6b8bd3fe3073ea84219a57f671e134a81f6da2ec92994740c535581194de48ca02c29e8e025c98f13b6bca0d1cc9d5baf4ae4d3299808da3644232d746ad2e01d4f8b7f5a9ac20ceed2ed2c844460b26bcf1f99288c0c19be6dc879f6015748551697a30687d395a207585da93673d8692ac24e351d72571f295651af0d5"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.304854481s ago: executing program 6 (id=5201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000100)='map_files\x00') unshare(0x22020600) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) fchdir(r3) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x240600, 0x80) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x80085502, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x5, 0x0, 0x3, 0x8, 0x81, 0x5}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="982e", 0x2, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) 3.022618857s ago: executing program 1 (id=5204): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"03dcba87", 0x8, 0x6, 0x2, 0x0, 0x8, "f700", '\x00\x00G\x00', "0200", "fcffffff", ["c6d5913fbc846df82ea51000", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", '5\x00']}) 2.95306174s ago: executing program 1 (id=5205): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff0f}) 2.846668624s ago: executing program 1 (id=5206): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0xa, 0x7, &(0x7f0000000080)={0x18, "810e8daabe59a653c800000300"}}) 2.105980524s ago: executing program 6 (id=5207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x2000) 1.601641316s ago: executing program 6 (id=5208): sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x4000, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffc, 0x0, 0x0, 0xfffd, 0x0, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x1, 0xfffbfffffffffffe}, {0x1000000, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f7492}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffffffffffffff072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(0x0, 0xd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.404539468s ago: executing program 2 (id=5209): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.399611785s ago: executing program 6 (id=5210): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.31703361s ago: executing program 2 (id=5211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d000003605021100000108021100000050505050505000000f"], 0x54}, 0x1, 0xe00000000000000}, 0x0) 1.197142225s ago: executing program 1 (id=5212): openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x2081) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000080)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x80000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001700)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000f40)="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", 0x17d}, {&(0x7f0000001580)="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", 0x13a}], 0x2, &(0x7f00000006c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8000}], 0x30, 0x24008080}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000600)="94264da7f0b6c42d358ad741cbf0cdd3bb61c87d8dc91f8affd6243a11ce22f9f6e7fd030ea38fb4f3912a5deb3afe0a027314f35a709f3df4809d3ccfe00c9225423b3dba126c99cc7784eb72ea58239641b3", 0x53}], 0x1, &(0x7f00000010c0)=[@iv={0x100, 0x117, 0x2, 0xec, "293e09d942a4019fd29aa457a0765762fcceb6aa08c6a022d112fc0e52abc60ecde85f8171a2610e2653a7ddb93d6946d67a6b4454198a4367487d4f31714a229b59bc406e9b9be67d55f9a235a54b90a8c0d8c414c9b9b348a35ede000ea62be7fd6ae9b86fe103038a060d65604159fd6b7b0aad97fea49da218a7fd2ee63d922a02e8160bb66c9efcbf8e208306f05dd727fad0e997233056c54455766ad5734b4412b7afb70f2e8e978ccf622a2efc2539ac6fa4f2dd98dc650bbc34026fd619f03cc6fb719764b8ee7cc27f3cfb94eea12676b4b5151027deda0139836491e375e80d0245e8932107d8"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xf}], 0x160, 0x20000041}, {0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000800)="96ff7eedfe1e18abc64aab5f6169498ff62cead4ab345da75b97aa4c7735094dc65f7fdc32d798a62dc8e845009018c52066de8d3b490c153872d9b7c309a1e4feaae46947f9054e075096c7da6c6853d997a95ff02bbf69631776f8819eeb75fd17d1b9bc2c92939cede9c42bc52060e0589c65932a032bdb8079af0735b8fd09ab44ecc5e833e7a0bdad53966cb6861fdc4ac08b83e14faed8e7caa4992430f04fe0dcfd6a6e", 0xa7}, {&(0x7f00000008c0)="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", 0xfc}, {&(0x7f00000009c0)="019206bac480faa4ceff8e4560a9d2eb4737650b1f17854215828a2868e250a87803df5dc9dbbf2efc65cd0c8c5e763a8d4546953a5ffa56bc6676d569fed8e113c2331c64f82d748f5958d3c8a25a578b2c29f3e12637f1715248a73c30c9d5e7976c0fbe78fb3603f8707024c878a94a1981ffc73d6d697929c99ad423e1c457fde3ab6f419dec52048e5862fc7139ba50dc3beb35b2a6c6ba31101337aaaa5554bed34e203a82935c57ded0223b044ea70282ab85feb2b30765", 0xbb}], 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x2e0, 0x2400c000}, {0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c80)="55a979b5914fef37b88bdf7f7e83390cefdd0396b96f48e6acdc7f5d4aa39dd78bce6d17ffee481d94dc774bd9a45ddb598c172cb92a3f00f5207523bbec85c7ad57863307550679868e2661d4cb8a186918337669352fe86dfc4cae7449b50e6f2d9763e05c16f2d201eb33185a55d0e1e69ccaba3f12beb962162d27964308914e593ca752f5a8df2cb271e789073da6a857733e65cb4eaf3f389f88acb1d403aeb79f00000095d7ea679c66187b312a3364984c1230c7bc0950dfb79e65a0309b4c56f1aa35ce4ed3dad634356c9f6b9f9ed3b2ece6f8ac59378011920e2f9f16656d3cd30f11e1222175009f0e8c0e8ea6a367", 0xf5}, {&(0x7f0000000e80)="24d800"/15, 0xf}, {&(0x7f0000001840)="14a90da5404d421810b78b9d8c4fef21d8d224e378b280e37a88be85d64a5fc24539ac7b861794ce16a6b12f218ebe162b53e97c105bba36c7e4c3ad68c4cd76d4f1203214144eee1cd305b9f87cb7c3595c8fede72efb26ccf3d2884e6e74ae43cf982b4d3b38b87ce3b1b86b14535a8e979c4b9ef80bec86b2ece87359113c8e3ffc69e2519667b3005ef1a1fcb26c7a3f5e754f77335de5397fb3f2bad6c06ce5ab520f3004cb294f51a51c49e3dc41b5614639ddf95ef56f96a5c8843406035f3ac0dfa8c22f4566709845406ec3dcddef4a43607474dd30f6553a8e7b0973a2d8464f", 0xe5}, {&(0x7f0000000ec0)="2d9862b8cad78b5f207031236841e2647a5c43f23bc25ceb0d9b451818a9c209cab6d0d5c48c1ab075aede76b8b5af9feab7e65ab8dd947f", 0x38}], 0x4, &(0x7f0000002440)=ANY=[@ANYRES8=r5], 0x0, 0x44050}, {0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000ac0)="7622c86aa60631a5e38ed41c51ab26802098d8f859310c5f92b482ddfb468d9fb3a905a3c4f3b55705112520e9dd69a6a4790d0581c6d15564674adadccc5e65db25e1ca9e8850f77b07418c43d60a3c42d4904f0a04224e2178b20074ddbcc7b3a557225d981d4eaf54b98b726ef5a24df6c8fb29772904ae2e3c833ec40dafc107932c682bb9c9828ae6bf72935ce947a429060f88b21d7f21f9b35d5781658469707094c07ae7d8972263dca59d3599442f0beeff6cd78dcc6fd26d26bc62b3f42e1a226118e50d940c2fe884a369ea3d90eeb10253be11528a998fd8b7c0a12ded49f3acdbd77fb4e42aeaf69ddf51d8f089b8f34479555ae199692954d17f74bb67eb60c91b6b742267", 0x10c}, {&(0x7f0000001300)="59ba71e2737642fffc47f97fe81dcb475eb35e62b2eab5f1ca1937473313bcdddd78b00c3aaa206ef1b8efba1e58a30288dd8523e257d6d4b362573b2e8586a99b28c69dfe19b59f39fbee98250ac2a7b01ef3211a925eb0cd04e9556eb35fb5fcb9b727258ba9baf29213d11842317a54aa2e120710e499c309e7abeec25fe1722c6dbea320dd5298c5f2decb716a01b6f7e0a72c3b45c8e57f3ca30e5ab24f084317f2ab23bd0b0cfccc278f6b3049474e05eaf83dae430431e9136da8a0b2a5afc20dee", 0xc5}], 0x2, &(0x7f0000001dc0)=ANY=[], 0x300, 0x40010}], 0x5, 0x4814) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280", @ANYRES16, @ANYRES16=r2], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0xc4010) close(r0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000480)) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c23003f) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r10, &(0x7f0000001a80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05000000", @ANYRESHEX=r6, @ANYRES64=r3, @ANYRES8=0x0, @ANYBLOB="88b3575f619220d4b2098252ce1eb528b3"], 0x28}, 0x1, 0x0, 0x0, 0x83fbe79872381294}, 0x4004094) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000500)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r8, @ANYBLOB="100026bd706200fcdbdf2509000000080003", @ANYRES32=r11, @ANYBLOB="0400280004002800080037000100000028006e800400020004000200040002000400020004000100040002000400010004000200040001001100070057b9fe2dd56b99647672f8b07600000024006e8004000200040002000400020004000100040001000400010004000200040001000900070004f93020b300000018005080090001000bde19a062000000050002000000000004002800"], 0xb4}, 0x1, 0x0, 0x0, 0x840}, 0x0) r12 = fsopen(&(0x7f0000000c40)='esdfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000114000227bd7000ffdbdf250800010001000000080001000202000008600f27783741b8aa005401000200000008000100000000000800010001000000"], 0x40}, 0x1, 0x0, 0x0, 0x2c000004}, 0x2000c000) 703.717164ms ago: executing program 2 (id=5213): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a000000000006000200e4ffffff14001f00000000000000000000000000000000001400200000000000000000c98b00ffffac1414bb06001b"], 0x64}}, 0x0) 497.371526ms ago: executing program 2 (id=5214): r0 = socket$inet(0x2, 0x4, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla', 0x5) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xd, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f00000002c0)={0x18, r2}) r3 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040)) r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100300000040d422031540000102030109022d000101f760b109040010200301030009217dff7a0122440e0905810300020109f90905020300040400ff2a7533391a4ff7eb1b90fc5d9bed6da797ce0be64a21fb7fb751ca44f978d16c30cb39f9f10808e152099452e815b51f3da64e51e263c71ee5404646c0f2650e531392c1d4583931"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000001200)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="de0d0200000002c3"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000004500)={0x24, 0x0, &(0x7f0000004400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 264.155119ms ago: executing program 1 (id=5215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 203.797571ms ago: executing program 6 (id=5216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x5a00) 111.151462ms ago: executing program 6 (id=5217): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x1, 0x3, 0x101, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x2, 0x3e, 0x87, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x20000080, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0x9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x8001, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x10, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000002, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffdf, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x41, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xffff, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d01020301090224000100000000090400000221efb00009050202000000000009058b"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9b22}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) syz_usb_connect$uac1(0x4, 0x102, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x582, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf0, 0x3, 0x1, 0x9, 0x60, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8ce, 0x3e}, [@feature_unit={0xd, 0x24, 0x6, 0x4, 0x2, 0x3, [0x3, 0x9, 0x6], 0x81}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x6, 0x6, [0x0, 0x8, 0x6d5ab37d0b152b55, 0x3, 0xba4b73672b233ff5, 0x3], 0xff}, @mixer_unit={0xb, 0x24, 0x4, 0x3, 0x8, "f545a9004f08"}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x6, 0x4, '&q'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x70, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0x74, 0x1, 'X', "fc8ada"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0xe3, 0x9, 0xf, 0x66}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x6, 0x8, 0xf, 0x6c}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x1ff, 0xbf, "4a3a622b702f8b6a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x8, 0x6, {0x7, 0x25, 0x1, 0x4, 0x4, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3ff, 0x4, 0x61, "09772a1f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x0, 0x5f, "ebfa404432809f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x4, 0x55, 0xb, 0x56}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x4, 0x8, {0x7, 0x25, 0x1, 0x0, 0x2, 0xd}}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x0, 0xf9, 0x5, 0x0, 0x40, 0x40}, 0xe, &(0x7f00000003c0)={0x5, 0xf, 0xe, 0x2, [@ptm_cap={0x3}, @generic={0x6, 0x10, 0x0, "ffe4fd"}]}, 0xa, [{0xa6, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"]}, {0x78, &(0x7f0000000940)=@string={0x78, 0x3, "bf024c5b676f503845700526fd353323a40a340ce5019dabbfb1f2140cc4d8b9cc46e5f7fb1b57e4ec956f84dd97749c7f83478a131f1dbe4d7175ff5bf28ecb70c77199f8bcd576df5af7685b3d254c4b023a1bad7e001d287fc7180d6e6ee88b59c518e3ff8bcd9487fe3265aa578832a71f337622"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x42d}}, {0xa9, &(0x7f0000000a80)=@string={0xa9, 0x3, "37851429b6783c159fa3278799f33735bc53aa6254c7196abdd2c2d9a20a0a7f9e22c8a6ce7af156b54dbd45035ce1b3161b3eeadfdc0131930893ef1e1aabc5cd9529255a3b52d3f4860bd2ca8b976be73adb2a5403597894d567d2db0129e791f90279799bd64810eda856e959b43213884ea69fa2bea7f69b4ffcbfebeb24e507b4997808d63f6639820bcabe109893c23885efe4b7a622e9d17111f4ae2169a0a2ea8ea2f5"}}, {0x7f, &(0x7f0000000b40)=@string={0x7f, 0x3, "1a281f908779c38cbd94bececb3acb5da7446eae545a849be8fc496ca1234333c335fbcaf90507bee1747a55b8ec24e53b1dd79079e8a72d8b84399b00a4de2c96fd6097202b1778c1317b99909d2ef6d8040f3b2f57b4c2b22ae721f0431b1b9b80caa739e29cfecb891c531c25f92fe198d835994463eb2e836522fb"}}, {0xe3, &(0x7f0000000bc0)=@string={0xe3, 0x3, "0b2ad5d01971ebb8271fe5466da4243cfee1987a0f6f490e73c80f3b125abcb9773286bd38f59e641771a42f737af743d6d8dd474305756bb7b1000781429fdd951fff9f2a7966fb58dfe808c397ddb8b6ec8ef489770d3d6d32b385132af4ab5864804e7bd49e8b4600384c928e62ddaa7d1d73dcd8b3f84902a327314b2044bcfcc49676cc5240bd94bd31b029cfa733ed5290459c1583eda9baac1f1c07ea632eb1a0b5ec0a38348fdca74a4068f7599fd42d11edbf7e203a06aa0030a914d6a4d75fe0a349e36825316f29bcc40b9adf1a67b52b97def0c80a069d8ae866d0"}}, {0x7a, &(0x7f0000000cc0)=@string={0x7a, 0x3, "7f87a1c67ce8ac7758c0cc15a974fd4a7ccba744d2e33d069d4f80638e5f5d47ebba51faa9f9119c4e19773ed2f5038f94587cc641f14cb661c33adb375d5db3c413b063f846316fa187dfafb89ae7ef6edb79b615cbb60c6e2e78932b87a997cd8fd57483c2e0244ca95c3341c746f9f358520e2da64dc6"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x406}}]}) 0s ago: executing program 1 (id=5218): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): from eth0 [ 744.534140][ T1244] usb 6-1: Using ep0 maxpacket: 16 [ 744.552373][ T1244] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 744.552400][ T1244] usb 6-1: config 0 has no interface number 0 [ 744.552448][ T1244] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 744.552477][ T1244] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 744.576514][ T1244] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 744.576547][ T1244] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 744.587068][ T1244] usb 6-1: Product: syz [ 744.587091][ T1244] usb 6-1: SerialNumber: syz [ 744.637947][ T1244] usb 6-1: config 0 descriptor?? [ 744.681322][ T1244] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 744.685498][ T44] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 744.708325][ T1244] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input76 [ 744.913846][T18853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 744.915933][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 744.919197][T18853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 744.946744][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 745.191696][T18853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 745.211878][T18853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 745.284915][T18853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 745.296392][T18853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 745.473339][T18853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.156152][T19263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4773'. [ 746.408539][T18853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.517193][T18853] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.609496][T10318] usb 6-1: USB disconnect, device number 97 [ 746.621242][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.635005][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.647496][T10318] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 746.739756][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.739943][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.544311][T19303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4781'. [ 749.258352][ T1244] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 