last executing test programs: 12.710747534s ago: executing program 3 (id=699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="580000000000fffc05000400000000000900020073797a32000000000500050002000000050001000600000014000300686173683a69702c706f72742c6970000c00078008001200"/88], 0x58}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, &(0x7f0000002640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x164, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x18, 0x0, &(0x7f0000000300)) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0xfffffffffffffe9b, 0x7, r6, 0x0, &(0x7f00009ea000/0x1000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x2, 0x2ebad4, 0xa0f97}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10}, 0x18) bind$can_j1939(r9, &(0x7f0000000200)={0x1d, r10, 0x0, {0x0, 0x1, 0x7}, 0x2}, 0x18) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x11403f}) close_range(r0, 0xffffffffffffffff, 0x0) 10.727149826s ago: executing program 3 (id=706): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\xea\\\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0, 0x6}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r5, 0xc028644b, &(0x7f0000000780)={r6, 0x101, 0x1e0000, 0x8, 0x80000000, 0x0, 0x6, 0x6}) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r4, 0xc0086442, &(0x7f0000000100)={r6}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001"], 0xfdef) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000000c0)=0xb, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 10.342683714s ago: executing program 3 (id=708): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x7f, 0x90, 0xe0, 0x40, 0x2040, 0x9950, 0x4803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x7, 0x20, 0xa5, "", [{{0x9, 0x4, 0x62, 0x8, 0x0, 0x98, 0x87, 0xba, 0x9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c00)={0x24, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "b5f9a73cbde6c4924c2625010f1d4126f4295ab217271d438cd5b3f0444d6cb5285c0c46576e582b3028a4885346f9e05e9efa893cd2d36474878372ec57b24f32decfd58145153b6022d3efdcd7d1a47d157fcdacb4936f86121fa035f50030e61da5f566627f61682659e67e6889c673f454d1ceab3e19dc3aef"}}, 0x0, &(0x7f0000000bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0xba4}}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000fc0)={0x14, 0x0, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000001500)={0x14, 0x0, 0x0}, &(0x7f0000001740)={0x44, &(0x7f0000001540)={0x60, 0x17, 0x2, "c32a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$rtl8150(0x5, 0x0, 0x0, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @adapter={0x5, 0x3, 0xfffffffffffffffe, 0x9, 0x4}}]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000005200)={0x44, &(0x7f0000004fc0)={0x40, 0x6, 0x5, "647cd7f59f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.219103698s ago: executing program 0 (id=711): r0 = socket(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0xa}, 0x41}, r2, 0x1}}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000340)) r6 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000003c0)={0x1, r4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x102, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af419000905492588"], 0x0) r12 = dup2(r8, r4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f00000001c0)="15fd9c64961b2fc920ed3a0060f2f03f991b72", &(0x7f0000000400)=""/191, &(0x7f00000004c0)="1b647c31d0b39154da0f0518bea6e5278efad3602a13512ceed2e1126ca0383a1474f2ad8f39b3a99ac69cea92fe66a00b5719578547c3d3cdc9a7511454206b9aee8a568c29111d8f4f978d4efcc40744780f17a1b59cd68dc2f04eeac9e4522297ecd38e9e84a618672e8e10eadcf941cd568c1d5f660daf48a107d77f757ff988ccb103dd8de77ce5b164d45686164e1b1e93c3c6ad78240a0d0391580f99c82fa3d3615270e375f8fb1248d62871f9008308e553e0e1dccb65df5b2620406b662c079576767ad809826db69f54bd48c56a3cdc24a4a52630e953c7041c501e7bdfc11732f003d35c748eb6df90d91dcc43d784ce652a42", &(0x7f00000005c0)="b6fbbe81d311757641064c8679a68dbb35a6f12af33083c41113f59787118479ae1929ff3a12238d1bece13bf2436d", 0x474, r12}, 0x38) 7.241159985s ago: executing program 2 (id=724): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x7, 0x3436c0) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000007fc0)={0x2020}, 0x2020) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) (rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="8500000008000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) (async, rerun: 64) r8 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r5}], 0x54, 0x0, &(0x7f0000000280)="37b82b8f41afa37c5297fe5b692d3cedbd057d6f37743560799bbf4ddd06bc810453adcec0c458de737aeadf5afcd6641ea3434a1a0bfd0debe7506939a82090490c46a6010019e855badfb0bee8561d5ee15bac"}) (async, rerun: 64) syz_usb_control_io$rtl8150(r8, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$rtl8150(r8, 0x0, &(0x7f0000004fc0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004f80)=ANY=[@ANYBLOB="400502"]}) (async) r9 = syz_usb_connect$hid(0x6, 0x6c, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1477, 0x1006, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x0, 0x3}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.052930347s ago: executing program 0 (id=725): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x18042, 0x60) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x89901) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0) fchdir(r0) close(r0) link(&(0x7f00000001c0)='./file1\x00', 0x0) 6.93040793s ago: executing program 2 (id=727): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x19, "9e418fd7a29bda33f1edd91d19988b8c6f0ee27b5614019a4a"}, &(0x7f0000000040)=0x21) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e20, 0xb5, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffff01}}, 0x40, 0x7}, &(0x7f0000000140)=0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e24, 0x50d2, @empty, 0x7ff}, @in6={0xa, 0x4e20, 0x6f6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x20004}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x4e23, @multicast2}], 0x98) fsetxattr$security_ima(r0, &(0x7f0000000380), &(0x7f00000003c0)=@md5={0x1, "0715e6b4d8b4803c3ad1177d5f96ad5b"}, 0x11, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0x6, 0x35, 0x401}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x99}}, './file0\x00'}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) read$FUSE(r3, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002500)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x2d, 0x80000000, 0x8000020, 0x9, 0x9000, 0x9, 0x4, 0x0, 0x0, 0x2, 0x81}}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002640)={r4, 0x58, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000002740)={'syztnl1\x00', &(0x7f00000026c0)={'ip6tnl0\x00', 0x0, 0x6, 0xd, 0xf1, 0x8, 0x19, @empty, @empty, 0x10, 0x1, 0x400, 0xe}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000002780)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002940)={'ip_vti0\x00', &(0x7f00000027c0)={'sit0\x00', 0x0, 0x8, 0xc0, 0x1, 0x4, {{0x52, 0x4, 0x1, 0x0, 0x148, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local, {[@lsrr={0x83, 0x1b, 0x70, [@private=0xa010102, @empty, @remote, @local, @loopback, @private=0xa010101]}, @timestamp_prespec={0x44, 0x54, 0x34, 0x3, 0x3, [{@private=0xa010101, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7cc1}, {@empty, 0x5}, {@private=0xa010102, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010102, 0x6}, {@private=0xa010100, 0x9}, {@multicast1, 0x3}, {@broadcast, 0x4}, {@rand_addr=0x64010102, 0x4}]}, @cipso={0x86, 0x40, 0x3, [{0x2, 0x5, "fedf8c"}, {0x7, 0xe, "d67d1eec22cae8a649633489"}, {0x7, 0x12, "0c133216aac25595aa791055344ee693"}, {0x1, 0x6, "789b70c5"}, {0x7, 0xb, "01425abb6c11fa7ccf"}, {0x2, 0x4, "1a1d"}]}, @ssrr={0x89, 0xf, 0xab, [@loopback, @multicast1, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0xb8, 0x1, 0x2, [{@multicast2, 0x3}, {@rand_addr=0x64010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x6}, {@remote, 0xd}, {@multicast2, 0x2ad563c2}, {@rand_addr=0x64010100, 0x8}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}]}, @timestamp={0x44, 0x2c, 0xab, 0x0, 0x3, [0xd524, 0x5ed, 0x5, 0xac, 0xe422, 0x0, 0x8, 0x0, 0x0, 0x9]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000002a80)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4048841}, 0x4000) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x5c, r2, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000002c00)=0x7fff, 0x4) syz_io_uring_setup(0x6526, &(0x7f0000002c40)={0x0, 0xb2ce, 0x254, 0x2, 0x39c, 0x0, r4}, &(0x7f0000002cc0), &(0x7f0000002d00)=0x0, &(0x7f0000002d40)) syz_io_uring_modify_offsets$generic(0x0, r12, 0x68, 0x5) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r13, 0x29, 0x30, &(0x7f0000002d80)={0x8, {{0xa, 0x4e21, 0x10, @mcast1, 0x9}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x7f, @empty, 0x1}}, {{0xa, 0x4e20, 0x9, @private2, 0x1}}]}, 0x190) getdents(r4, &(0x7f0000002f40)=""/86, 0x56) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d22000/0x1000)=nil, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000e37000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000d95000/0x3000)=nil, &(0x7f0000fa7000/0x3000)=nil, &(0x7f0000db5000/0x4000)=nil, &(0x7f0000002fc0)="09a2f33a9dfb3ba2a4a89a1e28f819e17c6388cfa1e9c923da801dd415d960090c58616e2b034e3301429e2d8cc05cae7a8ee90a9a7e14dd756780c51f5cfd051842b2908297d9fee634e36c5a4ad38f0abd9c184f846b0fc262b46e4fe44c28f7639d5c81d0cd82954c7863e9446c26572944d2cf316d767d0a1930ba1c", 0x7e, r5}, 0x68) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f00000030c0)="e934174fc3ce0b0ae854a2903a34b243") getsockopt$IP_VS_SO_GET_SERVICE(r13, 0x0, 0x483, &(0x7f0000003100), &(0x7f0000003180)=0x68) sendmmsg$inet6(r3, &(0x7f0000005f00)=[{{&(0x7f00000031c0)={0xa, 0x4e21, 0x1, @mcast1, 0x3}, 0x1c, &(0x7f0000003380)=[{&(0x7f0000003200)="a1bd77208a6352d090ab5c595bc8a84a5dec6e5dae55ad36b466a72e49bc5618c6fd50fb56b011755637c94985651ce8db25438ebbe3e434238ee1d7f3dc96b3256aa06b32c05ea41beedc56b97389533d57f511f7cd4efeafcd95a953abe4b24a82cda114386bd10404a5d200b45f3d5d7dbceff8f1bf51ee15a2936b02b61a18eac357cf7ddb56d28f55295c7b59e1ef565b55d465a73d74055d957ae33702664b8077849199ea43910b9b81c11dbbe0a5393a2c90f83a61b4fc31d4bf43e32627", 0xc2}, {&(0x7f0000003300)="ade2b563eb2daaa6bcd9db381935355e7b094107947f5be256d637a1d7a4342560dfcaef7103843fca61079b6666c163cc5636a72792505a47e9360723df3ef1882c73ec7eb4a8a8d07bce46dd1de4158f5a5e2592", 0x55}], 0x2, &(0x7f00000033c0)=[@hopopts={{0x210, 0x29, 0x36, {0x3c, 0x3e, '\x00', [@generic={0x0, 0xef, "c09d25ad330833554827038ec32d855ee59fe0634f914e6fefcc39f9807d48104abe653231083284e318b117359dd8d1569c9af192f53191930c336ff3a749ecbda26d8c6116d3516f8bdd5b455222d9baab61bd6c95beece7f24725c0948d432e53c8b130a802f45dd6e45a51bd5255748659807123a1e6deedad638e725871b7df4d7241bf0364d0fbf0a05c4cf7ff5b80ceea151f7d02bb0bf9128e87d917e57641e59a0c6af972d4c2235fbf7c1be7c679f70582e4f8c421f4346dd699af6e03050b9080cd2bef7f3f45102c2a8a268ff5d916c9dc3df7d173b68b4ef7eb615b64303ed8975d13f035c4faf4e1"}, @generic={0xff, 0xea, "65a2bc8910c650d5b225cae564f5dacf0ed93a16788edf91e767c9f2cb1adc71374eba78e7ee10372338286926189101d070ef186f3b39c8e4152828d4ee80520f466a82a8e1fa312c1f45e44f7f648e40e8ba6923594f77357af986535f66cea81f9d53b27c1b6b5e1fc84a9892d94ca7cbd77b494e7564360ae97cd69b496d271e348976409aa80ee70fadbec819b3deab3cab125b0701c562c400bdc48da5780966c2a561f2ca000fe00b4792db6dfaadca4b01a4296d83e82c5bfe85cfc2c9f0b019f5ef15a578621f5ae65cde3acd29c932a973332e2a523b0871db0144b080192a88a238c60ce8"}, @calipso={0x7, 