last executing test programs: 1m28.480252958s ago: executing program 3 (id=68): syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x386d, 0x100, 0x2, 0x1de}, &(0x7f0000000000), 0x0, &(0x7f00000004c0)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = getpgid(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_pidfd_open(r0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)=',8', 0x2) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000200, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$alg(0x26, 0x5, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 1m28.229201942s ago: executing program 3 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 1m27.865185664s ago: executing program 3 (id=73): execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \''], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0xb, 0x2}) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRES8=r3], 0xf8) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x105200, 0x0) timer_create(0x611e9f56f831f42a, 0x0, &(0x7f0000000b40)) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad38848", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x2, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x20, 0x0, @in={0x2, 0x4e20, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}, 0x1, 0x7}, 0x0) r10 = dup3(r8, r4, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 1m25.807759534s ago: executing program 3 (id=84): pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0x80000300, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x2, 0x3, 0x5, 0x6, 0x3, 0x4, {0x1, 0x3ff, 0xff, 0x4, 0x100, 0x4, 0x9, 0x7ffffffd, 0x9, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) creat(&(0x7f0000000280)='./file1\x00', 0xa9) 1m25.617233474s ago: executing program 3 (id=86): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = timerfd_create(0x8, 0x800) timerfd_settime(r2, 0x0, &(0x7f0000001a80)={{0x0, 0x3938700}}, &(0x7f0000001ac0)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111}}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0], 0xbc}}, 0x0) 1m24.308409528s ago: executing program 3 (id=95): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) creat(&(0x7f0000000280)='./file1\x00', 0xa9) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x20, 0x17, 0x1, "aa"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m23.93366095s ago: executing program 32 (id=95): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) creat(&(0x7f0000000280)='./file1\x00', 0xa9) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x20, 0x17, 0x1, "aa"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6.414963423s ago: executing program 0 (id=540): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x14c, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xd3}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xec28}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6a}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bridge0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x24048005}, 0x8085) syz_usb_control_io(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00') getdents64(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000bc0)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.178621967s ago: executing program 2 (id=542): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0xe20, 0x34324142, 0x500, 0xffff0001, 0x1, @stepwise={{0x9, 0x80000000}, {0x10001, 0x101}, {0x4, 0xa05}}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') sendfile(r0, r0, &(0x7f00000000c0)=0x400, 0x200) fchdir(r1) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)='\bW', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x40010) mknod(&(0x7f0000000040)='./bus\x00', 0xfe, 0x8) 5.804368911s ago: executing program 2 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0xf1c8a2f4b9372d40}, 0x20000080) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000600)={0x7, 0x1, 'client0\x00', 0x0, "1ce3e5fa2acb2e90", "e0fe183428f38e27ce15ef78439069ea3f8c6429443f7722d565a23a161ee202", 0x0, 0x80000001}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="635a0b4200340400"], 0x5c) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000000340)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000200)={0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xda, 0x45, 0xa1, 0x40, 0x424, 0x12c, 0x4e40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x8a, 0x0, 0x0, 0xf5, 0x81, 0x89, 0x2c}}]}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f0000000300)={&(0x7f00000002c0)=[r3, r4, r5, r6, r7, r8, r9, r10, r11, r12], 0x8, 0xa}) 4.678870013s ago: executing program 4 (id=548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4001) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (fail_nth: 1) 4.305117354s ago: executing program 0 (id=549): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xbf}}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000011c0)={0x20, 0x64, 0x2a, {0x2a, 0xf, "c263138524792c3cbdea4e708d0fb742db866e446c4e88e78881af9b7dd00ce939e423ce2a52f575"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.269000788s ago: executing program 2 (id=550): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xa49a, 0x30}, 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.199905273s ago: executing program 2 (id=551): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x121100, 0x0) read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x36, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$igmp(0x2, 0x3, 0x2) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r8, &(0x7f0000000640)={0x0, 0x1463, 0x100, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x448e, 0x20, 0x401, 0x31b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x1, 0x3df, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3fffffd, 0x8, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x78, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r7, '\x00', {0x5, 0x64, 0x0, 0x0}}, 0x0) 4.133175838s ago: executing program 4 (id=552): syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f00000002c0)) 3.903425069s ago: executing program 4 (id=553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0xc722}, 0x0, 0x6e6bc0}, [@tmpl={0x144, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb1}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, 0x2, @in6=@private2, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x0, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1fc}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0xa203) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x80000) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40) 2.998259342s ago: executing program 2 (id=554): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x1, 0x8, 0x80, 0x10000, 0x4, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0x7, &(0x7f0000000000), 0x42, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) fadvise64(0xffffffffffffffff, 0x3, 0x10001, 0x1) (async) fadvise64(0xffffffffffffffff, 0x3, 0x10001, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000fc0)={{0x2, 0x4e21, @private=0xa010102}, {0x8a0762c57e4c4124, @random="427cb6352a94"}, 0x6, {0x2, 0x4e23, @private=0xa010102}, 'batadv_slave_1\x00'}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x9, 0x93a, 0x200, 0x4a, 0x28, 0x90000005, 0x2}) 2.8411426s ago: executing program 4 (id=556): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c26881100000000000000e3394553b9851b30599980bc000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001d80)=""/4046, 0xfce}, {&(0x7f0000000d40)=""/4102, 0x1006}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f0000000140)=""/117, 0x75}, {&(0x7f00000001c0)=""/111, 0x6f}, {&(0x7f0000000300)=""/191, 0xbf}], 0x6}, 0x40010000) (fail_nth: 4) 2.237418576s ago: executing program 0 (id=558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x20, 0x1000) r2 = fcntl$dupfd(r0, 0x406, r0) fanotify_mark(r1, 0x1, 0x40000019, r2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1cc3, &(0x7f0000000200)={0x0, 0x8ceb, 0x0, 0x2, 0x32b, 0x0, r3}, &(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_submit(r7, r5, r6, &(0x7f0000000380)=@IORING_OP_FTRUNCATE={0x37, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x4436, 0x80, 0x1024002, 0x4d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x618, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, 0x0) r12 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r12, r13, r14, r15, &(0x7f0000000580)={0x2e, 0x55, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)) r16 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) write$P9_RREAD(r16, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0], 0x100b) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r2, 0x80207501, &(0x7f00000004c0)={0x0, 0xffff, 0x8}) syz_io_uring_submit$UBLK(r7, r10, r15, &(0x7f0000000580)=@ublk_get_queue_affinity_sqe={0x2e, 0x4, 0x0, r16, 0x80207501, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {r17, 0xffff, 0x8, &(0x7f0000000540), 0x1}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) r18 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r18, &(0x7f0000000080)=ANY=[], 0x78) sendfile(r2, r18, &(0x7f00000001c0)=0x1, 0x8) 2.236367103s ago: executing program 4 (id=559): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)=0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r10, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=[@iv={0x40, 0x117, 0x2, 0x28, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"}], 0x40, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f", 0x9b}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c573", 0x4b}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r14, r7, &(0x7f0000000280)={0x0, 0xac00, 0x20, 0x0, 0x231, 0x0, r1}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe6f1, 0x2, 0x1, 0x43, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe038, 0x2000, 0x3, 0x2ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e1c, 0x40, 0x2, 0x13, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd94d, 0x2000, 0x3, 0x24, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x10, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, r6, '\x00', {0x2, 0xe6a, 0x0, 0x0}}, 0x0) 2.129301713s ago: executing program 0 (id=560): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0xa, 0x6, 0x67d000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.925100202s ago: executing program 0 (id=562): execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \''], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0xb, 0x2}) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0xf9, 0x12}, {0x0, 0x6, 0x5, 0x800, [0x7f, 0xf, 0xff, 0x4, 0x0]}}}}, 0x1f) 1.924525147s ago: executing program 1 (id=563): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x121100, 0x0) read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x36, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r8, &(0x7f0000000640)={0x0, 0x1463, 0x100, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x448e, 0x20, 0x401, 0x31b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x1, 0x3df, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3fffffd, 0x8, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x78, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r7, '\x00', {0x5, 0x64, 0x0, 0x0}}, 0x0) 1.914655149s ago: executing program 2 (id=564): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x52, 0x5e, 0x74, 0x20, 0x979, 0x270, 0xed31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8, 0x0, 0x3f, "", [{{0x9, 0x4, 0xdb, 0x4, 0x0, 0x3f, 0x3e, 0x46}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffe15, 0x0}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r2, &(0x7f00000012c0)="a5", 0x1) read$dsp(r1, &(0x7f0000000000)=""/11, 0xb) mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000400), 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB='size=m']) 1.777972939s ago: executing program 1 (id=565): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08001a20", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x840) 1.665043876s ago: executing program 1 (id=566): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000400)='.\x00', &(0x7f0000000300)='msdos\x00', 0x2f009e, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0xfffffed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xffffffffffffff61, 0x2001) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind(r3, &(0x7f0000000480)=@isdn={0x22, 0xf4, 0x5, 0x81, 0x7f}, 0x80) setpgid(0x0, r2) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000280)={{0x3, 0x4, 0x10000, 0x4, 'syz1\x00', 0xa}, 0x4, 0x0, 0x2, r2, 0x6, 0xa, 'syz0\x00', &(0x7f0000000080)=['-R*\x00', '!@{\x00', '{#\x00', '[\x00', '-\x00', '(\')}(t^)\x00'], 0x18}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r4, &(0x7f0000000180)=""/81, 0x51, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xff}}}}}]}}]}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000140)={0x52, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "2e46f911"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x20, 0x37, 0x2e, {0x2e, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f5f10e0c0502e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x5, &(0x7f0000000280)={0x300, 0x1, 0xfe9, 0x2}) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f00000001c0)) ioctl$UBLK_U_CMD_ADD_DEV(r7, 0xc0207504, &(0x7f0000000100)={0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0x57, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0xd}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.645002519s ago: executing program 1 (id=567): socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0xfffffffd, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x199}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10f00, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x10, 0x0, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (fail_nth: 4) 816.710377ms ago: executing program 1 (id=568): socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0xfffffffd, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x199}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10f20, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x10, 0x0, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 636.884776ms ago: executing program 1 (id=569): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000ca91010200000000010800044000000005cb7c2e5c776aff13f862fbf9298adc7adc7a5714b144b5ac0000000000000000000000000000005a35f546c203f06ed1858d840dc6434e9cc08d2d0846033c0f84a25c69986d027dcd295d3b082b03519891a86e115c0ba77bdc912aeeb6081aff531a774bba015ca71ddd350241952fa53e13473321f70a756fa2de85ac80a4961489cc"], 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x800) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000ca91010200000000010800044000000005cb7c2e5c776aff13f862fbf9298adc7adc7a5714b144b5ac0000000000000000000000000000005a35f546c203f06ed1858d840dc6434e9cc08d2d0846033c0f84a25c69986d027dcd295d3b082b03519891a86e115c0ba77bdc912aeeb6081aff531a774bba015ca71ddd350241952fa53e13473321f70a756fa2de85ac80a4961489cc"], 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x800) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) unshare(0x40200) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x9010}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) semget(0x1, 0x5, 0x393) (async) semget(0x1, 0x5, 0x393) socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x480000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x16) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_secret(0x0) dup(r12) (async) r13 = dup(r12) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r13, r11, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x0, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0x180, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x1, 0x4, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r10, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 589.913504ms ago: executing program 4 (id=570): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x401c5820, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x20007) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xfffe}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) semget$private(0x0, 0xc, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000440)={{0x0, 0xea60}, {0x77359400}}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000340)={0x2, @sliced={0x2, [0x0, 0x3, 0x200, 0x4, 0x3195, 0x401, 0x3, 0xb51c, 0x8001, 0x31, 0x6, 0x6, 0x5, 0x6, 0x5, 0x8, 0x2, 0x9, 0x8413, 0x2, 0x402, 0x6, 0x6, 0x7f, 0x4, 0x8, 0x0, 0x4af, 0x3f0, 0x309, 0x317, 0xf000, 0xb71, 0x6, 0x5, 0x4, 0x905, 0x2, 0xe5e7, 0x7, 0xae, 0xb0ae, 0x2, 0x3, 0x7, 0x1ff, 0x7, 0x6], 0x7}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x44) getdents64(r8, &(0x7f00000002c0), 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000200)=""/154, 0x9a}, {&(0x7f0000001c40)=""/4151, 0x1037}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f0000000300)=""/155, 0xffffffffffffffee}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000000600)=""/172, 0xac}, {&(0x7f0000000900)=""/191, 0xbf}, {&(0x7f0000000040)=""/13, 0xd}], 0x9}, 0x2040) recvmsg$kcm(r7, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c0088dd76e2800c00018020000600800a00000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 0s ago: executing program 0 (id=571): syz_usb_connect(0x3, 0x24, 0x0, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x4}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) syz_usb_connect(0x5, 0x8e9, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x250, 0x4, 0x52, 0x5, 0x0, 0x2}, 0x70, &(0x7f00000009c0)={0x5, 0xf, 0x70, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x5, 0x3, 0x100, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x2, 0xf000, 0xfeff, [0x18030]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0xf7, 0x6, 0x1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x7, 0x4}, @generic={0x3b, 0x10, 0x2, "b7e482ec145fd755d51e7999566ebb238ada90dd6d83fd873b791c076f6dfcd2a6d88456c4a9fa4c95b20a1a0b313b1d0acc26d4b41d65cf"}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x820}}, {0x59, &(0x7f0000000ac0)=@string={0x59, 0x3, "e023367a6da3abeaeada6dbfb7c51b3b4a7e68ff1474f4c600f6bfad4d05f6928dd08b0c1811da0e72a108f3042f187155c7f761f8e240c670823e597567eb05714123bb7ec8d015c068ef0afb112d3efb726e83f701e8"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x41e}}, {0x2e, &(0x7f0000000b80)=@string={0x2e, 0x3, "fbd66df22f56179efebfd50bd8829447f645008d2b609eeee3a1c06f611a0a06bb21c23d503c18bf6dee511c"}}, {0x6b, &(0x7f0000000bc0)=@string={0x6b, 0x3, "177343b01ef0478206572b937759818e5bd9bccd026375c6b9a5465671cfd2c40cd005f6de931f0480f9d9b27b07a86d877f5502998c81d4c712e19bfc1ae4312bd74dd8bb40e3ac75f1ba45ad42e5ee5dfb4ee4d582f2b19d357fed2afca9345547b8625f06da4232"}}, {0x40, &(0x7f0000000c40)=@string={0x40, 0x3, "158b08d6e1aabda85fd50dfd3740e7875bfbb8a19aaf88eec55093b8946226eef52490f1314f9430869255a9631690117dd7184a3ec887afbaa35f4b9a2f"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x814}}]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04e22820"], 0x7) kernel console output (not intermixed with test programs): s in process `syz.1.67'. [ 132.425889][ T5714] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 132.425921][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.425972][ T5714] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 132.425998][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.449639][ T6036] .