749.330505][T18853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.469670][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.480315][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.572846][ T1244] usb 6-1: unable to get BOS descriptor or descriptor too short [ 749.572945][ T1244] usb 6-1: too many configurations: 82, using maximum allowed: 8 [ 749.574639][ T1244] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.574668][ T1244] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 749.574740][ T1244] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 749.576438][ T1244] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.576467][ T1244] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 749.576558][ T1244] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 749.578149][ T1244] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.578173][ T1244] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 749.578242][ T1244] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 749.714006][ T1244] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.714036][ T1244] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 749.714127][ T1244] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 749.715381][ T1244] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.715406][ T1244] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 749.715481][ T1244] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 749.734038][ T1244] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.734069][ T1244] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 749.734143][ T1244] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 749.736570][ T1244] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.736600][ T1244] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 749.736673][ T1244] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 749.742047][ T1244] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.742078][ T1244] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 749.742147][ T1244] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 749.747408][ T1244] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 749.747442][ T1244] usb 6-1: New USB device strings: Mfr=186, Product=34, SerialNumber=155 [ 749.747464][ T1244] usb 6-1: Product: syz [ 749.747479][ T1244] usb 6-1: Manufacturer: syz [ 749.747494][ T1244] usb 6-1: SerialNumber: syz [ 750.235837][T18853] veth0_vlan: entered promiscuous mode [ 750.393685][ T1493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.606343][T18853] veth1_vlan: entered promiscuous mode [ 750.820012][ T1244] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.839583][ T212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.876963][T10318] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 751.035182][T19322] netlink: 'syz.2.4786': attribute type 10 has an invalid length. [ 751.049547][T18853] veth0_macvtap: entered promiscuous mode [ 751.131979][T18853] veth1_macvtap: entered promiscuous mode [ 751.226214][T18853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.341835][T18853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.515514][ T212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.517823][ T212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.520973][ T212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.521915][ T212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.784338][T10318] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 751.944514][T10318] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 751.944607][T10318] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 751.948104][T10318] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 751.948135][T10318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.948154][T10318] usb 3-1: Product: syz [ 751.948167][T10318] usb 3-1: Manufacturer: syz [ 751.948177][T10318] usb 3-1: SerialNumber: syz [ 752.023437][T10318] usb 3-1: config 0 descriptor?? [ 752.024871][T19327] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 752.025108][T19327] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 752.269549][T19328] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 752.270748][T19328] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 752.519514][T10318] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 752.776048][ T5598] usb 6-1: USB disconnect, device number 98 [ 752.897293][T19327] overlayfs: failed to resolve './file0': -2 [ 753.446735][T10318] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 753.739519][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4790'. [ 753.830077][T10318] usb 3-1: USB disconnect, device number 81 [ 754.129239][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 754.328019][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 754.343092][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 754.347976][T19339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4792'. [ 754.353583][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 754.364410][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 754.967683][T15771] bond0: (slave syz_tun): Releasing backup interface [ 755.073842][ T5598] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 755.128986][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.129010][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.244438][ T5598] usb 6-1: Using ep0 maxpacket: 16 [ 755.291298][ T5598] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 755.291328][ T5598] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.291346][ T5598] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 755.298345][ T5598] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89 [ 755.298379][ T5598] usb 6-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3 [ 755.298402][ T5598] usb 6-1: Manufacturer: syz [ 755.298418][ T5598] usb 6-1: SerialNumber: syz [ 755.400480][ T5598] usb 6-1: config 0 descriptor?? [ 755.464071][ T5598] usb 6-1: 0:2 : does not exist [ 755.886255][T19353] netlink: 'syz.2.4794': attribute type 10 has an invalid length. [ 756.175903][ T5598] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 756.202567][ T5598] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 756.329368][ T1025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 756.505339][ T5598] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 756.563907][ T5598] usb 6-1: USB disconnect, device number 99 [ 756.659316][ T6359] udevd[6359]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 756.679166][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.893705][ T60] Bluetooth: hci4: command tx timeout [ 756.969534][ T1524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.969559][ T1524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.980938][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.608999][T19364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4798'. [ 757.841782][ T9] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 758.013390][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 758.023528][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 758.023559][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.023581][ T9] usb 3-1: config 0 has no interface number 0 [ 758.023633][ T9] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 758.023664][ T9] usb 3-1: config 0 interface 8 has no altsetting 0 [ 758.026517][ T9] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 758.026552][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.026572][ T9] usb 3-1: Product: syz [ 758.026587][ T9] usb 3-1: Manufacturer: syz [ 758.026601][ T9] usb 3-1: SerialNumber: syz [ 758.149719][ T9] usb 3-1: config 0 descriptor?? [ 758.324955][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.405798][T19361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4797'. [ 758.445556][ T9] ath6kl: Failed to submit usb control message: -71 [ 758.445609][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 758.445619][ T9] ath6kl: Unable to send get target info: -71 [ 758.446674][ T9] ath6kl: Failed to init ath6kl core: -71 [ 758.532971][ T9] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 758.556762][ T9] usb 3-1: USB disconnect, device number 82 [ 759.116027][ T60] Bluetooth: hci4: command tx timeout [ 759.359596][ T1244] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 759.417784][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4804'. [ 759.599467][ T1244] usb 6-1: Using ep0 maxpacket: 8 [ 759.636397][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.672922][ T1244] usb 6-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 759.672945][ T1244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.672957][ T1244] usb 6-1: Product: syz [ 759.672965][ T1244] usb 6-1: Manufacturer: syz [ 759.672973][ T1244] usb 6-1: SerialNumber: syz [ 759.987424][ T1244] usb 6-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 760.120331][T19402] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4807'. [ 760.121207][T10318] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 760.205619][ T1244] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 760.268224][ T1244] usb 6-1: USB disconnect, device number 100 [ 760.309009][ T6359] udevd[6359]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.314590][T10318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 760.316356][T10318] usb 2-1: too many endpoints for config 1 interface 0 altsetting 16: 32, using maximum allowed: 30 [ 760.316407][T10318] usb 2-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 32 [ 760.316432][T10318] usb 2-1: config 1 interface 0 has no altsetting 0 [ 760.320423][T10318] usb 2-1: string descriptor 0 read error: -22 [ 760.320577][T10318] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 760.320598][T10318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.322417][T19405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4808'. [ 760.416999][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 760.906312][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.949805][T10318] hid_parser_main: 1 callbacks suppressed [ 760.949835][T10318] glorious 0003:22D4:1503.001B: unknown main item tag 0x0 [ 760.949867][T10318] glorious 0003:22D4:1503.001B: unknown main item tag 0x0 [ 760.949894][T10318] glorious 0003:22D4:1503.001B: unknown main item tag 0x0 [ 760.949918][T10318] glorious 0003:22D4:1503.001B: unknown main item tag 0x0 [ 760.949941][T10318] glorious 0003:22D4:1503.001B: unknown main item tag 0x0 [ 760.949966][T10318] glorious 0003:22D4:1503.001B: unknown main item tag 0x0 [ 760.949991][T10318] glorious 0003:22D4:1503.001B: unknown main item tag 0x0 [ 760.950016][T10318] glorious 0003:22D4:1503.001B: unknown main item tag 0x0 [ 760.950041][T10318] glorious 0003:22D4:1503.001B: unknown main item tag 0x0 [ 760.950066][T10318] glorious 0003:22D4:1503.001B: unknown main item tag 0x0 [ 761.035758][T19396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.040688][T19396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.128593][T19396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.130612][T19396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.173534][T10318] glorious 0003:22D4:1503.001B: hidraw0: USB HID vff.7d Device [Glorious Model I] on usb-dummy_hcd.1-1/input0 [ 761.203908][T10318] usb 2-1: USB disconnect, device number 42 [ 761.337082][ T60] Bluetooth: hci4: command tx timeout [ 761.357277][T19414] fido_id[19414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 761.786276][T19421] netlink: 'syz.5.4814': attribute type 10 has an invalid length. [ 761.900576][T19426] cgroup: Unknown subsys name 'cpuset' [ 762.133741][T19334] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.135804][T19334] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.136170][T19334] bridge_slave_0: entered allmulticast mode [ 762.143534][T19334] bridge_slave_0: entered promiscuous mode [ 762.154217][T19334] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.154642][T19334] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.155054][T19334] bridge_slave_1: entered allmulticast mode [ 762.162214][T19334] bridge_slave_1: entered promiscuous mode [ 762.203011][ T5598] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 762.206101][ T10] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 762.276507][T19334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.319110][T19334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.392736][ T5598] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 762.392785][ T5598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 762.392814][ T5598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 762.467299][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 762.467395][ T10] usb 6-1: too many configurations: 232, using maximum allowed: 8 [ 762.468404][ T5598] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 762.468653][ T5598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.468676][ T5598] usb 2-1: Product: syz [ 762.468692][ T5598] usb 2-1: Manufacturer: syz [ 762.468705][ T5598] usb 2-1: SerialNumber: syz [ 762.469081][ T1025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 762.478773][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 762.478817][ T10] usb 6-1: can't read configurations, error -61 [ 762.578953][ T5598] usb 2-1: config 0 descriptor?? [ 762.604068][ T5598] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 762.662762][ T10] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 762.810363][ T1244] usb 2-1: USB disconnect, device number 43 [ 762.831020][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4820'. [ 762.846717][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 762.846805][ T10] usb 6-1: too many configurations: 232, using maximum allowed: 8 [ 762.887387][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 762.887431][ T10] usb 6-1: can't read configurations, error -61 [ 762.889059][ T10] usb usb6-port1: attempt power cycle [ 763.020207][T19334] team0: Port device team_slave_0 added [ 763.042127][T19334] team0: Port device team_slave_1 added [ 763.199375][ T212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 763.283110][ T10] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 763.316779][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 763.316879][ T10] usb 6-1: too many configurations: 232, using maximum allowed: 8 [ 763.321728][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 763.321772][ T10] usb 6-1: can't read configurations, error -61 [ 763.447300][T19334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.447313][T19334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.447330][T19334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.508526][ T10] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 763.510102][T19444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4823'. [ 763.549852][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 763.549954][ T10] usb 6-1: too many configurations: 232, using maximum allowed: 8 [ 763.558808][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 763.558851][ T10] usb 6-1: can't read configurations, error -61 [ 763.559276][ T10] usb usb6-port1: unable to enumerate USB device [ 763.572029][ T60] Bluetooth: hci4: command tx timeout [ 763.657515][T19334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.665381][T19334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.665418][T19334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.785019][T10318] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 763.941096][T10318] usb 3-1: device descriptor read/64, error -71 [ 763.970179][T19334] hsr_slave_0: entered promiscuous mode [ 763.989323][T19334] hsr_slave_1: entered promiscuous mode [ 763.993178][T19334] debugfs: 'hsr0' already exists in 'hsr' [ 763.993204][T19334] Cannot create hsr debugfs directory [ 764.128363][ T56] bridge_slave_1: left allmulticast mode [ 764.128393][ T56] bridge_slave_1: left promiscuous mode [ 764.128599][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.191468][T10318] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 764.218551][ T56] bridge_slave_0: left allmulticast mode [ 764.218593][ T56] bridge_slave_0: left promiscuous mode [ 764.220558][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.290537][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4828'. [ 764.330338][T10318] usb 3-1: device descriptor read/64, error -71 [ 764.448333][T10318] usb usb3-port1: attempt power cycle [ 764.875506][T10318] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 764.901679][T10318] usb 3-1: device descriptor read/8, error -71 [ 765.251543][T10318] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 