last executing test programs: 5.626665343s ago: executing program 1 (id=257): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x64}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) syz_usb_connect(0x1, 0x80, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ce0ab50801222c01e03f0000000109021b00014000000109041300016172d100090502"], 0x0) 5.53264566s ago: executing program 3 (id=258): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xd18}}, './file0\x00'}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x200201, 0xa, 0x2, 0x0, 0x3}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xcbe, 0xa, 0x2, 0x0, 0x7f}) 5.400856756s ago: executing program 3 (id=259): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0xffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x68, &(0x7f00000004c0)=[@in6={0xa, 0x4e20, 0xa07, @private2, 0x60}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xb}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mount$9p_fd(0x0, 0x0, 0x0, 0x8802, &(0x7f0000000600)=ANY=[@ANYBLOB=',w', @ANYRESHEX]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 4.764529945s ago: executing program 3 (id=263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) (async) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004011) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) (async, rerun: 64) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d01}]}) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x6, 0x40002) read$snddsp(r8, &(0x7f00000000c0)=""/65, 0x41) (async) r9 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_linger(r9, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x4}, 0x8) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x480902, 0x0) ioctl$DRM_IOCTL_GET_STATS(r10, 0x80f86406, &(0x7f0000000240)=""/159) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x400000b2, 0x0, 0x40004000}]}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) 4.497061455s ago: executing program 3 (id=266): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x89}, 0x14) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 4.427174248s ago: executing program 1 (id=267): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100), 0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x3, 0x4) 4.371558648s ago: executing program 1 (id=268): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) (async) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={@mcast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x20, 0x10}}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={@mcast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x20, 0x10}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000050000030800010004000002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x25, 0xe, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x1, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8a, 0x8, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0xa, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x5, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x10000, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x90009427, &(0x7f0000000180)) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x90009427, &(0x7f0000000180)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000740)={0x0}) socket$igmp(0x2, 0x3, 0x2) (async) r8 = socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) (async) r9 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x6, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f00000000c0)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f00000001c0)=r7) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000000a80)={@val={0x0, 0x88f8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x1, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x1, 0x0, 0x1}, {0x5d8e, 0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x8}], @ipv6=@generic={0x0, 0x6, "e3214f", 0x419, 0x3c, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@fragment={0x2, 0x0, 0x1, 0x0, 0x0, 0x4, 0x65}, @hopopts={0x16, 0x8, '\x00', [@hao={0xc9, 0x10, @empty}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0xfc, 0x4, [0x1, 0x0]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x4, 0x12, 0x4, 0x9, 0x3, 0x50, 0x6, [@dev={0xfe, 0x80, '\x00', 0x3e}, @empty, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}, @routing={0x1d, 0xe, 0x1, 0x4, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x11}, @empty]}, @routing={0x5e, 0x2, 0x1, 0x7b, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x3b, 0x6, 0x0, 0x8, 0x0, [@mcast2, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x3b, 0x30, '\x00', [@generic={0x3, 0x9e, "095af909154978af416b15f28a7937e61678dfa77f288e8dc899bb77cc569259a10038a04ee60aff01000060c3326cd9119e23ad6f1daa91c400000000ffffffff0158c2efeea5e4f5ab04c91dfd58fac6150f972740e0afec6f0a422c68eab0ebeca8ef0744f873cdbc090d67d82acca1f0fda811201d93e9c1d72471908e27ad702263d3e13c308801f4f501ae7d14b876fe310470a56f41fe577673cd"}, @generic={0x6, 0x98, "9681202b20bcae2b8094077394151e70e8fc417b8beb23b01bf1fd2a9210e7510d19817ee8f3ce7ca3598c4e85470988b430b501cd170c1ad30cc7440825a3c4f6da1f2b8a5f556db0158d6fcd2236f85eab6f5f5423cec9ea6bbcbb4ac25e3adf53a1fa4b3b26408e768c8ec247a303efe1f025c6fda4ab5acc54059ce7bce16d667e3a2b35fd4dd8142f076bc35e7fc9852d453c270718"}, @calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x8000, [0x6, 0x0, 0x7, 0x4]}}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x9}, @jumbo, @ra={0x5, 0x2, 0x1}]}], "86a2fa7638f8e451f79c1f916d8c56ef6b455cfce3b88eb314da326e71b390dff05b5b74f82e1f97a732d7c6469386d90ecaac2fc2a390e572d43cd1125d9016eacf0f91a4e03dbc4a1eee11f6145ab847365eb383d8680523593e89f101b8de98a1d352d9514df1d03c83f6c229e8a63d7622bcd2aaba865f40ea18d153bcfb8a88468148d76ec976fdd28865cb34f8223c84a1a91c30c9d3f1aa31b56efeaaa2b599272731a7d2ca34ab1e1a13d9dcd901661551ca53fe57b4ef64bf3563bc51ace84a801051175b54a95b6f33e8f9ef"}}}}}}}, 0x473) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c57596", 0xf}, {&(0x7f0000000180)="000002", 0x3}], 0x2) (async) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c57596", 0xf}, {&(0x7f0000000180)="000002", 0x3}], 0x2) 4.219263537s ago: executing program 2 (id=271): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r0, r2, 0x80000) r4 = socket$inet6(0xa, 0x6, 0x3) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r3, 0x3ff, 0x56, &(0x7f0000000040)="35a4f92de76d9260027ea29f16c9f00ea898a3170c53a0321dfeb04d82dbd6fc3444fe0431d7577de69c212ad8ed4995ef540f4bc62472c00dfa64de1a16c82490d921a489ad7aaa575da6084c00d854fdcb4bd6395f", 0x4, 0x7f, 0x0, 0x8, 0xfff, 0x2, 0x2, 'syz1\x00'}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000180)={0x2, @pix={0xf316, 0x1, 0x30314247, 0x9, 0xffff8001, 0x0, 0x9, 0x3, 0x0, 0x7, 0x2, 0x6}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000280)=0x7, 0x8) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000002c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x9, 0xf, 0x1, 0x5, "55786f07a68e9c9be75d30c8bffbd080db43cf1155f1f16fc3ce6676fe2b555861a47963646c19ae80b81e5b4210c442d1e5c2aa2a2792f343792ed5456f1ef055723545925bebd433fa6514e733e255fee846e8edbc12b51323249280d6c9ba4eeaf86299bcf68f4fba8882cbef81cac5dca0e282d0b3729f990eceee7e8d80"}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000380)=0xfffffe01, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0x0, @local}, 0x10) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000000440)=""/82) sendmsg(r4, &(0x7f00000008c0)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x3, 0x3, 0x3, {0xa, 0x4e22, 0xfffffff0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)="3cac1005fb3befb2ef3ad047a7b3e6a41dc82dd1d37b7d83984dafa9fe35bc94b9a2e015c4a569c4c54aa77f93c9ebd64502e66eab6c7f026544fa5d8acc82fff7348af67a216d7e95abf52bc0e34b88324ce60bf637a985bfb07c0eece5254b9be2252be032ac84ca7c3c0d9d1d91b5409c81b58494ff7869d017da060b32600d9ca35abba0c9a0cf4ca0b39c17c6cfb8a476f08cb48ba0b858c8e4122e9aba06f645c8d350cb31334fc252ca08430bb27e49670f36a41d54f1590f8a64d2f541f3ae95d4c8180ebfa0fc4b50a56db67e57bcd8f3474baf", 0xd8}, {&(0x7f0000000640)="2e392c9f273c09589c6d389735e10c432ff4e17a1ca26aee9a355b060c2ee843a2dad7b2865c382752a5f8f4faf50b45e434fed099e7587730c7ae9368ce24dd9736aba3372e82d24d874b1e3728b2308ee019ca128d0211aff1bfde8dca0d21303daadab8acd86cbd66dee645f85a44a786d703be566b899cb2fb86795842275b32b0f87a7a40b2b6e8925c17db381f83b47a81c132f813eeebdc032c5f0d4c4d638f0f00790e03f8b4b0ea58da0e4a7b", 0xb1}, {&(0x7f0000000700)="e1e0c6bbfe9ccb640c71b40f4bddc4a9ba1232d24c36fbd37bf52b8e0d766e196fee015c59", 0x25}], 0x3, &(0x7f0000000780)=[{0xf0, 0x119, 0x46, "e7e5005e6b3fe9bca9465a6245fb7c3160c349e2d49c41dece2159df5617658ac772d5cc8a98d5ef74e4e7cf48921b9c6d3b8dcce16bb2bc99deef6fb98ecfcde0aca7ac66651eaba984426cd558fa5bbfe0f546652a88f8eab1c73a433f43b98f06a26e7a64ab4df41de0510b8a340864b2fda56aadb2e3396866adb94c45ac78c04a81e9bd56e677f7a4c4718d49be42745af74fbbe034c5bdaf3f6a677084d7a1ad75b42989ce0e18551643a81186326615f4658be11eb8710f3b63130dd79454a1c876068de0174e6554025f7dae6534b3509dd46bd447c1731c"}, {0x40, 0x110, 0xedc0, "4cdc06f93dc883df81922b71397bf29cb9b452132c3c8c5c8bfd9d6d2a34c8d03c5b95a08b2771e75e"}], 0x130}, 0x80) connect$can_bcm(r5, &(0x7f0000000900), 0x10) r6 = accept4$inet6(r5, &(0x7f0000000940)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000980)=0x1c, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x23, &(0x7f00000009c0)=0x7, 0x4) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000a00)={0x1, 0x475503c7, 0x1}) connect$vsock_stream(r1, &(0x7f0000000a40)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000a80), &(0x7f0000000ac0)) tee(r0, r3, 0xb8b, 0x5) r7 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r1, 0x24, &(0x7f0000000b00)={0x1, 0x2, 0xffffffffffffffff, 0xffffffff, r7}) pipe2$9p(&(0x7f0000000bc0)={0xffffffffffffffff}, 0x100800) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000c00), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x1000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@noextend}, {@access_any}, {@aname={'aname', 0x3d, '\\\'-}-),@^)'}}], [{@fowner_eq={'fowner', 0x3d, r10}}, {@fsname={'fsname', 0x3d, '!'}}, {@pcr={'pcr', 0x3d, 0x32}}]}}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000d40)={0x3, 0x3c, 0x4, {0xc, @raw_data="ddcdc9c94a656a7785b4233e97e776c727af2b34df89d808b501965359f7f59fd0ac7dd37a8b8d8ac5facf9bd6db9b273ed5d984e045dfb4dd5b035a0ecd1d5a4bcef608ec597952299e303de983223abfe2f4cc282b7eaec230b6789f772d5f57e742c8678b1641af5b8aeb30f924df10de1c38cbc4aed12bd63de66f2e3fe18d70d45de8ac6aad5f05afc100ba3d966db958fff198cad2db292cd415e646fd748bacdc0ce34e461ad60ad3f2ebee08fb4c2eed3cae10ee57ee7c55fc821e9c1e6fa5fa79f32e52"}, 0x6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r8, 0x8010671f, &(0x7f0000000f80)={&(0x7f0000000e80)=""/197, 0xc5}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001000)=[@text16={0x10, &(0x7f0000000fc0)="3e6436660f38345168660fc733660ffe42540f01c28163002f00f30f7f7f643e0fc76300ba4000ec660f3a16360f000d0f3803b7d017", 0x36}], 0x1, 0x21, &(0x7f0000001040)=[@cstype3={0x5, 0xd}, @dstype3={0x7, 0xf}], 0x2) 4.076915522s ago: executing program 2 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000006442, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x3f, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, r0, 0x0, 0xfe00}]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYBLOB="240600001a0001002abd7000000000000a00fc003a2a5e247b00000008061b800106dc"], 0x624}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 3.972000325s ago: executing program 2 (id=273): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x21, &(0x7f00000001c0)=[{0x38, '\x00', @st={0x4, [{0x301658cfa32ba94, @uvalue=0x9}, {0x1, @uvalue=0xe25}, {0x0, @svalue=0x4}, {0x0, @svalue=0xedee13c}]}, 0xb4d}]}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}}]}, 0x50}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES8=0x0], 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0xfefffffa, 0x165400) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x40840) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000280)={0x5, 0xca95, 0x4, 0x4, 0x10, 0xf13, "5ff7f2a2d59279c13bd7f166a3ff16e2", 0x8, 0x3, 0x8, 0x2, 0xd, 0x4, 0x8}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140a, 0x2, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008010}, 0x1) 3.930464794s ago: executing program 3 (id=274): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e23, 0x1, @private2, 0xe}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="02cb80a717", 0x5}], 0x1}, 0x4000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x587b, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x6}], 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x8, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) dup(r3) socket$netlink(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r7) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x30314247}}) 3.401932423s ago: executing program 1 (id=276): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x28}) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x3, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x1426c00, 0xfffffb9a, 0xfffffffc, 0x4, 0xeffffffb, 0x4, 0x3, 0x5, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x3, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x3, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xb, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffd, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x1f2, 0x7fff, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100ffdd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x8, 0x763, 0xb, 0x402, 0x4800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x8000, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000001c0)) (async) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20101b000000b12192f09c819ed7755e76d3efa4dab21b00000000000000000000f1cbbc9e10a05e916071a55cd17d9dbb41d0acfd3c887c47c1f7d50536e5405c1131fda8ee7310884b17475285db50cb4c40f75a918596b438e74caee3923cdb03ec657702ef6ac08f0b02a8d6207cc31b56e50681089c516846be160d0b2c793241ced185dc9afbc6bed8133b093e50244d0cf1166be774605e3b7371eb030ea4c313d20f05b88191d062fe65261d7010b927312e4a53031dd203ff39f3847acef6fff83d1af862322a685e982782b38637d074ff3927c84b4bc643f88d052fc1c7c255249cc67054869553e2"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x341, 0x0, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x6b, 0x0, 0xa, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, {[@generic={0x94, 0xc, "74141141c1e93e03fc23"}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x11, "727c983251ed15de07ec8a9ae94d31"}, {0x6, 0x3, "ee"}, {0x2, 0x2}]}]}}}}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1100"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x804) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) (async) unshare(0x22020600) (async, rerun: 32) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async, rerun: 64) setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64) socket$kcm(0x2d, 0x6, 0x0) (async) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0) (async, rerun: 32) r8 = syz_open_dev$media(&(0x7f0000000040), 0x8000000000000001, 0x400) (rerun: 32) close(r8) 2.859036023s ago: executing program 3 (id=282): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="cdffc0868482db8d09fb48be495008f45ea36568ac187db39fd5c5094f70379f8d6df3ccce01857e27bb7c67ddbd00586e8a110683", @ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0xb0, 0x0, 0x3, [{{0x3, 0x2, 0xf8a, 0x10, 0xe, 0x8, {0x6, 0xfffffffffffffffc, 0x1, 0x8, 0x3, 0xfff, 0xfffffffe, 0x77, 0x4, 0xa000, 0x400, r3, r4, 0x72d9, 0x4}}, {0x0, 0x2, 0x2, 0x3ff, 'fd'}}]}, 0x0, 0x0, 0x0}) (async) getdents64(r5, 0x0, 0x0) (async) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000001c0)={0x2f, 0x4, 0x0, {0x1, 0x2, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0xfffffff8, @local, 0x5}]}, &(0x7f0000000440)=0x10) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={r9, 0xa31, 0x5}, &(0x7f00000001c0)=0x8) (async) r10 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r10, 0x40045613, &(0x7f0000000040)=0x5) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000840)={0x1, 0x0, @ioapic={0x100000, 0x101, 0x100, 0x4, 0x0, [{0x5, 0xee, 0x1, '\x00', 0x5}, {0x3, 0xc, 0x9, '\x00', 0x5}, {0x0, 0x8, 0x9, '\x00', 0x8}, {0xf, 0x3, 0x10, '\x00', 0x7}, {0x7, 0x8, 0x59, '\x00', 0x10}, {0x2, 0x3, 0x3a}, {0x8, 0x8, 0x7, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x3}, {0xd, 0x1, 0xff, '\x00', 0xf6}, {0x7f, 0x3, 0x7}, {0x8, 0xf, 