`: renamed from bond0 (while UP) [ 132.469805][ T5714] usb 1-1: config 0 descriptor?? [ 132.988261][ T5714] usb 1-1: USB disconnect, device number 7 [ 133.016585][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.016727][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.048479][ T6056] FAULT_INJECTION: forcing a failure. [ 133.048479][ T6056] name failslab, interval 1, probability 0, space 0, times 0 [ 133.048545][ T6056] CPU: 1 UID: 0 PID: 6056 Comm: syz.1.70 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.048570][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.048592][ T6056] Call Trace: [ 133.048605][ T6056] [ 133.048622][ T6056] dump_stack_lvl+0xe8/0x150 [ 133.048654][ T6056] should_fail_ex+0x46b/0x600 [ 133.048692][ T6056] should_failslab+0xa8/0x100 [ 133.048719][ T6056] __kmalloc_noprof+0xfe/0x7e0 [ 133.048743][ T6056] ? tomoyo_encode+0x28b/0x550 [ 133.048766][ T6056] ? tomoyo_encode+0x28b/0x550 [ 133.048798][ T6056] tomoyo_encode+0x28b/0x550 [ 133.048829][ T6056] tomoyo_realpath_from_path+0x58d/0x5d0 [ 133.048867][ T6056] ? tomoyo_path_number_perm+0x219/0x630 [ 133.048903][ T6056] tomoyo_path_number_perm+0x246/0x630 [ 133.048940][ T6056] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 133.048973][ T6056] ? __lock_acquire+0x6b5/0x2d10 [ 133.049011][ T6056] ? do_raw_spin_lock+0x12b/0x2f0 [ 133.049077][ T6056] ? __fget_files+0x2a/0x420 [ 133.049103][ T6056] ? __fget_files+0x2a/0x420 [ 133.049130][ T6056] ? __fget_files+0x3a6/0x420 [ 133.049152][ T6056] ? __fget_files+0x2a/0x420 [ 133.049179][ T6056] security_file_ioctl+0xc3/0x2a0 [ 133.049214][ T6056] __se_sys_ioctl+0x47/0x170 [ 133.049244][ T6056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.049270][ T6056] do_syscall_64+0x174/0x580 [ 133.049297][ T6056] ? trace_irq_disable+0x3b/0x140 [ 133.049326][ T6056] ? clear_bhb_loop+0x40/0x90 [ 133.049355][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.049377][ T6056] RIP: 0033:0x7f5407a5ce59 [ 133.049405][ T6056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.049428][ T6056] RSP: 002b:00007f5405cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.049459][ T6056] RAX: ffffffffffffffda RBX: 00007f5407cd5fa0 RCX: 00007f5407a5ce59 [ 133.049476][ T6056] RDX: 0000200000000040 RSI: 0000000040085112 RDI: 0000000000000003 [ 133.049491][ T6056] RBP: 00007f5405cae090 R08: 0000000000000000 R09: 0000000000000000 [ 133.049505][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.049518][ T6056] R13: 00007f5407cd6038 R14: 00007f5407cd5fa0 R15: 00007ffe2d8837d8 [ 133.049552][ T6056] [ 133.049654][ T6056] ERROR: Out of memory at tomoyo_realpath_from_path. [ 133.711073][ T6071] FAULT_INJECTION: forcing a failure. [ 133.711073][ T6071] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 133.711105][ T6071] CPU: 0 UID: 0 PID: 6071 Comm: syz.0.77 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.711126][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.711136][ T6071] Call Trace: [ 133.711146][ T6071] [ 133.711154][ T6071] dump_stack_lvl+0xe8/0x150 [ 133.711181][ T6071] should_fail_ex+0x46b/0x600 [ 133.711212][ T6071] _copy_from_user+0x2d/0xb0 [ 133.711232][ T6071] do_sock_getsockopt+0x462/0x7e0 [ 133.711259][ T6071] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 133.711292][ T6071] ? __fget_files+0x3a6/0x420 [ 133.711310][ T6071] ? __fget_files+0x2a/0x420 [ 133.711332][ T6071] __x64_sys_getsockopt+0x1aa/0x250 [ 133.711358][ T6071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.711377][ T6071] do_syscall_64+0x174/0x580 [ 133.711399][ T6071] ? trace_irq_disable+0x3b/0x140 [ 133.711420][ T6071] ? clear_bhb_loop+0x40/0x90 [ 133.711443][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.711460][ T6071] RIP: 0033:0x7fa70040ce59 [ 133.711477][ T6071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.711491][ T6071] RSP: 002b:00007fa6fe666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 133.711509][ T6071] RAX: ffffffffffffffda RBX: 00007fa700685fa0 RCX: 00007fa70040ce59 [ 133.711522][ T6071] RDX: 0000000000000008 RSI: 000000000000010c RDI: 0000000000000004 [ 133.711532][ T6071] RBP: 00007fa6fe666090 R08: 00002000000002c0 R09: 0000000000000000 [ 133.711543][ T6071] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 133.711553][ T6071] R13: 00007fa700686038 R14: 00007fa700685fa0 R15: 00007ffd2099ce08 [ 133.711579][ T6071] [ 133.971646][ T5714] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 134.092833][ T6076] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 134.092862][ T6076] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 134.101600][ T6076] vhci_hcd vhci_hcd.0: Device attached [ 134.131320][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 134.134024][ T5714] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.134052][ T5714] usb 4-1: config 0 has no interface number 0 [ 134.134084][ T5714] usb 4-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 134.134126][ T5714] usb 4-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 134.134156][ T5714] usb 4-1: config 0 interface 1 has no altsetting 0 [ 134.137422][ T5714] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 134.137453][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.137475][ T5714] usb 4-1: Product: syz [ 134.137491][ T5714] usb 4-1: Manufacturer: syz [ 134.137507][ T5714] usb 4-1: SerialNumber: syz [ 134.327783][ T5714] usb 4-1: config 0 descriptor?? [ 134.451595][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 134.461267][ T833] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.516756][ T9] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 134.533460][ T5609] Bluetooth: hci1: ISO packet for unknown connection handle 353 [ 134.673675][ T5714] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 134.674220][ T5714] gspca_spca1528: reg_w err -71 [ 134.697228][ T5714] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 134.708380][ T833] usb 1-1: Using ep0 maxpacket: 16 [ 134.729457][ T833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.729485][ T833] usb 1-1: config 0 has no interfaces? [ 134.749065][ T833] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 134.749102][ T833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.749116][ T833] usb 1-1: Product: syz [ 134.749127][ T833] usb 1-1: Manufacturer: syz [ 134.749138][ T833] usb 1-1: SerialNumber: syz [ 134.830680][ T833] usb 1-1: config 0 descriptor?? [ 134.870309][ T5714] usb 4-1: USB disconnect, device number 6 [ 135.142411][ T6077] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 135.143565][ T5770] vhci_hcd vhci_hcd.0: stop threads [ 135.143584][ T5770] vhci_hcd vhci_hcd.0: release socket [ 135.143667][ T5770] vhci_hcd vhci_hcd.0: disconnect device [ 135.451367][ T5694] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 135.602256][ T5694] usb 2-1: Using ep0 maxpacket: 16 [ 135.605505][ T833] usb 1-1: USB disconnect, device number 8 [ 135.606880][ T5694] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 135.606913][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 135.657857][ T5694] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 135.657889][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.657911][ T5694] usb 2-1: Product: syz [ 135.657927][ T5694] usb 2-1: Manufacturer: syz [ 135.657943][ T5694] usb 2-1: SerialNumber: syz [ 135.744015][ T5694] usb 2-1: config 0 descriptor?? [ 135.764732][ T5694] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 135.970203][ T6102] Bluetooth: MGMT ver 1.23 [ 135.995602][ T5694] usb 2-1: USB disconnect, device number 9 [ 136.572148][ T6124] binder: 6123:6124 unknown command 0 [ 136.572165][ T6124] binder: 6123:6124 ioctl c0306201 2000000001c0 returned -22 [ 136.711478][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.871701][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 136.890384][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.890412][ T10] usb 1-1: config 0 has no interface number 0 [ 136.890445][ T10] usb 1-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 136.890486][ T10] usb 1-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 136.890516][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 136.949586][ T10] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 136.949619][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.949642][ T10] usb 1-1: Product: syz [ 136.949657][ T10] usb 1-1: Manufacturer: syz [ 136.949674][ T10] usb 1-1: SerialNumber: syz [ 136.990243][ T10] usb 1-1: config 0 descriptor?? [ 137.200742][ T5609] Bluetooth: hci0: ISO packet for unknown connection handle 353 [ 137.267431][ T6130] netlink: 516 bytes leftover after parsing attributes in process `syz.1.97'. [ 137.349992][ T5763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.352259][ T6130] netlink: 516 bytes leftover after parsing attributes in process `syz.1.97'. [ 137.390346][ T6130] netlink: 516 bytes leftover after parsing attributes in process `syz.1.97'. [ 137.390945][ T6130] netlink: 516 bytes leftover after parsing attributes in process `syz.1.97'. [ 137.412491][ T6130] netlink: 516 bytes leftover after parsing attributes in process `syz.1.97'. [ 137.415042][ T6130] netlink: 516 bytes leftover after parsing attributes in process `syz.1.97'. [ 137.415671][ T6130] netlink: 516 bytes leftover after parsing attributes in process `syz.1.97'. [ 137.417058][ T6130] netlink: 516 bytes leftover after parsing attributes in process `syz.1.97'. [ 137.417702][ T6130] netlink: 516 bytes leftover after parsing attributes in process `syz.1.97'. [ 137.418312][ T6130] netlink: 516 bytes leftover after parsing attributes in process `syz.1.97'. [ 137.557916][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 137.561625][ T10] gspca_spca1528: reg_w err -71 [ 137.582566][ T10] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 137.605520][ T10] usb 1-1: USB disconnect, device number 9 [ 137.797616][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.829123][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.831614][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.853614][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.856115][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.890411][ T6140] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 137.890438][ T6140] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 137.890530][ T6140] vhci_hcd vhci_hcd.0: Device attached [ 138.232211][ T32] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 138.271328][ T5694] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 138.307526][ T32] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 138.415119][ T5763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.423528][ T5694] usb 2-1: Using ep0 maxpacket: 16 [ 138.445972][ T5694] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.446000][ T5694] usb 2-1: config 0 has no interfaces? [ 138.485166][ T5694] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 138.485200][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.485222][ T5694] usb 2-1: Product: syz [ 138.485238][ T5694] usb 2-1: Manufacturer: syz [ 138.485254][ T5694] usb 2-1: SerialNumber: syz [ 138.571970][ T5694] usb 2-1: config 0 descriptor?? [ 138.721444][ T833] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 138.900238][ T6142] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 138.903372][ T5922] vhci_hcd vhci_hcd.1: stop threads [ 138.903407][ T5922] vhci_hcd vhci_hcd.1: release socket [ 138.905665][ T5922] vhci_hcd vhci_hcd.1: disconnect device [ 138.936446][ T833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.936485][ T833] usb 3-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 138.936507][ T833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.008454][ T833] usb 3-1: config 0 descriptor?? [ 139.320108][ T5763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.467023][ T833] apple 0003:05AC:021C.0001: unknown main item tag 0x0 [ 139.467065][ T833] apple 0003:05AC:021C.0001: unknown main item tag 0x0 [ 139.467092][ T833] apple 0003:05AC:021C.0001: unknown main item tag 0x0 [ 139.467119][ T833] apple 0003:05AC:021C.0001: unknown main item tag 0x0 [ 139.467147][ T833] apple 0003:05AC:021C.0001: unknown main item tag 0x0 [ 139.467175][ T833] apple 0003:05AC:021C.0001: unknown main item tag 0x0 [ 139.467203][ T833] apple 0003:05AC:021C.0001: unknown main item tag 0x0 [ 139.467231][ T833] apple 0003:05AC:021C.0001: unknown main item tag 0x0 [ 139.467259][ T833] apple 0003:05AC:021C.0001: unknown main item tag 0x0 [ 139.467287][ T833] apple 0003:05AC:021C.0001: unknown main item tag 0x0 [ 139.618940][ T833] apple 0003:05AC:021C.0001: hidraw0: USB HID v0.bd Device [HID 05ac:021c] on usb-dummy_hcd.2-1/input0 [ 139.655795][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 139.817810][ T833] usb 2-1: USB disconnect, device number 10 [ 139.971415][ T5609] Bluetooth: hci1: command tx timeout [ 140.116732][ T5763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.002489][ T37] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 141.156907][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 141.177351][ T37] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.177380][ T37] usb 2-1: config 0 has no interface number 0 [ 141.177419][ T37] usb 2-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 141.177471][ T37] usb 2-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 141.177502][ T37] usb 2-1: config 0 interface 1 has no altsetting 0 [ 141.236567][ T37] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 141.236599][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.236620][ T37] usb 2-1: Product: syz [ 141.236636][ T37] usb 2-1: Manufacturer: syz [ 141.236651][ T37] usb 2-1: SerialNumber: syz [ 141.286657][ T37] usb 2-1: config 0 descriptor?? [ 141.458695][ T833] usb 3-1: USB disconnect, device number 8 [ 141.497258][ T5609] Bluetooth: hci2: ISO packet for unknown connection handle 353 [ 141.669710][ T37] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 141.670413][ T37] gspca_spca1528: reg_w err -71 [ 141.690862][ T37] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 141.711880][ T37] usb 2-1: USB disconnect, device number 11 [ 141.729404][ T5763] bridge_slave_1: left allmulticast mode [ 141.771696][ T5763] bridge_slave_1: left promiscuous mode [ 141.813561][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.856541][ T6198] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 141.976359][ T5609] Bluetooth: hci0: command tx timeout [ 141.987597][ T5609] Bluetooth: hci3: Malformed LE Event: 0x1b [ 142.006296][ T5763] bridge_slave_0: left allmulticast mode [ 142.006336][ T5763] bridge_slave_0: left promiscuous mode [ 142.006633][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.053444][ T5609] Bluetooth: hci1: command tx timeout [ 142.333174][ T6206] __nla_validate_parse: 9 callbacks suppressed [ 142.333194][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 142.395300][ T5697] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 142.461930][ T5694] IPVS: starting estimator thread 0... [ 142.537934][ T6206] IPVS: lc: FWM 3 0x00000003 - no destination available [ 142.556053][ T5697] usb 3-1: device descriptor read/64, error -71 [ 142.591387][ T6208] IPVS: using max 11 ests per chain, 26400 per kthread [ 142.854329][ T5697] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 142.993552][ T5697] usb 3-1: device descriptor read/64, error -71 [ 143.113878][ T5697] usb usb3-port1: attempt power cycle [ 143.411477][ T32] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 143.502094][ T5697] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 143.522111][ T5697] usb 3-1: device descriptor read/8, error -71 [ 143.761345][ T5697] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 143.782167][ T5697] usb 3-1: device descriptor read/8, error -71 [ 143.782430][ T5763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.862249][ T5763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.903131][ T5697] usb usb3-port1: unable to enumerate USB device [ 143.924237][ T5763] bond0 (unregistering): Released all slaves [ 144.037588][ T6211] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 144.037616][ T6211] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 144.105831][ T6211] vhci_hcd vhci_hcd.0: Device attached [ 144.144108][ T5609] Bluetooth: hci1: command tx timeout [ 144.371389][ T32] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 144.423673][ T5697] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 144.431923][ T32] usb 35-1: device descriptor read/64, error -110 [ 144.444636][ T6221] netlink: 'syz.0.119': attribute type 10 has an invalid length. [ 144.444691][ T6221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.119'. [ 144.477688][ T6221] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 144.523432][ T6221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.641385][ T32] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 144.651280][ T5697] usb 2-1: Using ep0 maxpacket: 16 [ 144.653680][ T5697] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.653705][ T5697] usb 2-1: config 0 has no interfaces? [ 144.660191][ T5697] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 144.660223][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.660246][ T5697] usb 2-1: Product: syz [ 144.660261][ T5697] usb 2-1: Manufacturer: syz [ 144.660277][ T5697] usb 2-1: SerialNumber: syz [ 144.716978][ T32] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 144.719384][ T5697] usb 2-1: config 0 descriptor?? [ 144.804398][ T6228] netlink: 'syz.0.120': attribute type 1 has an invalid length. [ 144.804419][ T6228] netlink: 'syz.0.120': attribute type 2 has an invalid length. [ 145.094614][ T6212] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 145.117901][ T1195] vhci_hcd vhci_hcd.1: stop threads [ 145.117923][ T1195] vhci_hcd vhci_hcd.1: release socket [ 145.119787][ T1195] vhci_hcd vhci_hcd.1: disconnect device [ 145.332779][ T6243] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 145.332829][ T6243] overlayfs: conflicting options: userxattr,metacopy=on [ 145.390800][ T6245] netlink: 36 bytes leftover after parsing attributes in process `syz.2.121'. [ 145.420191][ T6246] vxcan0: tx address claim with different name [ 145.431113][ T6246] netlink: 68 bytes leftover after parsing attributes in process `syz.0.122'. [ 145.761794][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 145.914416][ T5815] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 145.924276][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 145.927305][ T10] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 145.927340][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.927374][ T10] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 145.927394][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.999413][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 146.014501][ T10] usb 1-1: config 0 descriptor?? [ 146.124668][ T5815] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.125324][ T5815] usb 3-1: not running at top speed; connect to a high speed hub [ 146.162193][ T5815] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 146.162231][ T5815] usb 3-1: config 0 has no interface number 0 [ 146.162289][ T5815] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 146.162320][ T5815] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 146.162344][ T5815] usb 3-1: config 0 interface 88 has no altsetting 0 [ 146.175156][ T5815] usb 3-1: string descriptor 0 read error: -22 [ 146.175306][ T5815] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 146.175333][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 146.215795][ T5609] Bluetooth: hci1: command tx timeout [ 146.285875][ T5815] usb 3-1: config 0 descriptor?? [ 146.421003][ T5815] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input5 [ 146.498793][ T10] hid_parser_main: 30 callbacks suppressed [ 146.498826][ T10] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 146.498856][ T10] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 146.498879][ T10] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 146.498904][ T10] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 146.498930][ T10] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 146.506379][ T10] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 146.506458][ T10] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 146.506532][ T10] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 146.783947][ T6246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.784558][ T6246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.820078][ T10] hid-alps 0003:044E:1215.0002: hidraw0: USB HID v0.00 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 146.939268][ T5697] usb 1-1: USB disconnect, device number 10 [ 146.987960][ T10] usb 2-1: USB disconnect, device number 12 [ 146.995173][ T5816] udevd[5816]: Error opening device "/dev/input/event4": Input/output error [ 146.995304][ T5816] udevd[5816]: Unable to EVIOCGABS device "/dev/input/event4" [ 146.995440][ T5816] udevd[5816]: Unable to EVIOCGABS device "/dev/input/event4" [ 147.269886][ T6258] process 'syz.1.124' launched './file0' with NULL argv: empty string added [ 147.473297][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.473635][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.473929][ T6136] bridge_slave_0: entered allmulticast mode [ 147.476975][ T6136] bridge_slave_0: entered promiscuous mode [ 147.480712][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.481131][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.484318][ T6136] bridge_slave_1: entered allmulticast mode [ 147.512196][ T6136] bridge_slave_1: entered promiscuous mode [ 147.884714][ T6136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.967231][ T6136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.153188][ T5924] tipc: Subscription rejected, illegal request [ 148.594151][ T5763] hsr_slave_0: left promiscuous mode [ 148.631328][ T5763] hsr_slave_1: left promiscuous mode [ 148.650986][ T5763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.662124][ T5763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.712379][ T5763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.712408][ T5763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.762180][ T6287] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 148.762205][ T6287] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 148.762286][ T6287] vhci_hcd vhci_hcd.0: Device attached [ 148.768472][ T5694] usb 3-1: USB disconnect, device number 13 [ 148.873238][ T5763] veth1_macvtap: left promiscuous mode [ 148.873502][ T5763] veth0_macvtap: left promiscuous mode [ 148.873853][ T5763] veth1_vlan: left promiscuous mode [ 148.896690][ T5763] veth0_vlan: left promiscuous mode [ 149.110102][ T821] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 149.306569][ T821] usb 2-1: Using ep0 maxpacket: 16 [ 149.308973][ T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.309001][ T821] usb 2-1: config 0 has no interfaces? [ 149.359790][ T821] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 149.359828][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.359860][ T821] usb 2-1: Product: syz [ 149.359871][ T821] usb 2-1: Manufacturer: syz [ 149.359882][ T821] usb 2-1: SerialNumber: syz [ 149.398053][ T821] usb 2-1: config 0 descriptor?? [ 149.651415][ T5694] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 149.716653][ T6288] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 149.717186][ T5920] vhci_hcd vhci_hcd.1: stop threads [ 149.717205][ T5920] vhci_hcd vhci_hcd.1: release socket [ 149.717287][ T5920] vhci_hcd vhci_hcd.1: disconnect device [ 149.801402][ T32] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 149.812039][ T5694] usb 3-1: Using ep0 maxpacket: 8 [ 149.830046][ T5694] usb 3-1: config 209 has an invalid interface number: 230 but max is 1 [ 149.830069][ T5694] usb 3-1: config 209 has an invalid descriptor of length 0, skipping remainder of the config [ 149.830083][ T5694] usb 3-1: config 209 has 1 interface, different from the descriptor's value: 2 [ 149.830098][ T5694] usb 3-1: config 209 has no interface number 0 [ 149.830128][ T5694] usb 3-1: config 209 interface 230 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 149.830144][ T5694] usb 3-1: config 209 interface 230 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 149.830165][ T5694] usb 3-1: config 209 interface 230 has no altsetting 0 [ 149.900244][ T5694] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=b0.1f [ 149.900278][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.900301][ T5694] usb 3-1: Product: syz [ 149.900317][ T5694] usb 3-1: Manufacturer: syz [ 149.900332][ T5694] usb 3-1: SerialNumber: syz [ 150.173940][ T5694] usb 3-1: USB disconnect, device number 14 [ 150.422110][ T5763] team0 (unregistering): Port device team_slave_1 removed [ 150.481900][ T5763] team0 (unregistering): Port device team_slave_0 removed [ 150.816729][ T6136] team0: Port device team_slave_0 added [ 150.948013][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 150.990593][ T6136] team0: Port device team_slave_1 added [ 151.122913][ T6308] binder: 6307:6308 ioctl c0306201 200000000640 returned -14 [ 151.139082][ T6308] binder: 6307:6308 ioctl ae80 0 returned -22 [ 151.140367][ T6308] binder: 6307:6308 ioctl c0306201 200000000300 returned -14 [ 151.406723][ T6136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.406743][ T6136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.406764][ T6136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.452232][ T6136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.452250][ T6136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.452280][ T6136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.481390][ T32] usb 2-1: USB disconnect, device number 13 [ 151.913643][ T6136] hsr_slave_0: entered promiscuous mode [ 151.915983][ T6136] hsr_slave_1: entered promiscuous mode [ 151.917830][ T6136] debugfs: 'hsr0' already exists in 'hsr' [ 151.917855][ T6136] Cannot create hsr debugfs directory [ 152.621469][ T5697] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 152.621640][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 152.755450][ T5697] usb 3-1: device descriptor read/64, error -71 [ 152.773440][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 152.776217][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 152.776245][ T9] usb 2-1: config 0 has no interface number 0 [ 152.776294][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 152.779382][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 152.779412][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.779435][ T9] usb 2-1: Product: syz [ 152.779451][ T9] usb 2-1: Manufacturer: syz [ 152.779466][ T9] usb 2-1: SerialNumber: syz [ 152.882537][ T9] usb 2-1: config 0 descriptor?? [ 153.063258][ T6334] program syz.0.141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.066420][ T5697] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 153.183194][ T6136] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 153.221494][ T5697] usb 3-1: device descriptor read/64, error -71 [ 153.314002][ T6136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.339918][ T6136] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 153.363800][ T5697] usb usb3-port1: attempt power cycle [ 153.395035][ T6136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.407943][ T6136] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 153.487350][ T6136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.580557][ T6136] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 153.595973][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 153.596015][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 153.751552][ T5697] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 153.784182][ T5697] usb 3-1: device descriptor read/8, error -71 [ 153.799122][ T6324] netlink: 380 bytes leftover after parsing attributes in process `syz.1.139'. [ 153.817265][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 153.817294][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 153.817313][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 153.817331][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 153.817575][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 153.879252][ T6136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.934988][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3 [ 153.977735][ T9] usb 2-1: USB disconnect, device number 14 [ 154.061451][ T5697] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 154.273723][ T5697] usb 3-1: device not accepting address 18, error -71 [ 154.274159][ T5697] usb usb3-port1: unable to enumerate USB device [ 154.684760][ T6362] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 154.684790][ T6362] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 154.686761][ T6362] vhci_hcd vhci_hcd.0: Device attached [ 154.726789][ T6360] FAULT_INJECTION: forcing a failure. [ 154.726789][ T6360] name failslab, interval 1, probability 0, space 0, times 0 [ 154.726824][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz.2.145 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.726848][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.726862][ T6360] Call Trace: [ 154.726870][ T6360] [ 154.726879][ T6360] dump_stack_lvl+0xe8/0x150 [ 154.726919][ T6360] should_fail_ex+0x46b/0x600 [ 154.726956][ T6360] should_failslab+0xa8/0x100 [ 154.726984][ T6360] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 154.727020][ T6360] ? skb_clone+0x212/0x3a0 [ 154.727048][ T6360] ? skb_clone+0x212/0x3a0 [ 154.727081][ T6360] skb_clone+0x212/0x3a0 [ 154.727112][ T6360] __netlink_deliver_tap+0x424/0x8b0 [ 154.727152][ T6360] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.727181][ T6360] netlink_deliver_tap+0x19c/0x1b0 [ 154.727211][ T6360] netlink_unicast+0x754/0x920 [ 154.727248][ T6360] netlink_sendmsg+0x813/0xb40 [ 154.727287][ T6360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.727319][ T6360] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 154.727353][ T6360] ? aa_sock_msg_perm+0x122/0x200 [ 154.727378][ T6360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.727406][ T6360] sock_sendmsg_nosec+0x13a/0x180 [ 154.727444][ T6360] ____sys_sendmsg+0x55c/0x870 [ 154.727479][ T6360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.727517][ T6360] ? import_iovec+0x73/0xa0 [ 154.727546][ T6360] ___sys_sendmsg+0x2a5/0x360 [ 154.727573][ T6360] ? __lock_acquire+0x6b5/0x2d10 [ 154.727606][ T6360] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.727669][ T6360] ? __fget_files+0x2a/0x420 [ 154.727692][ T6360] ? __fget_files+0x3a6/0x420 [ 154.727726][ T6360] __x64_sys_sendmsg+0x1b7/0x290 [ 154.727757][ T6360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.727806][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.727830][ T6360] do_syscall_64+0x174/0x580 [ 154.727857][ T6360] ? trace_irq_disable+0x3b/0x140 [ 154.727885][ T6360] ? clear_bhb_loop+0x40/0x90 [ 154.727922][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.727950][ T6360] RIP: 0033:0x7f68d574ce59 [ 154.727970][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.727988][ T6360] RSP: 002b:00007f68d39a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.728011][ T6360] RAX: ffffffffffffffda RBX: 00007f68d59c5fa0 RCX: 00007f68d574ce59 [ 154.728027][ T6360] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000b [ 154.728041][ T6360] RBP: 