765.312686][T10318] usb 3-1: device descriptor read/8, error -71 [ 765.422094][T10318] usb usb3-port1: unable to enumerate USB device [ 765.507337][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.571078][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.594860][ T56] bond0 (unregistering): Released all slaves [ 765.816059][T19459] hsr_slave_0 (unregistering): left promiscuous mode [ 765.897396][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 766.759033][T19483] netlink: 763 bytes leftover after parsing attributes in process `syz.5.4833'. [ 766.797807][T19485] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input77 [ 766.972047][ T1244] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 767.031266][T19490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4835'. [ 767.141513][ T1244] usb 2-1: Using ep0 maxpacket: 16 [ 767.143512][ T1244] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 767.169571][ T1244] usb 2-1: config 0 has no interfaces? [ 767.172041][ T1244] usb 2-1: config 0 has no interfaces? [ 767.191322][ T1244] usb 2-1: config 0 has no interfaces? [ 767.194132][ T1244] usb 2-1: config 0 has no interfaces? [ 767.214542][ T1244] usb 2-1: config 0 has no interfaces? [ 767.219503][ T1244] usb 2-1: config 0 has no interfaces? [ 767.222155][ T1244] usb 2-1: config 0 has no interfaces? [ 767.227269][ T1244] usb 2-1: config 0 has no interfaces? [ 767.274424][ T1244] usb 2-1: string descriptor 0 read error: -71 [ 767.274590][ T1244] usb 2-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 767.274616][ T1244] usb 2-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 767.327557][ T1244] usb 2-1: config 0 descriptor?? [ 767.328080][ T1244] usb 2-1: can't set config #0, error -71 [ 767.344502][ T1244] usb 2-1: USB disconnect, device number 44 [ 767.966263][T14989] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 768.049750][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 768.050632][T19508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4838'. [ 768.135491][T14989] usb 6-1: Using ep0 maxpacket: 32 [ 768.143561][T14989] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 768.143596][T14989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.263068][T14989] usb 6-1: config 0 descriptor?? [ 768.281126][T14989] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 768.584465][ T56] hsr_slave_1: left promiscuous mode [ 768.588011][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.588060][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.644651][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.644673][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.747774][ T1244] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 768.926522][ T1244] usb 2-1: Using ep0 maxpacket: 16 [ 768.929389][ T1244] usb 2-1: config 184 has an invalid interface number: 70 but max is 0 [ 768.929419][ T1244] usb 2-1: config 184 has no interface number 0 [ 768.929463][ T1244] usb 2-1: config 184 interface 70 altsetting 6 bulk endpoint 0xB has invalid maxpacket 8 [ 768.929486][ T1244] usb 2-1: config 184 interface 70 has no altsetting 0 [ 768.933114][ T1244] usb 2-1: New USB device found, idVendor=0499, idProduct=2d25, bcdDevice=1c.15 [ 768.933146][ T1244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.933167][ T1244] usb 2-1: Product: syz [ 768.933183][ T1244] usb 2-1: Manufacturer: syz [ 768.933197][ T1244] usb 2-1: SerialNumber: syz [ 768.952737][ T56] veth1_macvtap: left promiscuous mode [ 768.953318][ T56] veth0_macvtap: left promiscuous mode [ 769.016195][ T56] veth1_vlan: left promiscuous mode [ 769.032961][ T56] veth0_vlan: left promiscuous mode [ 769.048301][T19517] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 769.505134][ T1244] usb 2-1: USB disconnect, device number 45 [ 769.593658][T14989] gspca_vc032x: reg_w err -71 [ 769.593681][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593692][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593702][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593712][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593722][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593731][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593741][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593750][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593759][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593769][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593779][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593788][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593797][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593806][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593816][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593824][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593833][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593842][T14989] gspca_vc032x: I2c Bus Busy Wait 00 [ 769.593852][T14989] gspca_vc032x: Unknown sensor... [ 769.593945][T14989] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 769.609531][T14989] usb 6-1: USB disconnect, device number 105 [ 769.782389][ T6359] udevd[6359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:184.70/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 769.824719][ T37] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 770.006267][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 770.029116][ T37] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 770.029152][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.088399][ T37] usb 3-1: config 0 descriptor?? [ 770.411495][ T37] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 770.430659][ T37] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 770.431661][ T37] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 770.431716][ T37] usb 3-1: media controller created [ 770.474596][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 770.640777][ T37] az6027: usb out operation failed. (-71) [ 770.641974][ T37] az6027: usb out operation failed. (-71) [ 770.641994][ T37] stb0899_attach: Driver disabled by Kconfig [ 770.642004][ T37] az6027: no front-end attached [ 770.642004][ T37] [ 770.642502][ T37] az6027: usb out operation failed. (-71) [ 770.642519][ T37] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 770.658488][ T1244] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 770.721624][ T37] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input78 [ 770.773428][ T37] dvb-usb: schedule remote query interval to 400 msecs. [ 770.773457][ T37] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 770.801699][ T37] usb 3-1: USB disconnect, device number 87 [ 770.989506][ T5783] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 771.024754][ T37] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 771.161156][ T56] team0 (unregistering): Port device team_slave_1 removed [ 771.173742][ T5783] usb 6-1: Using ep0 maxpacket: 16 [ 771.175647][ T5783] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 771.197373][ T5783] usb 6-1: config 0 has no interfaces? [ 771.198971][ T5783] usb 6-1: config 0 has no interfaces? [ 771.200114][ T5783] usb 6-1: config 0 has no interfaces? [ 771.218895][ T5783] usb 6-1: config 0 has no interfaces? [ 771.219982][ T5783] usb 6-1: config 0 has no interfaces? [ 771.221556][ T5783] usb 6-1: config 0 has no interfaces? [ 771.233910][ T5783] usb 6-1: config 0 has no interfaces? [ 771.256264][ T5783] usb 6-1: config 0 has no interfaces? [ 771.260718][ T56] team0 (unregistering): Port device team_slave_0 removed [ 771.305346][ T5783] usb 6-1: string descriptor 0 read error: -71 [ 771.305531][ T5783] usb 6-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 771.305556][ T5783] usb 6-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 771.346858][ T1244] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 771.347476][ T1244] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 771.373827][ T5783] usb 6-1: config 0 descriptor?? [ 771.374679][ T5783] usb 6-1: can't set config #0, error -71 [ 771.395243][ T5783] usb 6-1: USB disconnect, device number 106 [ 771.749989][T19541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4849'. [ 771.784612][T19526] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 771.784716][T19526] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 771.784737][T19526] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 772.094238][T19546] ALSA: mixer_oss: invalid OSS volume '' [ 772.940744][T19566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4855'. [ 773.654817][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4857'. [ 773.907662][ T5783] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 774.019273][ T38] audit: type=1326 audit(1778208279.338:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19585 comm="syz.2.4859" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa6081cdd9 code=0x0 [ 774.069296][ T5783] usb 2-1: Using ep0 maxpacket: 16 [ 774.070146][ T5783] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 774.071298][ T5783] usb 2-1: config 0 has no interfaces? [ 774.078455][ T5783] usb 2-1: config 0 has no interfaces? [ 774.130045][ T5783] usb 2-1: config 0 has no interfaces? [ 774.131428][ T5783] usb 2-1: config 0 has no interfaces? [ 774.133035][ T5783] usb 2-1: config 0 has no interfaces? [ 774.160792][ T5783] usb 2-1: config 0 has no interfaces? [ 774.162197][ T5783] usb 2-1: config 0 has no interfaces? [ 774.163593][ T5783] usb 2-1: config 0 has no interfaces? [ 774.198207][ T5783] usb 2-1: string descriptor 0 read error: -71 [ 774.198300][ T5783] usb 2-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 774.198315][ T5783] usb 2-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 774.215325][ T5783] usb 2-1: config 0 descriptor?? [ 774.220755][ T5783] usb 2-1: can't set config #0, error -71 [ 774.233708][ T5783] usb 2-1: USB disconnect, device number 46 [ 774.298617][ T6359] udevd[6359]: setting owner of /dev/bus/usb/002/046 to uid=0, gid=0 failed: No such file or directory [ 774.326823][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 774.370682][ T56] IPVS: stop unused estimator thread 0... [ 775.331135][T19334] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 775.342251][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4868'. [ 775.422187][T19334] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 775.425322][T19334] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 775.462973][T19621] sg_write: data in/out 229343/32 bytes for SCSI command 0x0-- guessing data in; [ 775.462973][T19621] program syz.5.4870 not setting count and/or reply_len properly [ 775.560699][T19334] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 775.580731][T19334] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 775.707046][T19334] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 775.729082][T19334] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 775.791878][T19334] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 776.066972][ T5598] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 776.111779][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4874'. [ 776.229649][ T5598] usb 3-1: Using ep0 maxpacket: 16 [ 776.233566][ T5598] usb 3-1: too many configurations: 97, using maximum allowed: 8 [ 776.237557][ T5598] usb 3-1: config 0 has no interfaces? [ 776.240022][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12 [ 776.258258][ T5598] usb 3-1: config 0 has no interfaces? [ 776.279432][ T5598] usb 3-1: config 0 has no interfaces? [ 776.283597][ T5598] usb 3-1: config 0 has no interfaces? [ 776.293974][ T5598] usb 3-1: config 0 has no interfaces? [ 776.306173][ T5598] usb 3-1: config 0 has no interfaces? [ 776.307890][ T5598] usb 3-1: config 0 has no interfaces? [ 776.308990][ T5598] usb 3-1: config 0 has no interfaces? [ 776.417288][ T5598] usb 3-1: string descriptor 0 read error: -71 [ 776.417489][ T5598] usb 3-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 776.417515][ T5598] usb 3-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 776.503852][ T5598] usb 3-1: config 0 descriptor?? [ 776.504335][ T5598] usb 3-1: can't set config #0, error -71 [ 776.545771][ T5598] usb 3-1: USB disconnect, device number 88 [ 776.765743][T19334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.851918][T19650] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 776.995983][T19334] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.048278][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.049353][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.109362][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.109542][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.321233][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4879'. [ 777.505929][ T212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 777.802237][T19668] 9p: Could not find request transport: f5d [ 778.247572][ T1244] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 778.408361][ T1244] usb 2-1: Using ep0 maxpacket: 16 [ 778.409359][ T1244] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 778.410929][ T1244] usb 2-1: config 0 has no interfaces? [ 778.414181][ T1244] usb 2-1: config 0 has no interfaces? [ 778.417434][ T1244] usb 2-1: config 0 has no interfaces? [ 778.455331][ T1244] usb 2-1: config 0 has no interfaces? [ 778.456535][ T1244] usb 2-1: config 0 has no interfaces? [ 778.472208][ T1244] usb 2-1: config 0 has no interfaces? [ 778.506781][ T1244] usb 2-1: config 0 has no interfaces? [ 778.508571][ T1244] usb 2-1: config 0 has no interfaces? [ 778.533554][ T1244] usb 2-1: string descriptor 0 read error: -71 [ 778.533970][ T1244] usb 2-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 778.534000][ T1244] usb 2-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 778.582455][ T1244] usb 2-1: config 0 descriptor?? [ 778.584719][ T1244] usb 2-1: can't set config #0, error -71 [ 778.629281][ T1244] usb 2-1: USB disconnect, device number 47 [ 778.778129][T19694] netlink: 'syz.2.4892': attribute type 10 has an invalid length. [ 778.842339][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4893'. [ 779.422976][T19334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.658573][ T5598] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 779.660257][ T1244] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 779.822940][ T5598] usb 2-1: unable to get BOS descriptor or descriptor too short [ 779.825705][ T5598] usb 2-1: too many endpoints for config 1 interface 0 altsetting 16: 32, using maximum allowed: 30 [ 779.825754][ T5598] usb 2-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 32 [ 779.825779][ T5598] usb 2-1: config 1 interface 0 has no altsetting 0 [ 779.834567][ T1244] usb 3-1: Invalid ep0 maxpacket: 16 [ 779.878644][ T5598] usb 2-1: string descriptor 0 read error: -22 [ 779.878814][ T5598] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 779.878840][ T5598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.014683][ T1244] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 780.194598][ T1244] usb 3-1: Invalid ep0 maxpacket: 16 [ 780.195215][ T1244] usb usb3-port1: attempt power cycle [ 780.257092][ T5783] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 780.448166][ T5783] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 780.448227][ T5783] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 780.448253][ T5783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.456019][ T5598] hid_parser_main: 3640 callbacks suppressed [ 780.456044][ T5598] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 780.456071][ T5598] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 780.456095][ T5598] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 780.456118][ T5598] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 780.456141][ T5598] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 780.456163][ T5598] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 780.456186][ T5598] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 780.456209][ T5598] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 780.456232][ T5598] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 780.456256][ T5598] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 780.487293][ T5783] usb 6-1: config 0 descriptor?? [ 780.498292][T19725] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 780.695455][ T1244] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 780.728350][ T1244] usb 3-1: Invalid ep0 maxpacket: 16 [ 780.782332][T19334] veth0_vlan: entered promiscuous mode [ 780.796930][T19725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.798133][T19725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.849905][ T5598] glorious 0003:22D4:1503.001C: hidraw0: USB HID vff.7d Device [Glorious Model I] on usb-dummy_hcd.1-1/input0 [ 780.887873][ T1244] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 781.087180][ T5598] usb 2-1: USB disconnect, device number 48 [ 781.099539][ T1244] usb 3-1: Invalid ep0 maxpacket: 16 [ 781.100125][ T1244] usb usb3-port1: unable to enumerate USB device [ 781.114007][ T5783] hid (null): report_id 0 is invalid [ 781.114032][ T5783] hid (null): report_id 0 is invalid [ 781.114046][ T5783] hid (null): unknown global tag 0xe [ 781.114096][ T5783] hid (null): unknown global tag 0xc [ 781.114169][ T5783] hid (null): report_id 0 is invalid [ 781.114196][ T5783] hid (null): unknown global tag 0xd [ 781.114227][ T5783] hid (null): unknown global tag 0xe [ 781.114240][ T5783] hid (null): invalid report_size 10787 [ 781.114307][ T5783] hid (null): bogus close delimiter [ 781.114362][ T5783] hid (null): invalid report_count 45463 [ 781.114384][ T5783] hid (null): unknown global tag 0xc [ 781.129711][T19334] veth1_vlan: entered promiscuous mode [ 781.190828][ T5783] logitech-djreceiver 0003:046D:C71F.001D: report_id 0 is invalid [ 781.190856][ T5783] logitech-djreceiver 0003:046D:C71F.001D: item 0 0 1 8 parsing failed [ 781.201760][ T5783] logitech-djreceiver 0003:046D:C71F.001D: logi_dj_probe: parse failed [ 781.201841][ T5783] logitech-djreceiver 0003:046D:C71F.001D: probe with driver logitech-djreceiver failed with error -22 [ 781.299884][ T5783] usb 6-1: USB disconnect, device number 107 [ 781.361344][T19727] fido_id[19727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 781.546214][T19334] veth0_macvtap: entered promiscuous mode [ 781.622932][T19334] veth1_macvtap: entered promiscuous mode [ 781.755435][T19334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.891903][T19334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.985801][ T1025] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.986724][ T1025] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.987576][ T1025] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.987654][ T1025] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.396362][T14989] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 782.418804][ T1244] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 782.634405][ T1244] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 782.634436][ T1244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.652122][T14989] usb 6-1: Using ep0 maxpacket: 16 [ 782.676158][ T1244] usb 2-1: config 0 descriptor?? [ 782.686100][T14989] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 782.698072][T14989] usb 6-1: config 0 has no interfaces? [ 782.699734][T14989] usb 6-1: config 0 has no interfaces? [ 782.701156][T14989] usb 6-1: config 0 has no interfaces? [ 782.706072][T14989] usb 6-1: config 0 has no interfaces? [ 782.708927][T14989] usb 6-1: config 0 has no interfaces? [ 782.722773][T14989] usb 6-1: config 0 has no interfaces? [ 782.794351][ T1244] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 783.089135][T14989] usb 6-1: config 0 has no interfaces? [ 783.118629][T14989] usb 6-1: config 0 has no interfaces? [ 783.237111][ T1244] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 783.303978][T14989] usb 6-1: string descriptor 0 read error: -71 [ 783.304136][T14989] usb 6-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 783.304162][T14989] usb 6-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 783.333449][T14989] usb 6-1: config 0 descriptor?? [ 783.339062][T14989] usb 6-1: can't set config #0, error -71 [ 783.446084][T14989] usb 6-1: USB disconnect, device number 108 [ 783.679517][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 783.716385][ T1244] gspca_cpia1: usb_control_msg 02, error -71 [ 783.716863][ T1244] gspca_cpia1: usb_control_msg 05, error -71 [ 783.716882][ T1244] cpia1 2-1:0.0: unexpected systemstate: 00 [ 783.836227][ T1244] usb 2-1: USB disconnect, device number 49 [ 784.370497][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.370584][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.188484][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.188509][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.730417][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4910'. [ 786.459634][ T1244] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 786.520916][T19780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4917'. [ 786.627990][ T1244] usb 6-1: Using ep0 maxpacket: 16 [ 786.643060][ T1244] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 786.644913][ T1244] usb 6-1: config 0 has no interfaces? [ 786.646437][ T1244] usb 6-1: config 0 has no interfaces? [ 786.659000][ T1244] usb 6-1: config 0 has no interfaces? [ 786.663606][ T1244] usb 6-1: config 0 has no interfaces? [ 786.670845][ T1244] usb 6-1: config 0 has no interfaces? [ 786.686561][ T1244] usb 6-1: config 0 has no interfaces? [ 786.690462][ T1244] usb 6-1: config 0 has no interfaces? [ 786.698021][ T1244] usb 6-1: config 0 has no interfaces? [ 786.717432][ T1244] usb 6-1: string descriptor 0 read error: -71 [ 786.717604][ T1244] usb 6-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 786.717632][ T1244] usb 6-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 786.746256][ T1244] usb 6-1: config 0 descriptor?? [ 786.758603][ T1244] usb 6-1: can't set config #0, error -71 [ 786.775991][ T1244] usb 6-1: USB disconnect, device number 109 [ 787.128467][T19790] netlink: 'syz.6.4923': attribute type 33 has an invalid length. [ 787.547379][ T1244] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 787.699025][ T9] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 787.704041][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4928'. [ 787.727124][ T1244] usb 7-1: config index 0 descriptor too short (expected 100, got 36) [ 787.727157][ T1244] usb 7-1: config 2 has an invalid interface number: 174 but max is 0 [ 787.727178][ T1244] usb 7-1: config 2 has no interface number 0 [ 787.727217][ T1244] usb 7-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 787.727234][ T1244] usb 7-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 1023, setting to 64 [ 787.727249][ T1244] usb 7-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 787.750295][ T1244] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 787.750326][ T1244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.750345][ T1244] usb 7-1: Product: syz [ 787.750359][ T1244] usb 7-1: Manufacturer: syz [ 787.750372][ T1244] usb 7-1: SerialNumber: syz [ 787.796439][T19790] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 787.835005][ T1493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 787.910645][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 787.923583][ T9] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 787.923613][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.923634][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 787.957657][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89 [ 787.957697][ T9] usb 6-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3 [ 787.957719][ T9] usb 6-1: Manufacturer: syz [ 787.957735][ T9] usb 6-1: SerialNumber: syz [ 787.997318][ T9] usb 6-1: config 0 descriptor?? [ 788.017038][ T9] usb 6-1: 0:2 : does not exist [ 788.157010][T19805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4929'. [ 788.388012][T19790] pic_ioport_write: 178 callbacks suppressed [ 788.388035][T19790] kvm: pic: single mode not supported [ 788.388043][T19790] pic_ioport_write: 212 callbacks suppressed [ 788.388471][T19790] kvm: pic: level sensitive irq not supported [ 788.393065][T19790] kvm: pic: level sensitive irq not supported [ 788.396468][T19790] kvm: pic: level sensitive irq not supported [ 788.399630][T19790] kvm: pic: level sensitive irq not supported [ 788.400620][T19790] kvm: pic: level sensitive irq not supported [ 788.400851][T19790] kvm: pic: single mode not supported [ 788.400862][T19790] kvm: pic: level sensitive irq not supported [ 788.401324][T19790] kvm: pic: single mode not supported [ 788.401336][T19790] kvm: pic: level sensitive irq not supported [ 788.401775][T19790] kvm: pic: level sensitive irq not supported [ 788.402757][T19790] kvm: pic: single mode not supported [ 788.514426][ T1244] usb 7-1: probing VID:PID(0424:012C) [ 788.656763][ T1244] usb 7-1: vub300 testing BULK IN EndPoint(0) 8E [ 788.656792][ T1244] usb 7-1: vub300 testing BULK IN EndPoint(1) 82 [ 788.656812][ T1244] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 788.696504][ T9] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 788.702210][ T32] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 788.723368][ T9] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 788.799524][ T9] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 788.838787][ T9] usb 6-1: USB disconnect, device number 110 [ 788.884606][ T1244] vub300 7-1:2.174: probe with driver vub300 failed with error -22 [ 788.900174][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 788.906984][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.907013][ T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 788.912833][ T32] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 788.912863][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.912881][ T32] usb 2-1: Product: syz [ 788.912895][ T32] usb 2-1: Manufacturer: syz [ 788.912908][ T32] usb 2-1: SerialNumber: syz [ 789.080947][ T6370] udevd[6370]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.126948][ T1244] usb 7-1: USB disconnect, device number 2 [ 789.279357][ T37] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 789.345010][ T32] usb 2-1: selecting invalid altsetting 1 [ 789.345552][ T32] usb 2-1: unit 3 not found! [ 789.348264][ T32] usb 2-1: cannot request logical cluster ID: 0 (err: -71) [ 789.348289][ T32] usb 2-1: invalid MIXER UNIT descriptor 6 [ 789.367939][ T1493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 789.462864][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 789.465962][ T37] usb 3-1: too many configurations: 97, using maximum allowed: 8 [ 789.469780][ T37] usb 3-1: config 0 has no interfaces? [ 789.474849][ T37] usb 3-1: config 0 has no interfaces? [ 789.479329][ T37] usb 3-1: config 0 has no interfaces? [ 789.488321][ T37] usb 3-1: config 0 has no interfaces? [ 789.493040][ T37] usb 3-1: config 0 has no interfaces? [ 789.502155][ T37] usb 3-1: config 0 has no interfaces? [ 789.507587][ T37] usb 3-1: config 0 has no interfaces? [ 789.516926][ T37] usb 3-1: config 0 has no interfaces? [ 789.711816][T19828] overlayfs: upper fs does not support file handles, falling back to index=off. [ 789.782071][ T37] usb 3-1: string descriptor 0 read error: -71 [ 789.782255][ T37] usb 3-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 789.782281][ T37] usb 3-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 789.873777][ T37] usb 3-1: config 0 descriptor?? [ 789.874267][ T37] usb 3-1: can't set config #0, error -71 [ 790.117091][ T37] usb 3-1: USB disconnect, device number 93 [ 790.163814][ T32] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 790.195769][ T32] usb 2-1: USB disconnect, device number 50 [ 790.317192][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4936'. [ 790.349369][ T6359] udevd[6359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.355027][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4936'. [ 790.369472][ T5598] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 790.533168][ T5598] usb 7-1: unable to get BOS descriptor or descriptor too short [ 790.534981][ T5598] usb 7-1: too many endpoints for config 1 interface 0 altsetting 16: 32, using maximum allowed: 30 [ 790.535048][ T5598] usb 7-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 32 [ 790.535078][ T5598] usb 7-1: config 1 interface 0 has no altsetting 0 [ 790.589507][ T5598] usb 7-1: string descriptor 0 read error: -22 [ 790.589665][ T5598] usb 7-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 790.589690][ T5598] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.703254][T19844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4937'. [ 790.916486][ T32] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 791.049673][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4940'. [ 791.082222][ T5598] usbhid 7-1:1.0: can't add hid device: -71 [ 791.082353][ T5598] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 791.107488][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 791.120091][ T32] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 791.120124][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.144571][ T5598] usb 7-1: USB disconnect, device number 3 [ 791.166623][ T32] usb 6-1: config 0 descriptor?? [ 791.393216][ T32] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 791.405991][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 791.408864][ T32] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 791.408920][ T32] usb 6-1: media controller created [ 791.463413][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 791.506963][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 791.608482][ T32] az6027: usb out operation failed. (-71) [ 791.615386][ T32] az6027: usb out operation failed. (-71) [ 791.615407][ T32] stb0899_attach: Driver disabled by Kconfig [ 791.615417][ T32] az6027: no front-end attached [ 791.615417][ T32] [ 791.616764][ T32] az6027: usb out operation failed. (-71) [ 791.616783][ T32] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 791.627363][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input79 [ 791.647278][ T32] dvb-usb: schedule remote query interval to 400 msecs. [ 791.647303][ T32] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 791.666697][ T32] usb 6-1: USB disconnect, device number 111 [ 791.668920][T19868] FAULT_INJECTION: forcing a failure. [ 791.668920][T19868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.668956][T19868] CPU: 1 UID: 0 PID: 19868 Comm: syz.1.4943 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 791.668983][T19868] Tainted: [L]=SOFTLOCKUP [ 791.668991][T19868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 791.669002][T19868] Call Trace: [ 791.669011][T19868] [ 791.669019][T19868] dump_stack_lvl+0xe8/0x150 [ 791.669049][T19868] should_fail_ex+0x46b/0x600 [ 791.669078][T19868] _copy_from_user+0x2d/0xb0 [ 791.669106][T19868] ___sys_sendmsg+0x1c6/0x360 [ 791.669133][T19868] ? __lock_acquire+0x6b5/0x2d10 [ 791.669157][T19868] ? __pfx____sys_sendmsg+0x10/0x10 [ 791.669215][T19868] ? __fget_files+0x2a/0x420 [ 791.669236][T19868] ? __fget_files+0x3a6/0x420 [ 791.669267][T19868] __x64_sys_sendmsg+0x1c3/0x2a0 [ 791.669296][T19868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 791.669331][T19868] ? __pfx_ksys_write+0x10/0x10 [ 791.669372][T19868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.669393][T19868] do_syscall_64+0x15f/0xf80 [ 791.669489][T19868] ? trace_irq_disable+0x3b/0x140 [ 791.669516][T19868] ? clear_bhb_loop+0x40/0x90 [ 791.669550][T19868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.669569][T19868] RIP: 0033:0x7fe30317cdd9 [ 791.669589][T19868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.669605][T19868] RSP: 002b:00007fe3013d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.669627][T19868] RAX: ffffffffffffffda RBX: 00007fe3033f5fa0 RCX: 00007fe30317cdd9 [ 791.669642][T19868] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 791.669654][T19868] RBP: 00007fe3013d6090 R08: 0000000000000000 R09: 0000000000000000 [ 791.669666][T19868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.669678][T19868] R13: 00007fe3033f6038 R14: 00007fe3033f5fa0 R15: 00007fff8249e318 [ 791.669708][T19868] [ 791.772895][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 791.815790][ T9] usb 3-1: config 4 has an invalid interface number: 57 but max is 0 [ 791.815822][ T9] usb 3-1: config 4 has no interface number 0 [ 791.815857][ T9] usb 3-1: config 4 interface 57 has no altsetting 0 [ 791.943544][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=5a.ce [ 791.943578][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.943598][ T9] usb 3-1: Product: syz [ 791.943613][ T9] usb 3-1: Manufacturer: syz [ 791.943628][ T9] usb 3-1: SerialNumber: syz [ 792.185618][ T32] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 792.295177][T19859] netlink: 'syz.2.4941': attribute type 21 has an invalid length. [ 792.295288][T19859] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4941'. [ 792.304846][ T5709] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 792.397778][ T9] quatech2 3-1:4.57: Quatech 2nd gen USB to