0x18, {0x2, 0x4, 0xc, 0x8, [0x3, 0x2]}}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x0, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast2]}}}], 0x258}}, {{&(0x7f0000003640)={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2c2}, 0x1c, &(0x7f0000003a40)=[{&(0x7f0000003680)="e271b591f76fb20c64689fa0c9a83a207ee985e444499849d92f51f5fd0c0d480f155b272c8e86b4aff6abae608137db000a3f8318dbe602c819e1c457f9915fc0239c3d1b8408202c86d8356a274e12f045a9d9a2a2ef5aacc0111b2f525c48c5a432ef25169015fc305565ac14c73aad7562cd4da0067fc35f41d38adf8ee757c04c995d04007a2c98ad4a01d64844892bd1e3917e8842bc277a8d57a401e5ea0e78c57dc8753fd240a121757780a19446dad3c2d138bebe21639b5735f158309f01053a54c15fee0e75e433aaa3010952008270cb5ad59f583d1519d42a55b4afbe158b835568898e34b5ca3130", 0xef}, {&(0x7f0000003780)="c68bdf9a6a6f786f48ba314016fae2bcf69b603808a80bc0281c9657e6cebe73dff2549c719d71062428b190f810d2a4b36b493a236857b369676e8beb9e3076de4ef3466bf8ecfdb023954f916ffe3933a8aa306de7d23908f93392335a44d54bc41209055a3073f15ade4b21803f0f8a8e2821077e9a957a7a3e89a2d47e3f9db842857d5ebd1ccea817292f3399cd3eac65df7952268e37bd1cd955f31d62aac870f84e6ea14bcc36c14270f153713b7ea15a973b20676426a0b3ac03aa4dd2788241561ab8dba763c7d6694aa1a427e51a55ada5b96becae9cfc5e5edc18cc5d03bf238328debe8eda22c049796c725a69", 0xf3}, {&(0x7f0000003880)="a2c82170be8d07597f07eac68767849a180aa75f3e6c6af680a0a078469b9d81d90039f6d2728b3fbb025b3ef1c5b3435bcc9413447c7972554ade28673176a8e652b223ba57d6a4c8dca0b6f285d4325dc76c6e6e581d4e6fe23fafdd24c709cdf1a3a243a4d0f101695c9319f4283ddb2ad56bfe218215ccf9664333c4166ac2cf13ba02186ba069c4f4cfd7c06ae1aeeb8b78", 0x94}, {&(0x7f0000003940)="b1e9d967ca46c9392c5468cb2f294f04303ed85057884ce1426b08528fb7ae391516baa0c54d78197af47a80375d10556136fc4add2191b443fb31829379fcfb71a7dc3cf88f1257534b0d4053788f1117c00371748521d47005fb3e778e2ae3b61f28b22962043a501cd628c065226749754b4f03d9f20f65bc1d567914c072f267f8cc688ffca757daba2c1dd6be0dfe3d5a7363497e5a5ba33d9c912cc3cabcdebd089692b324a251d1b1c7bee87d82c455cd4ef3c10716012468ccf7e4ad8b5386f12b3947ed5ec0927c37a09eccd5", 0xd1}], 0x4, &(0x7f0000003a80)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @rthdr={{0x58, 0x29, 0x39, {0x87, 0x8, 0x2, 0x91, 0x0, [@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x70}}, {{&(0x7f0000003b00)={0xa, 0x4e23, 0x8, @mcast2, 0x9}, 0x1c, &(0x7f0000003dc0)=[{&(0x7f0000003b40)="b1c2262a058c617fbabe026a7180fa88", 0x10}, {&(0x7f0000003b80)="7b74018622ea087deb627eb3cf53d349ede5d55e827f919571c08a73ff290f4ed976acc11c1bd07ab145957f7d0d70146f19b6577ca7c2aae4ffb0d654ff73fbff3db95b51e41d0118caf12222b072dc9be90cea03d613bbbbb0c9f15d702d30cd2043f62cc1c31c3f39714ea9e5165f32811df3f44009afa265408eb8f62414c790ec388d8a22a6d5aa1a0c56b6374d80105f8bea7e31f7ef36b0371b9d56aade23942659ff3d2c923e4d7893bee2066867f1", 0xb3}, {&(0x7f0000003c40)="954d76e2aeb4bae7c96d40", 0xb}, {&(0x7f0000003c80)="476f995ab40936f6827f65f70092178be93c57458c68d353ec564d48da230bb21d229ff11ae4d322c2dd2c868a0186c15221c15ae46777057fd8bb8f17cea8cf054facc06bc60499efb0330fde51e000a7a400d47752a5b277e5bd961901a0d877ee20fb59668f62336a0abe3a64ee330deeccba53190fdb49b73ac57d3b", 0x7e}, {&(0x7f0000003d00)="80d80082355638233541df0352cc70098afa34bbb9903f9b3b2b67561c206afa58384ab8068eeb8212b3286250b3bdf328326bf97c3201610038616d73d595830557cab314dac6af8d67290f06077a63704042cf87d47d1090075323a9d1c5ad51c8a7423f3a89292b0312c7349ca9e7cbf1a4255ea6dc743b15bcc09584c879b10ad3a8e946f73314436daadc433942112b7817bc9fc9a9a621b7c8b15ad67367bf1b9a59b7c7", 0xa7}], 0x5, &(0x7f0000003e40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x5e, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0xe, 0x8, [0x0, 0x14a]}}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x5c, 0x2, 0x1, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}]}}}, @hopopts_2292={{0x130, 0x29, 0x36, {0x64, 0x22, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x7, [0x400, 0x5, 0x3]}}, @ra={0x5, 0x2, 0xd}, @calipso={0x7, 0x18, {0x0, 0x4, 0x7a, 0x3ee0, [0x5, 0x8000000000000000]}}, @generic={0xff, 0xa8, "7b24cb513d45b03bc964eb2ec523886666c861585f8071590cc0aaf72d836ca33d3093d49cc10c84580c3097f9565bd0320b2bc96aaae831de96ad50c28a9b483edd8979088361ac38e877feee57280afd9615d0c364b8002332c9f580e0f4a1c7283c4455a55eaf524b91d3656b9e4b7101694901d5f74031c584a4cb4cb6a5540ac1dc32f56b6de63f0740a8168059e6b242eafbc300b663ef65044f2183e4c42ab1a7e03cdc72"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x10001}, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x10000}]}}}, @tclass={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8080}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x32, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x7}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x2f, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x6}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4bc}}], 0x260}}, {{&(0x7f00000040c0)={0xa, 0x4e24, 0x6, @empty, 0x9}, 0x1c, &(0x7f00000041c0)=[{&(0x7f0000004100)="0e6307038cb832386be259b52d139d00463358eac2bf5d9a8d2dd40bc58ae6f8b2aaad7fbd21e6c81ef19d16e2ad10970e51faec08bb13730c7e5f4d15c112ae278c558038110411784104a68788f8afd9868734174a99eee9961d4ca1ee8cd4bafe687e66800eaa5015f3791c9ed8a2f9dfe108763ad9d23b8d3cc813562c363a55eb832b352aeb84fc263b177303b90fab70d84c951e01250e9f5877", 0x9d}], 0x1, &(0x7f0000004200)=[@hopopts={{0x28, 0x29, 0x36, {0x3c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @pad1, @jumbo={0xc2, 0x4, 0x7}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x11, 0x6, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x7f}, @jumbo={0xc2, 0x4, 0x1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff6457}}], 0xc0}}, {{&(0x7f00000042c0)={0xa, 0x4e20, 0x363b, @dev={0xfe, 0x80, '\x00', 0x26}, 0x4}, 0x1c, &(0x7f00000054c0)=[{&(0x7f0000004300)="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", 0x1000}, {&(0x7f0000005300)="e02f19aced9f5a2e0cb10bfb93e2f94a461773651b835e90544dda2ecf5ae2901587633889c2f514158f5e1ef483b0cb8ecc51d14edab57a5163fa53ea6a7bf3237863915b7bdd6af003fb77fb15e3e5378125a7f8b0103c5740390dc2d06f6bc30a", 0x62}, {&(0x7f0000005380)="9db47d380352cf010d72f9b8420d7c258700350db2096192205d4a7f68039c0aaff71a8a2ed596ded66639", 0x2b}, {&(0x7f00000053c0)="8b2dc730dcdd8438ca9bd833cd597969f705a80f7ae7265dad70a6ff506fa04fc89c93315ea0fc6349ed25923912bda69c0f2248e386f0ae22b30db472132a5613ac78b3b2dce57723eb67ec75ba284099ebf5c6e3f19dd6b6acbb46299ce8cbf0d1d64cd331434174e2f12db7adbcd41a5c25a52c7cfb530abe9c8dc4bcc5756f67cb4e1a9549812f6e580cf5fc2485a4b57d981b503be7241d51ce4c7850ca0ffc8c6c636165c4213844acec9b4571364c20a3f13697da47275d71a7c42a2d4030a8e5078e5d3c778d1fa46e3ef34f2c8e74d73944e13d940020970f57fc3ae4f16be3d5073e47", 0xe8}], 0x4, &(0x7f0000005500)=[@hoplimit_2292={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x8, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x400}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x3c, 0x14, 0x2, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x16}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @mcast1, @private2, @mcast2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x150}}, {{&(0x7f0000005680)={0xa, 0x4e23, 0x7, @remote, 0x6}, 0x1c, &(0x7f0000005b80)=[{&(0x7f00000056c0)="9eeaf65e07b5a84273ac37854a42236b9fe167f1ecdc54d9e8a54411434a349302db55537e44ed8d6b589cc26b838f7173b786b725e1ed3a7466a91ffb4dd4705b0678affe87891199bf52d6ddd61be08bd7f2b99959d0598669ea85b2596ab0ed042b871e100ceee3b0ac97ba34c4a6e67ff864655c3ca99639a23631449327071036e6ae4b5777c60a72b253cb86980cf71701a25800483fec77034d4fc0a5386f84c939d5e1178f1b3d45ab3fa5758cbc3c5c4b786dfbee2fa628519afee4bb2143f3b43ea1c4337e1120b6566dda57f1d493307347af5d5da64c330c881f17049d5d", 0xe4}, {&(0x7f00000057c0)="41eb3b90ff3796d31b49870814192f815cf56124965aa65d09506f2280af3d7005d9ae2f7c2f336c732d8271e70d2a68b6f7e5bf62dc5eef9b1e51bd4c6910c8bcc65e5f6c51dc362a59e6cdf22935f1a9d395f4848d5c5565be47e9caf999c4df672c1466f316aaf915878274030945269f5e7b184c4d3de62fa56d3b3ac9c728657c650f0b560ee7490855676e422d5ebd3029fd61ca3151124ae15e298695805582d5e8a86890b4cbf947cdc0f672b4e96dce9ce093fc2f7e1486743e19e61fecad2a6b527add347c72b36506ced501ae9f7239809030115861c47a", 0xdd}, {&(0x7f00000058c0)="dc0f590f196d9eeb95c93dd63a60c089b8136d6e4b4ad485fa015697b59863cf4eeede854e142733bb4ca004657c9c6c8cba2606ac790e6d1320a280b18006acb74bdca54270b761493f9019ff8f5312a3989061e9df5b9443bd93dd4d50", 0x5e}, {&(0x7f0000005940)="d1323040bc3445185bf76f408ed1c836f34c2bfe3ac516434b48a14f03df2c025ec8a0d245047b65e74393dc4dd9e139fc26b6abc344fa49e40ce58a29ab4cb9d2d6e4c65a6fb8ddc897975a188ea2afceaa8ea95a40ea11c39e5bd4ac5ccf98b659f29580f03ca4089902064017c00ae7fea1d0367cd8ecba44a845554a070c733b44ac73fb74870670cd20", 0x8c}, {&(0x7f0000005a00)="6d88d733ddc4bc2acb39a8f9d27612bcb9b25b372d6d4437179051c629d7e01bf515b290405d01c6f3a600248586b7384fc28520c117d06c91f21958390e98ac0e3a66e2d29dd4cc6c2bd0693d3b5eb3fca8f86cb1ec1f83f9d05dfecc29ee019be7f205f6dd6f9b1c6b8383ce3e31184622aa", 0x73}, {&(0x7f0000005a80)="4c36ec3491270dc198957ee9777f634c45535c1cf954c58d6b12b372834b62940ee15fca535dba7f843b2263825ffb79a20ecbd40ac4421abddfbae72ba3e6", 0x3f}, {&(0x7f0000005ac0)="28cb55f4f2b59262439f9238c024490ad72f85e4006ae04b690d2d17df85906a44f7909085099d05a22eabde80f2d556faecf164fca005f62836fb6495e7e076ed733db8ab4e9a70a76aef5390f9b1e2a32d73ac08e99537d9eaeee73f33d3a473d38e0f6814a37179e9dc5998f89e95496272afefaf6c607178eb9b38a8edb591ecedcee47bf86b21bd9121015513ffeaa5788d9653f4b799bc65d2344d7b0949dedf366f0c1060629c1b31ed421c31dc5b94d8a13e88ca", 0xb8}], 0x7, &(0x7f0000005c00)=[@rthdrdstopts={{0xc0, 0x29, 0x37, {0x11, 0x15, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}, @ra, @generic={0x4, 0x90, "e6835d6ec6938b80019ffc215fd162faf8cdda7830c471022202014b05dec12b3b87fe09c5cfb2daec4e5cee0954952d61784b49148242737375bba9a345d8d61e3476cfd2f5f46a6166ce9ec572d132173eb5392c51a59cd4b58c98df9364359f646bce7d23846d3b3e3e7fceb1d6813ff24eeda628dae2295afa59c7e1579b54437e4eb6ad00b28eaa3ac4cdc4978c"}, @jumbo={0xc2, 0x4, 0x1}]}}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x2c, 0x12, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xa}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x2}, @generic={0x4, 0x6f, "1abcd1b580da70d69433232f8305df5c013d95fcc99a065b73985ba5c6624070f04297f1784642f1d8b1ac82c8c912bed3489f327934c12d21beaf825a7de0c4843768745bbcab657ec7449bc717adb0d4520dcc595638519a0554571d9f21ea4041636858ed2c6f665f9a2f16f7a1"}, @calipso={0x7, 0x8, {0x0, 0x0, 0x2}}]}}}, @hopopts={{0x188, 0x29, 0x36, {0x0, 0x2d, '\x00', [@hao={0xc9, 0x10, @mcast2}, @pad1, @generic={0xd, 0xfc, "6154ce7860a806e2b764dd6d5507abf5331f3b47c67e60236352dee4e689c2009cc06086fb9e09e9535e179f5703e7cbc9f7c69239104802c1e86eb53b271df1d38658920af5b0ee4c7d73b9def3d5b70fdaf70a89bd2f1ec437a5e2f552349a571dd2e961dcf7a2b46b58ca866ad2b15b63afe02e3090486119f5fd99ad43d4afa3b12b6e4ead8e4082bd9f2a70ceaf923746df6cc87a087b81f0dd9f4c2f582f766a96eb1ad00040c64ff342b3ee176c403ec7c39634dd116e1be2cbf6cb60bddf562aeda8983363433c06e8d43ed2d5a720cc44fbb1df3158490fb65c87bd758fdf71a1cc0ba5d66bab8f7893bcf6346c3915d0578737a156b697"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x8, 0x5, [0x8, 0x3, 0x399]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x8, 0x5, [0xee]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x7, 0xd2ac]}}]}}}], 0x2f8}}], 0x6, 0x20000000) 6.829664916s ago: executing program 2 (id=729): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) fsync(r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000074c0)=[{{&(0x7f0000000100)=@l2tp, 0x80, &(0x7f0000003d80)=[{&(0x7f0000000180)=""/23, 0x17}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/176, 0xb0}, {&(0x7f0000003cc0)=""/159, 0x9f}], 0x5, &(0x7f0000000080)=""/12, 0xc}, 0x7fff}, {{&(0x7f0000003e40), 0x80, &(0x7f0000007140)=[{&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/169, 0xa9}, {&(0x7f0000004f80)=""/251, 0xfb}, {&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f0000005100)=""/4096, 0x1000}, {&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f0000007100)=""/39, 0x27}], 0x7}, 0xbe7}, {{&(0x7f00000071c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000007440)=[{&(0x7f0000007240)=""/8, 0x8}, {&(0x7f0000007280)=""/224, 0xe0}, {&(0x7f0000007380)=""/157, 0x9d}], 0x3, &(0x7f0000007480)=""/63, 0x3f}, 0xfffffffc}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) getsockname$packet(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x2, 0x16b, 0x7}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) timer_settime(r1, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) 6.65624311s ago: executing program 1 (id=730): r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0x7, 0x0, 0x3, 0x5, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0xa020480) mount$fuseblk(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xd8]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) 6.522495424s ago: executing program 3 (id=731): socket$unix(0x1, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000100)={0x0, 0x2, 0x2, {0x2, 0x11}}, &(0x7f0000000340)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "e74f91e89a8529afde315c17ce9b1a26e14127054e631f45e27b0f4d"}}, &(0x7f0000000380)={0x0, 0xf, 0x4f, {0x5, 0xf, 0x4f, 0x3, [@generic={0x3c, 0x10, 0xa, "e35aec3eddf9357cfb04e61231955f71b93e61ad6c02f6808e4128fea523064b21de02ae1306aeea7691e538ea0660ab86f9e13d2713650878"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1e6, 0x8f, 0x35, 0x81, 0x81}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x19, 0x2, 0x4, "c6eaab69", '>00='}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x1, 0x5, 0x3, 0x5}}}, &(0x7f0000000bc0)={0x84, &(0x7f00000006c0)={0x0, 0x13, 0xcb, "d2453e29924afe0ee4202d78e5c4aa3562533566553b01320a0532ddc8ea765437d096b6b5a670bf25cbeec0a9320a5fcacba0719cf6f61a404ba6b3b824ede8934eac0c45fb76d885bfd8427adda94453a7811e6a20f722c910938acf9aad399c89968a72b7466bbb8ba4dca038eed909cb85abfb1c5e73209499e1b672fefc29e9abf3791a6b9c9d40c9f5558d13a8acf524db30dd56e153d3627d3c9ccca38c889bd01ff76a7c8b3a07b7bdf7dc44bd0bbb1cf20352204d77df5d55e439b9d5e0c572a3303383d1078f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x7}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x8, 0x80}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000980)={0x40, 0xb, 0x2, "9154"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @random="9b05a02c9bf9"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "f479"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0xae}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x3d}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000005c0)={0x20, 0xbe9c2c1eddf788b6, 0x4, '\x00\x00XY'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x40, 0x3, 0x6, "9ded9bd66edb"}, 0x0, 0x0, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x80}, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') 6.229688621s ago: executing program 0 (id=732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d30000000000000180016801400018010000600030000000300000001"], 0x54}, 0x1, 0x0, 0x0, 0x30000084}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$userns(r1, &(0x7f0000000080)) 6.220554742s ago: executing program 2 (id=733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000440000009"], 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x141801, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000001000000", @ANYRES32=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b50200000000000085000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x18}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x200000000000) ftruncate(0xffffffffffffffff, 0xc17a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, 0x0, &(0x7f0000000100)) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) socket$packet(0x11, 0x3, 0x300) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) sigaltstack(&(0x7f0000001400)={0x0, 0x2}, &(0x7f0000001500)={0x0}) socket$unix(0x1, 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000000c0)={&(0x7f0000001a80)=[{0x99, 0xa000, 0x0, 0x0}, {0x6, 0x1811, 0x0, 0x0}, {0xdf8e, 0x4000, 0x0, 0x0}], 0x3}) r7 = fcntl$dupfd(r3, 0x0, r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022d"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) sendmmsg$inet6(r7, &(0x7f0000000240), 0x0, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/165, 0xa5, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fe211e81000000000000000000000008000d"], 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r8, 0x8800000) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r9, 0x8004550f, &(0x7f00000001c0)) 6.106860958s ago: executing program 0 (id=734): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="4007740000009cf792d7"], 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x7}, 0x0, 0x0, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @random="9aec6134b492"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0xb3}, 0x0}) syz_open_dev$loop(&(0x7f0000000280), 0xff, 0x8200) 5.688163278s ago: executing program 1 (id=736): r0 = socket(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0xa}, 0x41}, r2, 0x1}}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000340)) r6 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000003c0)={0x1, r4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x102, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af419000905492588"], 0x0) r12 = dup2(r8, r4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f00000001c0)="15fd9c64961b2fc920ed3a0060f2f03f991b72", &(0x7f0000000400)=""/191, &(0x7f00000004c0)="1b647c31d0b39154da0f0518bea6e5278efad3602a13512ceed2e1126ca0383a1474f2ad8f39b3a99ac69cea92fe66a00b5719578547c3d3cdc9a7511454206b9aee8a568c29111d8f4f978d4efcc40744780f17a1b59cd68dc2f04eeac9e4522297ecd38e9e84a618672e8e10eadcf941cd568c1d5f660daf48a107d77f757ff988ccb103dd8de77ce5b164d45686164e1b1e93c3c6ad78240a0d0391580f99c82fa3d3615270e375f8fb1248d62871f9008308e553e0e1dccb65df5b2620406b662c079576767ad809826db69f54bd48c56a3cdc24a4a52630e953c7041c501e7bdfc11732f003d35c748eb6df90d91dcc43d784ce652a42", &(0x7f00000005c0)="b6fbbe81d311757641064c8679a68dbb35a6f12af33083c41113f59787118479ae1929ff3a12238d1bece13bf2436d", 0x474, r12}, 0x38) 4.440789852s ago: executing program 2 (id=738): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x4, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x22, 0x14, {[@local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0xa, "ba11e87b"}, @global=@item_4={0x3, 0x1, 0x6, "ebb2e08b"}, @local, @global, @local=@item_012={0x1, 0x2, 0x3, "a9"}, @main=@item_4={0x3, 0x0, 0xa, "fd1d776c"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f00000008c0)={0x20, 0x5, 0xc5, {0xc5, 0x2a, "38ac5229beb2b116eca434cf0e78ee9f4e79653e7713f41f8d83135333042f424c9f25a6d0dd39fd45da255a46e7dc866549d01cb4738247c56e30dabd95f38dd1e85ff72806f2e5cfae93b2dde3243ed730f6cf4f034ddec2e3bfb00764dabfa16c6db1853e7994ea2a50513c1bc2cfd47dd183348532121189b1ceef49b64fb527bda00dcde34e99464f5799dffb1306cbefa5b0e131f0512aa35eaf107c5fcc88c035fab76e15667586cc2efaa484b3cf3c74793d899cec7b338d1f2b116b419d5f"}}, &(0x7f00000009c0)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "f51c93d7e32e6fc2c9f540c092ff3415684a6365ab4ce4e6b34bb3b3cd362004fbe16815301c2f081b6ab7e4888b4831c88d4f0b0203d0f6732196234a7c9544112086fd7176a78f6c316eb06d88ee30423d3d2630557ac52b2c5375146917900d72c002cdf7b30c6b93989f01dea0075799d9ae6265b05cfe"}}, &(0x7f0000000a80)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x67ffd99b581bcf57}, @local=@item_4={0x3, 0x2, 0x3, "0810818d"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0xf0d}}}}, &(0x7f0000000d80)={0x2c, &(0x7f0000000b40)={0x0, 0x1, 0x62, "f72148f2e06916741b755326ea216dde4ca92b19035c41b69ab46d2d94c7f3bba920c17d74b565ef05f61e4f95194dd6fb6b63bdaf5978835e8ff319ee8444e58106c51697126ddaf045b7b0a5c84c7945aaec7dca892de7a99e19c31173e81297ca"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0xe2}, &(0x7f0000000c40)={0x20, 0x1, 0xc1, "ce0a178b733b96019e7fc49bacee3c31dd76388f610ee7ab26765148376759d08fad60c6d4b4dbc2edb8ca83bd4b0ebae2599d143533cd81024a2c6eac76b67b3a5efd9fb0bc888187b120d1e636add2ca797d60ad962f01a5bd25c707568db7ef234f476a2628124029aa8eb8645cc4637a277be38908de6341cdb9266e32d5e69605faf72621a58476f5b3fb7c83d2a16f78d20949ee7432e3a02b213dfb6e4c2651f2fb80be24439f94ef2511175cf4c0f235446b9ccd24bccee6a179ce5530"}, &(0x7f0000000d40)={0x20, 0x3, 0x1, 0xff}}) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000795d6c020000000000000002033404fc341d5f6c31000009056a02abc223b81444c1dd2dae2c0e785909ef5c72d874467fc24b50d863b5766487944f7666c26b9fd6c9abadb92f116faacb0f6886943f8956fcdaa05d986426f9c15e44c93b7e2c5198f2604701d78bddd90fd5f2039beee43def79c3aedd2946f9"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x11, 0xca2f, 0x80000000, 0x5, 0x4, 0xffffffffffffffff, 0x7, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x4, 0xcb, {0xcb, 0x7, "49dc965a416dbcb0e75da0a792cee29ee23bd4fac7cd17b490f8672895558ba03305b9bccdfcd0a39bd0e638e8af78922c7dfa835367d78acb786b18bd99006706120c28e2ae67ae3de9b3a3964c7bdc7d3e3c0be62478231d70925f7390b2634acd1d07ff114934265ce59641d1f933142375e947723948e354f056aca800783ec60955ef31190ca9e34716a633b32642dd3a68bf7b3d0978091f0c8ee42cf3428804724ff14a1aaab1cf0611ba999f4585f067ddc045c33e0edaa56d5e8c5511b11ef20cc2c98532"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x40, 0x15, 0xd7, "1c49465cbd682b94a81618b5d2e0225698d0bb218a1f6bd5c50261f2d9efd71a1dbc594d070cab87e40d1340ecca7d839be78a1b81d6737a8b19f234456bcb2b0c6b1bf3b805014a18dde4ae4b9ce70a27990da138c9042527b4667c4553bf23f79f2d710a78883580942459f765cea8270593a2d032c8db503c82b42a97bc2a88f95f8c3271528fcf174e65954dcb4722979dfef617d244ea80c580ea427fbbfd9f37f37221ceaf7d16e8b135eb8785d9a6b8a8a94c4482aec1ea545ad9641f7a6aa92191a0a11a8f2124dedc9e865ff95a120968613e"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xa9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "d10ab3"}, &(0x7f0000000400)={0x20, 0x82, 0x1, "e7"}, &(0x7f0000000440)={0x20, 0x83, 0x3, "539c0d"}, &(0x7f0000000480)={0x20, 0x84, 0x3, "a63210"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "47f0a6"}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x3c) syz_usb_ep_write(r0, 0x5c, 0x5e, &(0x7f0000000700)="b9425bd02396754b7f172ce23a8706b600104f074e559fc77e8c0000000000001091260ef160dc7b012388866baac477c88e00d4d4d7075183a7b2432656af4dce76ce3835fb0d235e45dfde90bcbf6cbfac1f28e44fcc21a73941000000") 3.781899407s ago: executing program 0 (id=740): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="a3") syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x901000, 0x25) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x901000, 0x25) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x9, 0xb, {0xb, 