0x7, '\x00', 0x8}, {0x2b, 0x7, 0x1, '\x00', 0x2}, {0x6, 0x2, 0x6}, {0x6, 0x1, 0xf, '\x00', 0x24}, {0x9, 0x8b, 0x1}, {0x26, 0xb, 0x6, '\x00', 0xfb}, {0x6, 0x9b, 0x7, '\x00', 0x1}, {0x4, 0x9, 0x9b, '\x00', 0x2}, {0x5, 0x8, 0x22, '\x00', 0x7}, {0x2, 0x53, 0x7}, {0xbe, 0x1, 0x4, '\x00', 0x4}, {0xb, 0x6, 0x3, '\x00', 0x8}, {0x2, 0x9, 0x8a, '\x00', 0x1}, {0x8, 0x81, 0x81}]}}) (async) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r11, 0x29, 0x3c, 0x0, &(0x7f0000000000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.544216848s ago: executing program 0 (id=284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121380, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f000094b000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=[@rdmsr={0x66, 0x18, {0x40000000}}], 0x18}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x5, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndtimer(0xffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r4) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r7, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0x0, 0x7fffffff, 0x9]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0xf5, 0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.427754717s ago: executing program 1 (id=285): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) syz_usb_connect(0x2, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0xee, 0x20, 0x10, 0x104f, 0x4, 0xc6c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb6, 0xb3, 0x3c, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "940a0207da"}]}}, {{0x9, 0x5, 0x5, 0x2}}]}}]}}]}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "71028bbb03731645", "a0209974d6d1e1e89a46c366f4ba5423", "c3bfec5e", "a2badd4c66e26180"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "71028bbb03731645", "a0209974d6d1e1e89a46c366f4ba5423", "c3bfec5e", "a2badd4c66e26180"}, 0x28) 1.506932801s ago: executing program 0 (id=286): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x923, 0x2, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x20000091) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6(0xa, 0x80000, 0x7) recvmmsg(r3, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/13, 0xd}], 0x2}, 0xfffff001}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000001140)=""/78, 0x4e}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/207, 0xcf}, {&(0x7f00000022c0)=""/176, 0xb0}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/21, 0x15}], 0x6, &(0x7f0000003440)=""/82, 0x52}, 0x7}, {{&(0x7f00000034c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003540)=""/126, 0x7e}], 0x1, &(0x7f0000003600)=""/156, 0x9c}, 0x51d16dd2}, {{&(0x7f00000036c0)=@ieee802154, 0x80, &(0x7f0000004880)=[{&(0x7f0000003740)=""/56, 0x38}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/225, 0xe1}], 0x3, &(0x7f00000048c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000058c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005940)=""/4, 0x4}, {&(0x7f0000005980)=""/137, 0x89}, {&(0x7f0000005a40)=""/255, 0xff}], 0x3, &(0x7f0000005b80)=""/29, 0x1d}, 0x400}], 0x5, 0x2000, &(0x7f0000005d00)={0x77359400}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x3, 0x20, 0x3ff, 0x9}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={r4, 0x9, 0x21, "c80c5e71a02b220e547be2cf7e0b8c4295cf2cf8117a15a05ec4eac11be85bc0f9"}, 0x29) syz_open_dev$vbi(&(0x7f0000005d40), 0x3, 0x2) 1.204904174s ago: executing program 0 (id=287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f", 0xb3}], 0x2, 0x0, 0x0, 0x10000080}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x2}, 0x0) write$bt_hci(r1, &(0x7f00000002c0)={0x1, @switch_role={{0x80b, 0x7}, {@none, 0x3}}}, 0xb) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x180000000, 0xde3b3e17de58acf) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f00000001c0)) 1.159731392s ago: executing program 0 (id=288): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x2, 0x4, 0x83, 0x5, 0x1, 0x4, 0xb7, 0x4, 0x2, 0x8, 0x4, 0xf1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000010c0)) 1.070809776s ago: executing program 0 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES16], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000015c0), 0x800, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0xfffffffffffffffe, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000001100)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001780)=ANY=[@ANYBLOB="1400000000000000010000004100000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab83e8b1d633b1bb9a7d4d59ebdc7083d93d35cd469def22f0d7e704f3440000000f5dd92821f5e2f7e7622fc8f9e6156bdf9b7b237ef83ffe83106b5da26cf5320c03917538b47e6f4a6b9b3f33c2daa68ed9be2df4a79b66fed09475b5f8130c9ed6fc82ad711f428fb655e2ce42cffad1e501f4341de93850981a64bdc8e54d9e14d064c6bed856afec225c132559be57fdd0b2f1927eab911093df4000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, 0x0, 0x0) (rerun: 64) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'veth0_vlan\x00', 0x2}, 0x18) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, 'f'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000300)={0x1, 'veth1_to_bond\x00', 0x3}, 0x18) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000b00)={{}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) syz_usb_control_io$rtl8150(r1, &(0x7f0000001140)={0x14, &(0x7f00000010c0)=ANY=[@ANYBLOB="400ecc0de9489516f3858ec6de7c389c025c0d"], &(0x7f0000001740)=ANY=[@ANYBLOB="000304000400e47fe7f86e034d31fd8304037903"]}, &(0x7f0000001580)={0x2c, &(0x7f0000001440)={0x20, 0x3f, 0x13, "0b533578178421d362ea0a0c29ef1913d57cf1"}, &(0x7f0000001480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000014c0)={0x0, 0x8, 0x1, 0xb4}, &(0x7f0000001500)=ANY=[@ANYBLOB="c00401000000f6"], &(0x7f0000001540)={0x40, 0x5, 0x6, "16f6bbd615e9"}}) (async) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001640)={0x0, 0x5c, "35cbd9fc418cb56e8fa82619621ad4e20ef5919e832749ef4b59015532c3dec96701b2b1da7504deffb87581dd25dc28fde98a134b2d64ba14b2cfa43c06c827095f7fb1afd1d769c0de204decb809115a0e6669f65add0884637679"}, &(0x7f00000016c0)=0x64) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000001700)={0x8, 0x209, 0xffff, 0x3ffc0, r9}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000001600)={'veth1_macvtap\x00', @random="c2ab10b4040a"}) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 892.547631ms ago: executing program 2 (id=290): r0 = syz_usb_connect(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="401704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x1, 0x200, 0x2, 0x80000000, 0xffffffff, 0x8}) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000006235f38d9f20d9cc9143d5a6039428e3d7fd559b9777c590cbd5df83e0b5c8218bf24df1e256837419af42c94b8e4e7e3f0600111cead7b6dd7f7ed2a81fc44406716e7d63f81b5d107def0159c063f8ebc676eda5ed0883aa903adc7b0106ec6f86a7c521a054fbdd010ec3a9e73a4190dc1c1371e238cc79803660badf554e521925f42455bbe76d28738b2551891109d0b3ba90c0e84278f918bb0ac9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="003104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="400304a488840000009789aa8e"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="20fb08"], 0x0, 0x0, 0x0, 0x0, 0x0}) 882.6274ms ago: executing program 2 (id=291): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/xfrm_stat\x00') ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x1, 0x14, [0x4, 0x800, 0x10, 0x2, 0x1]}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="7be9a04b1da1f7edec7f901181f1618160cdf548d712164173f6ca9a82b033b7034ccdf5159d87a68b8727fbc316286c8ed9a85dc7113378b119ab33ac85e8", 0x3f}], 0x1) listen(r0, 0x9) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000500)={0xa1, 0x13, &(0x7f0000000100)}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000580)={r2, 0x0, 0x0, 0x100000000}) fcntl$notify(r3, 0x402, 0x9) r4 = signalfd4(r1, &(0x7f00000005c0), 0x8, 0x80000) poll(&(0x7f0000000600)=[{r4, 0xa480}, {r0, 0x1}], 0x2, 0x1) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000800)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000900)=0xe8) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000940)=0x0) r10 = getuid() read$FUSE(r4, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002a80)={0x0, 0x0, 0x0}, &(0x7f0000002ac0)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002b00)={{0x1, 0x1, 0x18, r4, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002b40)={{0x1, 0x1, 0x18, r2, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) lstat(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r3, &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f0000002c40)={{}, {0x1, 0x1}, [{0x2, 0x5, r5}, {0x2, 0x4, r7}, {0x2, 0x5, r8}, {0x2, 0x1, r9}, {0x2, 0x2, r10}], {0x4, 0x2}, [{0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x0, r14}, {0x8, 0x3, r15}, {0x8, 0x0, r17}, {0x8, 0x5, r18}], {0x10, 0x2}, {0x20, 0x4}}, 0x7c, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002d40)={0x9, &(0x7f0000002cc0)=[{0x5, 0xf9, 0x3, 0x7fff}, {0x7, 0x1, 0x3, 0x3}, {0x7, 0x4, 0x8, 0x5}, {0x4, 0x1, 0x6, 0x800}, {0x401, 0x5, 0x2}, {0x6, 0x9, 0x7, 0x2}, {0xfc82, 0x2, 0x6, 0x2}, {0x6, 0x1, 0xff}, {0xe, 0xb, 0xe, 0x8001}]}) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000002d80)=""/110) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002e80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002e40)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r16, &(0x7f0000002ec0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000002e00), r19, 0x0, 0x2, 0x4}}, 0x20) setreuid(r13, r6) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000002f00)) socket$kcm(0x29, 0x0, 0x0) 841.662585ms ago: executing program 2 (id=292): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$proc_mixer(r1, &(0x7f0000000640)=""/52, 0x34) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf2504000000100008800c000780080006007a000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8004) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001801c00038006000300a1aa000006000100feffff7f08000200020000000800010000000400050002"], 0x64}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc0049364, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)=ANY=[@ANYBLOB="12040f0023e5ee47210501024d11010203010902120001000000000904000000a2cdd200"], 0x0) r8 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$sierra_net(r8, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) syz_usb_control_io$printer(r8, &(0x7f0000001140)={0x14, &(0x7f0000001080)={0x20, 0x21, 0x6, {0x6, 0x24, "689e99c3"}}, &(0x7f00000010c0)=ANY=[@ANYBLOB="0003430000004343ca6c19e1ce486a69f9ea817c9d8a92348a15856ac883365a6abc778c59c34671f2de7f26f44f2deb7f6cbee6a542172b965fa3fc55aaeff4cf7df0875f9383a43b"]}, &(0x7f0000001400)={0x34, &(0x7f0000001180)={0x40, 0x16, 0xe5, "de48cad380515006ec3c7d75b1549e418304efaf0f4f20ee32cffd081cb7894aa91bba8399bea42d822deec508bdf02e4545225ffd28c86d920f8c7f91d5ddc9895c8922d19367f547269ff55970e6cb7615530801f89287c1554125974122abb40466e0a849187e14153763344c52abe7e02d804b08ce36cb48a2cfb8029b17e1a72cce1f4c5954856f7ac6c586ee8e90daf166090834c97256826af758e4d52fc919d180547b5151fd9e67a6c626a4995ba32fd09477e96d24636d8bb99a49ba077a7a6ea4e31835e9b5d88fcd3a12c6d4027b9137190bbca70ee5c58afcd41855ea5bdd"}, &(0x7f0000001280)={0x0, 0xa, 0x1}, &(0x7f00000012c0)={0x0, 0x8, 0x1}, &(0x7f0000001300)={0x20, 0x0, 0x4b, {0x49, "7a6c4ac8495162540d560f8184d58ed0e2c56d4c1a278c30f160b1b489c6ddfd89c124239b304742039fbfbe02b2d2c25b7da7495314fe20cef4e33692599a453de2a33568c3988fe9"}}, &(0x7f0000001380)={0x20, 0x1, 0x1, 0x4}, &(0x7f00000013c0)={0x20, 0x0, 0x1, 0x80}}) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000080)={&(0x7f0000000100)=[{0x5, 0xe000, 0x60, &(0x7f0000000140)="22a5da60abcc9fd49bb6ad1101f978c118ee239880aa9122e7693a4a50a24f72b990479e84d2016590b085566109a35c3e3835744ab1db897dcea05534f7662a25fca4354d24c480fdb2c25dbcb8b957a02e709cbf8e18d3eb76129f29ef7e8d"}], 0x3}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000980)={0x40, 0x13, 0x93, "78f89bfe58fc454da2fe6c6ed690f6165adff3bf7b381903281e779384feb8c3df5dffb2d9135116d55f77c4ab047e5fbf4bd993626ecc57bcb1a3db6577af6b83cb7ef74b820afb4b278fc7eae11440e0dbf1f4a13e972431c3ba0c3906e507a64e71248374da2e02c2359bca7f385429451a9451649e8b26463f18603f0997e649fcbe8b789387873aa69921fb9b12f674a2"}, 0x0, 0x0, 0x0, 0x0}) 715.569592ms ago: executing program 1 (id=293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x78, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x200000, 0x8000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100008b4cd740402053d8f6f841020301090212000102000000090400"], 0x0) 0s ago: executing program 0 (id=294): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x140, 0xd, 0x0, 0xc8, 0x18, "737b27e90e2947801cf3a246ada40a9fd86000"}) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x5c}, @hci_ev_le_ext_adv_report={{}, {0x2, [{0x13, 0x0, @none, 0x2, 0x2, 0x0, 0x8, 0x5, 0x0, 0x81, @any, 0x7, "5cfbf76e617c2b"}, {0x3a, 0x1, @none, 0xfd, 0x7, 0x64, 0x2, 0x0, 0x9, 0x54, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x23, "7d034a0334eede088e97ab305c96d7e71730b604f9ac9398e6e4854378fa1bc6cdea5b"}]}}}}, 0x5f) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r5}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x44001}, 0x4004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. [ 116.271403][ T5819] cgroup: Unknown subsys name 'net' [ 116.404962][ T5819] cgroup: Unknown subsys name 'cpuset' [ 116.420296][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 117.808895][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 119.997741][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.010996][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.021169][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.031125][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.032260][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.042372][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.050300][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.059147][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.074669][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.075030][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.083723][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.093034][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.107281][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.107356][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.121823][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.134026][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.135113][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.149996][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.159557][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.183293][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.703327][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 120.794315][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 120.868211][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 120.946348][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.954965][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.962392][ T5840] bridge_slave_0: entered allmulticast mode [ 120.970020][ T5840] bridge_slave_0: entered promiscuous mode [ 120.996643][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 121.015297][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.023988][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.032546][ T5840] bridge_slave_1: entered allmulticast mode [ 121.041623][ T5840] bridge_slave_1: entered promiscuous mode [ 121.137674][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.145592][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.153816][ T5836] bridge_slave_0: entered allmulticast mode [ 121.162015][ T5836] bridge_slave_0: entered promiscuous mode [ 121.192771][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.201238][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.210630][ T5836] bridge_slave_1: entered allmulticast mode [ 121.219443][ T5836] bridge_slave_1: entered promiscuous mode [ 121.233285][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.278365][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.362728][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.385301][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.393629][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.402006][ T5837] bridge_slave_0: entered allmulticast mode [ 121.409382][ T5837] bridge_slave_0: entered promiscuous mode [ 