Serial Driver converter detected [ 792.398299][ T9] usb 3-1: qt2_attach - failed to power on unit: -71 [ 792.398437][ T9] quatech2 3-1:4.57: probe with driver quatech2 failed with error -71 [ 792.431655][ T9] usb 3-1: USB disconnect, device number 94 [ 792.482998][ T5709] usb 7-1: Using ep0 maxpacket: 16 [ 792.483873][ T5709] usb 7-1: too many configurations: 97, using maximum allowed: 8 [ 792.491474][ T5709] usb 7-1: config 0 has no interfaces? [ 792.509650][ T5709] usb 7-1: config 0 has no interfaces? [ 792.510908][ T5709] usb 7-1: config 0 has no interfaces? [ 792.513262][ T5709] usb 7-1: config 0 has no interfaces? [ 792.514501][ T5709] usb 7-1: config 0 has no interfaces? [ 792.516217][ T5709] usb 7-1: config 0 has no interfaces? [ 792.520763][ T5709] usb 7-1: config 0 has no interfaces? [ 792.528757][ T5709] usb 7-1: config 0 has no interfaces? [ 792.671572][ T5709] usb 7-1: string descriptor 0 read error: -71 [ 792.671706][ T5709] usb 7-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 792.671721][ T5709] usb 7-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 792.831203][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4948'. [ 792.833768][ T5709] usb 7-1: config 0 descriptor?? [ 792.834263][ T5709] usb 7-1: can't set config #0, error -71 [ 792.850151][ T5709] usb 7-1: USB disconnect, device number 4 [ 793.998889][T19915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4957'. [ 794.016147][T19916] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4956'. [ 794.031290][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 794.480111][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4960'. [ 794.795356][ T32] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 794.956642][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 794.957774][ T32] usb 3-1: too many configurations: 97, using maximum allowed: 8 [ 794.960328][ T32] usb 3-1: config 0 has no interfaces? [ 794.962537][ T32] usb 3-1: config 0 has no interfaces? [ 794.967132][ T32] usb 3-1: config 0 has no interfaces? [ 794.996846][ T32] usb 3-1: config 0 has no interfaces? [ 795.018465][ T32] usb 3-1: config 0 has no interfaces? [ 795.031324][ T32] usb 3-1: config 0 has no interfaces? [ 795.036564][ T32] usb 3-1: config 0 has no interfaces? [ 795.044203][ T32] usb 3-1: config 0 has no interfaces? [ 795.078749][ T32] usb 3-1: string descriptor 0 read error: -71 [ 795.078920][ T32] usb 3-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 795.078946][ T32] usb 3-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 795.111851][ T32] usb 3-1: config 0 descriptor?? [ 795.116163][ T32] usb 3-1: can't set config #0, error -71 [ 795.133921][ T32] usb 3-1: USB disconnect, device number 95 [ 795.180319][T19955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4969'. [ 795.310129][T19959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4970'. [ 795.310513][ T212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 795.514859][T19959] hsr_slave_0 (unregistering): left promiscuous mode [ 795.551792][T19964] netlink: 'syz.1.4972': attribute type 10 has an invalid length. [ 795.551818][T19964] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4972'. [ 795.925423][T19974] FAULT_INJECTION: forcing a failure. [ 795.925423][T19974] name failslab, interval 1, probability 0, space 0, times 0 [ 795.925464][T19974] CPU: 0 UID: 0 PID: 19974 Comm: syz.5.4975 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 795.925494][T19974] Tainted: [L]=SOFTLOCKUP [ 795.925502][T19974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 795.925514][T19974] Call Trace: [ 795.925523][T19974] [ 795.925533][T19974] dump_stack_lvl+0xe8/0x150 [ 795.925564][T19974] should_fail_ex+0x46b/0x600 [ 795.925599][T19974] should_failslab+0xa8/0x100 [ 795.925632][T19974] kmem_cache_alloc_noprof+0x87/0x680 [ 795.925670][T19974] ? skb_clone+0x212/0x3a0 [ 795.925707][T19974] skb_clone+0x212/0x3a0 [ 795.925743][T19974] __netlink_deliver_tap+0x424/0x8b0 [ 795.925787][T19974] ? netlink_deliver_tap+0x2e/0x1b0 [ 795.925819][T19974] netlink_deliver_tap+0x19c/0x1b0 [ 795.925850][T19974] netlink_unicast+0x754/0x920 [ 795.925890][T19974] netlink_sendmsg+0x813/0xb40 [ 795.925930][T19974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.925963][T19974] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 795.926009][T19974] ? aa_sock_msg_perm+0x122/0x200 [ 795.926042][T19974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.926071][T19974] sock_sendmsg_nosec+0x112/0x150 [ 795.926099][T19974] ____sys_sendmsg+0x55c/0x870 [ 795.926136][T19974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 795.926178][T19974] ? import_iovec+0x73/0xa0 [ 795.926215][T19974] ___sys_sendmsg+0x2a5/0x360 [ 795.926245][T19974] ? __lock_acquire+0x6b5/0x2d10 [ 795.926273][T19974] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.926343][T19974] ? __fget_files+0x2a/0x420 [ 795.926368][T19974] ? __fget_files+0x3a6/0x420 [ 795.926404][T19974] __x64_sys_sendmsg+0x1c3/0x2a0 [ 795.926437][T19974] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 795.926479][T19974] ? __pfx_ksys_write+0x10/0x10 [ 795.926542][T19974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.926566][T19974] do_syscall_64+0x15f/0xf80 [ 795.926587][T19974] ? trace_irq_disable+0x3b/0x140 [ 795.926618][T19974] ? clear_bhb_loop+0x40/0x90 [ 795.926653][T19974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.926674][T19974] RIP: 0033:0x7fabdeddcdd9 [ 795.926695][T19974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.926713][T19974] RSP: 002b:00007fabdd036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.926737][T19974] RAX: ffffffffffffffda RBX: 00007fabdf055fa0 RCX: 00007fabdeddcdd9 [ 795.926753][T19974] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 795.926767][T19974] RBP: 00007fabdd036090 R08: 0000000000000000 R09: 0000000000000000 [ 795.926780][T19974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.926794][T19974] R13: 00007fabdf056038 R14: 00007fabdf055fa0 R15: 00007fff4766f498 [ 795.926829][T19974] [ 796.306073][ T5709] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 796.421260][ T32] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 796.509031][ T5709] usb 7-1: Using ep0 maxpacket: 8 [ 796.513425][ T5709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.513462][ T5709] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 796.513507][ T5709] usb 7-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 796.513531][ T5709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.521910][ T5709] usb 7-1: config 0 descriptor?? [ 796.625633][ T32] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 796.625665][ T32] usb 2-1: config 0 has no interface number 0 [ 796.633161][ T32] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 796.633632][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.633658][ T32] usb 2-1: Product: syz [ 796.633674][ T32] usb 2-1: Manufacturer: syz [ 796.633688][ T32] usb 2-1: SerialNumber: syz [ 796.735594][ T32] usb 2-1: config 0 descriptor?? [ 796.956445][ T32] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 797.025944][T19979] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4977'. [ 797.026028][T19979] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4977'. [ 797.103910][ T32] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 797.104351][ T32] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 797.105262][ T32] usb 2-1: media controller created [ 797.131232][T14989] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 797.260098][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 797.286397][T14989] usb 6-1: Using ep0 maxpacket: 16 [ 797.287503][T14989] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 797.289257][T14989] usb 6-1: config 0 has no interfaces? [ 797.291339][T14989] usb 6-1: config 0 has no interfaces? [ 797.293338][T14989] usb 6-1: config 0 has no interfaces? [ 797.295140][T14989] usb 6-1: config 0 has no interfaces? [ 797.338622][T14989] usb 6-1: config 0 has no interfaces? [ 797.355312][T14989] usb 6-1: config 0 has no interfaces? [ 797.356945][T14989] usb 6-1: config 0 has no interfaces? [ 797.360912][T14989] usb 6-1: config 0 has no interfaces? [ 797.384890][T14989] usb 6-1: string descriptor 0 read error: -71 [ 797.385079][T14989] usb 6-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 797.385103][T14989] usb 6-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 797.442347][T14989] usb 6-1: config 0 descriptor?? [ 797.444280][T14989] usb 6-1: can't set config #0, error -71 [ 797.464240][T14989] usb 6-1: USB disconnect, device number 112 [ 797.544225][ T5709] usbhid 7-1:0.0: can't add hid device: -71 [ 797.544376][ T5709] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 797.586969][ T5709] usb 7-1: USB disconnect, device number 5 [ 798.018848][T20008] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_1, syncid = 0, id = 0 [ 798.097306][ T9] usb 2-1: USB disconnect, device number 51 [ 799.001254][ T5709] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 799.126828][ T32] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 799.157318][T10318] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 799.195093][ T5709] usb 7-1: unable to get BOS descriptor or descriptor too short [ 799.197119][ T5709] usb 7-1: too many endpoints for config 1 interface 0 altsetting 16: 32, using maximum allowed: 30 [ 799.197255][ T5709] usb 7-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 32 [ 799.197278][ T5709] usb 7-1: config 1 interface 0 has no altsetting 0 [ 799.258172][ T5709] usb 7-1: string descriptor 0 read error: -22 [ 799.258289][ T5709] usb 7-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 799.258304][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.308004][ T32] usb 6-1: Using ep0 maxpacket: 16 [ 799.309593][ T32] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 799.312088][ T32] usb 6-1: config 0 has no interfaces? [ 799.314061][ T32] usb 6-1: config 0 has no interfaces? [ 799.319301][ T32] usb 6-1: config 0 has no interfaces? [ 799.338923][T10318] usb 2-1: Using ep0 maxpacket: 8 [ 799.362292][ T32] usb 6-1: config 0 has no interfaces? [ 799.363957][ T32] usb 6-1: config 0 has no interfaces? [ 799.368156][ T32] usb 6-1: config 0 has no interfaces? [ 799.369449][T10318] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 7 [ 799.370018][ T32] usb 6-1: config 0 has no interfaces? [ 799.374968][ T32] usb 6-1: config 0 has no interfaces? [ 799.377592][T10318] usb 2-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 799.377618][T10318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.377708][T10318] usb 2-1: Product: syz [ 799.377723][T10318] usb 2-1: Manufacturer: syz [ 799.377736][T10318] usb 2-1: SerialNumber: syz [ 799.472032][T10318] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 799.486678][ T32] usb 6-1: string descriptor 0 read error: -71 [ 799.486979][ T32] usb 6-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 799.487002][ T32] usb 6-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 799.527068][ T32] usb 6-1: config 0 descriptor?? [ 799.532099][ T32] usb 6-1: can't set config #0, error -71 [ 799.547874][ T32] usb 6-1: USB disconnect, device number 113 [ 799.560606][T10318] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 799.596784][T10318] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 799.599896][T10318] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 799.632151][T10318] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 799.963387][ T5709] usbhid 7-1:1.0: can't add hid device: -71 [ 799.963478][ T5709] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 799.985880][ T5709] usb 7-1: USB disconnect, device number 6 [ 800.004699][T10318] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 800.020052][T10318] usb 2-1: USB disconnect, device number 52 [ 800.063881][ T6359] udevd[6359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 800.080174][ T212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 800.194233][ T5598] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 800.354585][ T5598] usb 3-1: Using ep0 maxpacket: 16 [ 800.361343][ T5598] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 800.361376][ T5598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.361395][ T5598] usb 3-1: Product: syz [ 800.361409][ T5598] usb 3-1: Manufacturer: syz [ 800.361421][ T5598] usb 3-1: SerialNumber: syz [ 800.412693][ T5598] usb 3-1: config 0 descriptor?? [ 800.417889][ T5598] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 800.649339][T20048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.654006][T20048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.715125][T20048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.731642][T20048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.748969][ T5598] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 800.858808][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 801.278236][T10318] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 801.349003][ T5598] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 801.445023][T10318] usb 7-1: Using ep0 maxpacket: 32 [ 801.460911][T10318] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 801.460941][T10318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.469169][T10318] usb 7-1: config 0 descriptor?? [ 801.519874][ T5598] usb 2-1: Using ep0 maxpacket: 16 [ 801.520823][ T5598] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 801.522792][ T5598] usb 2-1: config 0 has no interfaces? [ 801.524431][ T5598] usb 2-1: config 0 has no interfaces? [ 801.525605][ T5598] usb 2-1: config 0 has no interfaces? [ 801.527299][ T5598] usb 2-1: config 0 has no interfaces? [ 801.528938][ T5598] usb 2-1: config 0 has no interfaces? [ 801.561520][ T5598] usb 2-1: config 0 has no interfaces? [ 801.589153][ T5598] usb 2-1: config 0 has no interfaces? [ 801.591977][ T5598] usb 2-1: config 0 has no interfaces? [ 801.608903][ T5598] usb 2-1: string descriptor 0 read error: -71 [ 801.609079][ T5598] usb 2-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 801.609106][ T5598] usb 2-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 801.633702][ T5598] usb 2-1: config 0 descriptor?? [ 801.646595][ T5598] usb 2-1: can't set config #0, error -71 [ 801.660806][ T5598] usb 2-1: USB disconnect, device number 53 [ 801.737968][T10318] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 801.754466][T10318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 801.768287][T10318] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 801.768376][T10318] usb 7-1: media controller created [ 801.834042][T10318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 801.942381][T20087] FAULT_INJECTION: forcing a failure. [ 801.942381][T20087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.942420][T20087] CPU: 0 UID: 0 PID: 20087 Comm: syz.5.5012 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 801.942449][T20087] Tainted: [L]=SOFTLOCKUP [ 801.942456][T20087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 801.942469][T20087] Call Trace: [ 801.942477][T20087] [ 801.942486][T20087] dump_stack_lvl+0xe8/0x150 [ 801.942516][T20087] should_fail_ex+0x46b/0x600 [ 801.942594][T20087] _copy_to_user+0x31/0xb0 [ 801.942629][T20087] simple_read_from_buffer+0xe1/0x170 [ 801.942661][T20087] proc_fail_nth_read+0x1be/0x230 [ 801.942696][T20087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.942726][T20087] ? rw_verify_area+0x2ac/0x4e0 [ 801.942752][T20087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.942778][T20087] vfs_read+0x212/0xa80 [ 801.942813][T20087] ? __pfx_vfs_read+0x10/0x10 [ 801.942843][T20087] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 801.942874][T20087] ? lockdep_hardirqs_on+0x7a/0x110 [ 801.942905][T20087] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 801.942937][T20087] ? mutex_lock_nested+0x152/0x1d0 [ 801.942962][T20087] ? fdget_pos+0x252/0x320 [ 801.942998][T20087] ksys_read+0x156/0x270 [ 801.943028][T20087] ? __pfx_ksys_read+0x10/0x10 [ 801.943066][T20087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.943089][T20087] do_syscall_64+0x15f/0xf80 [ 801.943107][T20087] ? trace_irq_disable+0x3b/0x140 [ 801.943136][T20087] ? clear_bhb_loop+0x40/0x90 [ 801.943163][T20087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.943183][T20087] RIP: 0033:0x7fabded9d60e [ 801.943201][T20087] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 801.943219][T20087] RSP: 002b:00007fabdd035fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 801.943242][T20087] RAX: ffffffffffffffda RBX: 00007fabdd0366c0 RCX: 00007fabded9d60e [ 801.943258][T20087] RDX: 000000000000000f RSI: 00007fabdd0360a0 