00007f68d39a6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.728054][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.728067][ T6360] R13: 00007f68d59c6038 R14: 00007f68d59c5fa0 R15: 00007ffe1b4a3868 [ 154.728102][ T6360] [ 154.731468][ T5694] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 154.898243][ T821] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 154.993826][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 155.002948][ T5694] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.002982][ T5694] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.003024][ T5694] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.003048][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.098026][ T821] usb 33-1: new full-speed USB device number 6 using vhci_hcd [ 155.134774][ T6358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.149479][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 155.160557][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.160585][ T9] usb 1-1: config 0 has no interfaces? [ 155.194305][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 155.194337][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.194359][ T9] usb 1-1: Product: syz [ 155.194375][ T9] usb 1-1: Manufacturer: syz [ 155.194391][ T9] usb 1-1: SerialNumber: syz [ 155.249282][ T5694] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.294560][ T9] usb 1-1: config 0 descriptor?? [ 155.717757][ T6363] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 155.724036][ T5771] vhci_hcd vhci_hcd.0: stop threads [ 155.724057][ T5771] vhci_hcd vhci_hcd.0: release socket [ 155.724131][ T5771] vhci_hcd vhci_hcd.0: disconnect device [ 156.194387][ T5694] usb 2-1: USB disconnect, device number 15 [ 156.361328][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 156.541379][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 156.545605][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.545632][ T10] usb 3-1: config 0 has no interface number 0 [ 156.545663][ T10] usb 3-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 156.545715][ T10] usb 3-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 156.545745][ T10] usb 3-1: config 0 interface 1 has no altsetting 0 [ 156.550856][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 156.550888][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.550909][ T10] usb 3-1: Product: syz [ 156.550924][ T10] usb 3-1: Manufacturer: syz [ 156.550939][ T10] usb 3-1: SerialNumber: syz [ 156.652632][ T37] usb 1-1: USB disconnect, device number 11 [ 156.705212][ T10] usb 3-1: config 0 descriptor?? [ 156.916816][ T5609] Bluetooth: hci3: ISO packet for unknown connection handle 353 [ 156.965698][ T5265] 8021q: adding VLAN 0 to HW filter on device eth4 [ 157.059506][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 157.060074][ T10] gspca_spca1528: reg_w err -71 [ 157.081507][ T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 157.107534][ T10] usb 3-1: USB disconnect, device number 19 [ 157.220043][ T6391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.398905][ T6136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.508802][ T6136] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.549992][ T212] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.558712][ T212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.601295][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 157.658520][ T212] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.659515][ T212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.810435][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 157.824988][ T10] usb 1-1: config index 0 descriptor too short (expected 64584, got 27) [ 157.825018][ T10] usb 1-1: config 53 has too many interfaces: 179, using maximum allowed: 32 [ 157.825040][ T10] usb 1-1: config 53 has an invalid interface descriptor of length 5, skipping [ 157.825061][ T10] usb 1-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 157.825082][ T10] usb 1-1: config 53 has 0 interfaces, different from the descriptor's value: 179 [ 157.880672][ T10] usb 1-1: string descriptor 0 read error: -22 [ 157.880854][ T10] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=2a.ad [ 157.880883][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.989553][ T6402] binder: 6401:6402 ioctl c0306201 2000000001c0 returned -14 [ 158.071418][ T37] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 158.145260][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.145889][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.163614][ T10] usb 1-1: USB disconnect, device number 12 [ 158.215592][ T6405] hsr0: entered promiscuous mode [ 158.281382][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 158.283830][ T37] usb 2-1: config 8 has an invalid interface number: 7 but max is 0 [ 158.283857][ T37] usb 2-1: config 8 has no interface number 0 [ 158.284113][ T37] usb 2-1: config 8 interface 7 has no altsetting 0 [ 158.287641][ T37] usb 2-1: New USB device found, idVendor=04fc, idProduct=0201, bcdDevice=42.d0 [ 158.287672][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.287694][ T37] usb 2-1: Product: syz [ 158.287710][ T37] usb 2-1: Manufacturer: syz [ 158.287726][ T37] usb 2-1: SerialNumber: syz [ 158.665345][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.699158][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.740196][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 158.775635][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.775670][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.887320][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.887352][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.917048][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 159.063648][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 159.093966][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.095835][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.095933][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.145011][ T10] usb 3-1: string descriptor 0 read error: -22 [ 159.145155][ T10] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 159.145182][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.153304][ T833] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 159.204774][ T10] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 159.206739][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 159.314185][ T833] usb 1-1: Using ep0 maxpacket: 32 [ 159.317896][ T833] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 159.317925][ T833] usb 1-1: config 0 has no interface number 0 [ 159.318039][ T833] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.318086][ T833] usb 1-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 159.318113][ T833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.429183][ T833] usb 1-1: config 0 descriptor?? [ 159.871780][ T6423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.891003][ T6423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.900960][ T10] usb 3-1: 2:1 : can't get High Capability descriptor [ 160.245599][ T821] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 160.274563][ T833] uclogic 0003:5543:0045.0003: interface is invalid, ignoring [ 160.418734][ T37] spcp8x5 2-1:8.7: required endpoints missing [ 160.485374][ T37] usb 2-1: USB disconnect, device number 16 [ 160.683411][ T32] IPVS: starting estimator thread 0... [ 160.687505][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.688122][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.690519][ T6428] IPVS: lc: FWM 3 0x00000003 - no destination available [ 160.785996][ T6136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.801320][ T6430] IPVS: using max 9 ests per chain, 21600 per kthread [ 161.050869][ T6435] FAULT_INJECTION: forcing a failure. [ 161.050869][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 161.050903][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.1.157 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 161.050923][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.050934][ T6435] Call Trace: [ 161.050941][ T6435] [ 161.050948][ T6435] dump_stack_lvl+0xe8/0x150 [ 161.050975][ T6435] should_fail_ex+0x46b/0x600 [ 161.051005][ T6435] should_failslab+0xa8/0x100 [ 161.051027][ T6435] __kmalloc_noprof+0xfe/0x7e0 [ 161.051046][ T6435] ? tomoyo_encode+0x28b/0x550 [ 161.051065][ T6435] ? tomoyo_encode+0x28b/0x550 [ 161.051090][ T6435] tomoyo_encode+0x28b/0x550 [ 161.051117][ T6435] tomoyo_realpath_from_path+0x58d/0x5d0 [ 161.051154][ T6435] ? tomoyo_path_number_perm+0x219/0x630 [ 161.051182][ T6435] tomoyo_path_number_perm+0x246/0x630 [ 161.051211][ T6435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 161.051237][ T6435] ? __lock_acquire+0x6b5/0x2d10 [ 161.051272][ T6435] ? do_raw_spin_lock+0x12b/0x2f0 [ 161.051321][ T6435] ? __fget_files+0x2a/0x420 [ 161.051343][ T6435] ? __fget_files+0x2a/0x420 [ 161.051361][ T6435] ? __fget_files+0x3a6/0x420 [ 161.051379][ T6435] ? __fget_files+0x2a/0x420 [ 161.051402][ T6435] security_file_ioctl+0xc3/0x2a0 [ 161.051443][ T6435] __se_sys_ioctl+0x47/0x170 [ 161.051470][ T6435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.051491][ T6435] do_syscall_64+0x174/0x580 [ 161.051518][ T6435] ? clear_bhb_loop+0x40/0x90 [ 161.051542][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.051560][ T6435] RIP: 0033:0x7f5407a5ce59 [ 161.051578][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.051595][ T6435] RSP: 002b:00007f5405cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.051615][ T6435] RAX: ffffffffffffffda RBX: 00007f5407cd5fa0 RCX: 00007f5407a5ce59 [ 161.051628][ T6435] RDX: 0000200000000a40 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 161.051638][ T6435] RBP: 00007f5405cae090 R08: 0000000000000000 R09: 0000000000000000 [ 161.051648][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.051658][ T6435] R13: 00007f5407cd6038 R14: 00007f5407cd5fa0 R15: 00007ffe2d8837d8 [ 161.051684][ T6435] [ 161.070452][ T10] usb 3-1: USB disconnect, device number 20 [ 161.074160][ T6435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 161.485824][ T6438] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 161.485854][ T6438] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.485958][ T6438] vhci_hcd vhci_hcd.0: Device attached [ 161.712381][ T821] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 161.773437][ T821] usb 35-1: new full-speed USB device number 5 using vhci_hcd [ 161.821596][ T5815] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 161.887687][ T6136] veth0_vlan: entered promiscuous mode [ 161.962089][ T6136] veth1_vlan: entered promiscuous mode [ 161.971428][ T5815] usb 2-1: Using ep0 maxpacket: 16 [ 161.974359][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.974386][ T5815] usb 2-1: config 0 has no interfaces? [ 161.978171][ T5815] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 161.978202][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.978233][ T5815] usb 2-1: Product: syz [ 161.978250][ T5815] usb 2-1: Manufacturer: syz [ 161.978267][ T5815] usb 2-1: SerialNumber: syz [ 162.040841][ T5815] usb 2-1: config 0 descriptor?? [ 162.217373][ T6136] veth0_macvtap: entered promiscuous mode [ 162.278668][ T6136] veth1_macvtap: entered promiscuous mode [ 162.370184][ T6440] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 162.370927][ T44] vhci_hcd vhci_hcd.1: stop threads [ 162.370946][ T44] vhci_hcd vhci_hcd.1: release socket [ 162.371053][ T44] vhci_hcd vhci_hcd.1: disconnect device [ 162.477117][ T6136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.557590][ T6136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.635819][ T5924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.656479][ T32] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 162.659229][ T5924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.689911][ T5924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.690156][ T5924] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.801444][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 162.808239][ T32] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.808267][ T32] usb 3-1: config 0 has no interface number 0 [ 162.808296][ T32] usb 3-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 162.808324][ T32] usb 3-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 162.808344][ T32] usb 3-1: config 0 interface 1 has no altsetting 0 [ 162.831427][ T32] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 162.831513][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.831575][ T32] usb 3-1: Product: syz [ 162.831617][ T32] usb 3-1: Manufacturer: syz [ 162.831652][ T32] usb 3-1: SerialNumber: syz [ 162.873025][ T32] usb 3-1: config 0 descriptor?? [ 163.113380][ T5609] Bluetooth: hci3: ISO packet for unknown connection handle 353 [ 163.248676][ T32] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 163.249201][ T32] gspca_spca1528: reg_w err -71 [ 163.263787][ T32] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 163.295425][ T5815] usb 2-1: USB disconnect, device number 17 [ 163.333080][ T32] usb 3-1: USB disconnect, device number 21 [ 164.427683][ T5770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.427702][ T5770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.725196][ T5770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.725217][ T5770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.261807][ T37] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 165.415948][ T37] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 165.415985][ T37] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 165.418528][ T37] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 165.418559][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.418580][ T37] usb 3-1: Product: syz [ 165.418600][ T37] usb 3-1: Manufacturer: syz [ 165.418610][ T37] usb 3-1: SerialNumber: syz [ 165.672365][ T5694] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.837794][ T5694] usb 5-1: Using ep0 maxpacket: 16 [ 165.839886][ T5694] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.839913][ T5694] usb 5-1: config 0 has no interface number 0 [ 165.839952][ T5694] usb 5-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 165.839998][ T5694] usb 5-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 165.840028][ T5694] usb 5-1: config 0 interface 1 has no altsetting 0 [ 165.857038][ T5694] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 165.857121][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.857188][ T5694] usb 5-1: Product: syz [ 165.857204][ T5694] usb 5-1: Manufacturer: syz [ 165.857221][ T5694] usb 5-1: SerialNumber: syz [ 165.937085][ T5694] usb 5-1: config 0 descriptor?? [ 166.029789][ T833] usb 1-1: USB disconnect, device number 13 [ 166.176839][ T5609] Bluetooth: hci1: ISO packet for unknown connection handle 353 [ 166.219480][ T37] usb 3-1: USB disconnect, device number 22 [ 166.366070][ T5694] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 166.366491][ T5694] gspca_spca1528: reg_w err -71 [ 166.388519][ T5694] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 166.481702][ T5694] usb 5-1: USB disconnect, device number 2 [ 166.943367][ T821] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 167.055785][ T6489] FAULT_INJECTION: forcing a failure. [ 167.055785][ T6489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.055822][ T6489] CPU: 0 UID: 0 PID: 6489 Comm: syz.4.174 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 167.055846][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.055859][ T6489] Call Trace: [ 167.055867][ T6489] [ 167.055876][ T6489] dump_stack_lvl+0xe8/0x150 [ 167.055908][ T6489] should_fail_ex+0x46b/0x600 [ 167.055945][ T6489] _copy_from_user+0x2d/0xb0 [ 167.055971][ T6489] __se_sys_epoll_ctl+0xbd/0x210 [ 167.056001][ T6489] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 167.056037][ T6489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.056062][ T6489] do_syscall_64+0x174/0x580 [ 167.056091][ T6489] ? trace_irq_disable+0x3b/0x140 [ 167.056119][ T6489] ? clear_bhb_loop+0x40/0x90 [ 167.056147][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.056169][ T6489] RIP: 0033:0x7f336a83ce59 [ 167.056190][ T6489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.056208][ T6489] RSP: 002b:00007f3368a96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 167.056232][ T6489] RAX: ffffffffffffffda RBX: 00007f336aab5fa0 RCX: 00007f336a83ce59 [ 167.056248][ T6489] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 167.056261][ T6489] RBP: 00007f3368a96090 R08: 0000000000000000 R09: 0000000000000000 [ 167.056275][ T6489] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 167.056293][ T6489] R13: 00007f336aab6038 R14: 00007f336aab5fa0 R15: 00007ffe395573b8 [ 167.056327][ T6489] [ 167.086146][ T6488] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 167.086208][ T6488] netlink: 224 bytes leftover after parsing attributes in process `syz.0.175'. [ 167.911448][ T6501] netlink: zone id is out of range [ 167.911465][ T6501] netlink: zone id is out of range [ 167.911474][ T6501] netlink: zone id is out of range [ 167.911483][ T6501] netlink: zone id is out of range [ 167.911491][ T6501] netlink: zone id is out of range [ 167.911500][ T6501] netlink: zone id is out of range [ 167.911508][ T6501] netlink: zone id is out of range [ 167.911517][ T6501] netlink: zone id is out of range [ 167.911526][ T6501] netlink: zone id is out of range [ 167.911533][ T6501] netlink: zone id is out of range [ 168.370175][ T6508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.180'. [ 168.901430][ T5697] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 168.942102][ T5714] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 169.031438][ T5697] usb 1-1: device descriptor read/64, error -71 [ 169.091548][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 169.097528][ T5714] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.097567][ T5714] usb 3-1: config 0 has no interface number 0 [ 169.097599][ T5714] usb 3-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 169.097640][ T5714] usb 3-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 169.097668][ T5714] usb 3-1: config 0 interface 1 has no altsetting 0 [ 169.116973][ T5714] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 169.117005][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.117026][ T5714] usb 3-1: Product: syz [ 169.117041][ T5714] usb 3-1: Manufacturer: syz [ 169.117056][ T5714] usb 3-1: SerialNumber: syz [ 169.197494][ T5714] usb 3-1: config 0 descriptor?? [ 169.273820][ T5697] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 169.408769][ T5609] Bluetooth: hci3: ISO packet for unknown connection handle 353 [ 169.411603][ T5697] usb 1-1: device descriptor read/64, error -71 [ 169.535081][ T5697] usb usb1-port1: attempt power cycle [ 169.535477][ T5714] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 169.539427][ T5714] gspca_spca1528: reg_w err -71 [ 169.558691][ T5714] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 169.584317][ T5714] usb 3-1: USB disconnect, device number 23 [ 169.771478][ T821] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 169.921341][ T5697] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 169.926299][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 169.929125][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.929160][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.929201][ T821] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 169.929227][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.952156][ T5697] usb 1-1: device descriptor read/8, error -71 [ 169.997778][ T821] usb 5-1: config 0 descriptor?? [ 170.041585][ T6540] FAULT_INJECTION: forcing a failure. [ 170.041585][ T6540] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 170.041621][ T6540] CPU: 0 UID: 0 PID: 6540 Comm: syz.1.188 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.041647][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.041660][ T6540] Call Trace: [ 170.041668][ T6540] [ 170.041677][ T6540] dump_stack_lvl+0xe8/0x150 [ 170.041709][ T6540] should_fail_ex+0x46b/0x600 [ 170.041746][ T6540] prepare_alloc_pages+0x22a/0x6b0 [ 170.041780][ T6540] __alloc_frozen_pages_noprof+0x12f/0x380 [ 170.041810][ T6540] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 170.041840][ T6540] ? __pfx_policy_nodemask+0x10/0x10 [ 170.041866][ T6540] ? bvec_try_merge_page+0x186/0x280 [ 170.041899][ T6540] alloc_pages_mpol+0xd1/0x380 [ 170.041930][ T6540] alloc_pages_noprof+0xd2/0x2f0 [ 170.041960][ T6540] blk_rq_map_user_iov+0xc2a/0x1790 [ 170.042006][ T6540] ? blk_mq_rq_ctx_init+0x3b7/0x620 [ 170.042037][ T6540] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 170.042068][ T6540] ? __blk_mq_alloc_requests+0x110d/0x1290 [ 170.042093][ T6540] ? blk_mq_alloc_request+0x1d3/0xa30 [ 170.042135][ T6540] ? import_ubuf+0xfb/0x1d0 [ 170.042161][ T6540] blk_rq_map_user_io+0x2ae/0x440 [ 170.042200][ T6540] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 170.042232][ T6540] ? blk_mq_alloc_request+0x88b/0xa30 [ 170.042262][ T6540] ? do_raw_spin_lock+0x12b/0x2f0 [ 170.042294][ T6540] ? __might_fault+0xaf/0x130 [ 170.042324][ T6540] ? apparmor_capable+0x126/0x170 [ 170.042356][ T6540] ? bpf_lsm_capable+0x9/0x20 [ 170.042384][ T6540] ? security_capable+0x7e/0x2c0 [ 170.042427][ T6540] sg_io+0x517/0x890 [ 170.042465][ T6540] scsi_ioctl+0x14b8/0x2190 [ 170.042502][ T6540] ? __pfx_scsi_ioctl+0x10/0x10 [ 170.042559][ T6540] ? kasan_quarantine_put+0xbb/0x1f0 [ 170.042611][ T6540] ? scsi_block_when_processing_errors+0x44f/0x540 [ 170.042642][ T6540] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 170.042691][ T6540] sg_ioctl+0x1125/0x21a0 [ 170.042721][ T6540] ? __pfx_sg_ioctl+0x10/0x10 [ 170.042743][ T6540] ? __fget_files+0x2a/0x420 [ 170.042770][ T6540] ? __fget_files+0x2a/0x420 [ 170.042791][ T6540] ? __fget_files+0x3a6/0x420 [ 170.042813][ T6540] ? __fget_files+0x2a/0x420 [ 170.042840][ T6540] ? bpf_lsm_file_ioctl+0x9/0x20 [ 170.042866][ T6540] ? __pfx_sg_ioctl+0x10/0x10 [ 170.042884][ T6540] __se_sys_ioctl+0xff/0x170 [ 170.042915][ T6540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.042940][ T6540] do_syscall_64+0x174/0x580 [ 170.042970][ T6540] ? trace_irq_disable+0x3b/0x140 [ 170.043000][ T6540] ? clear_bhb_loop+0x40/0x90 [ 170.043030][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.043052][ T6540] RIP: 0033:0x7f5407a5ce59 [ 170.043073][ T6540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.043092][ T6540] RSP: 002b:00007f5405cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.043115][ T6540] RAX: ffffffffffffffda RBX: 00007f5407cd5fa0 RCX: 00007f5407a5ce59 [ 170.043133][ T6540] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003 [ 170.043148][ T6540] RBP: 00007f5405cae090 R08: 0000000000000000 R09: 0000000000000000 [ 170.043162][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.043176][ T6540] R13: 00007f5407cd6038 R14: 00007f5407cd5fa0 R15: 00007ffe2d8837d8 [ 170.043210][ T6540] [ 170.251298][ T5697] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 170.316688][ T5697] usb 1-1: device descriptor read/8, error -71 [ 170.425794][ T5697] usb usb1-port1: unable to enumerate USB device [ 170.717230][ T821] mcp2221 0003:04D8:00DD.0004: collection stack underflow [ 170.717263][ T821] mcp2221 0003:04D8:00DD.0004: item 0 4 0 12 parsing failed [ 170.718016][ T821] mcp2221 0003:04D8:00DD.0004: can't parse reports [ 170.718128][ T821] mcp2221 0003:04D8:00DD.0004: probe with driver mcp2221 failed with error -22 [ 171.026440][ T38] audit: type=1400 audit(1782189594.922:2): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E pid=6528 comm="syz.4.185" [ 171.032804][ T5697] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 171.223876][ T5697] usb 3-1: Using ep0 maxpacket: 32 [ 171.237856][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 171.249335][ T5697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.249386][ T5697] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 171.249409][ T5697] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 171.249431][ T5697] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.300240][ T5697] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 171.300270][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.300290][ T5697] usb 3-1: Product: syz [ 171.300303][ T5697] usb 3-1: Manufacturer: syz [ 171.300318][ T5697] usb 3-1: SerialNumber: syz [ 171.430918][ T37] usb 5-1: USB disconnect, device number 3 [ 171.616994][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.636086][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.691764][ T5697] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.691845][ T5697] usb 3-1: MIDIStreaming interface descriptor not found [ 171.797657][ T6573] netlink: 256 bytes leftover after parsing attributes in process `syz.1.196'. [ 171.906492][ T5697] usb 3-1: USB disconnect, device number 24 [ 172.038252][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.212486][ T821] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 172.342886][ T821] usb 2-1: device descriptor read/64, error -71 [ 172.581341][ T821] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 172.601330][ T37] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 172.711285][ T821] usb 2-1: device descriptor read/64, error -71 [ 172.752342][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 172.755878][ T37] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.755906][ T37] usb 3-1: config 0 has no interface number 0 [ 172.755939][ T37] usb 3-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 172.755980][ T37] usb 3-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 172.756010][ T37] usb 3-1: config 0 interface 1 has no altsetting 0 [ 172.795671][ T37] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 172.795773][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.795835][ T37] usb 3-1: Product: syz [ 172.795876][ T37] usb 3-1: Manufacturer: syz [ 172.795921][ T37] usb 3-1: SerialNumber: syz [ 172.825647][ T821] usb usb2-port1: attempt power cycle [ 172.895467][ T37] usb 3-1: config 0 descriptor?? [ 173.102933][ T5609] Bluetooth: hci3: ISO packet for unknown connection handle 353 [ 173.134939][ T37] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 173.136925][ T37] gspca_spca1528: reg_w err -71 [ 173.151450][ T37] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 173.190292][ T37] usb 3-1: USB disconnect, device number 25 [ 173.294483][ T821] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 173.315992][ T821] usb 2-1: device descriptor read/8, error -71 [ 173.490080][ T6601] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 173.562584][ T821] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 173.583177][ T821] usb 2-1: device descriptor read/8, error -71 [ 173.691654][ T821] usb usb2-port1: unable to enumerate USB device [ 173.870995][ T6627] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 173.871032][ T6627] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 173.875942][ T6627] vhci_hcd vhci_hcd.0: Device attached [ 174.075260][ T5714] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 174.141378][ T5714] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 174.202138][ T5697] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 174.381295][ T5697] usb 5-1: Using ep0 maxpacket: 16 [ 174.406242][ T5697] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.406271][ T5697] usb 5-1: config 0 has no interfaces? [ 174.409775][ T5697] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 174.409807][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.409829][ T5697] usb 5-1: Product: syz [ 174.409844][ T5697] usb 5-1: Manufacturer: syz [ 174.409859][ T5697] usb 5-1: SerialNumber: syz [ 174.465801][ T5697] usb 5-1: config 0 descriptor?? [ 174.829937][ T6628] usb 41-1: recv xbuf, 0 [ 174.832302][ T4188] vhci_hcd vhci_hcd.4: stop threads [ 174.832322][ T4188] vhci_hcd vhci_hcd.4: release socket [ 174.832400][ T4188] vhci_hcd vhci_hcd.4: disconnect device [ 174.921419][ T5714] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 175.293403][ T5697] usb 5-1: USB disconnect, device number 4 [ 175.941355][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 176.114814][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 176.116702][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.116730][ T9] usb 1-1: config 0 has no interface number 0 [ 176.116768][ T9] usb 1-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 176.116801][ T9] usb 1-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 176.116829][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 176.119394][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 176.119426][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.119453][ T9] usb 1-1: Product: syz [ 176.119464][ T9] usb 1-1: Manufacturer: syz [ 176.119475][ T9] usb 1-1: SerialNumber: syz [ 176.149504][ T9] usb 1-1: config 0 descriptor?? [ 176.341298][ T37] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 176.422777][ T5609] Bluetooth: hci0: ISO packet for unknown connection handle 353 [ 176.493761][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 176.499799][ T37] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 176.500061][ T37] usb 5-1: config 0 has no interface number 0 [ 176.500116][ T37] usb 5-1: config 0 interface 184 has no altsetting 0 [ 176.563590][ T37] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 176.563625][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.563648][ T37] usb 5-1: Product: syz [ 176.563663][ T37] usb 5-1: Manufacturer: syz [ 176.563679][ T37] usb 5-1: SerialNumber: syz [ 176.624642][ T37] usb 5-1: config 0 descriptor?? [ 176.632815][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 176.638507][ T9] gspca_spca1528: reg_w err -71 [ 176.651420][ T9] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 176.666659][ T9] usb 1-1: USB disconnect, device number 18 [ 177.143942][ T37] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 177.143975][ T37] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 177.143996][ T37] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 177.144293][ T37] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 177.434974][ T6698] netlink: 'syz.2.224': attribute type 17 has an invalid length. [ 179.075049][ T9] usb 5-1: USB disconnect, device number 5 [ 179.560294][ T6755] netlink: 'syz.0.241': attribute type 2 has an invalid length. [ 179.560341][ T6755] netlink: 'syz.0.241': attribute type 2 has an invalid length. [ 179.961468][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 180.079145][ T6778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.079652][ T6778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.122655][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 180.132586][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 180.132605][ T9] usb 5-1: config 0 has no interface number 0 [ 180.132628][ T9] usb 5-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 180.132656][ T9] usb 5-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 180.132675][ T9] usb 5-1: config 0 interface 1 has no altsetting 0 [ 180.135044][ T9] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 180.135070][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.135090][ T9] usb 5-1: Product: syz [ 180.135103][ T9] usb 5-1: Manufacturer: syz [ 180.135125][ T9] usb 5-1: SerialNumber: syz [ 180.235358][ T9] usb 5-1: config 0 descriptor?? [ 180.304902][ T6738] infiniband syz0: set down [ 180.305147][ T6738] infiniband syz0: added ipvlan0 [ 180.321467][ T5709] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 180.445768][ T5609] Bluetooth: hci1: ISO packet for unknown connection handle 353 [ 180.474918][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 180.475473][ T9] gspca_spca1528: reg_w err -71 [ 180.479799][ T5709] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 180.479819][ T5709] usb 2-1: config 0 has no interface number 0 [ 180.479851][ T5709] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 180.479870][ T5709] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.491774][ T9] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 180.555390][ T5709] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 180.555424][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.555446][ T5709] usb 2-1: Product: syz [ 180.555462][ T5709] usb 2-1: Manufacturer: syz [ 180.555493][ T5709] usb 2-1: SerialNumber: syz [ 180.620490][ T5709] usb 2-1: config 0 descriptor?? [ 180.621687][ T6779] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 180.656647][ T5709] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 180.659541][ T9] usb 5-1: USB disconnect, device number 6 [ 180.717567][ T6738] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 180.717610][ T6738] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 180.717654][ T6738] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 180.818606][ T5709] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 181.070835][ T833] usb 2-1: USB disconnect, device number 22 [ 181.140241][ T833] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 181.145076][ T833] cyberjack 2-1:0.69: device disconnected [ 181.168257][ T6738] RDS/IB: syz0: added [ 181.176535][ T6738] smc: adding ib device syz0 with port count 1 [ 181.203493][ T6738] smc: ib device syz0 port 1 has no pnetid [ 181.257073][ T6786] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 181.257101][ T6786] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 181.278543][ T6786] vhci_hcd vhci_hcd.0: Device attached [ 181.471390][ T821] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 181.501410][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 181.531451][ T821] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 181.533297][ T37] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.656169][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.656198][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 