121.417034][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.424869][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.432991][ T5843] bridge_slave_0: entered allmulticast mode [ 121.440948][ T5843] bridge_slave_0: entered promiscuous mode [ 121.452288][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.464580][ T5840] team0: Port device team_slave_0 added [ 121.471038][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.479379][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.487377][ T5837] bridge_slave_1: entered allmulticast mode [ 121.497184][ T5837] bridge_slave_1: entered promiscuous mode [ 121.505424][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.513033][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.521055][ T5843] bridge_slave_1: entered allmulticast mode [ 121.529038][ T5843] bridge_slave_1: entered promiscuous mode [ 121.551812][ T5840] team0: Port device team_slave_1 added [ 121.640884][ T5836] team0: Port device team_slave_0 added [ 121.648963][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.656852][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.684831][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.701030][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.715198][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.729245][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.742672][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.754485][ T5836] team0: Port device team_slave_1 added [ 121.762045][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.769198][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.796326][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.898427][ T5837] team0: Port device team_slave_0 added [ 121.908106][ T5843] team0: Port device team_slave_0 added [ 121.916165][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.923629][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.952174][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.965906][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.973664][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.001885][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.029176][ T5837] team0: Port device team_slave_1 added [ 122.049787][ T5843] team0: Port device team_slave_1 added [ 122.109387][ T5840] hsr_slave_0: entered promiscuous mode [ 122.116842][ T5840] hsr_slave_1: entered promiscuous mode [ 122.125538][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.133736][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.162785][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.190087][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.197818][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.227002][ T51] Bluetooth: hci0: command tx timeout [ 122.227006][ T5842] Bluetooth: hci3: command tx timeout [ 122.238793][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.253373][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.260824][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.290444][ T51] Bluetooth: hci2: command tx timeout [ 122.291717][ T5842] Bluetooth: hci1: command tx timeout [ 122.296991][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.316536][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.324600][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.352680][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.425095][ T5836] hsr_slave_0: entered promiscuous mode [ 122.432136][ T5836] hsr_slave_1: entered promiscuous mode [ 122.438588][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 122.444772][ T5836] Cannot create hsr debugfs directory [ 122.555485][ T5837] hsr_slave_0: entered promiscuous mode [ 122.563238][ T5837] hsr_slave_1: entered promiscuous mode [ 122.569800][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 122.576781][ T5837] Cannot create hsr debugfs directory [ 122.619195][ T5843] hsr_slave_0: entered promiscuous mode [ 122.626380][ T5843] hsr_slave_1: entered promiscuous mode [ 122.633913][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 122.640557][ T5843] Cannot create hsr debugfs directory [ 123.093669][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.108897][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.121227][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.145737][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.211346][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.230941][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.256309][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.282723][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.352653][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.372439][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 123.384650][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 123.426564][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.487221][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.499745][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.526125][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.540014][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.580535][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.668409][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.692986][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.700937][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.732433][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.740027][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.796283][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.884739][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.929673][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.937333][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.978384][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.989019][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.996881][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.075099][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.101692][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.146614][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.154355][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.185161][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.192662][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.221355][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.265971][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.282132][ T5842] Bluetooth: hci0: command tx timeout [ 124.283365][ T51] Bluetooth: hci3: command tx timeout [ 124.290298][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.302522][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.361793][ T51] Bluetooth: hci2: command tx timeout [ 124.361801][ T5842] Bluetooth: hci1: command tx timeout [ 124.388854][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.396331][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.546880][ T5840] veth0_vlan: entered promiscuous mode [ 124.606968][ T5840] veth1_vlan: entered promiscuous mode [ 124.645897][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.756764][ T5840] veth0_macvtap: entered promiscuous mode [ 124.781497][ T5840] veth1_macvtap: entered promiscuous mode [ 124.815949][ T5836] veth0_vlan: entered promiscuous mode [ 124.845344][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.898287][ T5836] veth1_vlan: entered promiscuous mode [ 124.916598][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.950710][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.989603][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.003195][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.031102][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.041160][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.055659][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.104553][ T5837] veth0_vlan: entered promiscuous mode [ 125.141355][ T5836] veth0_macvtap: entered promiscuous mode [ 125.178244][ T5836] veth1_macvtap: entered promiscuous mode [ 125.191242][ T5837] veth1_vlan: entered promiscuous mode [ 125.250833][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.269891][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.310846][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.321526][ T5843] veth0_vlan: entered promiscuous mode [ 125.328671][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.338625][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.350876][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.383007][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.392675][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.417699][ T5843] veth1_vlan: entered promiscuous mode [ 125.450324][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.473994][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.498221][ T5837] veth0_macvtap: entered promiscuous mode [ 125.516743][ T5837] veth1_macvtap: entered promiscuous mode [ 125.573955][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 125.633789][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.651895][ T5843] veth0_macvtap: entered promiscuous mode [ 125.654208][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.695146][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.723782][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.746154][ T5843] veth1_macvtap: entered promiscuous mode [ 125.771262][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.779881][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.788377][ T3476] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.798875][ T3476] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.824866][ T3476] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.834110][ T3476] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.867951][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.894628][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.947973][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.962265][ T5906] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.971345][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.998714][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.034939][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.121144][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.134765][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 126.141632][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.153107][ T5906] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 126.173977][ T5906] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 126.187782][ T5906] usb 2-1: config 0 has no interface number 0 [ 126.195774][ T5906] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.210720][ T5906] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.235367][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.250223][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.260522][ T5906] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.298185][ T5906] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 126.334121][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 126.351903][ T5906] usb 2-1: Product: syz [ 126.359567][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.371388][ T51] Bluetooth: hci3: command tx timeout [ 126.372427][ T5842] Bluetooth: hci0: command tx timeout [ 126.397416][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.405861][ T5906] usb 2-1: config 0 descriptor?? [ 126.439239][ T29] audit: type=1326 audit(1770596773.576:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz.2.3" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbdd39aeb9 code=0x0 [ 126.461611][ T5842] Bluetooth: hci2: command tx timeout [ 126.461655][ T5842] Bluetooth: hci1: command tx timeout [ 126.523543][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.543387][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.703009][ T29] audit: type=1804 audit(1770596773.836:3): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4" name="/newroot/0/file0" dev="fuse" ino=1 res=1 errno=0 [ 127.138444][ T5906] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input5 [ 127.157058][ T5906] input: failed to attach handler kbd to device input5, error: -5 [ 127.211662][ T42] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 127.368452][ T5924] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.383725][ T42] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 127.401539][ T42] usb 4-1: config 0 has no interface number 0 [ 127.408854][ T5946] usb 2-1: USB disconnect, device number 2 [ 127.419125][ T42] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 127.460037][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.489248][ T42] usb 4-1: config 0 descriptor?? [ 127.537109][ T5949] netlink: zone id is out of range [ 127.549730][ T5949] netlink: zone id is out of range [ 127.559475][ T5949] netlink: zone id is out of range [ 127.574622][ T5949] netlink: zone id is out of range [ 127.580461][ T5949] netlink: zone id is out of range [ 127.586335][ T5949] netlink: zone id is out of range [ 127.592662][ T5949] netlink: zone id is out of range [ 127.593483][ T5952] fuse: Unknown parameter 'grup_id' [ 127.598237][ T5949] netlink: zone id is out of range [ 127.611077][ T5949] netlink: zone id is out of range [ 127.617964][ T5949] netlink: zone id is out of range [ 127.724759][ T51] Bluetooth: hci1: Malformed LE Event: 0x0d [ 127.734201][ T42] usb 4-1: string descriptor 0 read error: -71 [ 127.744545][ T42] usb-storage 4-1:0.168: USB Mass Storage device detected [ 127.761081][ T42] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 127.805112][ T42] usb 4-1: USB disconnect, device number 2 [ 127.812384][ T5906] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.972236][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 127.985962][ T5906] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 128.004075][ T5964] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 128.006600][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.020695][ T5964] FAULT_INJECTION: forcing a failure. [ 128.020695][ T5964] name failslab, interval 1, probability 0, space 0, times 1 [ 128.020824][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT(full) [ 128.020843][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 128.020858][ T5964] Call Trace: [ 128.020868][ T5964] [ 128.020877][ T5964] dump_stack_lvl+0xe8/0x150 [ 128.020902][ T5964] should_fail_ex+0x412/0x560 [ 128.020927][ T5964] should_failslab+0xa8/0x100 [ 128.020946][ T5964] __kmalloc_noprof+0xe8/0x760 [ 128.020962][ T5964] ? ovl_cache_entry_new+0x4d/0x7a0 [ 128.020987][ T5964] ovl_cache_entry_new+0x4d/0x7a0 [ 128.021018][ T5964] ovl_fill_merge+0x776/0xdb0 [ 128.021049][ T5964] ? __pfx_ovl_fill_merge+0x10/0x10 [ 128.021067][ T5964] ? kernfs_root+0x1c/0x230 [ 128.021088][ T5964] ? __pfx_ovl_fill_merge+0x10/0x10 [ 128.021112][ T5964] kernfs_fop_readdir+0x57b/0x8d0 [ 128.021149][ T5964] iterate_dir+0x399/0x570 [ 128.021229][ T5964] ovl_dir_read+0x14b/0x4a0 [ 128.021259][ T5964] ? __pfx_ovl_dir_read+0x10/0x10 [ 128.021278][ T5964] ? ovl_path_upper+0x105/0x170 [ 128.021299][ T5964] ? ovl_path_next+0x23c/0x470 [ 128.021322][ T5964] ovl_dir_read_merged+0x2fb/0x520 [ 128.021347][ T5964] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 128.021370][ T5964] ? __pfx_ovl_fill_merge+0x10/0x10 [ 128.021400][ T5964] ? __kasan_kmalloc+0x93/0xb0 [ 128.021419][ T5964] ? __kmalloc_cache_noprof+0x31c/0x660 [ 128.021437][ T5964] ? ovl_iterate+0xfe7/0x2140 [ 128.021460][ T5964] ? __kmalloc_cache_noprof+0x15b/0x660 [ 128.021478][ T5964] ovl_iterate+0x10b2/0x2140 [ 128.021514][ T5964] ? register_lock_class+0x31/0x2e0 [ 128.021546][ T5964] ? __pfx_ovl_iterate+0x10/0x10 [ 128.021573][ T5964] ? __lock_acquire+0x6b5/0x2cf0 [ 128.021597][ T5964] ? aa_file_perm+0x50e/0x15e0 [ 128.021622][ T5964] ? __lock_acquire+0x6b5/0x2cf0 [ 128.021645][ T5964] ? trace_contention_end+0x3d/0x150 [ 128.021666][ T5964] ? __mutex_lock+0x319/0x1300 [ 128.021717][ T5964] ? down_write+0x16d/0x200 [ 128.021740][ T5964] ? __pfx_down_write+0x10/0x10 [ 128.021763][ T5964] ? wrap_directory_iterator+0x52/0xe0 [ 128.021782][ T5964] ? __pfx_ovl_iterate+0x10/0x10 [ 128.021806][ T5964] wrap_directory_iterator+0x96/0xe0 [ 128.021827][ T5964] iterate_dir+0x399/0x570 [ 128.021850][ T5964] __se_sys_getdents64+0xf1/0x280 [ 128.021872][ T5964] ? __pfx___se_sys_getdents64+0x10/0x10 [ 128.021889][ T5964] ? ksys_write+0x242/0x270 [ 128.021903][ T5964] ? __pfx_filldir64+0x10/0x10 [ 128.021923][ T5964] ? __pfx_ksys_write+0x10/0x10 [ 128.021950][ T5964] do_syscall_64+0x14d/0xf80 [ 128.021970][ T5964] ? trace_irq_disable+0x3b/0x150 [ 128.021991][ T5964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.022008][ T5964] ? clear_bhb_loop+0x40/0x90 [ 128.022027][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.022052][ T5964] RIP: 0033:0x7f0e9bd9aeb9 [ 128.022077][ T5964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.022089][ T5964] RSP: 002b:00007f0e9cc22028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 128.022114][ T5964] RAX: ffffffffffffffda RBX: 00007f0e9c015fa0 RCX: 00007f0e9bd9aeb9 [ 128.022126][ T5964] RDX: 0000000000000c00 RSI: 0000200000000400 RDI: 0000000000000003 [ 128.022136][ T5964] RBP: 00007f0e9cc22090 R08: 0000000000000000 R09: 0000000000000000 [ 128.022146][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.022155][ T5964] R13: 00007f0e9c016038 R14: 00007f0e9c015fa0 R15: 00007fff69462eb8 [ 128.022184][ T5964] [ 128.191678][ T5885] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 128.201630][ T5906] usb 1-1: Product: syz [ 128.377321][ T5885] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 128.381426][ T5906] usb 1-1: Manufacturer: syz [ 128.408931][ T5885] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 128.412560][ T5906] usb 1-1: SerialNumber: syz [ 128.450194][ T5842] Bluetooth: hci3: command tx timeout [ 128.455981][ T51] Bluetooth: hci0: command tx timeout [ 128.471937][ T5885] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 128.493242][ T5906] usb 1-1: config 0 descriptor?? [ 128.500283][ T5885] usb 3-1: config 220 has no interface number 2 [ 128.507255][ T5885] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 128.524325][ T51] Bluetooth: hci1: command tx timeout [ 128.530317][ T51] Bluetooth: hci2: command tx timeout [ 128.534989][ T5906] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 128.537266][ T5885] usb 3-1: config 220 interface 0 has no altsetting 0 [ 128.550568][ T5885] usb 3-1: config 220 interface 76 has no altsetting 0 [ 128.562914][ T5885] usb 3-1: config 220 interface 1 has no altsetting 0 [ 128.573340][ T5885] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 128.584755][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.593896][ T5885] usb 3-1: Product: syz [ 128.598515][ T5885] usb 3-1: Manufacturer: syz [ 128.604033][ T5885] usb 3-1: SerialNumber: syz [ 128.713480][ T5951] process 'syz.0.9' launched '/dev/fd/4' with NULL argv: empty string added [ 128.902595][ T29] audit: type=1326 audit(1770596776.046:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.17" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9aeb9 code=0x0 [ 129.527476][ T5983] netlink: 'syz.1.18': attribute type 12 has an invalid length. [ 129.556992][ T5906] usb 1-1: USB disconnect, device number 2 [ 130.136043][ T5988] usb usb9: usbfs: process 5988 (syz.0.20) did not claim interface 0 before use [ 130.514087][ T5885] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 130.536249][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.546058][ T5997] kAFS: No cell specified [ 130.547742][ T5885] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 130.564276][ T5885] uvcvideo 3-1:220.0: No valid video chain found. [ 130.564366][ T5885] usb 3-1: selecting invalid altsetting 0 [ 130.590767][ T5885] usb 3-1: selecting invalid altsetting 0 [ 130.590787][ T5885] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 130.595102][ T5885] usb 3-1: USB disconnect, device number 2 [ 130.602210][ T5997] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 130.644071][ T1222] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.731567][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 130.750722][ T9] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 130.761547][ T9] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 130.769897][ T9] usb 1-1: config 0 has no interface number 0 [ 130.778566][ T9] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.792731][ T9] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 130.805166][ T9] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 130.811642][ T1222] usb 2-1: Using ep0 maxpacket: 32 [ 130.817139][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 130.833474][ T9] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 130.834109][ T1222] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.848587][ T9] usb 1-1: Product: syz [ 130.870805][ T9] usb 1-1: config 0 descriptor?? [ 130.880312][ T1222] usb 2-1: config 1 interface 0 has no altsetting 0 [ 130.891175][ T1222] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.40 [ 130.901441][ T1222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.909941][ T1222] usb 2-1: Manufacturer: ᠌ [ 130.915063][ T1222] usb 2-1: SerialNumber: ࠄ [ 131.127402][ T5994] netlink: 37 bytes leftover after parsing attributes in process `syz.1.23'. [ 131.193285][ T5885] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.202426][ T5995] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.23'. [ 131.342717][ T5885] usb 4-1: device descriptor read/64, error -71 [ 131.365713][ T1222] usbhid 2-1:1.0: can't add hid device: -71 [ 131.372432][ T1222] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 131.387040][ T1222] usb 2-1: USB disconnect, device number 3 [ 131.501009][ T9] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input6 [ 131.510462][ T9] input: failed to attach handler kbd to device input6, error: -5 [ 131.611732][ T5885] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.722971][ T5992] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 131.739905][ T1222] usb 1-1: USB disconnect, device number 3 [ 131.752105][ T5885] usb 4-1: device descriptor read/64, error -71 [ 131.871895][ T5885] usb usb4-port1: attempt power cycle [ 132.154278][ T29] audit: type=1326 audit(1770596779.296:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.1.28" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e9bd9aeb9 code=0x0 [ 132.211693][ T1222] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.231867][ T5885] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.269654][ T5885] usb 4-1: device descriptor read/8, error -71 [ 132.380417][ T1222] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 132.392532][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.400740][ T1222] usb 3-1: Product: syz [ 132.406249][ T1222] usb 3-1: Manufacturer: syz [ 132.412742][ T1222] usb 3-1: SerialNumber: syz [ 132.531575][ T5885] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.573676][ T5885] usb 4-1: device descriptor read/8, error -71 [ 132.684495][ T5885] usb usb4-port1: unable to enumerate USB device [ 132.702780][ T6021] fuse: Bad value for 'group_id' [ 132.708010][ T6021] fuse: Bad value for 'group_id' [ 133.014103][ T6030] mmap: syz.1.36 (6030) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.030985][ T6030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36'. [ 133.056915][ T1222] net_ratelimit: 1 callbacks suppressed [ 133.056942][ T1222] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 133.088891][ T1222] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 133.102583][ T1222] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 133.129622][ T1222] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 133.156726][ T1222] usb 3-1: USB disconnect, device number 3 [ 133.207789][ T6035] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 133.220243][ T6035] FAULT_INJECTION: forcing a failure. [ 133.220243][ T6035] name failslab, interval 1, probability 0, space 0, times 0 [ 133.236705][ T6035] CPU: 1 UID: 0 PID: 6035 Comm: syz.0.38 Not tainted syzkaller #0 PREEMPT(full) [ 133.236727][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 133.236736][ T6035] Call Trace: [ 133.236743][ T6035] [ 133.236749][ T6035] dump_stack_lvl+0xe8/0x150 [ 133.236775][ T6035] should_fail_ex+0x412/0x560 [ 133.236797][ T6035] should_failslab+0xa8/0x100 [ 133.236817][ T6035] __kmalloc_noprof+0xe8/0x760 [ 133.236834][ T6035] ? ovl_cache_entry_new+0x4d/0x7a0 [ 133.236863][ T6035] ovl_cache_entry_new+0x4d/0x7a0 [ 133.236894][ T6035] ovl_fill_merge+0x776/0xdb0 [ 133.236927][ T6035] ? __pfx_ovl_fill_merge+0x10/0x10 [ 133.236946][ T6035] ? kernfs_root+0x1c/0x230 [ 133.236970][ T6035] ? __pfx_ovl_fill_merge+0x10/0x10 [ 133.236994][ T6035] kernfs_fop_readdir+0x57b/0x8d0 [ 133.237032][ T6035] iterate_dir+0x399/0x570 [ 133.237057][ T6035] ovl_dir_read+0x14b/0x4a0 [ 133.237085][ T6035] ? __pfx_ovl_dir_read+0x10/0x10 [ 133.237104][ T6035] ? ovl_path_upper+0x105/0x170 [ 133.237126][ T6035] ? ovl_path_next+0x23c/0x470 [ 133.237149][ T6035] ovl_dir_read_merged+0x2fb/0x520 [ 133.237174][ T6035] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 133.237198][ T6035] ? __pfx_ovl_fill_merge+0x10/0x10 [ 133.237230][ T6035] ? __kasan_kmalloc+0x93/0xb0 [ 133.237249][ T6035] ? __kmalloc_cache_noprof+0x31c/0x660 [ 133.237265][ T6035] ? ovl_iterate+0xfe7/0x2140 [ 133.237283][ T6035] ? __kmalloc_cache_noprof+0x15b/0x660 [ 133.237302][ T6035] ovl_iterate+0x10b2/0x2140 [ 133.237321][ T6035] ? register_lock_class+0x31/0x2e0 [ 133.237359][ T6035] ? __pfx_ovl_iterate+0x10/0x10 [ 133.237397][ T6035] ? __lock_acquire+0x6b5/0x2cf0 [ 133.237425][ T6035] ? aa_file_perm+0x50e/0x15e0 [ 133.237453][ T6035] ? __lock_acquire+0x6b5/0x2cf0 [ 133.237475][ T6035] ? trace_contention_end+0x3d/0x150 [ 133.237502][ T6035] ? __mutex_lock+0x319/0x1300 [ 133.237545][ T6035] ? down_write+0x16d/0x200 [ 133.237568][ T6035] ? __pfx_down_write+0x10/0x10 [ 133.237596][ T6035] ? wrap_directory_iterator+0x52/0xe0 [ 133.237617][ T6035] ? __pfx_ovl_iterate+0x10/0x10 [ 133.237639][ T6035] wrap_directory_iterator+0x96/0xe0 [ 133.237662][ T6035] iterate_dir+0x399/0x570 [ 133.237702][ T6035] __se_sys_getdents64+0xf1/0x280 [ 133.237724][ T6035] ? __pfx___se_sys_getdents64+0x10/0x10 [ 133.237741][ T6035] ? ksys_write+0x242/0x270 [ 133.237756][ T6035] ? __pfx_filldir64+0x10/0x10 [ 133.237777][ T6035] ? __pfx_ksys_write+0x10/0x10 [ 133.237805][ T6035] do_syscall_64+0x14d/0xf80 [ 133.237826][ T6035] ? trace_irq_disable+0x3b/0x150 [ 133.237847][ T6035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.237865][ T6035] ? clear_bhb_loop+0x40/0x90 [ 133.237886][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.237902][ T6035] RIP: 0033:0x7f9a49b9aeb9 [ 133.237918][ T6035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.237931][ T6035] RSP: 002b:00007f9a47df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 133.237950][ T6035] RAX: ffffffffffffffda RBX: 00007f9a49e15fa0 RCX: 00007f9a49b9aeb9 [ 133.237962][ T6035] RDX: 0000000000000c00 RSI: 0000200000000400 RDI: 0000000000000003 [ 133.237973][ T6035] RBP: 00007f9a47df6090 R08: 0000000000000000 R09: 0000000000000000 [ 133.237983][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.237992][ T6035] R13: 00007f9a49e16038 R14: 00007f9a49e15fa0 R15: 00007ffd15ce4718 [ 133.238022][ T6035] [ 133.644344][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.651374][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.261627][ T5885] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 134.422047][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 134.435156][ T5885] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 134.443894][ T5885] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 134.455892][ T5885] usb 3-1: config 0 has no interface number 0 [ 134.465517][ T5885] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.480906][ T5885] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.495585][ T5885] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.511696][ T5885] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 134.543997][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 134.554079][ T5885] usb 3-1: Product: syz [ 134.573323][ T5885] usb 3-1: config 0 descriptor?? [ 135.195609][ T5885] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input7 [ 135.298688][ T5885] input: failed to attach handler kbd to device input7, error: -5 [ 135.424369][ T6040] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 135.462202][ T1222] usb 3-1: USB disconnect, device number 4 [ 135.516668][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 135.571730][ T5885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.582966][ T6083] fuse: Unknown parameter '10x0000000000000000' [ 135.713367][ T6089] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 135.730778][ T6089] FAULT_INJECTION: forcing a failure. [ 135.730778][ T6089] name failslab, interval 1, probability 0, space 0, times 0 [ 135.744135][ T6089] CPU: 1 UID: 0 PID: 6089 Comm: syz.0.59 Not tainted syzkaller #0 PREEMPT(full) [ 135.744158][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 135.744168][ T6089] Call Trace: [ 135.744175][ T6089] [ 135.744182][ T6089] dump_stack_lvl+0xe8/0x150 [ 135.744211][ T6089] should_fail_ex+0x412/0x560 [ 135.744240][ T6089] should_failslab+0xa8/0x100 [ 135.744261][ T6089] __kmalloc_noprof+0xe8/0x760 [ 135.744286][ T6089] ? ovl_cache_entry_new+0x4d/0x7a0 [ 135.744314][ T6089] ovl_cache_entry_new+0x4d/0x7a0 [ 135.744347][ T6089] ovl_fill_merge+0x776/0xdb0 [ 135.744380][ T6089] ? __pfx_ovl_fill_merge+0x10/0x10 [ 135.744401][ T6089] ? kernfs_root+0x1c/0x230 [ 135.744425][ T6089] ? __pfx_ovl_fill_merge+0x10/0x10 [ 135.744449][ T6089] kernfs_fop_readdir+0x57b/0x8d0 [ 135.744487][ T6089] iterate_dir+0x399/0x570 [ 135.744521][ T6089] ovl_dir_read+0x14b/0x4a0 [ 135.744549][ T6089] ? __pfx_ovl_dir_read+0x10/0x10 [ 135.744569][ T6089] ? ovl_path_upper+0x105/0x170 [ 135.744589][ T6089] ? ovl_path_next+0x23c/0x470 [ 135.744612][ T6089] ovl_dir_read_merged+0x2fb/0x520 [ 135.744638][ T6089] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 135.744664][ T6089] ? __pfx_ovl_fill_merge+0x10/0x10 [ 135.744694][ T6089] ? __kasan_kmalloc+0x93/0xb0 [ 135.744713][ T6089] ? __kmalloc_cache_noprof+0x31c/0x660 [ 135.744730][ T6089] ? ovl_iterate+0xfe7/0x2140 [ 135.744747][ T6089] ? __kmalloc_cache_noprof+0x15b/0x660 [ 135.744769][ T6089] ovl_iterate+0x10b2/0x2140 [ 135.744791][ T6089] ? register_lock_class+0x31/0x2e0 [ 135.744827][ T6089] ? __pfx_ovl_iterate+0x10/0x10 [ 135.744856][ T6089] ? __lock_acquire+0x6b5/0x2cf0 [ 135.744879][ T6089] ? aa_file_perm+0x50e/0x15e0 [ 135.744906][ T6089] ? __lock_acquire+0x6b5/0x2cf0 [ 135.744928][ T6089] ? trace_contention_end+0x3d/0x150 [ 135.744955][ T6089] ? __mutex_lock+0x319/0x1300 [ 135.744997][ T6089] ? down_write+0x16d/0x200 [ 135.745020][ T6089] ? __pfx_down_write+0x10/0x10 [ 135.745043][ T6089] ? wrap_directory_iterator+0x52/0xe0 [ 135.745062][ T6089] ? __pfx_ovl_iterate+0x10/0x10 [ 135.745086][ T6089] wrap_directory_iterator+0x96/0xe0 [ 135.745107][ T6089] iterate_dir+0x399/0x570 [ 135.745132][ T6089] __se_sys_getdents64+0xf1/0x280 [ 135.745154][ T6089] ? __pfx___se_sys_getdents64+0x10/0x10 [ 135.745172][ T6089] ? ksys_write+0x242/0x270 [ 135.745187][ T6089] ? __pfx_filldir64+0x10/0x10 [ 135.745207][ T6089] ? __pfx_ksys_write+0x10/0x10 [ 135.745236][ T6089] do_syscall_64+0x14d/0xf80 [ 135.745257][ T6089] ? trace_irq_disable+0x3b/0x150 [ 135.745279][ T6089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.745295][ T6089] ? clear_bhb_loop+0x40/0x90 [ 135.745317][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.745334][ T6089] RIP: 0033:0x7f9a49b9aeb9 [ 135.745352][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.745365][ T6089] RSP: 002b:00007f9a47df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 135.745383][ T6089] RAX: ffffffffffffffda RBX: 00007f9a49e15fa0 RCX: 00007f9a49b9aeb9 [ 135.745395][ T6089] RDX: 0000000000000c00 RSI: 0000200000000400 RDI: 0000000000000003 [ 135.745405][ T6089] RBP: 00007f9a47df6090 R08: 0000000000000000 R09: 0000000000000000 [ 135.745415][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.745425][ T6089] R13: 00007f9a49e16038 R14: 00007f9a49e15fa0 R15: 00007ffd15ce4718 [ 135.745456][ T6089] [ 135.752275][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 135.995348][ T42] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.012090][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.148844][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.160482][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 136.171771][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 136.177302][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.187213][ T42] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 136.199035][ T42] usb 4-1: config 0 has no interface number 0 [ 136.202179][ T5885] usb 