RDI: 0000000000000005 [ 801.943271][T20087] RBP: 00007fabdd036090 R08: 0000000000000000 R09: 0000000000000000 [ 801.943284][T20087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 801.943296][T20087] R13: 00007fabdf056038 R14: 00007fabdf055fa0 R15: 00007fff4766f498 [ 801.943332][T20087] [ 801.999277][T10318] az6027: usb out operation failed. (-71) [ 802.003063][T10318] az6027: usb out operation failed. (-71) [ 802.003086][T10318] stb0899_attach: Driver disabled by Kconfig [ 802.003097][T10318] az6027: no front-end attached [ 802.003097][T10318] [ 802.003787][T10318] az6027: usb out operation failed. (-71) [ 802.003806][T10318] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 802.057818][T10318] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input80 [ 802.207678][T10318] dvb-usb: schedule remote query interval to 400 msecs. [ 802.207712][T10318] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 802.246770][T10318] usb 7-1: USB disconnect, device number 7 [ 802.559093][T10318] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 803.086972][T20110] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5018'. [ 803.217930][T10318] usb 3-1: USB disconnect, device number 96 [ 803.712582][ T32] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 803.768064][T20127] binder: 20123:20127 ioctl c0306201 200000000640 returned -22 [ 803.769680][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.769741][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.769857][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.769921][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.769975][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.770028][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.770082][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.770141][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.770574][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.770677][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.770736][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.770815][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.770871][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.770927][T20127] binder: 20123:20127 ioctl 4020ae46 7f9683784fc0 returned -22 [ 803.875340][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 803.876471][ T32] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 803.878111][ T32] usb 2-1: config 0 has no interfaces? [ 803.880301][ T32] usb 2-1: config 0 has no interfaces? [ 803.882023][ T32] usb 2-1: config 0 has no interfaces? [ 803.895986][ T32] usb 2-1: config 0 has no interfaces? [ 803.902110][ T32] usb 2-1: config 0 has no interfaces? [ 803.904519][ T32] usb 2-1: config 0 has no interfaces? [ 803.906107][ T32] usb 2-1: config 0 has no interfaces? [ 803.907635][ T32] usb 2-1: config 0 has no interfaces? [ 803.926269][ T32] usb 2-1: string descriptor 0 read error: -71 [ 803.926416][ T32] usb 2-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 803.926439][ T32] usb 2-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 803.966643][ T32] usb 2-1: config 0 descriptor?? [ 803.968941][ T32] usb 2-1: can't set config #0, error -71 [ 803.978137][ T32] usb 2-1: USB disconnect, device number 54 [ 805.030327][T20149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5031'. [ 805.541740][ T37] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 805.699770][ T37] usb 7-1: Using ep0 maxpacket: 16 [ 805.702509][ T37] usb 7-1: too many configurations: 97, using maximum allowed: 8 [ 805.704550][ T37] usb 7-1: config 0 has no interfaces? [ 805.706235][ T37] usb 7-1: config 0 has no interfaces? [ 805.713941][ T37] usb 7-1: config 0 has no interfaces? [ 805.715637][ T37] usb 7-1: config 0 has no interfaces? [ 805.719748][ T37] usb 7-1: config 0 has no interfaces? [ 805.773370][ T37] usb 7-1: config 0 has no interfaces? [ 805.777370][ T37] usb 7-1: config 0 has no interfaces? [ 805.787973][ T37] usb 7-1: config 0 has no interfaces? [ 805.801212][ T37] usb 7-1: string descriptor 0 read error: -71 [ 805.801364][ T37] usb 7-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 805.801387][ T37] usb 7-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 805.845607][ T37] usb 7-1: config 0 descriptor?? [ 805.847084][ T37] usb 7-1: can't set config #0, error -71 [ 805.872324][ T37] usb 7-1: USB disconnect, device number 8 [ 806.048325][T20168] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5038'. [ 806.236818][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 806.555684][ T37] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 806.715508][ T37] usb 2-1: Using ep0 maxpacket: 8 [ 806.723015][ T37] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 806.723091][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.723108][ T37] usb 2-1: Product: syz [ 806.723117][ T37] usb 2-1: Manufacturer: syz [ 806.723126][ T37] usb 2-1: SerialNumber: syz [ 806.736945][ T37] usb 2-1: config 0 descriptor?? [ 806.773519][ T37] gspca_main: se401-2.14.0 probing 047d:5003 [ 806.855536][ T5342] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 806.932876][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 807.014771][ T5342] usb 7-1: Using ep0 maxpacket: 32 [ 807.018336][ T5342] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 807.018368][ T5342] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.029981][ T5342] usb 7-1: config 0 descriptor?? [ 807.222422][ T37] gspca_se401: ExtraFeatures: 255 [ 807.222442][ T37] gspca_se401: Too many frame sizes [ 807.277371][ T5342] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 807.288507][ T5342] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 807.296872][ T5342] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 807.296929][ T5342] usb 7-1: media controller created [ 807.349706][ T5342] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 807.445389][T20176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.450198][T20176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.516419][ T5342] az6027: usb out operation failed. (-71) [ 807.516895][ T5342] az6027: usb out operation failed. (-71) [ 807.516911][ T5342] stb0899_attach: Driver disabled by Kconfig [ 807.516923][ T5342] az6027: no front-end attached [ 807.516923][ T5342] [ 807.544769][ T5342] az6027: usb out operation failed. (-71) [ 807.544792][ T5342] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 807.609304][ T5342] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input81 [ 807.621243][ T5342] dvb-usb: schedule remote query interval to 400 msecs. [ 807.621292][ T5342] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 807.704854][T20197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.711779][T20197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.713954][ T5342] usb 7-1: USB disconnect, device number 9 [ 807.726150][T14989] usb 2-1: USB disconnect, device number 55 [ 807.907133][ T5342] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 808.212135][ T5598] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 808.352553][T20216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5058'. [ 808.372837][ T5598] usb 3-1: Using ep0 maxpacket: 8 [ 808.381646][ T5598] usb 3-1: config 143 has an invalid interface number: 102 but max is 0 [ 808.381667][ T5598] usb 3-1: config 143 has no interface number 0 [ 808.381695][ T5598] usb 3-1: config 143 interface 102 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 808.381712][ T5598] usb 3-1: config 143 interface 102 has no altsetting 0 [ 808.394337][ T5598] usb 3-1: New USB device found, idVendor=2955, idProduct=1003, bcdDevice=59.11 [ 808.394370][ T5598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.394389][ T5598] usb 3-1: Product: Ἅ䷀귧鮿᧬椄᥂왷꺛莒㈫•㏌餀䦋嶝픩ស⃌ꊕ㶷鰋鏩፮⌒䡎ﯹ쑆댦噉꿝掆ṗ뻳䏬쥷⿲刉귃␊엫늄긆慬꛺䎯빗뙡⼽贊ྎ뇸ꮡ꣘覕站ᙾ줬↳͓儵㇕涇܆᱙鮇㴟䲵ᣢ䄡㩳㥈ꩭ跸ࠉ櫾ӭｼ붐낥惸㰑躧贰礤盧똯阃㭸蚒榈杆뚀ᐣ뇤㯖￡ [ 808.394418][ T5598] usb 3-1: Manufacturer: 핓鵄筰火踢滨⭡៍᭞䳆뚬엋⦺Ŵ纊૞簥鳐ⓚ弱陳咪볓屙ุꬭ枧額픠㏐ά㫬ײ䎸垕냨邊⶷獿⦭ɘ藗Ꭴ굪葊髕擠䊞➘몉㔇뇔찁决瘂朤ꍜ畉懇灣咜谄쿧뒻뎆髤㈗⣢礬 [ 808.394442][ T5598] usb 3-1: SerialNumber: syz [ 808.492032][T20209] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5055'. [ 808.497746][T20209] Invalid ELF header type: 18833 != 1 [ 808.674566][ T5598] usb 3-1: USB disconnect, device number 97 [ 808.966949][T20229] FAULT_INJECTION: forcing a failure. [ 808.966949][T20229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.966976][T20229] CPU: 1 UID: 0 PID: 20229 Comm: syz.5.5063 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 808.966994][T20229] Tainted: [L]=SOFTLOCKUP [ 808.966999][T20229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 808.967006][T20229] Call Trace: [ 808.967012][T20229] [ 808.967017][T20229] dump_stack_lvl+0xe8/0x150 [ 808.967036][T20229] should_fail_ex+0x46b/0x600 [ 808.967054][T20229] _copy_from_user+0x2d/0xb0 [ 808.967072][T20229] ___sys_sendmsg+0x1c6/0x360 [ 808.967090][T20229] ? __lock_acquire+0x6b5/0x2d10 [ 808.967105][T20229] ? __pfx____sys_sendmsg+0x10/0x10 [ 808.967139][T20229] ? __fget_files+0x2a/0x420 [ 808.967154][T20229] ? __fget_files+0x3a6/0x420 [ 808.967173][T20229] __x64_sys_sendmsg+0x1c3/0x2a0 [ 808.967191][T20229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 808.967220][T20229] ? __pfx_ksys_write+0x10/0x10 [ 808.967241][T20229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.967254][T20229] do_syscall_64+0x15f/0xf80 [ 808.967265][T20229] ? trace_irq_disable+0x3b/0x140 [ 808.967281][T20229] ? clear_bhb_loop+0x40/0x90 [ 808.967295][T20229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.967306][T20229] RIP: 0033:0x7fabdeddcdd9 [ 808.967319][T20229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.967330][T20229] RSP: 002b:00007fabdd036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.967344][T20229] RAX: ffffffffffffffda RBX: 00007fabdf055fa0 RCX: 00007fabdeddcdd9 [ 808.967353][T20229] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 808.967361][T20229] RBP: 00007fabdd036090 R08: 0000000000000000 R09: 0000000000000000 [ 808.967368][T20229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.967376][T20229] R13: 00007fabdf056038 R14: 00007fabdf055fa0 R15: 00007fff4766f498 [ 808.967393][T20229] [ 809.195815][ T37] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 809.249138][T10318] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 809.360951][ T37] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 809.360984][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.361004][ T37] usb 2-1: Product: syz [ 809.361017][ T37] usb 2-1: Manufacturer: syz [ 809.361026][ T37] usb 2-1: SerialNumber: syz [ 809.365311][ T37] usb 2-1: config 0 descriptor?? [ 809.430913][T10318] usb 7-1: Using ep0 maxpacket: 8 [ 809.433074][T10318] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.433195][T10318] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 809.433212][T10318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.439835][T10318] usb 7-1: config 0 descriptor?? [ 809.492986][T10318] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 809.527362][T14989] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 809.548840][ T32] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 809.582416][ T37] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 809.687506][T14989] usb 6-1: Using ep0 maxpacket: 8 [ 809.690808][T14989] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.690862][T14989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 809.690885][T14989] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 809.690912][T14989] usb 6-1: config 0 interface 0 has no altsetting 0 [ 809.734733][T14989] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 809.734765][T14989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.734784][T14989] usb 6-1: Product: syz [ 809.734800][T14989] usb 6-1: Manufacturer: syz [ 809.734815][T14989] usb 6-1: SerialNumber: syz [ 809.745215][T14989] usb 6-1: config 0 descriptor?? [ 809.761582][T14989] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 809.764306][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 809.790153][ T32] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 809.790267][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.818237][T20223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.821826][T20223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.823063][ T32] usb 3-1: config 0 descriptor?? [ 809.861462][T20223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.880091][T20223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.983084][T14989] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 809.983469][T14989] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 809.992397][T14989] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 810.077659][ T32] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 810.145121][ T32] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 810.145154][ T32] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 810.378707][T10318] gspca_vc032x: reg_r err -71 [ 810.378866][T10318] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 810.449552][T10318] usb 7-1: USB disconnect, device number 10 [ 810.745198][T14989] usb 6-1: USB disconnect, device number 114 [ 810.815513][ T37] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 810.838661][ T37] usb 2-1: USB disconnect, device number 56 [ 811.601410][ T5342] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 811.721972][T20259] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5071'. [ 811.762402][ T5342] usb 6-1: Using ep0 maxpacket: 32 [ 811.764497][ T5342] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 811.764529][ T5342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.771597][ T5342] usb 6-1: config 0 descriptor?? [ 811.921864][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 811.967716][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5072'. [ 812.043300][T20263] FAULT_INJECTION: forcing a failure. [ 812.043300][T20263] name failslab, interval 1, probability 0, space 0, times 0 [ 812.043341][T20263] CPU: 1 UID: 0 PID: 20263 Comm: syz.6.5073 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 812.043369][T20263] Tainted: [L]=SOFTLOCKUP [ 812.043377][T20263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 812.043388][T20263] Call Trace: [ 812.043397][T20263] [ 812.043405][T20263] dump_stack_lvl+0xe8/0x150 [ 812.043435][T20263] should_fail_ex+0x46b/0x600 [ 812.043465][T20263] should_failslab+0xa8/0x100 [ 812.043506][T20263] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 812.043535][T20263] ? __alloc_skb+0x1d0/0x7d0 [ 812.043559][T20263] ? lockdep_hardirqs_on+0x7a/0x110 [ 812.043595][T20263] __alloc_skb+0x1d0/0x7d0 [ 812.043625][T20263] netlink_sendmsg+0x5d4/0xb40 [ 812.043663][T20263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.043695][T20263] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 812.043730][T20263] ? aa_sock_msg_perm+0x122/0x200 [ 812.043761][T20263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.043788][T20263] sock_sendmsg_nosec+0x112/0x150 [ 812.043812][T20263] ____sys_sendmsg+0x55c/0x870 [ 812.043847][T20263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.043886][T20263] ? import_iovec+0x73/0xa0 [ 812.043919][T20263] ___sys_sendmsg+0x2a5/0x360 [ 812.043945][T20263] ? __lock_acquire+0x6b5/0x2d10 [ 812.043970][T20263] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.044031][T20263] ? __fget_files+0x2a/0x420 [ 812.044063][T20263] ? __fget_files+0x3a6/0x420 [ 812.044097][T20263] __x64_sys_sendmsg+0x1c3/0x2a0 [ 812.044132][T20263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 812.044172][T20263] ? __pfx_ksys_write+0x10/0x10 [ 812.044210][T20263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.044234][T20263] do_syscall_64+0x15f/0xf80 [ 812.044253][T20263] ? trace_irq_disable+0x3b/0x140 [ 812.044283][T20263] ? clear_bhb_loop+0x40/0x90 [ 812.044309][T20263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.044330][T20263] RIP: 0033:0x7f968554cdd9 [ 812.044350][T20263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.044369][T20263] RSP: 002b:00007f96837a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.044391][T20263] RAX: ffffffffffffffda RBX: 00007f96857c5fa0 RCX: 00007f968554cdd9 [ 812.044406][T20263] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 812.044419][T20263] RBP: 00007f96837a6090 R08: 0000000000000000 R09: 0000000000000000 [ 812.044433][T20263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.044443][T20263] R13: 00007f96857c6038 R14: 00007f96857c5fa0 R15: 00007ffca4ee25a8 [ 812.044472][T20263] [ 812.046085][ T5342] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 812.084650][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 