181.677638][ T9] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 181.677676][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.677698][ T9] usb 1-1: Product: syz [ 181.677714][ T9] usb 1-1: Manufacturer: syz [ 181.677730][ T9] usb 1-1: SerialNumber: syz [ 181.681426][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 181.716314][ T37] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.716343][ T37] usb 5-1: config 0 has no interfaces? [ 181.744185][ T37] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 181.744217][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.744239][ T37] usb 5-1: Product: syz [ 181.744255][ T37] usb 5-1: Manufacturer: syz [ 181.744271][ T37] usb 5-1: SerialNumber: syz [ 181.798940][ T9] usb 1-1: config 0 descriptor?? [ 181.836945][ T37] usb 5-1: config 0 descriptor?? [ 182.083024][ T6784] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(18) [ 182.083053][ T6784] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.083222][ T6784] vhci_hcd vhci_hcd.0: Device attached [ 182.144835][ T6796] vhci_hcd: connection closed [ 182.147094][ T1034] vhci_hcd vhci_hcd.0: stop threads [ 182.147124][ T1034] vhci_hcd vhci_hcd.0: release socket [ 182.147166][ T1034] vhci_hcd vhci_hcd.0: disconnect device [ 182.148913][ T6787] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 182.149108][ T1034] vhci_hcd vhci_hcd.4: stop threads [ 182.149125][ T1034] vhci_hcd vhci_hcd.4: release socket [ 182.149203][ T1034] vhci_hcd vhci_hcd.4: disconnect device [ 182.229755][ T5694] usb 1-1: USB disconnect, device number 19 [ 182.655176][ T5697] usb 5-1: USB disconnect, device number 7 [ 183.268369][ T6820] ======================================================= [ 183.268369][ T6820] WARNING: The mand mount option has been deprecated and [ 183.268369][ T6820] and is ignored by this kernel. Remove the mand [ 183.268369][ T6820] option from the mount to silence this warning. [ 183.268369][ T6820] ======================================================= [ 183.861345][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 183.991498][ T9] usb 5-1: device descriptor read/64, error -71 [ 184.244953][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 184.381390][ T9] usb 5-1: device descriptor read/64, error -71 [ 184.494138][ T9] usb usb5-port1: attempt power cycle [ 184.571630][ T5697] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 184.672290][ T6857] comedi comedi0: Minor 47 could not be opened [ 184.690748][ T6858] 9p: Bad value for 'cachetag' [ 184.741321][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 184.744157][ T5697] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.744186][ T5697] usb 1-1: config 0 has no interface number 0 [ 184.744219][ T5697] usb 1-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 184.744269][ T5697] usb 1-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 184.744298][ T5697] usb 1-1: config 0 interface 1 has no altsetting 0 [ 184.747189][ T5697] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 184.747216][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.747234][ T5697] usb 1-1: Product: syz [ 184.747248][ T5697] usb 1-1: Manufacturer: syz [ 184.747262][ T5697] usb 1-1: SerialNumber: syz [ 184.838869][ T5697] usb 1-1: config 0 descriptor?? [ 184.901284][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 184.922002][ T9] usb 5-1: device descriptor read/8, error -71 [ 185.045765][ T5609] Bluetooth: hci0: ISO packet for unknown connection handle 353 [ 185.075344][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 185.103405][ T5697] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 185.110971][ T5697] gspca_spca1528: reg_w err -71 [ 185.121704][ T5697] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 185.125346][ T5697] usb 1-1: USB disconnect, device number 20 [ 185.161452][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 185.196024][ T9] usb 5-1: device descriptor read/8, error -71 [ 185.217565][ T6868] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 185.217593][ T6868] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 185.217699][ T6868] vhci_hcd vhci_hcd.0: Device attached [ 185.307653][ T9] usb usb5-port1: unable to enumerate USB device [ 185.472054][ T5709] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 185.483032][ T37] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 185.532156][ T5709] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 185.632756][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 185.634742][ T37] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.634768][ T37] usb 3-1: config 0 has no interfaces? [ 185.637128][ T37] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 185.637163][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.637184][ T37] usb 3-1: Product: syz [ 185.637195][ T37] usb 3-1: Manufacturer: syz [ 185.637206][ T37] usb 3-1: SerialNumber: syz [ 185.687303][ T37] usb 3-1: config 0 descriptor?? [ 186.010431][ T6869] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 186.010827][ T6752] vhci_hcd vhci_hcd.2: stop threads [ 186.010845][ T6752] vhci_hcd vhci_hcd.2: release socket [ 186.010930][ T6752] vhci_hcd vhci_hcd.2: disconnect device [ 186.390940][ T6906] FAULT_INJECTION: forcing a failure. [ 186.390940][ T6906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.390980][ T6906] CPU: 1 UID: 0 PID: 6906 Comm: syz.1.303 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 186.391006][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.391021][ T6906] Call Trace: [ 186.391029][ T6906] [ 186.391039][ T6906] dump_stack_lvl+0xe8/0x150 [ 186.391072][ T6906] should_fail_ex+0x46b/0x600 [ 186.391110][ T6906] _copy_from_user+0x2d/0xb0 [ 186.391140][ T6906] ___sys_sendmsg+0x1c6/0x360 [ 186.391169][ T6906] ? __lock_acquire+0x6b5/0x2d10 [ 186.391203][ T6906] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.391268][ T6906] ? __fget_files+0x2a/0x420 [ 186.391292][ T6906] ? __fget_files+0x3a6/0x420 [ 186.391325][ T6906] __x64_sys_sendmsg+0x1b7/0x290 [ 186.391358][ T6906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.391406][ T6906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.391431][ T6906] do_syscall_64+0x174/0x580 [ 186.391460][ T6906] ? trace_irq_disable+0x3b/0x140 [ 186.391495][ T6906] ? clear_bhb_loop+0x40/0x90 [ 186.391523][ T6906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.391546][ T6906] RIP: 0033:0x7f5407a5ce59 [ 186.391566][ T6906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.391585][ T6906] RSP: 002b:00007f5405c8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.391608][ T6906] RAX: ffffffffffffffda RBX: 00007f5407cd6090 RCX: 00007f5407a5ce59 [ 186.391625][ T6906] RDX: 0000000004008040 RSI: 0000200000000080 RDI: 0000000000000004 [ 186.391639][ T6906] RBP: 00007f5405c8d090 R08: 0000000000000000 R09: 0000000000000000 [ 186.391653][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.391667][ T6906] R13: 00007f5407cd6128 R14: 00007f5407cd6090 R15: 00007ffe2d8837d8 [ 186.391701][ T6906] [ 186.633499][ T5694] usb 3-1: USB disconnect, device number 26 [ 186.681549][ T821] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 186.864425][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 186.932902][ T6914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 187.360477][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'. [ 187.416015][ T6931] veth1_macvtap: left promiscuous mode [ 187.536820][ T9] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 187.681462][ T5697] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 187.715864][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.720425][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 187.737080][ T9] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 187.737108][ T9] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 187.737130][ T9] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 187.737150][ T9] usb 1-1: config 14 has no interface number 0 [ 187.737168][ T9] usb 1-1: config 14 has no interface number 1 [ 187.737241][ T9] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 187.737269][ T9] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 187.737297][ T9] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.737326][ T9] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.737350][ T9] usb 1-1: config 14 interface 57 has no altsetting 0 [ 187.737370][ T9] usb 1-1: config 14 interface 228 has no altsetting 0 [ 187.839847][ T9] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 187.839881][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.839904][ T9] usb 1-1: Product: syz [ 187.839920][ T9] usb 1-1: Manufacturer: syz [ 187.839941][ T9] usb 1-1: SerialNumber: syz [ 187.911312][ T5697] usb 3-1: Using ep0 maxpacket: 16 [ 187.936185][ T5697] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.936215][ T5697] usb 3-1: config 0 has no interface number 0 [ 187.936330][ T5697] usb 3-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 187.936374][ T5697] usb 3-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 187.936404][ T5697] usb 3-1: config 0 interface 1 has no altsetting 0 [ 187.989034][ T5697] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 187.989066][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.989150][ T5697] usb 3-1: Product: syz [ 187.989167][ T5697] usb 3-1: Manufacturer: syz [ 187.989184][ T5697] usb 3-1: SerialNumber: syz [ 188.042365][ T5697] usb 3-1: config 0 descriptor?? [ 188.249340][ T5609] Bluetooth: hci3: ISO packet for unknown connection handle 353 [ 188.292611][ T5697] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 188.293763][ T5697] gspca_spca1528: reg_w err -71 [ 188.323773][ T5697] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 188.343198][ T9] legousbtower 1-1:14.57: interrupt endpoints not found [ 188.344480][ T5697] usb 3-1: USB disconnect, device number 27 [ 188.461362][ T821] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 188.614224][ T821] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.614252][ T821] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 188.614316][ T821] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.617565][ T821] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 188.617596][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.617619][ T821] usb 5-1: Product: syz [ 188.617636][ T821] usb 5-1: Manufacturer: syz [ 188.617651][ T821] usb 5-1: SerialNumber: syz [ 188.732900][ T9] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 188.776019][ T9] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 188.961613][ T821] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 188.974118][ T821] usb 5-1: unit 6 not found! [ 189.202523][ T821] usb 5-1: USB disconnect, device number 12 [ 189.390361][ T6969] usb 1-1: Couldn't submit interrupt_in_urb -90 [ 189.599954][ T9] usb 1-1: USB disconnect, device number 21 [ 189.696123][ T9] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 189.823263][ T6978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.332'. [ 190.170222][ T6989] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 190.170251][ T6989] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.197640][ T6989] vhci_hcd vhci_hcd.0: Device attached [ 190.442506][ T6994] /dev/nullb0: Can't open blockdev [ 190.474248][ T5694] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 190.621310][ T5694] usb 3-1: Using ep0 maxpacket: 16 [ 190.624102][ T5694] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.624133][ T5694] usb 3-1: config 0 has no interfaces? [ 190.626545][ T5694] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 190.626577][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.626600][ T5694] usb 3-1: Product: syz [ 190.626617][ T5694] usb 3-1: Manufacturer: syz [ 190.626633][ T5694] usb 3-1: SerialNumber: syz [ 190.691911][ T5694] usb 3-1: config 0 descriptor?? [ 190.951676][ T6990] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 190.952281][ T1034] vhci_hcd vhci_hcd.2: stop threads [ 190.952301][ T1034] vhci_hcd vhci_hcd.2: release socket [ 190.993799][ T1034] vhci_hcd vhci_hcd.2: disconnect device [ 191.062928][ T5709] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 191.402811][ T5697] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 191.439528][ T5714] usb 3-1: USB disconnect, device number 28 [ 191.551333][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 191.554588][ T5697] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.554617][ T5697] usb 1-1: config 0 has no interface number 0 [ 191.554650][ T5697] usb 1-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 191.554700][ T5697] usb 1-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 191.554731][ T5697] usb 1-1: config 0 interface 1 has no altsetting 0 [ 191.559321][ T5697] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 191.559464][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.559495][ T5697] usb 1-1: Product: syz [ 191.559510][ T5697] usb 1-1: Manufacturer: syz [ 191.559526][ T5697] usb 1-1: SerialNumber: syz [ 191.661897][ T5697] usb 1-1: config 0 descriptor?? [ 191.871797][ T5609] Bluetooth: hci0: ISO packet for unknown connection handle 353 [ 191.944176][ T5697] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 191.946696][ T5697] gspca_spca1528: reg_w err -71 [ 191.975040][ T5697] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 191.978395][ T5697] usb 1-1: USB disconnect, device number 22 [ 192.899355][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.364'. [ 193.275008][ T7058] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 193.484108][ T38] audit: type=1107 audit(1782189617.422:3): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='saßÂÊ#¹ñ\˜Œ' [ 193.691893][ T833] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 193.863047][ T833] usb 5-1: Using ep0 maxpacket: 32 [ 193.865554][ T833] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 193.865586][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.921802][ T833] usb 5-1: config 0 descriptor?? [ 193.950547][ T833] gspca_main: sq930x-2.14.0 probing 041e:403c [ 194.251339][ T5697] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 194.413587][ T5697] usb 3-1: Using ep0 maxpacket: 32 [ 194.434720][ T5697] usb 3-1: config 0 interface 0 altsetting 47 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.434814][ T5697] usb 3-1: config 0 interface 0 altsetting 47 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 194.434847][ T5697] usb 3-1: config 0 interface 0 altsetting 47 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.434876][ T5697] usb 3-1: config 0 interface 0 has no altsetting 0 [ 194.434968][ T5697] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 194.434995][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.523075][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.558702][ T5697] usb 3-1: config 0 descriptor?? [ 194.567272][ T7084] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 195.037000][ T5697] betop 0003:11C2:2208.0005: unknown main item tag 0x0 [ 195.037045][ T5697] betop 0003:11C2:2208.0005: unknown main item tag 0x0 [ 195.037144][ T5697] betop 0003:11C2:2208.0005: unknown main item tag 0x0 [ 195.037178][ T5697] betop 0003:11C2:2208.0005: unknown main item tag 0x0 [ 195.037209][ T5697] betop 0003:11C2:2208.0005: unknown main item tag 0x0 [ 195.037305][ T5697] betop 0003:11C2:2208.0005: unknown main item tag 0x0 [ 195.037338][ T5697] betop 0003:11C2:2208.0005: unknown main item tag 0x0 [ 195.037368][ T5697] betop 0003:11C2:2208.0005: unknown main item tag 0x0 [ 195.037472][ T5697] betop 0003:11C2:2208.0005: unknown main item tag 0x0 [ 195.037505][ T5697] betop 0003:11C2:2208.0005: unknown main item tag 0x0 [ 195.147737][ T5697] betop 0003:11C2:2208.0005: hidraw0: USB HID v0.0c Device [HID 11c2:2208] on usb-dummy_hcd.2-1/input0 [ 195.147871][ T5697] betop 0003:11C2:2208.0005: no inputs found [ 195.164380][ T833] gspca_sq930x: reg_w 0105 bf00 failed -110 [ 195.231351][ T833] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 195.405411][ T5815] usb 3-1: USB disconnect, device number 29 [ 195.549418][ T5694] usb 5-1: USB disconnect, device number 13 [ 196.571316][ T5815] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 196.725973][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 196.735965][ T5815] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.735995][ T5815] usb 3-1: config 0 has no interface number 0 [ 196.736030][ T5815] usb 3-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 196.736073][ T5815] usb 3-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 196.736105][ T5815] usb 3-1: config 0 interface 1 has no altsetting 0 [ 196.793503][ T5694] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 196.825761][ T5815] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 196.825796][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.825819][ T5815] usb 3-1: Product: syz [ 196.825835][ T5815] usb 