0x4, "187280ee7aa3fd7ece"}}, &(0x7f00000000c0)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "4b31b5990556166f45ad9f8cf9417b98f0904a7abc278b402ec8d185efa2838b38e18a20210706791ff4219db640d64c6f12a122a600abbb5c06d01e97a17c85c4c978c4453fbaaaceac7e787a9a05932c23b0f8eefab058d4da88e347ba11de7f6799996c003a94e8b8a787cb761405d48f354e88270f4c3e1d05be8c71dc76da8938a9432e256f73e82a80678f6e39c2d050db1f086e2a3317060d5451af17c9824f7617f6bc6906b000f32dbef37ac3a4e8e9dff7ff25156e3972913a836ebcc18ce1a1c33ae533d5af09c6d22e62801876d4d3bda2e2cea6663b8498afe339a218feb9239fc82e"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x40, 0x18, 0x5d, "ed1e413f6f3884f50633a867df00623bf170410d1037a9d0bb270290ba7e7f701630d72a2861e611f89fa8d64e0378617851800d1f75d95cdda5b876281660df77c7d87e87679c550f2843fbd0f9e27b851ebed05822c4f067f0b91d09"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000300)={0x20, 0x81, 0x2, '\b\v'}, &(0x7f0000000340)={0x20, 0x82, 0x1, '%'}, &(0x7f0000000380)={0x20, 0x83, 0x1, "aa"}, &(0x7f0000000440)={0x20, 0x84, 0x3, "eb6c69"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "7a2bee"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.641490097s ago: executing program 3 (id=741): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f00000000c0), 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000140)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @random="2bc1cfa2897b"}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) unshare(0x6a040000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r8, 0x0, 0x7ffffffe}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xfffffffd}, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0xe65b}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1]) clock_gettime(0x0, &(0x7f0000000180)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r2}, 0x10, 0x0, 0x1, 0x0, 0x0, 0x80000}, 0x8080) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000300)=0xffffffffffffffff, 0x2) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000001080)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001b6000/0x3000)=nil) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046, 0x10}) 3.050264439s ago: executing program 4 (id=742): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "a12410b225ee191ff3ada2c0b8f753334c17c000b0336e981ca6da4abed14c243680bd9a1a6e88afa2c94437e701c33c730945afcc406c80bff0ff58a9dc87f0", 0x3f}, 0x48, r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x1402, 0x0) mmap$dsp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000004, 0x40010, r2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="08cb7e355d3232e6301ba6d90a058d", 0xf}], 0x1}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf9}]}, @AF_BRIDGE={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, 0x0, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000002400)=""/147, 0x93) 2.510400633s ago: executing program 4 (id=743): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x250, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x14, r2, 0x701, 0x70bd2c, 0x0, {0x45}}, 0x14}, 0x1, 0x0, 0x0, 0x20000021}, 0x0) r3 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.419254138s ago: executing program 1 (id=744): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) unshare(0x20000400) r2 = socket(0x2d, 0x2, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@id={0x2d, 0x3, 0x2, {0x4e24, 0x2}}, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000140), &(0x7f00000001c0)=0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) unshare(0x4000400) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r5, 0x402, 0x80000010) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc0e99db6de761fc6, 0xa774) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x90) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x1, 0xd, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x1a, 0x2000051b) io_uring_setup(0x6b2c, &(0x7f0000000300)={0x0, 0x1702, 0x10, 0x1, 0x26b, 0x0, r7}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000003c0)=0x7f, 0x8, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.48784861s ago: executing program 0 (id=745): openat(0xffffffffffffff9c, 0x0, 0x101a42, 0xa3) socket$nl_netfilter(0x10, 0x3, 0xc) readlink(&(0x7f0000000040)='./cgroup\x00', 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3c) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) socket(0x2, 0x80805, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="d6f5fbcf8c5f6b1eab996ddbb1a3fa9e7faef2c7e9b975084ebb6f5557284549957db0e43ddd82283e9404df9f48beef3bbdd77a64dd1807932d9fc1530c25d99c0108e15f903702feb5de78597f9aa52ffbbaa5b0228712aba726a32334d84e12920ffc0f4553e561dc7b6570bcaca912b5e63022bbf50cdbee9d0cc9586939fe7d49ccbde680e7e0cd18997741457262cdba41de28c9e3a6e1fe79bd5c5c2459f4f619fc95346792b3f20155bbaaa9a07248026b6159c403bea11fa2b5e85ba3e189f96d08063e2d3fc85078655058cd151e6e60ed04bd487becfe0ec08c6af41bd54fe99c4b94c18fa34940161469afcd05e1c1cd5a98ba5f28d768fcec333f2cb041afc799c8eea8f460e58de122899d699da77dcb9655b52b93be558a36c317426b69e9240d73f87776a10bec23122eeb4dee2bb94c9fed02d69693935ca436bdc62cfb19aa3c7d2b", 0x14b) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.375666288s ago: executing program 4 (id=746): r0 = syz_io_uring_setup(0xa35, &(0x7f0000001380)={0x0, 0x8e1b, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000001340), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7c}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) io_setup(0x3ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$mouse(0x0, 0x6, 0x2002) write$tun(r4, 0x0, 0x96) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r2, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xc8, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000ffff26bd700021dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="791001002b000000200012800b0001006272696467650000100002800c002100cf0022a996"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20044492) 1.370153799s ago: executing program 3 (id=747): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x7f, 0x90, 0xe0, 0x40, 0x2040, 0x9950, 0x4803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x7, 0x20, 0xa5, "", [{{0x9, 0x4, 0x62, 0x8, 0x0, 0x98, 0x87, 0xba, 0x9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c00)={0x24, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "b5f9a73cbde6c4924c2625010f1d4126f4295ab217271d438cd5b3f0444d6cb5285c0c46576e582b3028a4885346f9e05e9efa893cd2d36474878372ec57b24f32decfd58145153b6022d3efdcd7d1a47d157fcdacb4936f86121fa035f50030e61da5f566627f61682659e67e6889c673f454d1ceab3e19dc3aef"}}, 0x0, &(0x7f0000000bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0xba4}}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000fc0)={0x14, 0x0, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000001500)={0x14, 0x0, 0x0}, &(0x7f0000001740)={0x44, &(0x7f0000001540)={0x60, 0x17, 0x2, "c32a"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)={0x20, 0x84, 0x1, "e4"}, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000680)={0x14, &(0x7f0000000400)={0x40, 0x5, 0x90, {0x90, 0x21, "278946b2027a73c078c85e8fe444450a01d42214d29d698772154a138dd71ae14e63844e3e193bc020aea9085246bc95435d56d4635a84f257a63243b0aea3090672ba7ae548338e5226c5f5a53361047708ff2ee8b7bfd9f2ef13ebfb3b0368019c750a911da3610347e2255601b618dbaa10a0553d15b4dc8050a4f810ca64036288795633b1b05bc63e598f78"}}, &(0x7f00000005c0)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "667c3638268caf0cf9c11db38268a533a45bb3c57e3b0422794b19fc6b97994974725e8cb83a840f06922efef5638562c353d51194c15e623902cb3d7a2517b66ec8c7969bea9df65e0a8640c142e6d9fc6f48557853c33f7d61e05851694c04d73624f483332cc34ff8ca9fd76ee725d546ab320641d2fffbab3a6aee0150a786e6813c5e02826506cf41dbd68d299902bbbf0aa53551ae55de48"}}}, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x40, 0x6, 0x68, "d61402e83b07d702002f47eed21767517b95d7b26391c7d60a1d53474f006181965fa7f9ee009510cbdb2ca0f491f86549a91bd0721abf41617eabd089c505537cdaf8d3e4f28b9988f2ccb0fa785459a8c5232b1a3a1a4a74fa7fc47f90a69b3b19b185c5964fd1"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x1b}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000800)}) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000004c0)={0x1, @raw_data="d18eee73523215e7aaf5071cce93527661f72a09985e61cecf462915d6c6c39c453e4208e5ee768b836d69920f592862e631d4564bb596c7490aa302bf5a21fb6931bc4329830a9722471d203b19bc1bd2e9edd0748d3a933bfbd182d7f55a3dc3c4c049b15eb4e001e3073a80950c4f1a68f43cfe469c8e5cccf58aab3f2b6f3c8aa83d71136cd591a7f5182375e63cadecede95ef3976679e6def1f0b4a809fe6ee1f9bcc8bc13c7a0954e5047d8708cc4d27ec7bfbf2739cb0b3577dbe5a7e3b15e1ad0b302fb"}) syz_usb_connect$rtl8150(0x5, 0x0, 0x0, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x30, 0x42, {0x42, 0x9, "9dd4c3fdbbf95dea4c6adde7248eb93854033d92b319a8f71f9f9e1060a42c230391a59ffe15785745fe747bb1dfc4a721b3c600237bfc542bf800ae10ff13b3"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x40, 0xe}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000240)={0x20, 0x81, 0x3, "60d6bf"}, &(0x7f0000000280)={0x20, 0x82, 0x2, '28'}, &(0x7f00000002c0)={0x20, 0x83, 0x1, "14"}, &(0x7f0000000300)={0x20, 0x84, 0x4, "2ab6eeb7"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "d12d58"}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ftruncate(r2, 0x800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000005200)={0x44, &(0x7f0000004fc0)={0x40, 0x6, 0x5, "647cd7f59f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.282413644s ago: executing program 1 (id=748): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioperm(0x0, 0x1, 0xcc3) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000004c0)={0x1, @raw_data="d18eee73523215e7aaf5071cce93527661f72a09985e61cecf462915d6c6c39c453e4208e5ee768b836d69920f592862e631d4564bb596c7490aa302bf5a21fb6931bc4329830a9722471d203b19bc1bd2e9edd0748d3a933bfbd182d7f55a3dc3c4c049b15eb4e001e3073a80950c4f1a68f43cfe469c8e5cccf58aab3f2b6f3c8aa83d71136cd591a7f5182375e63cadecede95ef3976679e6def1f0b4a809fe6ee1f9bcc8bc13c7a0954e5047d8708cc4d27ec7bfbf2739cb0b3577dbe5a7e3b15e1ad0b302fb"}) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2001, r2}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/sockcreate\x00') r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000004c0)=[{0x2e, '\x00', @data=0x1b2d, 0xbe}, {0x21, '\x00', @st={0x4, [{0x2, @svalue=0x8000000000000000}, {0x1, @svalue=0x7fffffff}, {0x2, @uvalue=0x200000000000000}, {0xe76d61e72f7acd1f, @uvalue=0x7}]}, 0x4}, {0x34, '\x00', @st={0x4, [{0x0, @uvalue=0xe3}, {0x0, @uvalue=0x100000000}, {0x0, @uvalue=0x82}, {0x1, @uvalue=0x5}]}, 0x4}]}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)) r6 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r8}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f0000000480)={0x0, 0x0, r9}) r10 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x2, 0x2, 0x5, 0x0, 0xc25, 0x7}) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_BOOT_CPU_ID(r11, 0xae78, &(0x7f00000002c0)=0x1) quotactl_fd$Q_SETINFO(r11, 0xffffffff80000601, r12, &(0x7f0000000280)={0xffff, 0x32, 0x1, 0x2}) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2842, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f42472f34f80cf14eceafaccd981f3c4"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) linkat(r2, &(0x7f0000000080)='./file0\x00', r13, &(0x7f0000000100)='./file0\x00', 0x1000) 1.084849433s ago: executing program 1 (id=749): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008000200"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000440)=[{&(0x7f00000003c0)="480000001400190d7ebdeb75fd0d8c162c84e480e8d8c033ed7a80ffe0090f000060000000a2bc563e09c87a0f7f8900fcff20000001002471083e0d5fcce62483c3f596a722191ed010a9557e78f4593815fd89941b7ddee25d67195af6f7b9644a33c5dd83a73d6a25fe98f91549fb5b5f55fe", 0x74}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r2, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDADDIO(r3, 0x4b34, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000004c0)="36d339f0835708000f01c50fc77a010fc7aa00000f01df440f20c0663508000000440f22c066b9800000c00f326635008000000f30660f2d113d2c5d", 0x3c}], 0x1, 0x44, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d800800"], 0x38}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r11, 0xd) landlock_restrict_self(r11, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = getpgrp(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) fcntl$setownex(r13, 0xf, &(0x7f0000000100)={0x2, r14}) sendmsg$unix(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r9, &(0x7f0000000000), 0xfffffecc) splice(r8, 0x0, r10, 0x0, 0x200000000622c, 0x0) 707.52642ms ago: executing program 4 (id=750): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="4007740000009cf792d7"], 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x7}, 0x0, 0x0, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @random="9aec6134b492"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0xb3}, 0x0}) syz_open_dev$loop(&(0x7f0000000280), 0xff, 0x8200) 570.946528ms ago: executing program 1 (id=751): socket$unix(0x1, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000100)={0x0, 0x2, 0x2, {0x2, 0x11}}, &(0x7f0000000340)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "e74f91e89a8529afde315c17ce9b1a26e14127054e631f45e27b0f4d"}}, &(0x7f0000000380)={0x0, 0xf, 0x4f, {0x5, 0xf, 0x4f, 0x3, [@generic={0x3c, 0x10, 0xa, "e35aec3eddf9357cfb04e61231955f71b93e61ad6c02f6808e4128fea523064b21de02ae1306aeea7691e538ea0660ab86f9e13d2713650878"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1e6, 0x8f, 0x35, 0x81, 0x81}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x19, 0x2, 0x4, "c6eaab69", '>00='}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x1, 0x5, 0x3, 0x5}}}, &(0x7f0000000bc0)={0x84, &(0x7f00000006c0)={0x0, 0x13, 0xcb, "d2453e29924afe0ee4202d78e5c4aa3562533566553b01320a0532ddc8ea765437d096b6b5a670bf25cbeec0a9320a5fcacba0719cf6f61a404ba6b3b824ede8934eac0c45fb76d885bfd8427adda94453a7811e6a20f722c910938acf9aad399c89968a72b7466bbb8ba4dca038eed909cb85abfb1c5e73209499e1b672fefc29e9abf3791a6b9c9d40c9f5558d13a8acf524db30dd56e153d3627d3c9ccca38c889bd01ff76a7c8b3a07b7bdf7dc44bd0bbb1cf20352204d77df5d55e439b9d5e0c572a3303383d1078f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x7}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x8, 0x80}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000980)={0x40, 0xb, 0x2, "9154"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @random="9b05a02c9bf9"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "f479"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0xae}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x3d}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000005c0)={0x20, 0xbe9c2c1eddf788b6, 0x4, '\x00\x00XY'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x40, 0x3, 0x6, "9ded9bd66edb"}, 0x0, 0x0, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x80}, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') 382.5543ms ago: executing program 2 (id=752): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000440000009"], 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x141801, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000001000000", @ANYRES32=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b50200000000000085000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x18}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x200000000000) ftruncate(0xffffffffffffffff, 0xc17a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, 0x0, &(0x7f0000000100)) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) socket$packet(0x11, 0x3, 0x300) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) sigaltstack(&(0x7f0000001400)={0x0, 0x2}, &(0x7f0000001500)={0x0}) socket$unix(0x1, 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000000c0)={&(0x7f0000001a80)=[{0x99, 0xa000, 0x0, 0x0}, {0x6, 0x1811, 0x0, 0x0}, {0xdf8e, 0x4000, 0x0, 0x0}], 0x3}) r7 = fcntl$dupfd(r3, 0x0, r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022d"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) sendmmsg$inet6(r7, &(0x7f0000000240), 0x0, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/165, 0xa5, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fe211e81000000000000000000000008000d"], 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r8, 0x8800000) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r9, 0x8004550f, &(0x7f00000001c0)) 109.347004ms ago: executing program 4 (id=753): pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 4 (id=754): openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x58d7c4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7a0, 0x0, 0x228, 0x0, 0x5b8, 0x5b8, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6, &(0x7f0000000380), {[{{@ipv6={@empty, @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xff], 'veth1_virt_wifi\x00', 'batadv0\x00', {}, {0x1cd2af259700f990}, 0x33, 0x66, 0x0, 0x60}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x10, 0x5], 0x2, 0xa11b7ddcf662e78e, 0x4, [@loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @local, @loopback, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, @dev={0xfe, 0x80, '\x00', 0x10}, @loopback, @mcast2, @local, @loopback, @private0, @private1], 0xf}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv4=@local, 0x80, 0x2c, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x12, "b02b"}}, @common=@hbh={{0x48}, {0x386b, 0x3, 0x0, [0x347, 0x9, 0x81, 0x6, 0x0, 0xd, 0x1, 0x8000, 0xe5, 0xff, 0xff01, 0x5, 0x3, 0x5, 0x8, 0x6], 0x10}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x6c03, @ipv4=@private=0xa010101, 0x4e22}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote, 0x21, 0x35, 0x500}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0x0, 0xff, 0xff], 'bridge_slave_0\x00', 'gretap0\x00', {0xff}, {}, 0x8, 0xf, 0x1, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x21, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@mcast2, 0x30, 0x3b, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x800) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r5 = userfaultfd(0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) r9 = dup2(r8, r8) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, 0x0) read$FUSE(r9, &(0x7f00000063c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): : fail, usb_gadget_register_driver returned -16 [ 160.104507][ T5746] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 160.120784][ T5746] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 160.136369][ T5746] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 160.145664][ T5746] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 160.189802][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.200441][ T5746] usb 4-1: USB disconnect, device number 34 [ 160.232785][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.303125][ T809] ushc 1-1:4.213: probe with driver ushc failed with error -71 [ 160.386637][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.450405][ T809] usb 1-1: USB disconnect, device number 28 [ 160.518228][ T7211] could not allocate digest TFM handle sha384-neon [ 160.555797][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.567916][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.602909][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 160.764831][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.778224][ T24] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 160.787710][ T24] usb 2-1: config 114 has no interface number 0 [ 160.800898][ T24] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 160.829023][ T24] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 160.858673][ T24] usb 2-1: config 114 interface 240 has no altsetting 0 [ 160.873600][ T24] usb 2-1: string descriptor 0 read error: -22 [ 160.882713][ T24] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 160.901365][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.938457][ T7214] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 160.959517][ T24] ir_usb 2-1:114.240: required endpoints missing [ 161.048885][ T7228] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 161.166733][ T7214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.175814][ T9] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 161.185518][ T7214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.202641][ T24] usb 2-1: USB disconnect, device number 22 [ 161.357274][ T9] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 161.372342][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.394926][ T9] usb 4-1: config 0 descriptor?? [ 161.405555][ T9] pwc: Samsung MPC-C10 USB webcam detected. [ 161.444322][ T7231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.469'. [ 161.510977][ T7232] netlink: 'syz.0.469': attribute type 1 has an invalid length. [ 161.606941][ T9] pwc: send_video_command error -71 [ 161.613536][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 161.626298][ T9] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 161.639985][ T9] usb 4-1: USB disconnect, device number 35 [ 161.702892][ T5746] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 161.865524][ T5746] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.903318][ T5746] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 161.915973][ T5746] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.930441][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.939427][ T5746] usb 3-1: Product: syz [ 161.943755][ T5746] usb 3-1: Manufacturer: syz [ 161.948392][ T5746] usb 3-1: SerialNumber: syz [ 161.952097][ T7247] syzkaller0: entered promiscuous mode [ 161.959862][ T7247] syzkaller0: entered allmulticast mode [ 161.967621][ T5746] cdc_mbim 3-1:1.0: skipping garbage [ 162.133698][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 162.169012][ T7236] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.297188][ T9] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 162.306608][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.318320][ T9] usb 4-1: config 0 descriptor?? [ 162.332483][ T9] pwc: Samsung MPC-C10 USB webcam detected. [ 162.561184][ T7261] syzkaller0: entered promiscuous mode [ 162.569302][ T7261] syzkaller0: entered allmulticast mode [ 162.731006][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 162.741455][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 162.749930][ T9] pwc: recv_control_msg error -32 req 04 val 1700 [ 162.758140][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 162.759959][ T7263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.765509][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 162.779408][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 162.786947][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 162.790323][ T7263] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.797977][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 162.809279][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 