812.087346][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.097010][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.129666][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 812.129697][ T9] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 812.129716][ T9] usb 2-1: Product: syz [ 812.129729][ T9] usb 2-1: Manufacturer: syz [ 812.129743][ T9] usb 2-1: SerialNumber: syz [ 812.157217][ T9] usb 2-1: config 0 descriptor?? [ 812.211203][ T5342] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 812.222230][ T5342] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 812.222388][ T5342] usb 6-1: media controller created [ 812.228632][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 812.472688][ T5342] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 812.474270][T20251] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5070'. [ 812.550983][ T1493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 812.623363][ T5342] az6027: usb out operation failed. (-71) [ 812.631378][ T5342] az6027: usb out operation failed. (-71) [ 812.631407][ T5342] stb0899_attach: Driver disabled by Kconfig [ 812.631416][ T5342] az6027: no front-end attached [ 812.631416][ T5342] [ 812.645795][ T5342] az6027: usb out operation failed. (-71) [ 812.645816][ T5342] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 812.687209][ T5342] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input82 [ 812.711277][ T5342] dvb-usb: schedule remote query interval to 400 msecs. [ 812.711306][ T5342] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 812.758254][ T5342] usb 6-1: USB disconnect, device number 115 [ 812.961540][ T72] usb 2-1: Failed to submit usb control message: -71 [ 812.961584][ T72] usb 2-1: unable to send the bmi data to the device: -71 [ 812.961604][ T72] usb 2-1: unable to get target info from device [ 812.961621][ T72] usb 2-1: could not get target info (-71) [ 812.961640][ T72] usb 2-1: could not probe fw (-71) [ 812.963167][ T37] usb 2-1: USB disconnect, device number 57 [ 813.131122][ T44] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 813.240488][T20275] sctp: [Deprecated]: syz.5.5077 (pid 20275) Use of int in maxseg socket option. [ 813.240488][T20275] Use struct sctp_assoc_value instead [ 813.291142][ T5342] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 813.488872][T20279] overlayfs: failed to resolve './file1': -2 [ 813.613371][T20274] vxfs: unable to read disk superblock at 1 [ 813.646138][T20282] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5080'. [ 813.709221][T20274] vxfs: unable to read disk superblock at 8 [ 813.709250][T20274] vxfs: can't find superblock. [ 814.173659][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5087'. [ 814.625188][T20317] FAULT_INJECTION: forcing a failure. [ 814.625188][T20317] name failslab, interval 1, probability 0, space 0, times 0 [ 814.625231][T20317] CPU: 1 UID: 0 PID: 20317 Comm: syz.5.5092 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 814.625262][T20317] Tainted: [L]=SOFTLOCKUP [ 814.625270][T20317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 814.625292][T20317] Call Trace: [ 814.625300][T20317] [ 814.625309][T20317] dump_stack_lvl+0xe8/0x150 [ 814.625343][T20317] should_fail_ex+0x46b/0x600 [ 814.625378][T20317] should_failslab+0xa8/0x100 [ 814.625408][T20317] __kmalloc_noprof+0xdf/0x7b0 [ 814.625434][T20317] ? kfree+0x4d/0x6c0 [ 814.625458][T20317] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 814.625497][T20317] tomoyo_realpath_from_path+0xe3/0x5d0 [ 814.625531][T20317] ? tomoyo_domain+0xd7/0x130 [ 814.625558][T20317] ? tomoyo_path_number_perm+0x219/0x630 [ 814.625587][T20317] tomoyo_path_number_perm+0x246/0x630 [ 814.625619][T20317] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 814.625645][T20317] ? __lock_acquire+0x6b5/0x2d10 [ 814.625671][T20317] ? do_raw_spin_lock+0x12b/0x2f0 [ 814.625734][T20317] ? __fget_files+0x2a/0x420 [ 814.625764][T20317] ? __fget_files+0x2a/0x420 [ 814.625787][T20317] ? __fget_files+0x3a6/0x420 [ 814.625811][T20317] ? __fget_files+0x2a/0x420 [ 814.625845][T20317] security_file_ioctl+0xc3/0x2a0 [ 814.625874][T20317] __se_sys_ioctl+0x47/0x170 [ 814.625904][T20317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.625927][T20317] do_syscall_64+0x15f/0xf80 [ 814.625946][T20317] ? trace_irq_disable+0x3b/0x140 [ 814.625975][T20317] ? clear_bhb_loop+0x40/0x90 [ 814.626000][T20317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.626021][T20317] RIP: 0033:0x7fabdeddcdd9 [ 814.626042][T20317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.626059][T20317] RSP: 002b:00007fabdd036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.626083][T20317] RAX: ffffffffffffffda RBX: 00007fabdf055fa0 RCX: 00007fabdeddcdd9 [ 814.626099][T20317] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 814.626113][T20317] RBP: 00007fabdd036090 R08: 0000000000000000 R09: 0000000000000000 [ 814.626126][T20317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.626140][T20317] R13: 00007fabdf056038 R14: 00007fabdf055fa0 R15: 00007fff4766f498 [ 814.626187][T20317] [ 814.647998][T20317] ERROR: Out of memory at tomoyo_realpath_from_path. [ 815.095085][T20331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5098'. [ 815.133632][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.133818][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.139585][ T37] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 815.167975][T20334] netlink: 'syz.1.5097': attribute type 21 has an invalid length. [ 815.168104][T20334] netlink: 'syz.1.5097': attribute type 1 has an invalid length. [ 815.305640][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.305679][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.305721][ T37] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 815.305746][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.353999][ T37] usb 6-1: config 0 descriptor?? [ 815.765401][T20349] FAULT_INJECTION: forcing a failure. [ 815.765401][T20349] name failslab, interval 1, probability 0, space 0, times 0 [ 815.765455][T20349] CPU: 0 UID: 0 PID: 20349 Comm: syz.1.5105 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 815.765485][T20349] Tainted: [L]=SOFTLOCKUP [ 815.765493][T20349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 815.765506][T20349] Call Trace: [ 815.765515][T20349] [ 815.765526][T20349] dump_stack_lvl+0xe8/0x150 [ 815.765558][T20349] should_fail_ex+0x46b/0x600 [ 815.765591][T20349] should_failslab+0xa8/0x100 [ 815.765625][T20349] __kmalloc_noprof+0xdf/0x7b0 [ 815.765655][T20349] ? tomoyo_encode+0x28b/0x550 [ 815.765691][T20349] tomoyo_encode+0x28b/0x550 [ 815.765729][T20349] tomoyo_realpath_from_path+0x58d/0x5d0 [ 815.765765][T20349] ? tomoyo_domain+0xd7/0x130 [ 815.765794][T20349] ? tomoyo_path_number_perm+0x219/0x630 [ 815.765828][T20349] tomoyo_path_number_perm+0x246/0x630 [ 815.765858][T20349] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 815.765884][T20349] ? __lock_acquire+0x6b5/0x2d10 [ 815.765916][T20349] ? do_raw_spin_lock+0x12b/0x2f0 [ 815.765982][T20349] ? __fget_files+0x2a/0x420 [ 815.766010][T20349] ? __fget_files+0x2a/0x420 [ 815.766033][T20349] ? __fget_files+0x3a6/0x420 [ 815.766056][T20349] ? __fget_files+0x2a/0x420 [ 815.766085][T20349] security_file_ioctl+0xc3/0x2a0 [ 815.766116][T20349] __se_sys_ioctl+0x47/0x170 [ 815.766148][T20349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.766173][T20349] do_syscall_64+0x15f/0xf80 [ 815.766192][T20349] ? trace_irq_disable+0x3b/0x140 [ 815.766222][T20349] ? clear_bhb_loop+0x40/0x90 [ 815.766248][T20349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.766271][T20349] RIP: 0033:0x7fe30317cdd9 [ 815.766293][T20349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.766313][T20349] RSP: 002b:00007fe3013d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 815.766337][T20349] RAX: ffffffffffffffda RBX: 00007fe3033f5fa0 RCX: 00007fe30317cdd9 [ 815.766352][T20349] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 815.766365][T20349] RBP: 00007fe3013d6090 R08: 0000000000000000 R09: 0000000000000000 [ 815.766378][T20349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.766390][T20349] R13: 00007fe3033f6038 R14: 00007fe3033f5fa0 R15: 00007fff8249e318 [ 815.766424][T20349] [ 815.766589][T20349] ERROR: Out of memory at tomoyo_realpath_from_path. [ 816.529642][ T37] hid-led 0003:27B8:01ED.001E: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 816.855319][ T37] hid-led 0003:27B8:01ED.001E: ThingM blink(1) initialized [ 817.192468][ T5342] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 817.302550][T20372] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5111'. [ 817.304799][T20373] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5111'. [ 817.354608][ T5342] usb 2-1: Using ep0 maxpacket: 8 [ 817.365661][ T5342] usb 2-1: unable to get BOS descriptor or descriptor too short [ 817.366914][ T5342] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 817.366943][ T5342] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 817.366962][ T5342] usb 2-1: config 4 has no interface number 0 [ 817.369335][ T5342] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 817.369363][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.369384][ T5342] usb 2-1: Product: syz [ 817.369400][ T5342] usb 2-1: Manufacturer: syz [ 817.369416][ T5342] usb 2-1: SerialNumber: syz [ 817.645245][T20370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.646330][T20370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.702788][ T5342] uvcvideo 2-1:4.147: Found multiple Units with ID 6 [ 817.702858][ T5342] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 817.703008][ T5342] uvcvideo 2-1:4.147: No streaming interface found for terminal 32774. [ 817.750669][ T5342] usb 2-1: USB disconnect, device number 58 [ 817.952560][ T212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 818.139534][ T37] usb 6-1: USB disconnect, device number 116 [ 818.614168][ T5342] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 818.623508][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5119'. [ 818.774421][ T5342] usb 2-1: Using ep0 maxpacket: 32 [ 818.779735][ T5342] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 818.779766][ T5342] usb 2-1: config 0 has no interface number 0 [ 818.783895][ T5342] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 818.783949][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.783970][ T5342] usb 2-1: Product: syz [ 818.783986][ T5342] usb 2-1: Manufacturer: syz [ 818.784002][ T5342] usb 2-1: SerialNumber: syz [ 818.868185][ T5342] usb 2-1: config 0 descriptor?? [ 818.893324][ T5342] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 819.020737][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 819.196140][ T5342] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 819.243677][ T833] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 819.252217][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 819.285367][ T9] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 819.285398][ T9] usb 7-1: config 0 has no interface number 0 [ 819.286039][ T5342] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 819.340471][ T9] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 819.340582][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.340605][ T9] usb 7-1: Product: syz [ 819.340619][ T9] usb 7-1: Manufacturer: syz [ 819.340634][ T9] usb 7-1: SerialNumber: syz [ 819.465232][ T9] usb 7-1: config 0 descriptor?? [ 819.488761][ T9] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 819.810680][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 819.867229][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 819.904170][ C0] quatech-serial ttyUSB2: qt2_process_read_urb - status message too short [ 820.123400][T20416] Process accounting resumed [ 820.742801][T20426] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5127'. [ 821.114359][T20434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5130'. [ 821.281787][T20436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5131'. [ 821.570251][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 821.601182][T10318] usb 2-1: USB disconnect, device number 59 [ 821.635982][T10318] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 821.690424][T10318] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 821.705838][T10318] quatech2 2-1:0.51: device disconnected [ 821.861291][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 821.864556][T14989] usb 7-1: USB disconnect, device number 11 [ 821.883247][T14989] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 821.902185][T14989] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 821.913625][T14989] quatech2 7-1:0.51: device disconnected [ 822.301920][T20463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5141'. [ 822.395239][T20459] loop5: detected capacity change from 0 to 7 [ 822.406743][T20459] Dev loop5: unable to read RDB block 7 [ 822.406794][T20459] loop5: unable to read partition table [ 822.407033][T20459] loop5: partition table beyond EOD, truncated [ 822.407070][T20459] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 822.430802][T10318] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 822.493015][ T6359] __loop_clr_fd(loop5) clearing lo_backing_file (refcnt=0x0) [ 822.593162][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5142'. [ 822.903575][T14989] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 823.065157][T14989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.065194][T14989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.065219][T14989] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 823.065233][T14989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.069167][T14989] usb 2-1: config 0 descriptor?? [ 823.275198][ T5709] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 823.337648][T20491] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5153'. [ 823.368868][ T212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 823.462473][ T5709] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 823.462505][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.462524][ T5709] usb 7-1: Product: syz [ 823.462538][ T5709] usb 7-1: Manufacturer: syz [ 823.462551][ T5709] usb 7-1: SerialNumber: syz [ 823.588313][T14989] hid-led 0003:1D34:000A.001F: unbalanced collection at end of report description [ 823.593950][T14989] hid-led 0003:1D34:000A.001F: probe with driver hid-led failed with error -22 [ 823.723395][T20472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5144'. [ 823.756803][T20477] openvswitch: netlink: Actions may not be safe on all matching packets [ 823.759556][T14989] usb 2-1: USB disconnect, device number 60 [ 824.048946][ T5709] rtl8150 7-1:1.0: couldn't reset the device [ 824.049455][ T5709] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 824.092653][ T5709] usb 7-1: USB disconnect, device number 12 [ 824.164071][T20502] netlink: 'syz.2.5157': attribute type 21 has an invalid length. [ 824.164760][T20502] netlink: 'syz.2.5157': attribute type 21 has an invalid length. [ 824.165771][T20502] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5157'. [ 824.381504][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5160'. [ 824.645686][ T212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.835638][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 824.988505][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 824.993177][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 825.010456][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 825.017985][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 825.019766][ T5709] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 825.276704][ T5709] usb 7-1: Using ep0 maxpacket: 16 [ 825.277752][ T5709] usb 7-1: too many configurations: 97, using maximum allowed: 8 [ 825.279267][ T5709] usb 7-1: config 0 has no interfaces? [ 825.280683][ T5709] usb 7-1: config 0 has no interfaces? [ 825.281924][ T5709] usb 7-1: config 0 has no interfaces? [ 825.329517][ T5709] usb 7-1: config 0 has no interfaces? [ 825.348302][ T5709] usb 7-1: config 0 has no interfaces? [ 825.362902][ T5709] usb 7-1: config 0 has no interfaces? [ 825.366625][ T5709] usb 7-1: config 0 has no interfaces? [ 825.367746][ T5709] usb 7-1: config 0 has no interfaces? [ 825.434266][ T5709] usb 7-1: string descriptor 0 read error: -71 [ 825.434422][ T5709] usb 7-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 825.434445][ T5709] usb 7-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 825.468689][ T5709] usb 7-1: config 0 descriptor?? [ 825.474620][ T5709] usb 7-1: can't set config #0, error -71 [ 825.507065][ T5709] usb 7-1: USB disconnect, device