3-1: Manufacturer: syz [ 196.825851][ T5815] usb 3-1: SerialNumber: syz [ 196.945754][ T5815] usb 3-1: config 0 descriptor?? [ 197.031263][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 197.031350][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 197.043854][ T5694] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.044089][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.044163][ T5694] usb 5-1: Product: syz [ 197.044608][ T5694] usb 5-1: Manufacturer: syz [ 197.044784][ T5694] usb 5-1: SerialNumber: syz [ 197.133070][ T5694] usb 5-1: config 0 descriptor?? [ 197.177633][ T5609] Bluetooth: hci3: ISO packet for unknown connection handle 353 [ 197.213589][ T5694] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 197.238679][ T5815] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 197.321979][ T5815] gspca_spca1528: reg_w err -71 [ 197.341489][ T5815] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 197.403134][ T5815] usb 3-1: USB disconnect, device number 30 [ 197.427978][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.446077][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.933410][ T5694] usb 5-1: USB disconnect, device number 14 [ 198.206585][ T7157] block nbd0: not configured, cannot reconfigure [ 198.641425][ T5697] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 198.791467][ T5697] usb 3-1: device descriptor read/64, error -71 [ 198.931413][ T5709] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 199.054030][ T5697] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 199.083184][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 199.085672][ T5709] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.085709][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.085746][ T5709] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 199.085772][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.185084][ T5709] usb 1-1: config 0 descriptor?? [ 199.207555][ T5697] usb 3-1: device descriptor read/64, error -71 [ 199.311766][ T5697] usb usb3-port1: attempt power cycle [ 199.672739][ T5697] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 199.692950][ T5709] playstation 0003:054C:0BA0.0006: hidraw0: USB HID v0.0a Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 199.720091][ T5697] usb 3-1: device descriptor read/8, error -71 [ 199.936304][ T5709] playstation 0003:054C:0BA0.0006: Failed to retrieve feature with reportID 18: -71 [ 199.936335][ T5709] playstation 0003:054C:0BA0.0006: Failed to retrieve DualShock4 pairing info: -71 [ 199.936390][ T5709] playstation 0003:054C:0BA0.0006: Failed to get MAC address from DualShock4 [ 199.936412][ T5709] playstation 0003:054C:0BA0.0006: Failed to create dualshock4. [ 199.982437][ T5697] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 200.012200][ T5697] usb 3-1: device descriptor read/8, error -71 [ 200.057937][ T5709] playstation 0003:054C:0BA0.0006: probe with driver playstation failed with error -71 [ 200.111292][ T5709] usb 1-1: USB disconnect, device number 23 [ 200.131680][ T5697] usb usb3-port1: unable to enumerate USB device [ 201.681283][ T5697] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 201.874494][ T5697] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 201.874532][ T5697] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.874564][ T5697] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.874600][ T5697] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 201.874626][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.950832][ T5697] usb 3-1: config 0 descriptor?? [ 201.952337][ T7225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 201.991375][ T833] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 202.151366][ T833] usb 1-1: Invalid ep0 maxpacket: 64 [ 202.281361][ T833] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 202.385080][ T5697] hid_parser_main: 73 callbacks suppressed [ 202.385098][ T5697] saitek 0003:06A3:0CCD.0007: unknown main item tag 0x3 [ 202.385122][ T5697] saitek 0003:06A3:0CCD.0007: unknown main item tag 0x0 [ 202.385141][ T5697] saitek 0003:06A3:0CCD.0007: unknown main item tag 0x0 [ 202.385159][ T5697] saitek 0003:06A3:0CCD.0007: unknown main item tag 0x0 [ 202.385178][ T5697] saitek 0003:06A3:0CCD.0007: unknown main item tag 0x0 [ 202.385197][ T5697] saitek 0003:06A3:0CCD.0007: unknown main item tag 0x0 [ 202.385216][ T5697] saitek 0003:06A3:0CCD.0007: unknown main item tag 0x0 [ 202.385236][ T5697] saitek 0003:06A3:0CCD.0007: unknown main item tag 0x0 [ 202.385255][ T5697] saitek 0003:06A3:0CCD.0007: unknown main item tag 0x0 [ 202.385274][ T5697] saitek 0003:06A3:0CCD.0007: unknown main item tag 0x0 [ 202.389588][ T5697] saitek 0003:06A3:0CCD.0007: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.2-1/input0 [ 202.491334][ T833] usb 1-1: Invalid ep0 maxpacket: 64 [ 202.500819][ T833] usb usb1-port1: attempt power cycle [ 202.851356][ T833] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 202.872839][ T833] usb 1-1: Invalid ep0 maxpacket: 64 [ 203.001268][ T833] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 203.022042][ T833] usb 1-1: Invalid ep0 maxpacket: 64 [ 203.022483][ T833] usb usb1-port1: unable to enumerate USB device [ 204.434247][ T5694] usb 3-1: USB disconnect, device number 35 [ 204.872200][ T5694] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 205.030263][ T5694] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.030293][ T5694] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 205.030358][ T5694] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.071290][ T5694] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 205.071324][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.071347][ T5694] usb 3-1: Product: syz [ 205.071363][ T5694] usb 3-1: Manufacturer: syz [ 205.071378][ T5694] usb 3-1: SerialNumber: syz [ 205.357107][ T5694] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 205.378369][ T5694] usb 3-1: unit 6 not found! [ 205.511484][ T5694] usb 3-1: USB disconnect, device number 36 [ 205.662158][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.092077][ T5697] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 206.248405][ T5697] usb 5-1: Using ep0 maxpacket: 16 [ 206.260868][ T5697] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 206.299799][ T5697] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 206.299834][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.299857][ T5697] usb 5-1: Product: syz [ 206.299872][ T5697] usb 5-1: Manufacturer: syz [ 206.299888][ T5697] usb 5-1: SerialNumber: syz [ 206.412089][ T5697] usb 5-1: config 0 descriptor?? [ 206.415246][ T7269] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 206.456906][ T7289] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 206.456968][ T7281] Context (ID=0x0) not attached to queue pair (handle=0x2:0xdb) [ 207.205508][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 207.205682][ T5697] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 207.205878][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 207.243552][ T5697] usb 5-1: USB disconnect, device number 15 [ 207.272062][ T5697] mcba_usb 5-1:0.0 can0: device disconnected [ 207.361348][ T821] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 207.534504][ T821] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.534540][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.640918][ T821] usb 1-1: config 0 descriptor?? [ 207.684495][ T821] cp210x 1-1:0.0: cp210x converter detected [ 208.054333][ T821] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 208.133397][ T821] usb 1-1: cp210x converter now attached to ttyUSB0 [ 208.449923][ T5694] usb 1-1: USB disconnect, device number 28 [ 208.477834][ T5694] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.661950][ T38] audit: type=1326 audit(1782189632.652:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.2.478" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68d574ce59 code=0x0 [ 208.733310][ T5694] cp210x 1-1:0.0: device disconnected [ 210.251984][ T5694] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 210.401325][ T5694] usb 5-1: Using ep0 maxpacket: 16 [ 210.405280][ T5694] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.405305][ T5694] usb 5-1: config 0 has no interface number 0 [ 210.405339][ T5694] usb 5-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 210.405381][ T5694] usb 5-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 210.405412][ T5694] usb 5-1: config 0 interface 1 has no altsetting 0 [ 210.409929][ T5694] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 210.409960][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.409983][ T5694] usb 5-1: Product: syz [ 210.409998][ T5694] usb 5-1: Manufacturer: syz [ 210.410014][ T5694] usb 5-1: SerialNumber: syz [ 210.511002][ T5694] usb 5-1: config 0 descriptor?? [ 210.732887][ T5609] Bluetooth: hci1: ISO packet for unknown connection handle 353 [ 210.753837][ T5694] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 210.754767][ T5694] gspca_spca1528: reg_w err -71 [ 210.780510][ T5694] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 210.812154][ T5694] usb 5-1: USB disconnect, device number 16 [ 211.621385][ T821] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 211.750224][ T7430] netlink: 'syz.2.515': attribute type 29 has an invalid length. [ 211.762023][ T7430] netlink: 'syz.2.515': attribute type 29 has an invalid length. [ 211.784828][ T821] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 211.784864][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.814038][ T821] usb 5-1: config 0 descriptor?? [ 212.018508][ T821] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 212.273267][ T7443] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 212.273267][ T7443] program syz.1.521 not setting count and/or reply_len properly [ 212.287585][ T5714] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 212.321605][ T7445] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 212.321605][ T7445] program syz.1.521 not setting count and/or reply_len properly [ 212.394941][ T821] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 212.394969][ T821] [drm] Initialized udl on minor 2 [ 212.469637][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 212.477039][ T5714] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.477065][ T5714] usb 3-1: config 0 has no interface number 0 [ 212.477092][ T5714] usb 3-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 212.477130][ T5714] usb 3-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 212.477156][ T5714] usb 3-1: config 0 interface 1 has no altsetting 0 [ 212.494954][ T5714] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 212.494989][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.495033][ T5714] usb 3-1: Product: syz [ 212.495083][ T5714] usb 3-1: Manufacturer: syz [ 212.495118][ T5714] usb 3-1: SerialNumber: syz [ 212.557613][ T5714] usb 3-1: config 0 descriptor?? [ 212.637383][ T7415] vivid-003: ================= START STATUS ================= [ 212.637429][ T7415] vivid-003: Radio HW Seek Mode: Bounded [ 212.637454][ T7415] vivid-003: Radio Programmable HW Seek: false [ 212.662627][ T7415] vivid-003: RDS Rx I/O Mode: Block I/O [ 212.662655][ T7415] vivid-003: Generate RBDS Instead of RDS: false [ 212.662679][ T7415] vivid-003: RDS Reception: true [ 212.662700][ T7415] vivid-003: RDS Program Type: 0 inactive [ 212.663814][ T7415] vivid-003: RDS PS Name: inactive [ 212.663839][ T7415] vivid-003: RDS Radio Text: inactive [ 212.663866][ T7415] vivid-003: RDS Traffic Announcement: false inactive [ 212.665095][ T7415] vivid-003: RDS Traffic Program: false inactive [ 212.665132][ T7415] vivid-003: RDS Music: false inactive [ 212.665160][ T7415] vivid-003: ================== END STATUS ================== [ 212.745480][ T821] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 212.777918][ T5609] Bluetooth: hci3: ISO packet for unknown connection handle 353 [ 212.783507][ T821] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 212.835724][ T821] usb 5-1: USB disconnect, device number 17 [ 212.850488][ T5714] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 212.850954][ T5714] gspca_spca1528: reg_w err -71 [ 212.862155][ T5714] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 212.872665][ T5694] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 212.875540][ T5694] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 212.913372][ T5714] usb 3-1: USB disconnect, device number 37 [ 213.425731][ T7458] netlink: 'syz.4.526': attribute type 21 has an invalid length. [ 213.541526][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 213.557591][ T7464] 9p: Bad value for 'wfdno' [ 213.573656][ T7458] netlink: 132 bytes leftover after parsing attributes in process `syz.4.526'. [ 213.573691][ T7458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.526'. [ 213.696654][ T7464] dvmrp0: entered allmulticast mode [ 213.755623][ T5609] Bluetooth: Frame is too long (len 102, expected len 4) [ 213.864096][ T7468] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 213.901433][ T821] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 213.957234][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 214.053769][ T821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.053832][ T821] usb 3-1: config 1 interface 0 has no altsetting 0 [ 214.053870][ T821] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=52.91 [ 214.053896][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.101577][ T821] ttusb_dec_send_command: command bulk message failed: error -22 [ 214.101774][ T821] ttusb-dec 3-1:1.0: probe with driver ttusb-dec failed with error -22 [ 214.291591][ T5714] usb 3-1: USB disconnect, device number 38 [ 214.311381][ T833] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 214.491544][ T833] usb 5-1: Using ep0 maxpacket: 32 [ 214.499194][ T833] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 214.499223][ T833] usb 5-1: config 0 has no interface number 0 [ 214.499272][ T833] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 214.544172][ T833] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 214.544195][ T833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.544211][ T833] usb 5-1: Product: syz [ 214.544222][ T833] usb 5-1: Manufacturer: syz [ 214.544232][ T833] usb 5-1: SerialNumber: syz [ 214.592870][ T833] usb 5-1: config 0 descriptor?? [ 214.593931][ T7477] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 214.798091][ T7474] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 214.985236][ T821] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 215.133642][ T821] usb 1-1: Using ep0 maxpacket: 32 [ 215.150365][ T821] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 215.150400][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.186924][ T821] usb 1-1: config 0 descriptor?? [ 215.214233][ T821] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 215.341608][ T5694] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 215.428417][ T7508] sg_write: data in/out 275420/50 bytes for SCSI command 0x0-- guessing data in; [ 215.428417][ T7508] program syz.2.545 not setting count and/or reply_len properly [ 215.501720][ T5694] usb 2-1: Using ep0 maxpacket: 16 [ 215.509651][ T5694] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 215.509922][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.509948][ T5694] usb 2-1: Product: syz [ 215.509965][ T5694] usb 2-1: Manufacturer: syz [ 215.509982][ T5694] usb 2-1: SerialNumber: syz [ 215.577439][ T5694] r8152-cfgselector 2-1: Unknown version 0x0000 [ 215.577531][ T5694] r8152-cfgselector 2-1: config 0 descriptor?? [ 215.730132][ T833] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 215.730439][ T833] asix 5-1:0.188: probe with driver asix failed with error -71 [ 215.731372][ T37] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 215.778679][ T833] usb 5-1: USB disconnect, device number 18 [ 215.935613][ T37] usb 3-1: config 127 has an invalid interface number: 138 but max is 0 [ 215.935645][ T37] usb 3-1: config 127 has no interface number 0 [ 215.940492][ T37] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 215.940525][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.940606][ T37] usb 3-1: Product: syz [ 215.940622][ T37] usb 3-1: Manufacturer: syz [ 215.940638][ T37] usb 3-1: SerialNumber: syz [ 215.956514][ T5714] r8152-cfgselector 2-1: USB disconnect, device number 23 [ 216.088540][ T821] gspca_nw80x: reg_r err -32 [ 216.088658][ T821] nw80x 1-1:0.0: probe with driver nw80x failed with error -32 [ 216.165538][ T9] usb 1-1: USB disconnect, device number 29 [ 216.269515][ T37] usb 3-1: probing VID:PID(0424:012C) [ 216.290636][ T37] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 216.335525][ T37] vub300 3-1:127.138: probe with driver vub300 failed with error -22 [ 216.352219][ T37] usb 3-1: USB disconnect, device number 39 [ 216.477564][ T7517] FAULT_INJECTION: forcing a failure. [ 216.477564][ T7517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.477603][ T7517] CPU: 1 UID: 0 PID: 7517 Comm: syz.4.548 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 216.477630][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.477645][ T7517] Call Trace: [ 216.477654][ T7517] [ 216.477664][ T7517] dump_stack_lvl+0xe8/0x150 [ 216.477697][ T7517] should_fail_ex+0x46b/0x600 [ 216.477735][ T7517] _copy_from_user+0x2d/0xb0 [ 216.477762][ T7517] do_sys_poll+0x2a0/0xf50 [ 216.477801][ T7517] ? __lock_acquire+0x6b5/0x2d10 [ 216.477832][ T7517] ? __pfx_do_sys_poll+0x10/0x10 [ 216.477875][ T7517] ? aa_file_perm+0x192/0x15f0 [ 216.478000][ T7517] ? set_user_sigmask+0xcd/0x1c0 [ 216.478036][ T7517] ? __pfx_set_user_sigmask+0x10/0x10 [ 216.478069][ T7517] ? rt_mutex_slowunlock+0x1cb/0x300 [ 216.478093][ T7517] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 216.478123][ T7517] __se_sys_ppoll+0x209/0x2b0 [ 216.478158][ T7517] ? fput+0xa0/0xd0 [ 216.478183][ T7517] ? __pfx___se_sys_ppoll+0x10/0x10 [ 216.478218][ T7517] ? __pfx_ksys_write+0x10/0x10 [ 216.478253][ T7517] ? __x64_sys_ppoll+0x20/0xc0 [ 216.478296][ T7517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.478322][ T7517] do_syscall_64+0x174/0x580 [ 216.478352][ T7517] ? trace_irq_disable+0x3b/0x140 [ 216.478381][ T7517] ? clear_bhb_loop+0x40/0x90 [ 216.478410][ T7517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.478434][ T7517] RIP: 0033:0x7f336a83ce59 [ 216.478455][ T7517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.478476][ T7517] RSP: 002b:00007f3368a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 216.478500][ T7517] RAX: ffffffffffffffda RBX: 00007f336aab5fa0 RCX: 00007f336a83ce59 [ 216.478518][ T7517] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 216.478534][ T7517] RBP: 00007f3368a96090 R08: 0000000000000000 R09: 0000000000000000 [ 216.478549][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.478563][ T7517] R13: 00007f336aab6038 R14: 00007f336aab5fa0 R15: 00007ffe395573b8 [ 216.478598][ T7517] [ 217.066374][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 217.225046][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 217.227142][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.227183][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 217.227201][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.275155][ T9] usb 1-1: config 0 descriptor?? [ 217.371024][ T7528] loop2: detected capacity change from 0 to 7 [ 217.486283][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 217.486421][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 217.520733][ T9] usb 1-1: USB disconnect, device number 30 [ 217.809889][ T7528] Dev loop2: unable to read RDB block 7 [ 217.809943][ T7528] loop2: AHDI p1 p2 p3 [ 217.809962][ T7528] loop2: partition table partially beyond EOD, truncated [ 217.880582][ T7528] loop2: p1 start 1601398130 is beyond EOD, truncated [ 217.880616][ T7528] loop2: p2 start 1702059890 is beyond EOD, truncated [ 218.163754][ T4970] Dev loop2: unable to read RDB block 7 [ 218.163790][ T4970] loop2: AHDI p1 p2 p3 [ 218.163813][ T4970] loop2: partition table partially beyond EOD, truncated [ 218.164051][ T4970] loop2: p1 start 1601398130 is beyond EOD, truncated [ 218.164072][ T4970] loop2: p2 start 1702059890 is beyond EOD, truncated [ 218.291046][ T7542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.556'. [ 218.293494][ T7542] FAULT_INJECTION: forcing a failure. [ 218.293494][ T7542] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 218.293530][ T7542] CPU: 1 UID: 0 PID: 7542 Comm: syz.4.556 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.293555][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.293569][ T7542] Call Trace: [ 218.293578][ T7542] [ 218.293587][ T7542] dump_stack_lvl+0xe8/0x150 [ 218.293620][ T7542] should_fail_ex+0x46b/0x600 [ 218.293657][ T7542] prepare_alloc_pages+0x22a/0x6b0 [ 218.293692][ T7542] __alloc_frozen_pages_noprof+0x12f/0x380 [ 218.293725][ T7542] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 218.293757][ T7542] ? __pfx_policy_nodemask+0x10/0x10 [ 218.293789][ T7542] ? __lock_acquire+0x6b5/0x2d10 [ 218.293826][ T7542] alloc_pages_mpol+0xd1/0x380 [ 218.293857][ T7542] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 218.293896][ T7542] vma_alloc_folio_noprof+0xe1/0x1e0 [ 218.293927][ T7542] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 218.293956][ T7542] ? __pte_offset_map+0x29/0x200 [ 218.293998][ T7542] do_pte_missing+0x822/0x2940 [ 218.294033][ T7542] ? handle_mm_fault+0xed/0x14d0 [ 218.294059][ T7542] handle_mm_fault+0xdc2/0x14d0 [ 218.294086][ T7542] ? handle_mm_fault+0xed/0x14d0 [ 218.294113][ T7542] ? __pfx_handle_mm_fault+0x10/0x10 [ 218.294157][ T7542] ? lock_mm_and_find_vma+0xa7/0x340 [ 218.294188][ T7542] do_user_addr_fault+0x75b/0x1340 [ 218.294234][ T7542] exc_page_fault+0x6a/0xc0 [ 218.294264][ T7542] asm_exc_page_fault+0x26/0x30 [ 218.294287][ T7542] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 218.294310][ T7542] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 218.294329][ T7542] RSP: 0018:ffffc9000bd2f658 EFLAGS: 00050202 [ 218.294350][ T7542] RAX: ffffffff84b7e401 RBX: ffff88803760e000 RCX: 0000000000000984 [ 218.294368][ T7542] RDX: 0000000000000000 RSI: ffff88803760e280 RDI: 0000200000002000 [ 218.294383][ T7542] RBP: ffffc9000bd2f7d0 R08: ffff88803760ec03 R09: 1ffff11006ec1d80 [ 218.294400][ T7542] R10: dffffc0000000000 R11: ffffed1006ec1d81 R12: dffffc0000000000 [ 218.294417][ T7542] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000c04 [ 218.294441][ T7542] ? _copy_to_iter+0x3c1/0x17d0 [ 218.294485][ T7542] _copy_to_iter+0x493/0x17d0 [ 218.294533][ T7542] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 218.294557][ T7542] ? __pfx__copy_to_iter+0x10/0x10 [ 218.294590][ T7542] ? rt_spin_lock+0x1e0/0x400 [ 218.294615][ T7542] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 218.294651][ T7542] __skb_datagram_iter+0xf8/0x980 [ 218.294684][ T7542] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 218.294726][ T7542] skb_copy_datagram_iter+0xb5/0x240 [ 218.294762][ T7542] netlink_recvmsg+0x2c3/0xa50 [ 218.294803][ T7542] ? __pfx_netlink_recvmsg+0x10/0x10 [ 218.294838][ T7542] ? __pfx_aa_sk_perm+0x10/0x10 [ 218.294873][ T7542] ? __lock_acquire+0x6b5/0x2d10 [ 218.294916][ T7542] ? aa_sock_msg_perm+0x122/0x200 [ 218.294938][ T7542] ? __pfx_netlink_recvmsg+0x10/0x10 [ 218.294970][ T7542] sock_recvmsg_nosec+0x130/0x170 [ 218.295011][ T7542] ____sys_recvmsg+0x23d/0x4f0 [ 218.295050][ T7542] ? __pfx_____sys_recvmsg+0x10/0x10 [ 218.295097][ T7542] ? import_iovec+0x73/0xa0 [ 218.295126][ T7542] ___sys_recvmsg+0x215/0x5a0 [ 218.295163][ T7542] ? __pfx____sys_recvmsg+0x10/0x10 [ 218.295199][ T7542] ? __fget_files+0x2a/0x420 [ 218.295242][ T7542] ? __fget_files+0x3a6/0x420 [ 218.295275][ T7542] __x64_sys_recvmsg+0x1b4/0x290 [ 218.295309][ T7542] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 218.295357][ T7542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.295383][ T7542] do_syscall_64+0x174/0x580 [ 218.295411][ T7542] ? trace_irq_disable+0x3b/0x140 [ 218.295438][ T7542] ? clear_bhb_loop+0x40/0x90 [ 218.295466][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.295488][ T7542] RIP: 0033:0x7f336a83ce59 [ 218.295509][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.295529][ T7542] RSP: 002b:00007f3368a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 218.295553][ T7542] RAX: ffffffffffffffda RBX: 00007f336aab5fa0 RCX: 00007f336a83ce59 [ 218.295570][ T7542] RDX: 0000000040010000 RSI: 0000200000000040 RDI: 0000000000000003 [ 218.295585][ T7542] RBP: 00007f3368a96090 R08: 0000000000000000 R09: 0000000000000000 [ 218.295600][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.295613][ T7542] R13: 00007f336aab6038 R14: 00007f336aab5fa0 R15: 00007ffe395573b8 [ 218.295648][ T7542] [ 218.295820][ T7542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.556'. [ 219.471434][ T37] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 219.541947][ T5714] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 219.573193][ T7571] FAULT_INJECTION: forcing a failure. [ 219.573193][ T7571] name failslab, interval 1, probability 0, space 0, times 0 [ 219.573227][ T7571] CPU: 1 UID: 0 PID: 7571 Comm: syz.1.567 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 219.573251][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 219.573284][ T7571] Call Trace: [ 219.573292][ T7571] [ 219.573300][ T7571] dump_stack_lvl+0xe8/0x150 [ 219.573331][ T7571] should_fail_ex+0x46b/0x600 [ 219.573369][ T7571] should_failslab+0xa8/0x100 [ 219.573393][ T7571] __kmalloc_cache_noprof+0xa0/0x6d0 [ 219.573415][ T7571] ? percpu_ref_init+0xc5/0x360 [ 219.573443][ T7571] ? percpu_ref_init+0xc5/0x360 [ 219.573475][ T7571] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 219.573505][ T7571] percpu_ref_init+0xc5/0x360 [ 219.573537][ T7571] io_ring_ctx_alloc+0x33d/0xd20 [ 219.573569][ T7571] io_uring_create+0x50/0x9a0 [ 219.573599][ T7571] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 219.573624][ T7571] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 219.573643][ T7571] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 219.573679][ T7571] ? __pfx_ksys_write+0x10/0x10 [ 219.573708][ T7571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.573729][ T7571] do_syscall_64+0x174/0x580 [ 219.573753][ T7571] ? trace_irq_disable+0x3b/0x140 [ 219.573777][ T7571] ? clear_bhb_loop+0x40/0x90 [ 219.573799][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.573816][ T7571] RIP: 0033:0x7f5407a5ce59 [ 219.573834][ T7571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.573859][ T7571] RSP: 002b:00007f5405c5dee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 219.573879][ T7571] RAX: ffffffffffffffda RBX: 0000200000000d48 RCX: 00007f5407a5ce59 [ 219.573893][ T7571] RDX: 0000200000000dc8 RSI: 0000200000000d48 RDI: 000000000000001c [ 219.573905][ T7571] RBP: 0000200000000d40 R08: 0000200000001540 R09: 0000000000000000 [ 219.573919][ T7571] R10: 0000200000000dd0 R11: 0000000000000206 R12: 0000200000000dc8 [ 219.573933][ T7571] R13: 0000200000000dd0 R14: 00007f5405c5dfd8 R15: 0000000000000000 [ 219.573961][ T7571] [ 219.621270][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 219.643740][ T37] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.643770][ T37] usb 1-1: config 0 has no interface number 0 [ 219.643805][ T37] usb 1-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 219.643858][ T37] usb 1-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 219.643890][ T37] usb 1-1: config 0 interface 1 has no altsetting 0 [ 219.706631][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 219.707636][ T37] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 219.707668][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.707691][ T37] usb 1-1: Product: syz [ 219.707705][ T37] usb 1-1: Manufacturer: syz [ 219.707721][ T37] usb 1-1: SerialNumber: syz [ 219.731615][ T5714] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.731690][ T5714] usb 3-1: config 0 has no interface number 0 [ 219.864373][ T5714] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 219.864460][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.864536][ T5714] usb 3-1: Product: syz [ 219.864590][ T5714] usb 3-1: Manufacturer: syz [ 219.864645][ T5714] usb 3-1: SerialNumber: syz [ 219.978904][ T37] usb 1-1: config 0 descriptor?? [ 219.979050][ T5714] usb 3-1: config 0 descriptor?? [ 220.138860][ T5714] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 220.211990][ T37] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 220.227131][ T37] gspca_spca1528: reg_w err -71 [ 220.246447][ T37] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 220.270834][ T37] usb 1-1: USB disconnect, device number 31 [ 221.260434][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.261081][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.380013][ T7582] tmpfs: Bad value for 'size' [ 221.394542][ T16] ------------[ cut here ]------------ [ 221.394555][ T16] task_rq(p) != rq [ 221.394567][ T16] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#0: ktimers/0/16 [ 221.394608][ T16] Modules linked in: [ 221.394623][ T16] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.394644][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.394655][ T16] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 221.394681][ T16] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 221.394697][ T16] RSP: 0018:ffffc90000157aa0 EFLAGS: 00010087 [ 221.394712][ T16] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 221.394726][ T16] RDX: 0000000000000000 RSI: ffff8880300e9f00 RDI: ffff8880b863ba40 [ 221.394739][ T16] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 221.394752][ T16] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 221.394765][ T16] R13: 1ffff110170c78d6 R14: ffff8880300e9f00 R15: ffffffff8dc257d8 [ 221.394785][ T16] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 221.394800][ T16] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.394812][ T16] CR2: 00007f68d3984ff8 CR3: 0000000033dbc000 CR4: 00000000003526f0 [ 221.394828][ T16] Call Trace: [ 221.394836][ T16] [ 221.394846][ T16] set_next_task_fair+0xa68/0xce0 [ 221.394873][ T16] __schedule+0x3e03/0x5550 [ 221.394916][ T16] ? __pfx___schedule+0x10/0x10 [ 221.394933][ T16] ? schedule+0x90/0x360 [ 221.394960][ T16] ? schedule+0x90/0x360 [ 221.394981][ T16] schedule+0x164/0x360 [ 221.395002][ T16] ? smpboot_thread_fn+0x4d/0xa50 [ 221.395019][ T16] smpboot_thread_fn+0x5bc/0xa50 [ 221.395038][ T16] ? smpboot_thread_fn+0x4d/0xa50 [ 221.395062][ T16] kthread+0x388/0x470 [ 221.395083][ T16] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 221.395099][ T16] ? __pfx_kthread+0x10/0x10 [ 221.395120][ T16] ret_from_fork+0x514/0xb70 [ 221.395144][ T16] ? __pfx_ret_from_fork+0x10/0x10 [ 221.395165][ T16] ? __switch_to+0xc79/0x1410 [ 221.395185][ T16] ? __pfx_kthread+0x10/0x10 [ 221.395206][ T16] ret_from_fork_asm+0x1a/0x30 [ 221.395242][ T16] [ 221.395252][ T16] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 221.395264][ T16] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.395286][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.395296][ T16] Call Trace: [ 221.395303][ T16] [ 221.395310][ T16] vpanic+0x56c/0xa60 [ 221.395338][ T16] ? __pfx__printk+0x10/0x10 [ 221.395356][ T16] ? __pfx_vpanic+0x10/0x10 [ 221.395380][ T16] ? is_bpf_text_address+0x292/0x2b0 [ 221.395406][ T16] ? is_bpf_text_address+0x26/0x2b0 [ 221.395437][ T16] panic+0xc5/0xd0 [ 221.395462][ T16] ? __pfx_panic+0x10/0x10 [ 221.395495][ T16] ? ret_from_fork_asm+0x1a/0x30 [ 221.395522][ T16] __warn+0x315/0x4c0 [ 221.395547][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 221.395572][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 221.395597][ T16] __report_bug+0x339/0x540 [ 221.395626][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 221.395650][ T16] ? __pfx___report_bug+0x10/0x10 [ 221.395673][ T16] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 221.395704][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 221.395728][ T16] report_bug+0x16a/0x220 [ 221.395751][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 221.395773][ T16] ? hrtick_start_fair+0x198/0x1f0 [ 221.395804][ T16] handle_bug+0x9c/0x200 [ 221.395830][ T16] exc_invalid_op+0x1a/0x50 [ 221.395856][ T16] asm_exc_invalid_op+0x1a/0x20 [ 221.395874][ T16] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 221.395898][ T16] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 221.395913][ T16] RSP: 0018:ffffc90000157aa0 EFLAGS: 00010087 [ 221.395928][ T16] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 221.395941][ T16] RDX: 0000000000000000 RSI: ffff8880300e9f00 RDI: ffff8880b863ba40 [ 221.395954][ T16] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 221.395967][ T16] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 221.395981][ T16] R13: 1ffff110170c78d6 R14: ffff8880300e9f00 R15: ffffffff8dc257d8 [ 221.396001][ T16] ? set_next_task_fair+0xa4e/0xce0 [ 221.396026][ T16] set_next_task_fair+0xa68/0xce0 [ 221.396052][ T16] __schedule+0x3e03/0x5550 [ 221.396093][ T16] ? __pfx___schedule+0x10/0x10 [ 221.396111][ T16] ? schedule+0x90/0x360 [ 221.396138][ T16] ? schedule+0x90/0x360 [ 221.396160][ T16] schedule+0x164/0x360 [ 221.396180][ T16] ? smpboot_thread_fn+0x4d/0xa50 [ 221.396197][ T16] smpboot_thread_fn+0x5bc/0xa50 [ 221.396215][ T16] ? smpboot_thread_fn+0x4d/0xa50 [ 221.396240][ T16] kthread+0x388/0x470 [ 221.396260][ T16] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 221.396277][ T16] ? __pfx_kthread+0x10/0x10 [ 221.396300][ T16] ret_from_fork+0x514/0xb70 [ 221.396323][ T16] ? __pfx_ret_from_fork+0x10/0x10 [ 221.396344][ T16] ? __switch_to+0xc79/0x1410 [ 221.396364][ T16] ? __pfx_kthread+0x10/0x10 [ 221.396385][ T16] ret_from_fork_asm+0x1a/0x30 [ 221.396427][ T16] [ 222.500030][ T16] Shutting down cpus with NMI [ 222.500411][ T16] Kernel Offset: disabled