2-1: config 0 descriptor?? [ 136.209096][ T42] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.220913][ T5885] hub 2-1:0.0: USB hub found [ 136.273540][ T42] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 136.311565][ T42] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 136.328364][ T42] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 136.359837][ T42] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.400782][ T42] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 136.411338][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.421073][ T5885] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 136.429677][ T42] usb 4-1: Product: syz [ 136.449483][ T42] usb 4-1: Manufacturer: syz [ 136.454878][ T42] usb 4-1: SerialNumber: syz [ 136.473274][ T42] usb 4-1: config 0 descriptor?? [ 136.481984][ T6087] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.508307][ T42] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input8 [ 136.534022][ T5174] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 136.622851][ T794] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.828572][ T9] usb 4-1: USB disconnect, device number 7 [ 136.834983][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 136.835760][ T6107] CUSE: info not properly terminated [ 136.847584][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 136.872917][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 136.909390][ T5885] usb 2-1: USB disconnect, device number 4 [ 136.916318][ T6094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.950458][ T6094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.989205][ T794] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.002302][ T794] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 137.011144][ T794] usb 1-1: can't read configurations, error -71 [ 137.391632][ T5885] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.563888][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 137.572005][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.585706][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.598940][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.609139][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.628433][ T5885] usb 2-1: config 0 descriptor?? [ 137.644250][ T5885] hub 2-1:0.0: USB hub found [ 137.752962][ T42] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 137.838666][ T5885] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 137.850858][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 137.857237][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 137.883733][ T5885] usb 2-1: USB disconnect, device number 5 [ 137.911932][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 137.919921][ T42] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 137.934534][ T42] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 137.944261][ T42] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 137.952899][ T42] usb 4-1: Product: syz [ 137.957251][ T42] usb 4-1: Manufacturer: syz [ 137.962650][ T42] usb 4-1: SerialNumber: syz [ 137.969415][ T42] usb 4-1: config 0 descriptor?? [ 137.975565][ T6121] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 137.984460][ T42] hub 4-1:0.0: bad descriptor, ignoring hub [ 137.991409][ T42] hub 4-1:0.0: probe with driver hub failed with error -5 [ 139.039880][ T6128] raw-gadget.1 gadget.3: failed to queue suspend event [ 139.049428][ T6128] raw-gadget.1 gadget.3: failed to queue disconnect event [ 139.261628][ T6128] netlink: 'syz.3.67': attribute type 11 has an invalid length. [ 139.826935][ T42] usb 4-1: USB disconnect, device number 8 [ 140.671568][ T5906] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.698722][ T6146] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 140.704270][ T6148] fuse: Unknown parameter 'gdMf0x0000000000000004' [ 140.728269][ T6146] overlayfs: failed to set xattr on upper [ 140.735121][ T6146] overlayfs: ...falling back to redirect_dir=nofollow. [ 140.743792][ T6146] overlayfs: ...falling back to index=off. [ 140.816814][ T6153] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 140.829952][ T6153] FAULT_INJECTION: forcing a failure. [ 140.829952][ T6153] name failslab, interval 1, probability 0, space 0, times 0 [ 140.842039][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 140.843813][ T6153] CPU: 0 UID: 0 PID: 6153 Comm: syz.0.80 Not tainted syzkaller #0 PREEMPT(full) [ 140.843835][ T6153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 140.843854][ T6153] Call Trace: [ 140.843861][ T6153] [ 140.843868][ T6153] dump_stack_lvl+0xe8/0x150 [ 140.843896][ T6153] should_fail_ex+0x412/0x560 [ 140.843923][ T6153] should_failslab+0xa8/0x100 [ 140.843945][ T6153] __kmalloc_noprof+0xe8/0x760 [ 140.843962][ T6153] ? ovl_cache_entry_new+0x4d/0x7a0 [ 140.843990][ T6153] ovl_cache_entry_new+0x4d/0x7a0 [ 140.844022][ T6153] ovl_fill_merge+0x776/0xdb0 [ 140.844053][ T6153] ? __pfx_ovl_fill_merge+0x10/0x10 [ 140.844072][ T6153] ? kernfs_root+0x1c/0x230 [ 140.844095][ T6153] ? __pfx_ovl_fill_merge+0x10/0x10 [ 140.844116][ T6153] kernfs_fop_readdir+0x57b/0x8d0 [ 140.844152][ T6153] iterate_dir+0x399/0x570 [ 140.844176][ T6153] ovl_dir_read+0x14b/0x4a0 [ 140.844202][ T6153] ? __pfx_ovl_dir_read+0x10/0x10 [ 140.844221][ T6153] ? ovl_path_upper+0x105/0x170 [ 140.844241][ T6153] ? ovl_path_next+0x23c/0x470 [ 140.844263][ T6153] ovl_dir_read_merged+0x2fb/0x520 [ 140.844286][ T6153] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 140.844310][ T6153] ? __pfx_ovl_fill_merge+0x10/0x10 [ 140.844341][ T6153] ? __kasan_kmalloc+0x93/0xb0 [ 140.844360][ T6153] ? __kmalloc_cache_noprof+0x31c/0x660 [ 140.844376][ T6153] ? ovl_iterate+0xfe7/0x2140 [ 140.844395][ T6153] ? __kmalloc_cache_noprof+0x15b/0x660 [ 140.844416][ T6153] ovl_iterate+0x10b2/0x2140 [ 140.844438][ T6153] ? register_lock_class+0x31/0x2e0 [ 140.844473][ T6153] ? __pfx_ovl_iterate+0x10/0x10 [ 140.844501][ T6153] ? __lock_acquire+0x6b5/0x2cf0 [ 140.844524][ T6153] ? aa_file_perm+0x50e/0x15e0 [ 140.844549][ T6153] ? __lock_acquire+0x6b5/0x2cf0 [ 140.844571][ T6153] ? trace_contention_end+0x3d/0x150 [ 140.844595][ T6153] ? __mutex_lock+0x319/0x1300 [ 140.844636][ T6153] ? down_write+0x16d/0x200 [ 140.844658][ T6153] ? __pfx_down_write+0x10/0x10 [ 140.844680][ T6153] ? wrap_directory_iterator+0x52/0xe0 [ 140.844700][ T6153] ? __pfx_ovl_iterate+0x10/0x10 [ 140.844723][ T6153] wrap_directory_iterator+0x96/0xe0 [ 140.844744][ T6153] iterate_dir+0x399/0x570 [ 140.844766][ T6153] __se_sys_getdents64+0xf1/0x280 [ 140.844787][ T6153] ? __pfx___se_sys_getdents64+0x10/0x10 [ 140.844804][ T6153] ? ksys_write+0x242/0x270 [ 140.844818][ T6153] ? __pfx_filldir64+0x10/0x10 [ 140.844838][ T6153] ? __pfx_ksys_write+0x10/0x10 [ 140.844872][ T6153] do_syscall_64+0x14d/0xf80 [ 140.844893][ T6153] ? trace_irq_disable+0x3b/0x150 [ 140.844914][ T6153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.844931][ T6153] ? clear_bhb_loop+0x40/0x90 [ 140.844952][ T6153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.844968][ T6153] RIP: 0033:0x7f9a49b9aeb9 [ 140.844984][ T6153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.844997][ T6153] RSP: 002b:00007f9a47df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 140.845015][ T6153] RAX: ffffffffffffffda RBX: 00007f9a49e15fa0 RCX: 00007f9a49b9aeb9 [ 140.845027][ T6153] RDX: 0000000000000c00 RSI: 0000200000000400 RDI: 0000000000000003 [ 140.845037][ T6153] RBP: 00007f9a47df6090 R08: 0000000000000000 R09: 0000000000000000 [ 140.845046][ T6153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.845056][ T6153] R13: 00007f9a49e16038 R14: 00007f9a49e15fa0 R15: 00007ffd15ce4718 [ 140.845084][ T6153] [ 140.974388][ T6157] input: syz0 as /devices/virtual/input/input10 [ 140.993635][ T5906] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 141.066653][ T5906] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 141.191875][ T6159] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 141.195448][ T5906] usb 4-1: config 0 has no interface number 0 [ 141.263004][ T5906] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.276518][ T5906] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 141.290874][ T5906] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 141.332854][ T5906] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 141.346772][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 141.365384][ T5906] usb 4-1: Product: syz [ 141.375111][ T5906] usb 4-1: config 0 descriptor?? [ 141.513422][ T29] audit: type=1800 audit(1770596788.656:6): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.86" name="bus" dev="overlay" ino=184 res=0 errno=0 [ 141.621347][ T1222] IPVS: starting estimator thread 0... [ 141.731699][ T6173] IPVS: using max 37 ests per chain, 88800 per kthread [ 141.881608][ T1222] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.961671][ T5925] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 141.995360][ T5906] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input12 [ 142.004790][ T5906] input: failed to attach handler kbd to device input12, error: -5 [ 142.021586][ T1222] usb 3-1: device descriptor read/64, error -71 [ 142.114237][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 142.129247][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 142.141538][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 142.153365][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 142.169377][ T5925] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 142.179015][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.188089][ T5925] usb 1-1: Product: syz [ 142.192620][ T5925] usb 1-1: Manufacturer: syz [ 142.198504][ T5925] usb 1-1: SerialNumber: syz [ 142.206826][ T5925] usb 1-1: config 0 descriptor?? [ 142.245377][ T6138] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 142.265440][ T794] usb 4-1: USB disconnect, device number 9 [ 142.291773][ T1222] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.431618][ T1222] usb 3-1: device descriptor read/64, error -71 [ 142.541823][ T1222] usb usb3-port1: attempt power cycle [ 142.891603][ T1222] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.926193][ T1222] usb 3-1: device descriptor read/8, error -71 [ 143.181616][ T1222] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 143.202228][ T1222] usb 3-1: device descriptor read/8, error -71 [ 143.242562][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -110 [ 143.249604][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.256503][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.263623][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.270288][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.278848][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.287463][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.295596][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.302879][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.312900][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.320964][ T1222] usb usb3-port1: unable to enumerate USB device [ 143.328553][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.336199][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.342899][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.349488][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.356059][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.363192][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.369787][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.376340][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.383194][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.389830][ T5925] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 143.396385][ T5925] input input13: Timeout waiting for response from device. [ 144.037310][ T6189] ucma_write: process 68 (syz.3.93) changed security contexts after opening file descriptor, this is not allowed. [ 144.331608][ T5925] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 144.481709][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 144.491038][ T5925] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 144.500320][ T5925] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 144.511378][ T5925] usb 4-1: config 127 has no interface number 1 [ 144.518470][ T5925] usb 4-1: config 127 interface 171 has no altsetting 0 [ 144.527845][ T5925] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 144.537817][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.546225][ T5925] usb 4-1: Product: syz [ 144.550735][ T5925] usb 4-1: Manufacturer: syz [ 144.556224][ T5925] usb 4-1: SerialNumber: syz [ 144.681210][ T1222] usb 1-1: USB disconnect, device number 6 [ 144.776570][ T5925] xr_serial 4-1:127.171: xr_serial converter detected [ 144.804545][ T5925] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 144.839360][ T5925] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 144.875617][ T5925] usb 4-1: USB disconnect, device number 10 [ 144.899514][ T5925] xr_serial 4-1:127.171: device disconnected [ 145.211657][ T1222] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.365276][ T1222] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.376448][ T1222] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 145.387254][ T1222] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.399137][ T1222] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 145.411318][ T1222] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 145.425332][ T1222] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.435414][ T1222] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.444836][ T1222] usb 1-1: Product: syz [ 145.449464][ T1222] usb 1-1: Manufacturer: syz [ 145.472112][ T1222] cdc_wdm 1-1:1.0: skipping garbage [ 145.479692][ T1222] cdc_wdm 1-1:1.0: skipping garbage [ 145.489434][ T1222] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 145.496299][ T1222] cdc_wdm 1-1:1.0: Unknown control protocol [ 145.572206][ T5885] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 145.655283][ T6226] netlink: 'syz.2.105': attribute type 10 has an invalid length. [ 145.666439][ T6226] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.734938][ T5885] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 145.741608][ T1222] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 145.745207][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.763405][ T5885] usb 4-1: config 0 descriptor?? [ 145.772784][ T5885] cp210x 4-1:0.0: cp210x converter detected [ 145.903711][ T1222] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.914281][ T1222] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 145.924090][ T1222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.935595][ T1222] usb 2-1: config 0 descriptor?? [ 145.945541][ T1222] dvb-usb: found a 'TeVii S662' in warm state. [ 145.952204][ T1222] dw2102: su3000_power_ctrl: 1, initialized 0 [ 145.958736][ T1222] dvb-usb: bulk message failed: -22 (2/0) [ 145.969846][ T1222] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 145.985946][ T1222] dvb-usb: TeVii S662 error while loading driver (-19) [ 146.195420][ T5885] usb 4-1: cp210x converter now attached to ttyUSB0 [ 146.230561][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.252237][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.266416][ T5885] usb 2-1: USB disconnect, device number 6 [ 146.387573][ T1222] usb 4-1: USB disconnect, device number 11 [ 146.405087][ T1222] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 146.418747][ T1222] cp210x 4-1:0.0: device disconnected [ 147.771598][ T5946] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 147.887550][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 147.887775][ T5885] usb 1-1: USB disconnect, device number 7 [ 147.894898][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 147.907605][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 147.943258][ T5946] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 147.958778][ T5946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.973977][ T5946] usb 3-1: config 0 has no interfaces? [ 147.979501][ T5946] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 147.990256][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.002919][ T5946] usb 3-1: config 0 descriptor?? [ 148.021076][ T6262] fuse: Unknown parameter 'fT{q.V$-55E' [ 148.164856][ T6267] Zero length message leads to an empty skb [ 148.363004][ T5885] usb 3-1: USB disconnect, device number 9 [ 148.625379][ T6282] binder: BINDER_SET_CONTEXT_MGR already set [ 148.633569][ T6282] binder: 6281:6282 ioctl 4018620d 200000004a80 returned -16 [ 148.707315][ T6288] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 148.712928][ T6290] evm: overlay not supported [ 148.727953][ T6290] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.119'. [ 148.891614][ T5885] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 149.008303][ T6298] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.054870][ T5885] usb 2-1: unable to get BOS descriptor or descriptor too short [ 149.075476][ T5885] usb 2-1: not running at top speed; connect to a high speed hub [ 149.085964][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.092808][ T1222] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 149.099101][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.118325][ T5885] usb 2-1: string descriptor 0 read error: -22 [ 149.125132][ T5885] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.134968][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.152476][ T5885] usb 2-1: 0:2 : does not exist [ 149.254439][ T1222] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.271003][ T1222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 149.282778][ T1222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 149.293459][ T1222] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.311015][ T1222] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 149.321011][ T1222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.342088][ T1222] usb 1-1: config 0 descriptor?? [ 149.350908][ T1222] gspca_main: spca561-2.14.0 probing abcd:cdee [ 149.507869][ T6308] VFS: Mount too revealing [ 149.552253][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.582933][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.604446][ T1222] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 150.211590][ T42] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 150.363634][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 150.378014][ T42] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 150.393333][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.407466][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 150.419296][ T42] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.441658][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.449870][ T42] usb 4-1: Product: syz [ 150.454865][ T42] usb 4-1: Manufacturer: syz [ 150.459683][ T42] usb 4-1: SerialNumber: syz [ 150.472162][ T42] usb 4-1: config 0 descriptor?? [ 150.484167][ T42] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 150.495203][ T42] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 150.905528][ T6330] sp0: Synchronizing with TNC [ 150.919475][ T6330] : renamed from vlan0 (while UP) [ 150.935468][ T6330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.137'. [ 150.948665][ T6329] [U] [ 151.086821][ T42] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 151.095369][ T42] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 151.298004][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 151.534221][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.142'. [ 151.694362][ T6348] overlay: Unknown parameter '/' [ 151.706474][ T5885] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 151.737646][ T5885] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 151.745709][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 151.745762][ T6350] openvswitch: netlink: Flow actions attr not present in new flow. [ 151.786179][ T5885] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 151.844335][ T5885] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 151.890042][ T1222] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.892105][ T5885] usb 2-1: USB disconnect, device number 7 [ 151.912346][ T1222] usb 1-1: MIDIStreaming interface descriptor not found [ 152.096462][ T1222] usb 1-1: USB disconnect, device number 8 [ 152.132202][ T42] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 152.157491][ T42] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 152.184808][ T42] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 152.205706][ T42] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 152.214565][ T42] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 152.239271][ T42] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 152.317367][ T42] usb 4-1: USB disconnect, device number 12 [ 152.427704][ T6365] program syz.0.150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.440020][ T6365] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 152.562475][ T1222] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 152.723347][ T1222] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 152.735185][ T1222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.746812][ T1222] usb 3-1: config 0 descriptor?? [ 152.791866][ T42] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.951521][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 152.958932][ T42] usb 1-1: config 3 has an invalid interface number: 202 but max is 0 [ 152.967743][ T42] usb 1-1: config 3 has no interface number 0 [ 152.976822][ T42] usb 1-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=b0.61 [ 152.986287][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.994948][ T42] usb 1-1: Product: syz [ 152.999242][ T42] usb 1-1: Manufacturer: syz [ 153.004201][ T42] usb 1-1: SerialNumber: syz [ 153.017648][ T42] ax88179_178a 1-1:3.202: probe with driver ax88179_178a failed with error -22 [ 153.101647][ T5922] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 153.168633][ T1222] kye 0003:0458:0138.0001: collection stack underflow [ 153.176029][ T1222] kye 0003:0458:0138.0001: item 0 0 0 12 parsing failed [ 153.184814][ T1222] kye 0003:0458:0138.0001: parse failed [ 153.190946][ T1222] kye 0003:0458:0138.0001: probe with driver kye failed with error -22 [ 153.261580][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 153.273066][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.284195][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.294780][ T5922] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 153.304575][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.315673][ T5922] usb 4-1: config 0 descriptor?? [ 153.370403][ T1222] usb 3-1: USB disconnect, device number 10 [ 153.921635][ T5885] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 154.017172][ T6388] netlink: 'syz.3.158': attribute type 25 has an invalid length. [ 154.025174][ T6388] netlink: 92 bytes leftover after parsing attributes in process `syz.3.158'. [ 154.091578][ T5885] usb 2-1: device descriptor read/64, error -71 [ 154.341615][ T5885] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 154.481627][ T5885] usb 2-1: device descriptor read/64, error -71 [ 154.594298][ T5885] usb usb2-port1: attempt power cycle [ 154.665579][ T6401] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 154.941566][ T5885] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 154.962433][ T5885] usb 2-1: device descriptor read/8, error -71 [ 155.111633][ T794] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 155.201999][ T5885] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 155.222098][ T5885] usb 2-1: device descriptor read/8, error -71 [ 155.261614][ T794] usb 3-1: Using ep0 maxpacket: 8 [ 155.269651][ T794] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.280680][ T794] usb 3-1: config 2 has an invalid interface number: 70 but max is 0 [ 155.289384][ T794] usb 3-1: config 2 has no interface number 0 [ 155.296022][ T794] usb 3-1: config 2 interface 70 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 155.310107][ T794] usb 3-1: config 2 interface 70 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 155.324838][ T794] usb 3-1: New USB device found, idVendor=0403, idProduct=fb99, bcdDevice= 1.a7 [ 155.334559][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.343026][ T5885] usb usb2-port1: unable to enumerate USB device [ 155.350238][ T794] usb 3-1: Product: syz [ 155.354472][ T794] usb 3-1: Manufacturer: syz [ 155.359257][ T794] usb 3-1: SerialNumber: syz [ 155.564037][ T1222] usb 1-1: USB disconnect, device number 9 [ 155.594696][ T794] ftdi_sio 3-1:2.70: FTDI USB Serial Device converter detected [ 155.617285][ T794] usb 3-1: Detected SIO [ 155.641031][ T794] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 155.708668][ T794] usb 3-1: USB disconnect, device number 11 [ 155.721768][ T794] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 155.736120][ T794] ftdi_sio 3-1:2.70: device disconnected [ 155.756293][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.766411][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.981646][ T1222] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 156.153753][ T1222] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.165585][ T1222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 156.177179][ T6413] fuse: Bad value for 'fd' [ 156.183374][ T1222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 156.193581][ T1222] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.208391][ T1222] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 156.218462][ T1222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.233484][ T1222] usb 1-1: config 0 descriptor?? [ 156.250475][ T1222] gspca_main: spca561-2.14.0 probing abcd:cdee [ 156.479759][ T1222] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 156.496539][ T1222] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.506220][ T1222] usb 1-1: MIDIStreaming interface descriptor not found [ 156.629790][ T6430] tls_set_device_offload_rx: netdev not found [ 156.630670][ T1222] usb 1-1: USB disconnect, device number 10 [ 157.000236][ T29] audit: type=1326 audit(1770596804.126:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.1.176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e9bd9aeb9 code=0x0 [ 157.185209][ T6446] syz.1.178 uses obsolete (PF_INET,SOCK_PACKET) [ 157.193381][ T6446] syzkaller1: entered promiscuous mode [ 157.199047][ T6446] syzkaller1: entered allmulticast mode [ 157.332425][ T5885] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 157.401085][ T6450] overlayfs: failed to resolve './file0:/': -2 [ 157.423995][ T6450] loop6: detected capacity change from 0 to 2896 [ 157.437583][ T6452] fuse: Bad value for 'fd' [ 157.491802][ T6450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.180'. [ 157.505867][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.524945][ T5885] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 157.548943][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.618821][ T5885] usb 1-1: config 0 descriptor?? [ 157.666062][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 157.828654][ T6463] vxcan0: tx address claim with dlc 0 [ 158.051826][ T5885] pwc: recv_control_msg error -32 req 02 val 2b00 [ 158.070155][ T5885] pwc: recv_control_msg error -32 req 02 val 2700 [ 158.089983][ T5885] pwc: recv_control_msg error -32 req 02 val 2c00 [ 158.102343][ T5885] pwc: recv_control_msg error -32 req 04 val 1000 [ 158.123698][ T5885] pwc: recv_control_msg error -32 req 04 val 1300 [ 158.135168][ T5885] pwc: recv_control_msg error -32 req 04 val 1400 [ 158.147630][ T5885] pwc: recv_control_msg error -32 req 02 val 2000 [ 158.158787][ T5885] pwc: recv_control_msg error -32 req 02 val 2100 [ 158.168145][ T5885] pwc: recv_control_msg error -32 req 04 val 1500 [ 158.185276][ T5885] pwc: recv_control_msg error -32 req 02 val 2500 [ 158.199240][ T5885] pwc: recv_control_msg error -32 req 02 val 2400 [ 158.213907][ T5885] pwc: recv_control_msg error -32 req 02 val 2600 [ 158.261671][ T5946] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 158.411640][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 158.420468][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.436723][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 2048, setting to 64 [ 158.450909][ T5946] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 158.468010][ T5946] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 158.479988][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.488591][ T5946] usb 2-1: Product: syz [ 158.493295][ T5946] usb 2-1: Manufacturer: syz [ 158.498213][ T5946] usb 2-1: SerialNumber: syz [ 158.507416][ T5946] usb 2-1: config 0 descriptor?? [ 158.513886][ T6481] sp0: Synchronizing with TNC [ 158.547530][ T6481] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 158.555299][ T6481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.565192][ T6481] vhci_hcd vhci_hcd.0: Device attached [ 158.575097][ T6481] fuse: Bad value for 'group_id' [ 158.581766][ T6481] fuse: Bad value for 'group_id' [ 158.589170][ T6482] vhci_hcd: connection closed [ 158.592467][ T35] vhci_hcd vhci_hcd.2: stop threads [ 158.607814][ T35] vhci_hcd vhci_hcd.2: release socket [ 158.614101][ T35] vhci_hcd vhci_hcd.2: disconnect device [ 158.635944][ T6444] netlink: 184 bytes leftover after parsing attributes in process `syz.0.177'. [ 158.647158][ T6444] xt_socket: unknown flags 0xd0 [ 158.661141][ T5885] pwc: recv_control_msg error -71 req 04 val 1100 [ 158.677029][ T5885] pwc: recv_control_msg error -71 req 04 val 1200 [ 158.692083][ T5885] pwc: Registered as video103. [ 158.699877][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 158.731963][ T794] usb 2-1: USB disconnect, device number 12 [ 158.758126][ T5885] usb 1-1: USB disconnect, device number 11 [ 158.801736][ T6208] udevd[6208]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 159.537824][ T6505] netlink: 68 bytes leftover after parsing attributes in process `syz.0.199'. [ 159.554033][ T6505] tipc: Started in network mode [ 159.560688][ T6505] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 159.573176][ T6505] tipc: Enabled bearer , priority 10 [ 159.632578][ T1222] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 159.791676][ T1222] usb 2-1: Using ep0 maxpacket: 32 [ 159.798855][ T1222] usb 2-1: config 0 interface 0 has no altsetting 0 [ 159.808496][ T1222] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 159.819108][ T1222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.827416][ T1222] usb 2-1: Product: syz [ 159.831966][ T1222] usb 2-1: Manufacturer: syz [ 159.837652][ T1222] usb 2-1: SerialNumber: syz [ 159.845672][ T1222] usb 2-1: config 0 descriptor?? [ 159.991753][ T5885] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 160.145371][ T5885] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 160.155829][ T5885] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 160.169604][ T5885] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 160.179498][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.187830][ T5885] usb 1-1: Product: syz [ 160.192129][ T5885] usb 1-1: Manufacturer: syz [ 160.197122][ T5885] usb 1-1: SerialNumber: syz [ 160.206953][ T5885] usb 1-1: config 0 descriptor?? [ 160.218162][ T6509] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.227908][ T6509] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.256430][ T1222] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 160.463684][ T6505] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.464637][ T1222] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 160.486609][ T1222] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 160.491049][ T6505] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.519650][ T6520] gfs2: not a GFS2 filesystem [ 160.645512][ T6524] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 160.658581][ T6524] FAULT_INJECTION: forcing a failure. [ 160.658581][ T6524] name failslab, interval 1, probability 0, space 0, times 0 [ 160.672778][ T6524] CPU: 1 UID: 0 PID: 6524 Comm: syz.3.206 Not tainted syzkaller #0 PREEMPT(full) [ 160.672800][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 160.672810][ T6524] Call Trace: [ 160.672817][ T6524] [ 160.672824][ T6524] dump_stack_lvl+0xe8/0x150 [ 160.672854][ T6524] should_fail_ex+0x412/0x560 [ 160.672883][ T6524] should_failslab+0xa8/0x100 [ 160.672908][ T6524] __kmalloc_noprof+0xe8/0x760 [ 160.672927][ T6524] ? ovl_cache_entry_new+0x4d/0x7a0 [ 160.672955][ T6524] ovl_cache_entry_new+0x4d/0x7a0 [ 160.672989][ T6524] ovl_fill_merge+0x776/0xdb0 [ 160.673022][ T6524] ? __pfx_ovl_fill_merge+0x10/0x10 [ 160.673043][ T6524] ? kernfs_root+0x1c/0x230 [ 160.673066][ T6524] ? __pfx_ovl_fill_merge+0x10/0x10 [ 160.673090][ T6524] kernfs_fop_readdir+0x57b/0x8d0 [ 160.673128][ T6524] iterate_dir+0x399/0x570 [ 160.673153][ T6524] ovl_dir_read+0x14b/0x4a0 [ 160.673178][ T6524] ? __pfx_ovl_dir_read+0x10/0x10 [ 160.673197][ T6524] ? ovl_path_upper+0x105/0x170 [ 160.673218][ T6524] ? ovl_path_next+0x23c/0x470 [ 160.673240][ T6524] ovl_dir_read_merged+0x2fb/0x520 [ 160.673265][ T6524] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 160.673288][ T6524] ? __pfx_ovl_fill_merge+0x10/0x10 [ 160.673319][ T6524] ? __kasan_kmalloc+0x93/0xb0 [ 160.673337][ T6524] ? __kmalloc_cache_noprof+0x31c/0x660 [ 160.673356][ T6524] ? ovl_iterate+0xfe7/0x2140 [ 160.673375][ T6524] ? __kmalloc_cache_noprof+0x15b/0x660 [ 160.673405][ T6524] ovl_iterate+0x10b2/0x2140 [ 160.673430][ T6524] ? register_lock_class+0x31/0x2e0 [ 160.673463][ T6524] ? __pfx_ovl_iterate+0x10/0x10 [ 160.673491][ T6524] ? __lock_acquire+0x6b5/0x2cf0 [ 160.673521][ T6524] ? aa_file_perm+0x50e/0x15e0 [ 160.673548][ T6524] ? __lock_acquire+0x6b5/0x2cf0 [ 160.673569][ T6524] ? trace_contention_end+0x3d/0x150 [ 160.673595][ T6524] ? __mutex_lock+0x319/0x1300 [ 160.673636][ T6524] ? down_write+0x16d/0x200 [ 160.673659][ T6524] ? __pfx_down_write+0x10/0x10 [ 160.673682][ T6524] ? wrap_directory_iterator+0x52/0xe0 [ 160.673701][ T6524] ? __pfx_ovl_iterate+0x10/0x10 [ 160.673724][ T6524] wrap_directory_iterator+0x96/0xe0 [ 160.673746][ T6524] iterate_dir+0x399/0x570 [ 160.673769][ T6524] __se_sys_getdents64+0xf1/0x280 [ 160.673791][ T6524] ? __pfx___se_sys_getdents64+0x10/0x10 [ 160.673809][ T6524] ? ksys_write+0x242/0x270 [ 160.673824][ T6524] ? __pfx_filldir64+0x10/0x10 [ 160.673845][ T6524] ? __pfx_ksys_write+0x10/0x10 [ 160.673873][ T6524] do_syscall_64+0x14d/0xf80 [ 160.673894][ T6524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.673912][ T6524] ? clear_bhb_loop+0x40/0x90 [ 160.673933][ T6524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.673950][ T6524] RIP: 0033:0x7fdeb1d9aeb9 [ 160.673967][ T6524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.673980][ T6524] RSP: 002b:00007fdeb2be5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 160.673999][ T6524] RAX: ffffffffffffffda RBX: 00007fdeb2015fa0 RCX: 00007fdeb1d9aeb9 [ 160.674011][ T6524] RDX: 0000000000000c00 RSI: 0000200000000400 RDI: 0000000000000003 [ 160.674021][ T6524] RBP: 00007fdeb2be5090 R08: 0000000000000000 R09: 0000000000000000 [ 160.674031][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.674041][ T6524] R13: 00007fdeb2016038 R14: 00007fdeb2015fa0 R15: 00007ffc060816c8 [ 160.674071][ T6524] [ 160.686011][ T6497] ./bus: Can't lookup blockdev [ 160.805442][ T6525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.056490][ T1222] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 161.058895][ T6525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.082148][ T794] tipc: Node number set to 4269801494 [ 161.126162][ T5885] Error reading MAC address [ 161.142830][ T5885] usb 1-1: USB disconnect, device number 12 [ 161.193695][ T5946] usb 2-1: USB disconnect, device number 13 [ 161.209768][ T6527] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 161.249983][ T1222] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 161.270203][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.290471][ T1222] usb 3-1: Product: syz [ 161.300608][ T1222] usb 3-1: Manufacturer: syz [ 161.310754][ T1222] usb 3-1: SerialNumber: syz [ 161.330295][ T1222] usb 3-1: config 0 descriptor?? [ 161.365100][ T1222] usb 3-1: interface 1 not found [ 161.558616][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.577980][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.591709][ T1222] usb 3-1: USB disconnect, device number 12 [ 162.040509][ T6545] binder: 6544:6545 ioctl c0046209 0 returned -22 [ 162.151711][ T5946] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 162.325817][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 162.339721][ T5946] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.381575][ T5946] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.403636][ T5946] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.410524][ T5946] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 162.442894][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.468510][ T5946] usb 1-1: config 0 descriptor?? [ 162.916262][ T5946] hid (null): report_id 4068501436 is invalid [ 162.934690][ T5946] hid (null): unknown global tag 0xfc [ 162.945960][ T5946] hid (null): unknown global tag 0xfa [ 162.952095][ T5946] hid (null): unknown global tag 0xc [ 162.957708][ T5946] hid (null): unknown global tag 0xe [ 162.985930][ T5946] hid (null): unknown global tag 0xd [ 163.002723][ T5946] hid (null): invalid report_count 25909 [ 163.012664][ T5946] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 163.038611][ T5946] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 163.055843][ T6577] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.071839][ T5946] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 163.092638][ T5946] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 163.100270][ T5946] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 163.109522][ T5946] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 163.143022][ T6577] FAULT_INJECTION: forcing a failure. [ 163.143022][ T6577] name failslab, interval 1, probability 0, space 0, times 0 [ 163.165401][ T5946] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 163.184368][ T6577] CPU: 0 UID: 0 PID: 6577 Comm: syz.1.216 Not tainted syzkaller #0 PREEMPT(full) [ 163.184399][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 163.184409][ T6577] Call Trace: [ 163.184417][ T6577] [ 163.184425][ T6577] dump_stack_lvl+0xe8/0x150 [ 163.184454][ T6577] should_fail_ex+0x412/0x560 [ 163.184482][ T6577] should_failslab+0xa8/0x100 [ 163.184505][ T6577] __kmalloc_noprof+0xe8/0x760 [ 163.184524][ T6577] ? ovl_cache_entry_new+0x4d/0x7a0 [ 163.184552][ T6577] ovl_cache_entry_new+0x4d/0x7a0 [ 163.184586][ T6577] ovl_fill_merge+0x776/0xdb0 [ 163.184618][ T6577] ? __pfx_ovl_fill_merge+0x10/0x10 [ 163.184638][ T6577] ? kernfs_root+0x1c/0x230 [ 163.184662][ T6577] ? __pfx_ovl_fill_merge+0x10/0x10 [ 163.184686][ T6577] kernfs_fop_readdir+0x57b/0x8d0 [ 163.184724][ T6577] iterate_dir+0x399/0x570 [ 163.184748][ T6577] ovl_dir_read+0x14b/0x4a0 [ 163.184777][ T6577] ? __pfx_ovl_dir_read+0x10/0x10 [ 163.184796][ T6577] ? ovl_path_upper+0x105/0x170 [ 163.184818][ T6577] ? ovl_path_next+0x23c/0x470 [ 163.184841][ T6577] ovl_dir_read_merged+0x2fb/0x520 [ 163.184866][ T6577] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 163.184891][ T6577] ? __pfx_ovl_fill_merge+0x10/0x10 [ 163.184923][ T6577] ? __kasan_kmalloc+0x93/0xb0 [ 163.184943][ T6577] ? __kmalloc_cache_noprof+0x31c/0x660 [ 163.184961][ T6577] ? ovl_iterate+0xfe7/0x2140 [ 163.184980][ T6577] ? __kmalloc_cache_noprof+0x15b/0x660 [ 163.185002][ T6577] ovl_iterate+0x10b2/0x2140 [ 163.185024][ T6577] ? register_lock_class+0x31/0x2e0 [ 163.185062][ T6577] ? __pfx_ovl_iterate+0x10/0x10 [ 163.185091][ T6577] ? __lock_acquire+0x6b5/0x2cf0 [ 163.185115][ T6577] ? aa_file_perm+0x50e/0x15e0 [ 163.185142][ T6577] ? __lock_acquire+0x6b5/0x2cf0 [ 163.185165][ T6577] ? trace_contention_end+0x3d/0x150 [ 163.185191][ T6577] ? __mutex_lock+0x319/0x1300 [ 163.185233][ T6577] ? down_write+0x16d/0x200 [ 163.185256][ T6577] ? __pfx_down_write+0x10/0x10 [ 163.185280][ T6577] ? wrap_directory_iterator+0x52/0xe0 [ 163.185300][ T6577] ? __pfx_ovl_iterate+0x10/0x10 [ 163.185324][ T6577] wrap_directory_iterator+0x96/0xe0 [ 163.185346][ T6577] iterate_dir+0x399/0x570 [ 163.185370][ T6577] __se_sys_getdents64+0xf1/0x280 [ 163.185406][ T6577] ? __pfx___se_sys_getdents64+0x10/0x10 [ 163.185423][ T6577] ? ksys_write+0x242/0x270 [ 163.185439][ T6577] ? __pfx_filldir64+0x10/0x10 [ 163.185460][ T6577] ? __pfx_ksys_write+0x10/0x10 [ 163.185488][ T6577] do_syscall_64+0x14d/0xf80 [ 163.185509][ T6577] ? trace_irq_disable+0x3b/0x150 [ 163.185531][ T6577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.185549][ T6577] ? clear_bhb_loop+0x40/0x90 [ 163.185570][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.185587][ T6577] RIP: 0033:0x7f0e9bd9aeb9 [ 163.185604][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.185616][ T6577] RSP: 002b:00007f0e9cc22028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 163.185634][ T6577] RAX: ffffffffffffffda RBX: 00007f0e9c015fa0 RCX: 00007f0e9bd9aeb9 [ 163.185646][ T6577] RDX: 0000000000000c00 RSI: 0000200000000400 RDI: 0000000000000003 [ 163.185657][ T6577] RBP: 00007f0e9cc22090 R08: 0000000000000000 R09: 0000000000000000 [ 163.185667][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.185677][ T6577] R13: 00007f0e9c016038 R14: 00007f0e9c015fa0 R15: 00007fff69462eb8 [ 163.185707][ T6577] [ 163.186164][ T5946] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 163.408606][ T5922] usbhid 4-1:0.0: can't add hid device: -32 [ 163.418849][ T5946] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 163.448603][ T5922] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 163.587481][ T5946] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 163.588093][ T5946] cougar 0003:060B:500A.0002: report_id 4068501436 is invalid [ 163.588114][ T5946] cougar 0003:060B:500A.0002: item 0 4 1 8 parsing failed [ 163.588818][ T5946] cougar 0003:060B:500A.0002: parse failed [ 163.588919][ T5946] cougar 0003:060B:500A.0002: probe with driver cougar failed with error -22 [ 163.596087][ T5946] usb 1-1: USB disconnect, device number 13 [ 163.890861][ T6597] netlink: 'syz.1.219': attribute type 83 has an invalid length. [ 164.699243][ T6621] netlink: 'syz.3.225': attribute type 29 has an invalid length. [ 164.737034][ T6621] netlink: 'syz.3.225': attribute type 29 has an invalid length. [ 164.752591][ T6626] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 164.786836][ T6626] FAULT_INJECTION: forcing a failure. [ 164.786836][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 164.825574][ T6626] CPU: 1 UID: 0 PID: 6626 Comm: syz.2.227 Not tainted syzkaller #0 PREEMPT(full) [ 164.825599][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 164.825609][ T6626] Call Trace: [ 164.825616][ T6626] [ 164.825623][ T6626] dump_stack_lvl+0xe8/0x150 [ 164.825651][ T6626] should_fail_ex+0x412/0x560 [ 164.825680][ T6626] should_failslab+0xa8/0x100 [ 164.825703][ T6626] __kmalloc_noprof+0xe8/0x760 [ 164.825721][ T6626] ? ovl_cache_entry_new+0x4d/0x7a0 [ 164.825750][ T6626] ovl_cache_entry_new+0x4d/0x7a0 [ 164.825781][ T6626] ovl_fill_merge+0x776/0xdb0 [ 164.825823][ T6626] ? __pfx_ovl_fill_merge+0x10/0x10 [ 164.825844][ T6626] ? kernfs_root+0x1c/0x230 [ 164.825867][ T6626] ? __pfx_ovl_fill_merge+0x10/0x10 [ 164.825892][ T6626] kernfs_fop_readdir+0x57b/0x8d0 [ 164.825929][ T6626] iterate_dir+0x399/0x570 [ 164.825955][ T6626] ovl_dir_read+0x14b/0x4a0 [ 164.825982][ T6626] ? __pfx_ovl_dir_read+0x10/0x10 [ 164.826002][ T6626] ? ovl_path_upper+0x105/0x170 [ 164.826023][ T6626] ? ovl_path_next+0x23c/0x470 [ 164.826046][ T6626] ovl_dir_read_merged+0x2fb/0x520 [ 164.826071][ T6626] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 164.826096][ T6626] ? __pfx_ovl_fill_merge+0x10/0x10 [ 164.826128][ T6626] ? __kasan_kmalloc+0x93/0xb0 [ 164.826148][ T6626] ? __kmalloc_cache_noprof+0x31c/0x660 [ 164.826166][ T6626] ? ovl_iterate+0xfe7/0x2140 [ 164.826186][ T6626] ? __kmalloc_cache_noprof+0x15b/0x660 [ 164.826219][ T6626] ovl_iterate+0x10b2/0x2140 [ 164.826242][ T6626] ? register_lock_class+0x31/0x2e0 [ 164.826280][ T6626] ? __pfx_ovl_iterate+0x10/0x10 [ 164.826309][ T6626] ? __lock_acquire+0x6b5/0x2cf0 [ 164.826331][ T6626] ? aa_file_perm+0x50e/0x15e0 [ 164.826358][ T6626] ? __lock_acquire+0x6b5/0x2cf0 [ 164.826381][ T6626] ? trace_contention_end+0x3d/0x150 [ 164.826406][ T6626] ? __mutex_lock+0x319/0x1300 [ 164.826448][ T6626] ? down_write+0x16d/0x200 [ 164.826470][ T6626] ? __pfx_down_write+0x10/0x10 [ 164.826494][ T6626] ? wrap_directory_iterator+0x52/0xe0 [ 164.826514][ T6626] ? __pfx_ovl_iterate+0x10/0x10 [ 164.826537][ T6626] wrap_directory_iterator+0x96/0xe0 [ 164.826560][ T6626] iterate_dir+0x399/0x570 [ 164.826584][ T6626] __se_sys_getdents64+0xf1/0x280 [ 164.826606][ T6626] ? __pfx___se_sys_getdents64+0x10/0x10 [ 164.826623][ T6626] ? ksys_write+0x242/0x270 [ 164.826638][ T6626] ? __pfx_filldir64+0x10/0x10 [ 164.826659][ T6626] ? __pfx_ksys_write+0x10/0x10 [ 164.826687][ T6626] do_syscall_64+0x14d/0xf80 [ 164.826708][ T6626] ? trace_irq_disable+0x3b/0x150 [ 164.826730][ T6626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.826747][ T6626] ? clear_bhb_loop+0x40/0x90 [ 164.826769][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.826785][ T6626] RIP: 0033:0x7fcbdd39aeb9 [ 164.826802][ T6626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.826814][ T6626] RSP: 002b:00007fcbde1ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 164.826832][ T6626] RAX: ffffffffffffffda RBX: 00007fcbdd615fa0 RCX: 00007fcbdd39aeb9 [ 164.826844][ T6626] RDX: 0000000000000c00 RSI: 0000200000000400 RDI: 0000000000000003 [ 164.826852][ T6626] RBP: 00007fcbde1ed090 R08: 0000000000000000 R09: 0000000000000000 [ 164.826859][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.826869][ T6626] R13: 00007fcbdd616038 R14: 00007fcbdd615fa0 R15: 00007ffce8a11078 [ 164.826899][ T6626] [ 165.344607][ T6633] netlink: 'syz.3.229': attribute type 2 has an invalid length. [ 165.353684][ T6633] netlink: 14 bytes leftover after parsing attributes in process `syz.3.229'. [ 165.462196][ T6634] overlay: Unknown parameter 'func' [ 165.746412][ T6647] netlink: 'syz.3.231': attribute type 10 has an invalid length. [ 165.755629][ T794] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 165.766267][ T6647] veth0_vlan: entered allmulticast mode [ 165.810516][ T6647] veth0_vlan: left promiscuous mode [ 165.848391][ T6647] veth0_vlan: entered promiscuous mode [ 165.878856][ T6647] team0: Device veth0_vlan failed to register rx_handler [ 165.913886][ T794] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.931022][ T794] usb 1-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 165.951294][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.971832][ T794] usb 1-1: Product: syz [ 165.979659][ T794] usb 1-1: Manufacturer: syz [ 165.990508][ T794] usb 1-1: SerialNumber: syz [ 166.245779][ T794] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.303472][ T794] snd-usb-audio 1-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 166.320017][ T794] usb 1-1: USB disconnect, device number 14 [ 166.352965][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.731582][ T5946] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 166.818048][ T6683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.884402][ T5946] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 166.897826][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.909784][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.920457][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 166.936352][ T5946] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 166.945866][ T5946] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 166.954311][ T5946] usb 3-1: Manufacturer: syz [ 166.962338][ T5946] usb 3-1: config 0 descriptor?? [ 167.123672][ T5922] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 167.207083][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.217476][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.263314][ T6698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.301611][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 167.310374][ T5922] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.327200][ T5922] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.339996][ T5922] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.351439][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.360306][ T5922] usb 1-1: Product: syz [ 167.364936][ T5922] usb 1-1: Manufacturer: syz [ 167.369856][ T5922] usb 1-1: SerialNumber: syz [ 167.395760][ T5946] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 167.511623][ T5885] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 167.674067][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 167.691096][ T5885] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.702099][ T5885] usb 2-1: config 129 has an invalid interface number: 180 but max is 0 [ 167.710566][ T5885] usb 2-1: config 129 has no interface number 0 [ 167.719413][ T5885] usb 2-1: config 129 interface 180 has no altsetting 0 [ 167.729408][ T5885] usb 2-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=47.c2 [ 167.739614][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.748254][ T5885] usb 2-1: Product: syz [ 167.753382][ T5885] usb 2-1: Manufacturer: syz [ 167.758132][ T5885] usb 2-1: SerialNumber: syz [ 167.934400][ T5922] usb 1-1: 0:2 : does not exist [ 167.939777][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.954207][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.968902][ T5922] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 167.986605][ T5885] HFC-S_USB 2-1:129.180: probe with driver HFC-S_USB failed with error -5 [ 168.011771][ T5885] usb 2-1: USB disconnect, device number 14 [ 168.079433][ T5922] usb 1-1: USB disconnect, device number 15 [ 168.120432][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.343198][ T6701] vxcan0: tx address claim with different name [ 168.749996][ T6724] ======================================================= [ 168.749996][ T6724] WARNING: The mand mount option has been deprecated and [ 168.749996][ T6724] and is ignored by this kernel. Remove the mand [ 168.749996][ T6724] option from the mount to silence this warning. [ 168.749996][ T6724] ======================================================= [ 168.788376][ T6724] jffs2: Unknown parameter 'usrquota' [ 168.823805][ T6724] netlink: 'syz.0.250': attribute type 29 has an invalid length. [ 168.834856][ T6724] netlink: 488 bytes leftover after parsing attributes in process `syz.0.250'. [ 168.879814][ T29] audit: type=1326 audit(1770596816.016:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.3.251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeb1d9aeb9 code=0x0 [ 168.912429][ T5922] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 169.071646][ T5922] usb 3-1: device descriptor read/64, error -32 [ 169.211572][ T5946] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 169.311602][ T5922] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 169.366275][ T5946] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.376403][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.384796][ T5946] usb 1-1: Product: syz [ 169.389076][ T5946] usb 1-1: Manufacturer: syz [ 169.396372][ T5946] usb 1-1: SerialNumber: syz [ 169.421211][ T5946] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 169.454157][ T5922] usb 3-1: device descriptor read/64, error -32 [ 169.456806][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 169.891194][ T6746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.901582][ T1222] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 169.904698][ T6746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.929394][ T6748] netlink: 60 bytes leftover after parsing attributes in process `syz.2.260'. [ 169.940091][ T6748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.260'. [ 170.064832][ T1222] usb 2-1: config 64 has an invalid interface number: 19 but max is 0 [ 170.074595][ T1222] usb 2-1: config 64 has no interface number 0 [ 170.080996][ T1222] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 170.092886][ T5906] usb 1-1: USB disconnect, device number 16 [ 170.099026][ T1222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.119396][ T1222] usb 2-1: probing VID:PID(2201:012C) [ 170.127905][ T1222] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 170.135008][ T1222] usb 2-1: vub300 ignoring EndPoint(0) 02 [ 170.140981][ T1222] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 170.149304][ T1222] vub300 2-1:64.19: probe with driver vub300 failed with error -22 [ 170.316852][ T5946] usb 2-1: USB disconnect, device number 15 [ 170.374998][ T957] usb 3-1: USB disconnect, device number 13 [ 170.522500][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 170.530587][ T9] ath9k_htc: Failed to initialize the device [ 170.539723][ T5906] usb 1-1: ath9k_htc: USB layer deinitialized [ 170.763980][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.774702][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.178657][ T6786] netlink: 'syz.2.272': attribute type 27 has an invalid length. [ 171.463566][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 171.562190][ T5906] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 171.711560][ T5906] usb 3-1: device descriptor read/64, error -71 [ 171.963102][ T5906] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 172.101646][ T5906] usb 3-1: device descriptor read/64, error -71 [ 172.111631][ T5885] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 172.215882][ T5906] usb usb3-port1: attempt power cycle [ 172.261553][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 172.278549][ T5885] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 172.311545][ T5885] usb 2-1: config 0 has no interface number 0 [ 172.329681][ T5885] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 172.356424][ T5885] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 172.376149][ T5885] usb 2-1: config 0 interface 41 has no altsetting 0 [ 172.394868][ T5885] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 172.415013][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.430960][ T5885] usb 2-1: Product: syz [ 172.445456][ T5885] usb 2-1: Manufacturer: syz [ 172.451084][ T5885] usb 2-1: SerialNumber: syz [ 172.464590][ T5885] usb 2-1: config 0 descriptor?? [ 172.470335][ T6818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.482815][ T6801] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 172.485552][ T6818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.499981][ T6801] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 172.591632][ T5906] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 172.622321][ T5906] usb 3-1: device descriptor read/8, error -71 [ 172.714576][ T6800] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 172.728643][ T6800] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 172.733326][ T6827] input: syz1 as /devices/virtual/input/input16 [ 172.831702][ T5885] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 172.861857][ T5906] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 172.876330][ T5885] usb 2-1: USB disconnect, device number 16 [ 172.895003][ T5906] usb 3-1: device descriptor read/8, error -71 [ 173.121961][ T5906] usb usb3-port1: unable to enumerate USB device [ 173.233558][ T5885] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 173.394099][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.411525][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 173.425395][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64 [ 173.449679][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.473712][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.490392][ T5885] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 173.500401][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.520531][ T5885] usb 2-1: Product: syz [ 173.525535][ T5885] usb 2-1: Manufacturer: syz [ 173.533241][ T5885] usb 2-1: SerialNumber: syz [ 173.554296][ T5885] usb 2-1: config 0 descriptor?? [ 173.570550][ T6833] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 173.586148][ T5885] iuu_phoenix 2-1:0.0: iuu_phoenix converter detected [ 173.605993][ T5885] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 173.794775][ T6835] tls_set_device_offload_rx: netdev not found [ 174.031945][ T9] usb 2-1: USB disconnect, device number 17 [ 174.049378][ T9] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 174.084703][ T9] iuu_phoenix 2-1:0.0: device disconnected [ 174.455481][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 174.631600][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 174.638887][ T9] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 174.648173][ T9] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 174.658491][ T9] usb 1-1: config 0 has no interface number 0 [ 174.665272][ T9] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.678532][ T9] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.692596][ T9] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 174.704288][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 174.713998][ T9] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 174.722961][ T9] usb 1-1: Product: syz [ 174.729420][ T9] usb 1-1: config 0 descriptor?? [ 174.741695][ T5885] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 174.893694][ T5885] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 174.904530][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.915693][ T5885] usb 3-1: config 0 descriptor?? [ 174.924557][ T5885] cp210x 3-1:0.0: cp210x converter detected [ 175.111726][ T794] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 175.143336][ T6868] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 2, id = 0 [ 175.153017][ T6851] IPVS: stopping master sync thread 6868 ... [ 175.163734][ T6867] netlink: 'syz.0.289': attribute type 4 has an invalid length. [ 175.183444][ T9] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input17 [ 175.194637][ T9] input: failed to attach handler kbd to device input17, error: -5 [ 175.222760][ T9] usb 1-1: USB disconnect, device number 17 [ 175.279405][ T51] Bluetooth: hci3: Unknown advertising packet type: 0x3a [ 175.296874][ T794] usb 2-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 175.317637][ T794] usb 2-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 175.327146][ T794] usb 2-1: Product: syz [ 175.332005][ T794] usb 2-1: Manufacturer: syz [ 175.333309][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.337805][ T794] usb 2-1: SerialNumber: syz [ 175.346318][ T794] usb 2-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 175.360831][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.376405][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.378361][ T794] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.388938][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.406154][ T794] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 175.409046][ T6862] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI [ 175.415183][ T794] usb 2-1: media controller created [ 175.426860][ T6862] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 175.426886][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: syz.2.292 Not tainted syzkaller #0 PREEMPT(full) [ 175.426903][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 175.426914][ T6862] RIP: 0010:__mutex_lock+0x14b/0x1300 [ 175.426941][ T6862] Code: 80 14 4c 9a 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 e4 0f 00 00 83 3d a3 ee 91 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 69 b1 75 f6 4d 39 64 24 60 0f 85 10 0f 00 [ 175.426956][ T6862] RSP: 0018:ffffc900049b7420 EFLAGS: 00010202 [ 175.426973][ T6862] RAX: 0000000000000019 RBX: 1ffff92000936e9c RCX: ffffffff9a4c1403 [ 175.426987][ T6862] RDX: 0000000000000000 RSI: ffffffff8e2799bf RDI: 00000000000000c8 [ 175.426998][ T6862] RBP: ffffc900049b75d8 R08: ffffc900049b7547 R09: 0000000000000000 [ 175.427012][ T6862] R10: ffffc900049b7520 R11: fffff52000936ea9 R12: 0000000000000068 [ 175.427026][ T6862] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.427038][ T6862] FS: 00007fcbde1cc6c0(0000) GS:ffff888125115000(0000) knlGS:0000000000000000 [ 175.427056][ T6862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.427067][ T6862] CR2: 000000110c40b021 CR3: 000000007a44a000 CR4: 00000000003526f0 [ 175.427081][ T6862] Call Trace: [ 175.427088][ T6862] [ 175.442289][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.451390][ T6862] ? __mutex_lock+0x319/0x1300 [ 175.451439][ T6862] ? dvb_usbv2_generic_write+0x26/0x60 [ 175.471528][ T794] usb 2-1: selecting invalid altsetting 1 [ 175.486913][ T6862] ? __mutex_trylock_common+0x158/0x260 [ 175.486947][ T6862] ? mxl111sf_ctrl_msg+0xb0/0x2f0 [ 175.486971][ T6862] ? __pfx___mutex_lock+0x10/0x10 [ 175.486992][ T6862] ? __pfx___mutex_lock+0x10/0x10 [ 175.487013][ T6862] ? __mutex_lock+0x319/0x1300 [ 175.487035][ T6862] dvb_usbv2_generic_write+0x26/0x60 [ 175.487057][ T6862] mxl111sf_ctrl_msg+0x160/0x2f0 [ 175.487085][ T6862] mxl111sf_write_reg+0xa9/0x1b0 [ 175.487112][ T6862] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 175.487138][ T6862] ? __lock_acquire+0x6b5/0x2cf0 [ 175.487163][ T6862] mxl111sf_i2c_xfer+0x496/0x5100 [ 175.487183][ T6862] ? rcu_is_watching+0x15/0xb0 [ 175.487204][ T6862] ? arch_stack_walk+0xe3/0x150 [ 175.487230][ T6862] ? unwind_next_frame+0xa5/0x23c0 [ 175.487254][ T6862] ? rcu_is_watching+0x15/0xb0 [ 175.487278][ T6862] ? unwind_next_frame+0xa5/0x23c0 [ 175.487302][ T6862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.487345][ T6862] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 175.487367][ T6862] ? is_bpf_text_address+0x292/0x2b0 [ 175.487386][ T6862] ? is_bpf_text_address+0x26/0x2b0 [ 175.487406][ T6862] ? kernel_text_address+0xa5/0xe0 [ 175.487426][ T6862] ? __kernel_text_address+0xd/0x30 [ 175.487445][ T6862] ? unwind_get_return_address+0x4d/0x90 [ 175.487478][ T6862] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 175.487497][ T6862] ? arch_stack_walk+0xfb/0x150 [ 175.487528][ T6862] ? stack_trace_save+0xa9/0x100 [ 175.487546][ T6862] ? __pfx_stack_trace_save+0x10/0x10 [ 175.487565][ T6862] ? check_path+0x21/0x40 [ 175.487595][ T6862] ? check_noncircular+0xda/0x150 [ 175.487621][ T6862] ? add_lock_to_list+0xc7/0x100 [ 175.487648][ T6862] ? lockdep_unlock+0x5d/0xd0 [ 175.487667][ T6862] ? __lock_acquire+0x146e/0x2cf0 [ 175.487702][ T6862] __i2c_transfer+0x79a/0x2020 [ 175.487722][ T6862] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 175.487746][ T6862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 175.487769][ T6862] ? i2c_transfer+0xc8/0x2d0 [ 175.487789][ T6862] i2c_transfer+0x1cc/0x2d0 [ 175.487809][ T6862] i2cdev_ioctl_rdwr+0x460/0x740 [ 175.487833][ T6862] i2cdev_ioctl+0x6a5/0x880 [ 175.487853][ T6862] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 175.487873][ T6862] ? __fget_files+0x3a0/0x420 [ 175.487895][ T6862] ? __fget_files+0x2a/0x420 [ 175.487921][ T6862] ? bpf_lsm_file_ioctl+0x9/0x20 [ 175.487939][ T6862] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 175.487957][ T6862] __se_sys_ioctl+0xfc/0x170 [ 175.487978][ T6862] do_syscall_64+0x14d/0xf80 [ 175.487999][ T6862] ? trace_irq_disable+0x3b/0x150 [ 175.488024][ T6862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.488042][ T6862] ? clear_bhb_loop+0x40/0x90 [ 175.488061][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.488081][ T6862] RIP: 0033:0x7fcbdd39aeb9 [ 175.488097][ T6862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.488110][ T6862] RSP: 002b:00007fcbde1cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.488127][ T6862] RAX: ffffffffffffffda RBX: 00007fcbdd616090 RCX: 00007fcbdd39aeb9 [ 175.488141][ T6862] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 000000000000000c [ 175.488154][ T6862] RBP: 00007fcbdd408c1f R08: 0000000000000000 R09: 0000000000000000 [ 175.488166][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.488178][ T6862] R13: 00007fcbdd616128 R14: 00007fcbdd616090 R15: 00007ffce8a11078 [ 175.488199][ T6862] [ 175.488206][ T6862] Modules linked in: [ 175.488820][ T6862] ---[ end trace 0000000000000000 ]--- [ 175.495096][ T794] set interface failed [ 175.576386][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.578061][ T6862] RIP: 0010:__mutex_lock+0x14b/0x1300 [ 175.583398][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.591169][ T6862] Code: 80 14 4c 9a 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 e4 0f 00 00 83 3d a3 ee 91 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 69 b1 75 f6 4d 39 64 24 60 0f 85 10 0f 00 [ 176.007916][ T6862] RSP: 0018:ffffc900049b7420 EFLAGS: 00010202 [ 176.015407][ T6862] RAX: 0000000000000019 RBX: 1ffff92000936e9c RCX: ffffffff9a4c1403 [ 176.025235][ T6862] RDX: 0000000000000000 RSI: ffffffff8e2799bf RDI: 00000000000000c8 [ 176.034753][ T6862] RBP: ffffc900049b75d8 R08: ffffc900049b7547 R09: 0000000000000000 [ 176.044065][ T6862] R10: ffffc900049b7520 R11: fffff52000936ea9 R12: 0000000000000068 [ 176.052322][ T6862] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.061758][ T6862] FS: 00007fcbde1cc6c0(0000) GS:ffff888125115000(0000) knlGS:0000000000000000 [ 176.072164][ T6862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.079617][ T6862] CR2: 000000110c40b021 CR3: 000000007a44a000 CR4: 00000000003526f0 [ 176.088640][ T6862] Kernel panic - not syncing: Fatal exception [ 176.096014][ T6862] Kernel Offset: disabled [ 176.100621][ T6862] Rebooting in 86400 seconds..