number 13 [ 826.325812][T20540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5171'. [ 826.749770][ T5709] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 826.955938][ T5709] usb 7-1: unable to get BOS descriptor or descriptor too short [ 826.958876][ T5709] usb 7-1: too many endpoints for config 1 interface 0 altsetting 16: 32, using maximum allowed: 30 [ 826.958931][ T5709] usb 7-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 32 [ 826.958961][ T5709] usb 7-1: config 1 interface 0 has no altsetting 0 [ 826.976032][ T5709] usb 7-1: string descriptor 0 read error: -22 [ 826.976223][ T5709] usb 7-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 826.976251][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.530200][ T60] Bluetooth: hci2: command tx timeout [ 827.613631][ T5709] hid_parser_main: 3646 callbacks suppressed [ 827.613659][ T5709] glorious 0003:22D4:1503.0020: unknown main item tag 0x0 [ 827.613694][ T5709] glorious 0003:22D4:1503.0020: unknown main item tag 0x0 [ 827.613719][ T5709] glorious 0003:22D4:1503.0020: unknown main item tag 0x0 [ 827.613742][ T5709] glorious 0003:22D4:1503.0020: unknown main item tag 0x0 [ 827.613766][ T5709] glorious 0003:22D4:1503.0020: unknown main item tag 0x0 [ 827.613789][ T5709] glorious 0003:22D4:1503.0020: unknown main item tag 0x0 [ 827.613813][ T5709] glorious 0003:22D4:1503.0020: unknown main item tag 0x0 [ 827.613838][ T5709] glorious 0003:22D4:1503.0020: unknown main item tag 0x0 [ 827.613864][ T5709] glorious 0003:22D4:1503.0020: unknown main item tag 0x0 [ 827.613891][ T5709] glorious 0003:22D4:1503.0020: unknown main item tag 0x0 [ 827.788190][ T5709] glorious 0003:22D4:1503.0020: hidraw0: USB HID vff.7d Device [Glorious Model I] on usb-dummy_hcd.6-1/input0 [ 827.814300][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5177'. [ 827.853946][ T5709] usb 7-1: USB disconnect, device number 14 [ 827.969751][T20562] fido_id[20562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 828.420850][T20576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5181'. [ 828.483014][T13031] bond0: (slave syz_tun): Releasing backup interface [ 828.876231][T20512] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.884540][T20512] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.884900][T20512] bridge_slave_0: entered allmulticast mode [ 828.902350][T20512] bridge_slave_0: entered promiscuous mode [ 828.933741][T20512] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.934190][T20512] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.934534][T20512] bridge_slave_1: entered allmulticast mode [ 828.941259][T14989] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 828.945618][T20512] bridge_slave_1: entered promiscuous mode [ 829.025342][T20512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.045925][T20512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.101624][T14989] usb 7-1: Using ep0 maxpacket: 32 [ 829.105765][T14989] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 829.105799][T14989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.145604][T14989] usb 7-1: config 0 descriptor?? [ 829.236176][T20512] team0: Port device team_slave_0 added [ 829.315854][T20512] team0: Port device team_slave_1 added [ 829.383833][T14989] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 829.406419][T14989] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 829.407648][T14989] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 829.407710][T14989] usb 7-1: media controller created [ 829.489226][T14989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 829.507016][ T833] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 829.614865][T14989] az6027: usb out operation failed. (-71) [ 829.616817][T14989] az6027: usb out operation failed. (-71) [ 829.616836][T14989] stb0899_attach: Driver disabled by Kconfig [ 829.616847][T14989] az6027: no front-end attached [ 829.616847][T14989] [ 829.619174][T14989] az6027: usb out operation failed. (-71) [ 829.619191][T14989] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 829.663370][T14989] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input83 [ 829.680540][T14989] dvb-usb: schedule remote query interval to 400 msecs. [ 829.680565][T14989] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 829.696251][T20512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.696270][T20512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.696297][T20512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.719987][T20512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.720005][T20512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.720031][T20512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.739392][T14989] usb 7-1: USB disconnect, device number 15 [ 829.754097][ T60] Bluetooth: hci2: command tx timeout [ 829.994717][T14989] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 830.096576][T20512] hsr_slave_0: entered promiscuous mode [ 830.099840][T20512] hsr_slave_1: entered promiscuous mode [ 830.101739][T20512] debugfs: 'hsr0' already exists in 'hsr' [ 830.101766][T20512] Cannot create hsr debugfs directory [ 830.149308][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 830.239164][T20618] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5198'. [ 830.321339][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 830.323020][ T9] usb 2-1: config 86 has an invalid interface number: 76 but max is 0 [ 830.323050][ T9] usb 2-1: config 86 has an invalid descriptor of length 152, skipping remainder of the config [ 830.323072][ T9] usb 2-1: config 86 has no interface number 0 [ 830.323126][ T9] usb 2-1: config 86 interface 76 has no altsetting 0 [ 830.326980][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice=44.b5 [ 830.327022][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.327044][ T9] usb 2-1: Product: syz [ 830.327060][ T9] usb 2-1: Manufacturer: syz [ 830.327076][ T9] usb 2-1: SerialNumber: syz [ 830.605601][T20616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.606332][T20616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.703786][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:86.76/input/input84 [ 830.718196][ T4961] bcm5974 2-1:86.76: could not read from device [ 830.747964][ T9] usb 2-1: USB disconnect, device number 61 [ 830.924708][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 831.341508][T20512] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.874408][ T37] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 831.998963][ T60] Bluetooth: hci2: command tx timeout [ 832.032172][T20512] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.052370][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 832.054518][ T37] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 832.054562][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.057818][ T37] usb 2-1: config 0 descriptor?? [ 832.303298][ T37] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 832.306235][ T37] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 832.325331][ T37] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 832.325373][ T37] usb 2-1: media controller created [ 832.357384][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 832.602893][ T37] az6027: usb out operation failed. (-71) [ 832.636490][ T37] az6027: usb out operation failed. (-71) [ 832.636514][ T37] stb0899_attach: Driver disabled by Kconfig [ 832.636524][ T37] az6027: no front-end attached [ 832.636524][ T37] [ 832.637279][ T37] az6027: usb out operation failed. (-71) [ 832.637300][ T37] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 832.681526][ T37] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input85 [ 832.694819][T20512] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.717222][ T37] dvb-usb: schedule remote query interval to 400 msecs. [ 832.717248][ T37] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 832.744771][ T37] usb 2-1: USB disconnect, device number 62 [ 832.888460][ T37] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 832.959896][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5208'. [ 833.164996][T20648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5211'. [ 833.585001][T20512] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.214443][ T60] Bluetooth: hci2: command tx timeout [ 834.455133][T20670] ================================================================== [ 834.455151][T20670] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 834.455182][T20670] Write of size 1280 at addr ffffc90003e5bb40 by task vivid-000-vid-c/20670 [ 834.455198][T20670] [ 834.455211][T20670] CPU: 1 UID: 0 PID: 20670 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 834.455236][T20670] Tainted: [L]=SOFTLOCKUP [ 834.455242][T20670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 834.455252][T20670] Call Trace: [ 834.455260][T20670] [ 834.455268][T20670] dump_stack_lvl+0xe8/0x150 [ 834.455290][T20670] print_address_description+0x55/0x1e0 [ 834.455311][T20670] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 834.455331][T20670] print_report+0x58/0x70 [ 834.455349][T20670] kasan_report+0x117/0x150 [ 834.455373][T20670] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 834.455396][T20670] kasan_ch[ 834.455396][T20670] kasan_check_range+0x264/0x2c0 [ 834.455417][T20670] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 834.455436][T20670] __asan_memcpy+0x40/0x70 [ 834.455455][T20670] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 834.455505][T20670] vivid_thread_vid_cap_tick+0x1020/0x5fe0 [ 834.455536][T20670] ? __lock_acquire+0x6b5/0x2d10 [ 834.455558][T20670] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 834.455584][T20670] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 834.455604][T20670] ? vivid_thread_vid_cap+0x4a3/0x11c0 [ 834.455626][T20670] ? _mutex_trylock_nest_lock+0x128/0x180 [ 834.455647][T20670] ? vivid_thread_vid_cap+0x4a3/0x11c0 [ 834.455664][T20670] vivid_thread_vid_cap+0x91b/0x11c0 [ 834.455691][T20670] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 834.455706][T20670] ? rt_mutex_slowunlock+0x1cb/0x300 [ 834.455727][T20670] ? do_raw_spin_lock+0x12b/0x2f0 [ 834.455748][T20670] ? lock_acquire+0x106/0x350 [ 834.455768][T20670] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 834.455791][T20670] ? __kthread_parkme+0x7a/0x1f0 [ 834.455816][T20670] kthread+0x388/0x470 [ 834.455832][T20670] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 834.455855][T20670] ? __pfx_kthread+0x10/0x10 [ 834.455875][T20670] ret_from_fork+0x514/0xb70 [ 834.455895][T20670] ? __pfx_ret_from_fork+0x10/0x10 [ 834.455912][T20670] ? __switch_to+0xc79/0x1410 [ 834.455936][T20670] ? __pfx_kthread+0x10/0x10 [ 834.455962][T20670] ret_from_fork_asm+0x1a/0x30 [ 834.455996][T20670] [ 834.456003][T20670] [ 834.456007][T20670] The buggy address belongs to a 3-page vmalloc region starting at 0xffffc90003e59000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 834.456050][T20670] The buggy address belongs to the physical page: [ 834.456059][T20670] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88803d4be400 pfn:0x3d4be [ 834.456076][T20670] flags: 0x80000000000000(node=0|zone=1) [ 834.456098][T20670] raw: 0080000000000000 0000000000000000 dead000000000122 0000000000000000 [ 834.456112][T20670] raw: ffff88803d4be400 0000000000000000 00000001ffffffff 0000000000000000 [ 834.456121][T20670] page dumped because: kasan: bad access detected [ 834.456129][T20670] page_owner tracks the page as allocated [ 834.456136][T20670] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 20669, tgid 20668 (syz.6.5217), ts 834405480091, free_ts 834405301747 [ 834.456165][T20670] post_alloc_hook+0x1f9/0x250 [ 834.456184][T20670] get_page_from_freelist+0x27d6/0x2850 [ 834.456206][T20670] __alloc_frozen_pages_noprof+0x18d/0x380 [ 834.456295][T20670] __alloc_pages_noprof+0x10/0x100 [ 834.456323][T20670] alloc_pages_bulk_noprof+0x67e/0x890 [ 834.456346][T20670] alloc_pages_bulk_mempolicy_noprof+0x438/0x16e0 [ 834.456370][T20670] __vmalloc_node_range_noprof+0xad1/0x1750 [ 834.456391][T20670] vmalloc_user_noprof+0xad/0xe0 [ 834.456409][T20670] vb2_vmalloc_alloc+0xef/0x360 [ 834.456428][T20670] __vb2_queue_alloc+0x9c5/0x15a0 [ 834.456446][T20670] vb2_core_reqbufs+0xc1f/0x1410 [ 834.456463][T20670] __vb2_init_fileio+0x318/0xff0 [ 834.456483][T20670] vb2_core_poll+0x4c1/0x830 [ 834.456501][T20670] vb2_fop_poll+0x199/0x310 [ 834.456520][T20670] v4l2_poll+0x14a/0x2c0 [ 834.456540][T20670] do_sys_poll+0x92e/0xf50 [ 834.456556][T20670] page last free pid 20669 tgid 20668 stack trace: [ 834.456568][T20670] __free_frozen_pages+0x1075/0x11b0 [ 834.456587][T20670] __kasan_populate_vmalloc+0x1b2/0x1d0 [ 834.456605][T20670] alloc_vmap_area+0xd47/0x1480 [ 834.456623][T20670] __get_vm_area_node+0x226/0x350 [ 834.456640][T20670] __vmalloc_node_range_noprof+0x36a/0x1750 [ 834.456659][T20670] vmalloc_user_noprof+0xad/0xe0 [ 834.456678][T20670] vb2_vmalloc_alloc+0xef/0x360 [ 834.456697][T20670] __vb2_queue_alloc+0x9c5/0x15a0 [ 834.456715][T20670] vb2_core_reqbufs+0xc1f/0x1410 [ 834.456733][T20670] __vb2_init_fileio+0x318/0xff0 [ 834.456753][T20670] vb2_core_poll+0x4c1/0x830 [ 834.456772][T20670] vb2_fop_poll+0x199/0x310 [ 834.456790][T20670] v4l2_poll+0x14a/0x2c0 [ 834.456808][T20670] do_sys_poll+0x92e/0xf50 [ 834.456823][T20670] __se_sys_ppoll+0x209/0x2b0 [ 834.456854][T20670] do_syscall_64+0x15f/0xf80 [ 834.456870][T20670] [ 834.456875][T20670] Memory state around the buggy address: [ 834.456886][T20670] ffffc90003e5bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 834.456899][T20670] ffffc90003e5bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 834.456911][T20670] >ffffc90003e5c000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 834.456920][T20670] ^ [ 834.456941][T20670] ffffc90003e5c080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 834.456953][T20670] ffffc90003e5c100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 834.456961][T20670] ================================================================== [ 834.569336][T20670] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 834.569361][T20670] CPU: 1 UID: 0 PID: 20670 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 834.569388][T20670] Tainted: [L]=SOFTLOCKUP [ 834.569395][T20670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 834.569405][T20670] Call Trace: [ 834.569412][T20670] [ 834.569420][T20670] vpanic+0x56c/0xa60 [ 834.569450][T20670] ? __pfx_vpanic+0x10/0x10 [ 834.569472][T20670] ? __pfx___schedule+0x10/0x10 [ 834.569499][T20670] panic+0xc5/0xd0 [ 834.569520][T20670] ? __pfx_panic+0x10/0x10 [ 834.569543][T20670] ? preempt_schedule_common+0x82/0xd0 [ 834.569568][T20670] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 834.569587][T20670] check_panic_on_warn+0x89/0xb0 [ 834.569606][T20670] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 834.569625][T20670] end_report+0x73/0x170 [ 834.569646][T20670] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 834.569665][T20670] kasan_report+0x128/0x150 [ 834.569688][T20670] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 834.569710][T20670] kasan_check_range+0x264/0x2c0 [ 834.569732][T20670] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 834.569752][T20670] __asan_memcpy+0x40/0x70 [ 834.569770][T20670] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 834.569818][T20670] vivid_thread_vid_cap_tick+0x1020/0x5fe0 [ 834.569849][T20670] ? __lock_acquire+0x6b5/0x2d10 [ 834.569870][T20670] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 834.569895][T20670] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 834.569914][T20670] ? vivid_thread_vid_cap+0x4a3/0x11c0 [ 834.569945][T20670] ? _mutex_trylock_nest_lock+0x128/0x180 [ 834.569964][T20670] ? vivid_thread_vid_cap+0x4a3/0x11c0 [ 834.569982][T20670] vivid_thread_vid_cap+0x91b/0x11c0 [ 834.570013][T20670] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 834.570031][T20670] ? rt_mutex_slowunlock+0x1cb/0x300 [ 834.570051][T20670] ? do_raw_spin_lock+0x12b/0x2f0 [ 834.570071][T20670] ? lock_acquire+0x106/0x350 [ 834.570090][T20670] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 834.570113][T20670] ? __kthread_parkme+0x7a/0x1f0 [ 834.570138][T20670] kthread+0x388/0x470 [ 834.570154][T20670] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 834.570169][T20670] ? __pfx_kthread+0x10/0x10 [ 834.570185][T20670] ret_from_fork+0x514/0xb70 [ 834.570205][T20670] ? __pfx_ret_from_fork+0x10/0x10 [ 834.570222][T20670] ? __switch_to+0xc79/0x1410 [ 834.570246][T20670] ? __pfx_kthread+0x10/0x10 [ 834.570262][T20670] ret_from_fork_asm+0x1a/0x30 [ 834.570289][T20670] [ 834.573753][T20670] Kernel Offset: disabled