162.811329][ T7263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.868252][ T7263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.877953][ T7263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.890770][ T7263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.902479][ T7263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.918978][ T7263] veth1_vlan: left promiscuous mode [ 162.925896][ T7263] veth0_vlan: left promiscuous mode [ 162.932126][ T7263] veth0_vlan: entered promiscuous mode [ 162.942009][ T7263] veth1_vlan: entered promiscuous mode [ 162.954730][ T7263] veth1_macvtap: left promiscuous mode [ 162.961218][ T7263] veth0_macvtap: left promiscuous mode [ 162.968617][ T7263] veth0_macvtap: entered promiscuous mode [ 162.975645][ T7263] veth1_macvtap: entered promiscuous mode [ 162.986938][ T7263] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 162.994147][ T7263] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 163.002034][ T7263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.010420][ T7263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.021766][ T7263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.022313][ T9] pwc: recv_control_msg error -71 req 06 val 0600 [ 163.029095][ T5724] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 163.031281][ T7263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.039964][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 163.053439][ T7263] hsr1: Slave B (veth0_to_bond) is not up; please bring it up to get a fully working HSR network [ 163.063560][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 163.068798][ T7263] hsr1: left allmulticast mode [ 163.075793][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 163.079616][ T7263] dummy0: left allmulticast mode [ 163.087071][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 163.092222][ T7263] veth0_to_bond: left allmulticast mode [ 163.107740][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 163.120187][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.127305][ T6437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.135418][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 163.142387][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 163.151120][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 163.159883][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.166992][ T6437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.177206][ T9] pwc: Registered as video103. [ 163.182894][ T5724] usb 1-1: Using ep0 maxpacket: 8 [ 163.189937][ T5724] usb 1-1: config 129 has an invalid interface number: 164 but max is 0 [ 163.201569][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 163.207573][ T5724] usb 1-1: config 129 has no interface number 0 [ 163.231190][ T5724] usb 1-1: config 129 interface 164 has no altsetting 0 [ 163.249159][ T9] usb 4-1: USB disconnect, device number 36 [ 163.257812][ T5724] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16 [ 163.277206][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.300394][ T5724] usb 1-1: Product: syz [ 163.313102][ T5724] usb 1-1: Manufacturer: syz [ 163.316849][ T6435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.320889][ T5724] usb 1-1: SerialNumber: syz [ 163.349328][ T6435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.368689][ T6435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.399661][ T6435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.642453][ T5724] ums_eneub6250 1-1:129.164: USB Mass Storage device detected [ 163.661106][ T7270] capability: warning: `syz.4.482' uses 32-bit capabilities (legacy support in use) [ 163.773109][ T5724] usb 1-1: USB disconnect, device number 29 [ 163.921361][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.943586][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.329874][ T5724] IPVS: starting estimator thread 0... [ 164.444919][ T7284] IPVS: using max 32 ests per chain, 76800 per kthread [ 164.513416][ T5746] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 164.539183][ T5746] cdc_mbim 3-1:1.0: bind() failure [ 164.570590][ T5746] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 164.595642][ T5746] cdc_ncm 3-1:1.1: bind() failure [ 164.620322][ T5746] usb 3-1: USB disconnect, device number 24 [ 164.723679][ T5724] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 164.901049][ T5724] usb 1-1: unable to get BOS descriptor or descriptor too short [ 164.918720][ T5724] usb 1-1: not running at top speed; connect to a high speed hub [ 164.941757][ T5724] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.974991][ T5724] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 191, setting to 64 [ 165.002615][ T5724] usb 1-1: config 1 interface 0 has no altsetting 0 [ 165.020321][ T5724] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 165.031206][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.046291][ T5724] usb 1-1: Product: syz [ 165.051875][ T5724] usb 1-1: Manufacturer: syz [ 165.066774][ T5724] usb 1-1: SerialNumber: syz [ 165.072905][ T5715] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 165.085607][ T7286] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 165.102235][ T7303] pim6reg1: entered promiscuous mode [ 165.113753][ T7303] pim6reg1: entered allmulticast mode [ 165.126802][ T7303] netlink: 244 bytes leftover after parsing attributes in process `syz.1.493'. [ 165.142315][ T7303] openvswitch: netlink: Flow key attr not present in new flow. [ 165.153725][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.178746][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.245610][ T5715] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 165.261007][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.292640][ T5715] usb 3-1: config 0 has no interface number 0 [ 165.310052][ T5715] usb 3-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x49, changing to 0x9 [ 165.344294][ T5715] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 165.358780][ T5715] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 165.374204][ T5715] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 165.384191][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.402489][ T5715] usb 3-1: config 0 descriptor?? [ 165.415866][ T7306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.494'. [ 165.426167][ T7306] netlink: 9 bytes leftover after parsing attributes in process `syz.1.494'. [ 165.476951][ T5715] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 165.952556][ T7318] FAULT_INJECTION: forcing a failure. [ 165.952556][ T7318] name failslab, interval 1, probability 0, space 0, times 0 [ 165.990317][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: syz.3.498 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.990341][ T7318] Tainted: [L]=SOFTLOCKUP [ 165.990348][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.990359][ T7318] Call Trace: [ 165.990365][ T7318] [ 165.990374][ T7318] dump_stack_lvl+0xe8/0x150 [ 165.990403][ T7318] should_fail_ex+0x412/0x560 [ 165.990423][ T7318] should_failslab+0xa8/0x100 [ 165.990435][ T7318] __kmalloc_noprof+0xe8/0x760 [ 165.990450][ T7318] ? inotify_handle_inode_event+0x1ae/0x640 [ 165.990464][ T7318] inotify_handle_inode_event+0x1ae/0x640 [ 165.990478][ T7318] inotify_ignored_and_remove_idr+0x29/0x70 [ 165.990496][ T7318] __se_sys_inotify_rm_watch+0xc3/0x130 [ 165.990517][ T7318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.990535][ T7318] do_syscall_64+0x174/0x580 [ 165.990552][ T7318] ? trace_irq_disable+0x3b/0x140 [ 165.990573][ T7318] ? clear_bhb_loop+0x40/0x90 [ 165.990586][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.990596][ T7318] RIP: 0033:0x7f7eed99ce59 [ 165.990606][ T7318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.990614][ T7318] RSP: 002b:00007f7eee846028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ff [ 165.990626][ T7318] RAX: ffffffffffffffda RBX: 00007f7eedc15fa0 RCX: 00007f7eed99ce59 [ 165.990635][ T7318] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 165.990645][ T7318] RBP: 00007f7eee846090 R08: 0000000000000000 R09: 0000000000000000 [ 165.990656][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.990667][ T7318] R13: 00007f7eedc16038 R14: 00007f7eedc15fa0 R15: 00007f7eedd3fa48 [ 165.990695][ T7318] [ 166.242825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 166.362870][ T5686] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 166.515191][ T5686] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.524617][ T5686] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.539532][ T5686] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.542289][ T6435] usb 3-1: Failed to submit usb control message: -110 [ 166.561657][ T6435] usb 3-1: unable to send the bmi data to the device: -110 [ 166.572986][ T6435] usb 3-1: unable to get target info from device [ 166.585288][ T6435] usb 3-1: could not get target info (-110) [ 166.595669][ T6435] usb 3-1: could not probe fw (-110) [ 166.732895][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 166.882895][ T24] usb 4-1: device descriptor read/64, error -71 [ 167.122929][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 167.253234][ T24] usb 4-1: device descriptor read/64, error -71 [ 167.363136][ T24] usb usb4-port1: attempt power cycle [ 167.456696][ T5724] usbtouchscreen 1-1:1.0: probe with driver usbtouchscreen failed with error -71 [ 167.476313][ T5724] usb 1-1: USB disconnect, device number 30 [ 167.702994][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 167.724411][ T24] usb 4-1: device descriptor read/8, error -71 [ 167.755147][ T5724] usb 3-1: USB disconnect, device number 25 [ 167.872026][ T7327] FAULT_INJECTION: forcing a failure. [ 167.872026][ T7327] name failslab, interval 1, probability 0, space 0, times 0 [ 167.886120][ T7327] CPU: 1 UID: 0 PID: 7327 Comm: syz.2.502 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.886140][ T7327] Tainted: [L]=SOFTLOCKUP [ 167.886144][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.886150][ T7327] Call Trace: [ 167.886154][ T7327] [ 167.886158][ T7327] dump_stack_lvl+0xe8/0x150 [ 167.886174][ T7327] should_fail_ex+0x412/0x560 [ 167.886188][ T7327] should_failslab+0xa8/0x100 [ 167.886198][ T7327] ? skb_clone+0x212/0x3a0 [ 167.886208][ T7327] kmem_cache_alloc_noprof+0x87/0x650 [ 167.886223][ T7327] ? __netlink_lookup+0xc6/0x8b0 [ 167.886238][ T7327] skb_clone+0x212/0x3a0 [ 167.886250][ T7327] __netlink_deliver_tap+0x404/0x850 [ 167.886270][ T7327] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.886286][ T7327] netlink_deliver_tap+0x19c/0x1b0 [ 167.886301][ T7327] netlink_unicast+0x730/0x8e0 [ 167.886320][ T7327] netlink_sendmsg+0x813/0xb40 [ 167.886339][ T7327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.886356][ T7327] ? aa_sock_msg_perm+0xf1/0x1b0 [ 167.886372][ T7327] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.886388][ T7327] ____sys_sendmsg+0x972/0x9f0 [ 167.886404][ T7327] ? __might_fault+0xaf/0x130 [ 167.886420][ T7327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.886440][ T7327] ? import_iovec+0x73/0xa0 [ 167.886454][ T7327] ___sys_sendmsg+0x2a5/0x360 [ 167.886462][ T7327] ? __lock_acquire+0x6b5/0x2cf0 [ 167.886475][ T7327] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.886507][ T7327] ? __fget_files+0x2a/0x420 [ 167.886519][ T7327] ? __fget_files+0x3a0/0x420 [ 167.886536][ T7327] __x64_sys_sendmsg+0x1bd/0x2a0 [ 167.886546][ T7327] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.886581][ T7327] ? __pfx_ksys_write+0x10/0x10 [ 167.886600][ T7327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.886611][ T7327] do_syscall_64+0x174/0x580 [ 167.886621][ T7327] ? trace_irq_disable+0x3b/0x140 [ 167.886636][ T7327] ? clear_bhb_loop+0x40/0x90 [ 167.886648][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.886658][ T7327] RIP: 0033:0x7fbae2d9ce59 [ 167.886668][ T7327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.886676][ T7327] RSP: 002b:00007fbae3ced028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.886687][ T7327] RAX: ffffffffffffffda RBX: 00007fbae3015fa0 RCX: 00007fbae2d9ce59 [ 167.886694][ T7327] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 167.886700][ T7327] RBP: 00007fbae3ced090 R08: 0000000000000000 R09: 0000000000000000 [ 167.886706][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.886712][ T7327] R13: 00007fbae3016038 R14: 00007fbae3015fa0 R15: 00007fbae313fa48 [ 167.886727][ T7327] [ 168.252936][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 168.273695][ T24] usb 4-1: device descriptor read/8, error -71 [ 168.305584][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.331603][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.383126][ T24] usb usb4-port1: unable to enumerate USB device [ 168.592941][ T5746] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 168.600578][ T5715] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 168.755526][ T5746] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 168.767789][ T5746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 168.782607][ T5746] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 168.793612][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.804164][ T5715] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 168.813574][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.826998][ T5746] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 168.853465][ T5715] usb 3-1: config 0 descriptor?? [ 168.864220][ T5746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.893064][ T5686] usb 2-1: New USB device found, idVendor=1235, idProduct=8217, bcdDevice= 0.40 [ 168.901581][ T5715] pwc: Askey VC010 type 2 USB webcam detected. [ 168.918498][ T5746] usb 1-1: Product: syz [ 168.928081][ T5746] usb 1-1: Manufacturer: syz [ 168.936698][ T5746] usb 1-1: SerialNumber: syz [ 168.937165][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.964467][ T5746] usb 1-1: config 0 descriptor?? [ 168.992562][ T7336] binder: 7335:7336 ioctl c0306201 200000000480 returned -14 [ 169.013915][ T7330] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 169.024695][ T5686] usb 2-1: can't set config #1, error -71 [ 169.051746][ T5686] usb 2-1: USB disconnect, device number 23 [ 169.301032][ T5715] pwc: recv_control_msg error -32 req 02 val 2b00 [ 169.309287][ T5715] pwc: recv_control_msg error -32 req 02 val 2700 [ 169.316704][ T5715] pwc: recv_control_msg error -32 req 02 val 2c00 [ 169.324359][ T5715] pwc: recv_control_msg error -32 req 04 val 1000 [ 169.332652][ T5715] pwc: recv_control_msg error -32 req 04 val 1300 [ 169.345337][ T5715] pwc: recv_control_msg error -32 req 04 val 1400 [ 169.353407][ T5715] pwc: recv_control_msg error -32 req 02 val 2000 [ 169.494077][ T5686] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 169.530431][ T7346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.539887][ T7346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.565124][ T5715] pwc: recv_control_msg error -71 req 04 val 1500 [ 169.575562][ T5715] pwc: recv_control_msg error -71 req 02 val 2500 [ 169.584832][ T5715] pwc: recv_control_msg error -71 req 02 val 2400 [ 169.591799][ T7348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.509'. [ 169.602139][ T5715] pwc: recv_control_msg error -71 req 02 val 2600 [ 169.610535][ T5715] pwc: recv_control_msg error -71 req 02 val 2900 [ 169.619915][ T5715] pwc: recv_control_msg error -71 req 02 val 2800 [ 169.628777][ T5715] pwc: recv_control_msg error -71 req 04 val 1100 [ 169.635853][ T7348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.509'. [ 169.645415][ T5715] pwc: recv_control_msg error -71 req 04 val 1200 [ 169.659269][ T5715] pwc: Registered as video103. [ 169.681861][ T5715] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 169.682865][ T5686] usb 2-1: Using ep0 maxpacket: 32 [ 169.729646][ T5686] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 169.747134][ T5715] usb 3-1: USB disconnect, device number 26 [ 169.770658][ T5686] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 169.815568][ T5686] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.855153][ T5686] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 169.895742][ T5686] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 169.909534][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.927945][ T5686] usb 2-1: Product: syz [ 169.937772][ T5686] usb 2-1: Manufacturer: syz [ 169.955186][ T5686] usb 2-1: SerialNumber: syz [ 169.990439][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 170.028888][ T5686] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input28 [ 170.212911][ T5686] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 170.233638][ T5686] (id 0x00) [ 170.363614][ T5686] rc_core: IR keymap rc-imon-pad not found [ 170.374920][ T5686] Registered IR keymap rc-empty [ 170.386804][ T5686] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 170.414269][ T5686] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 170.477347][ T5686] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 170.520800][ T5686] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input29 [ 170.554976][ T5686] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:24> initialized [ 170.563054][ T5715] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 170.748040][ T5715] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 170.774287][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.804443][ T5715] usb 3-1: config 0 has no interface number 0 [ 170.854976][ T5715] usb 3-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x49, changing to 0x9 [ 170.895322][ T5715] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 170.910611][ T5715] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 170.926602][ T5715] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 170.940946][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.989650][ T5715] usb 3-1: config 0 descriptor?? [ 171.033424][ T5715] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 171.169307][ T5746] usb 1-1: USB disconnect, device number 31 [ 171.219299][ T5796] udevd[5796]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 171.260213][ T5796] udevd[5796]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 171.317657][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 171.339341][ T7372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.362566][ T7372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.384367][ T7375] fuse: Bad value for 'group_id' [ 171.398375][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.407374][ T7372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.410449][ T7375] fuse: Bad value for 'group_id' [ 171.423296][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.436162][ T7372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.996258][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.005934][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.053119][ T6437] usb 3-1: Failed to submit usb control message: -110 [ 172.062330][ T6437] usb 3-1: unable to send the bmi data to the device: -110 [ 172.069737][ T6437] usb 3-1: unable to get target info from device [ 172.076464][ T6437] usb 3-1: could not get target info (-110) [ 172.082394][ T6437] usb 3-1: could not probe fw (-110) [ 172.149251][ T7344] imon:send_packet: task interrupted [ 172.158077][ T7344] imon:send_packet: packet tx failed (-512) [ 172.166549][ T7344] imon:vfd_write: send packet #1 failed [ 172.184408][ T1233] usb 2-1: USB disconnect, device number 24 [ 172.398474][ T7398] Cannot find add_set index 0 as target [ 172.638497][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.665079][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.982878][ T5637] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 173.175977][ T5724] usb 3-1: USB disconnect, device number 27 [ 173.241167][ T5727] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 173.436827][ T5727] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 173.451751][ T5727] usb 1-1: config 1 has no interface number 0 [ 173.459259][ T5727] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 173.470103][ T5727] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 173.488860][ T5727] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 173.517020][ T5727] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 173.529718][ T7429] netlink: 104 bytes leftover after parsing attributes in process `syz.3.535'. [ 173.541916][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.562571][ T5727] usb 1-1: Product: syz [ 173.584897][ T5727] usb 1-1: Manufacturer: syz [ 173.588572][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 173.588585][ T30] audit: type=1326 audit(1779937423.344:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.1.534" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f101b39ce59 code=0x0 [ 173.589644][ T5727] usb 1-1: SerialNumber: syz [ 173.690997][ T7419] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 173.698448][ T7419] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 173.720168][ T7440] team0: Port device syz_tun added [ 173.725671][ T5727] usb 1-1: Expected 3 endpoints, found: 2 [ 173.752533][ T7440] team0: Port device syz_tun removed [ 173.768612][ T7440] bridge_slave_0: left allmulticast mode [ 173.775257][ T7440] bridge_slave_0: left promiscuous mode [ 173.782535][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.800193][ T7440] bridge_slave_1: left allmulticast mode [ 173.806850][ T7440] bridge_slave_1: left promiscuous mode [ 173.817977][ T1233] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 173.829089][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.846420][ T7440] bond0: (slave bond_slave_0): Releasing backup interface [ 173.859336][ T7440] bond0: (slave bond_slave_1): Releasing backup interface [ 173.876044][ T7446] netlink: 52 bytes leftover after parsing attributes in process `syz.4.541'. [ 173.888780][ T7440] team0: Port device team_slave_0 removed [ 173.910182][ T7440] team0: Port device team_slave_1 removed [ 173.918034][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.925757][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.932240][ T5727] usb 1-1: USB disconnect, device number 32 [ 173.940547][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.954758][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.984908][ T7440] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 174.002782][ T1233] usb 4-1: Using ep0 maxpacket: 32 [ 174.026289][ T1233] usb 4-1: unable to get BOS descriptor or descriptor too short [ 174.036850][ T1233] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 174.047780][ T1233] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 174.072861][ T1233] usb 4-1: config 14 has no interface number 0 [ 174.079732][ T1233] usb 4-1: config 14 has no interface number 1 [ 174.093206][ T1233] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 174.124040][ T1233] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 174.157349][ T1233] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 174.193790][ T1233] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 174.212748][ T1233] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 174.225228][ T1233] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.239331][ T1233] usb 4-1: config 14 interface 57 has no altsetting 0 [ 174.246199][ T1233] usb 4-1: config 14 interface 228 has no altsetting 0 [ 174.256106][ T1233] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 174.265425][ T1233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.273587][ T1233] usb 4-1: Product: syz [ 174.277845][ T1233] usb 4-1: Manufacturer: syz [ 174.282464][ T1233] usb 4-1: SerialNumber: syz [ 174.513355][ T1233] legousbtower 4-1:14.57: interrupt endpoints not found [ 174.560652][ T1233] legousbtower 4-1:14.228: get version request failed: -71 [ 174.585201][ T1233] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 174.627111][ T1233] usb 4-1: USB disconnect, device number 41 [ 174.823108][ T5727] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 174.985545][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.001019][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.014411][ T5727] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 175.024257][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.044128][ T5715] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 175.046796][ T5727] usb 1-1: config 0 descriptor?? [ 175.233200][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 175.243784][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.263730][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.282270][ T5715] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 175.311780][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.341051][ T5715] usb 2-1: config 0 descriptor?? [ 175.363368][ T5715] hub 2-1:0.0: USB hub found [ 175.559216][ T5715] hub 2-1:0.0: 1 port detected [ 175.668691][ T7457] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 175.743005][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.790309][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.928787][ T24] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 176.000152][ T7457] bond1: entered promiscuous mode [ 176.017904][ T7457] bond1: entered allmulticast mode [ 176.034113][ T7457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.086032][ T5727] hid-led 0003:1D34:000A.0005: probe with driver hid-led failed with error -71 [ 176.102345][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.122410][ T24] usb 4-1: config 0 has no interface number 0 [ 176.138541][ T5727] usb 1-1: USB disconnect, device number 33 [ 176.150474][ T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 176.178690][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.207012][ T24] usb 4-1: Product: syz [ 176.226633][ T24] usb 4-1: Manufacturer: syz [ 176.247653][ T24] usb 4-1: SerialNumber: syz [ 176.292228][ T24] usb 4-1: config 0 descriptor?? [ 176.327309][ T24] usb 4-1: selecting invalid altsetting 1 [ 176.335666][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 176.342637][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 176.366874][ T9] hub 2-1:0.0: activate --> -90 [ 176.502626][ T24] DVB: Unable to find symbol stv0299_attach() [ 176.523867][ T7475] fuse: Bad value for 'fd' [ 176.709577][ T24] DVB: Unable to find symbol tda8083_attach() [ 176.724117][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 176.757963][ T24] usb 4-1: USB disconnect, device number 42 [ 176.979712][ T5727] usb 2-1: USB disconnect, device number 25 [ 177.024934][ T5637] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 177.034502][ T5637] Bluetooth: hci3: Injecting HCI hardware error event [ 177.045843][ T5644] Bluetooth: hci3: hardware error 0x00 [ 177.170854][ T7503] sit0: entered promiscuous mode [ 177.209300][ T7503] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 177.240530][ T7503] netlink: 1 bytes leftover after parsing attributes in process `syz.2.557'. [ 177.372721][ T7504] syzkaller0: entered promiscuous mode [ 177.399459][ T7504] syzkaller0: entered allmulticast mode [ 178.203704][ T7528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.214869][ T7528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.498751][ T9] hid_parser_main: 368 callbacks suppressed [ 178.498769][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 178.569722][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.098431][ T5644] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 180.039968][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 180.109256][ T7536] ip6tnl1: entered allmulticast mode [ 180.133466][ T7541] netlink: 'syz.3.568': attribute type 3 has an invalid length. [ 180.245109][ T7541] ipvlan0: entered promiscuous mode [ 180.263033][ T7541] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.283066][ T7541] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 180.316250][ T7541] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 180.342354][ T5644] Bluetooth: hci2: unexpected event for opcode 0x0011 [ 180.522056][ T7554] input: syz0 as /devices/virtual/input/input30 [ 180.566017][ T30] audit: type=1326 audit(1779937430.324:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.574" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f101b39ce59 code=0x0 [ 180.593076][ T5715] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 180.737453][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.749847][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.766463][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 180.778325][ T5715] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 180.793507][ T5715] usb 3-1: config 1 has no interface number 0 [ 180.801135][ T5715] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 180.811913][ T7562] batadv0: entered promiscuous mode [ 180.819727][ T5715] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 180.821050][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 180.829843][ T7562] macvtap1: entered promiscuous mode [ 180.845242][ T5715] usb 3-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 180.865396][ T5715] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 180.879877][ T7562] macvtap1: entered allmulticast mode [ 180.885845][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.894862][ T5715] usb 3-1: Product: syz [ 180.899092][ T5715] usb 3-1: Manufacturer: syz [ 180.903790][ T7562] batadv0: entered allmulticast mode [ 180.909255][ T7536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.567'. [ 180.918700][ T5715] usb 3-1: SerialNumber: syz [ 180.929479][ T7548] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 180.929933][ T7562] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 180.942420][ T7548] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 180.963228][ T5715] usb 3-1: Expected 3 endpoints, found: 2 [ 180.972924][ T5727] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 181.001376][ T7566] batadv0: left allmulticast mode [ 181.007064][ T7566] batadv0: left promiscuous mode [ 181.112953][ T5727] usb 4-1: device descriptor read/64, error -71 [ 181.155003][ T9] usb 3-1: USB disconnect, device number 28 [ 181.272906][ T5715] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 181.352948][ T5727] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 181.402914][ T5715] usb 1-1: device descriptor read/64, error -71 [ 181.482966][ T5727] usb 4-1: device descriptor read/64, error -71 [ 181.593297][ T5727] usb usb4-port1: attempt power cycle [ 181.603066][ T5724] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 181.642957][ T5715] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 181.772967][ T5715] usb 1-1: device descriptor read/64, error -71 [ 181.775216][ T5724] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 181.802889][ T5724] usb 2-1: can't read configurations, error -22 [ 181.893422][ T5715] usb usb1-port1: attempt power cycle [ 181.932942][ T5727] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 181.943910][ T5724] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 181.983493][ T5727] usb 4-1: device descriptor read/8, error -71 [ 182.116428][ T5724] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 182.125364][ T5724] usb 2-1: can't read configurations, error -22 [ 182.143391][ T5724] usb usb2-port1: attempt power cycle [ 182.150955][ T7589] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 7589 comm: syz.4.586) [ 182.172089][ T30] audit: type=1800 audit(1779937431.924:199): pid=7589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.586" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=18278 res=0 errno=0 [ 182.233919][ T5727] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 182.262908][ T5715] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 182.263653][ T5727] usb 4-1: device descriptor read/8, error -71 [ 182.296093][ T5715] usb 1-1: device descriptor read/8, error -71 [ 182.306624][ T30] audit: type=1326 audit(1779937432.064:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.2.583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae2d9ce59 code=0x7ffc0000 [ 182.339268][ T30] audit: type=1326 audit(1779937432.064:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.2.583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fbae2d9ce59 code=0x7ffc0000 [ 182.363892][ T30] audit: type=1326 audit(1779937432.064:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.2.583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae2d9ce59 code=0x7ffc0000 [ 182.397910][ T5727] usb usb4-port1: unable to enumerate USB device [ 182.409629][ T30] audit: type=1326 audit(1779937432.064:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.2.583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbae2d9ce59 code=0x7ffc0000 [ 182.458566][ T30] audit: type=1326 audit(1779937432.064:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.2.583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae2d9ce59 code=0x7ffc0000 [ 182.501335][ T30] audit: type=1326 audit(1779937432.064:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.2.583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbae2d9ce59 code=0x7ffc0000 [ 182.502941][ T5724] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 182.555113][ T30] audit: type=1326 audit(1779937432.094:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.2.583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae2d9ce59 code=0x7ffc0000 [ 182.588171][ T5724] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 182.597945][ T5724] usb 2-1: can't read configurations, error -22 [ 182.602879][ T5715] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 182.617887][ T30] audit: type=1326 audit(1779937432.094:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.2.583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae2d9ce59 code=0x7ffc0000 [ 182.673486][ T5715] usb 1-1: device descriptor read/8, error -71 [ 182.733537][ T5724] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 182.774059][ T5724] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 182.782194][ T5724] usb 2-1: can't read configurations, error -22 [ 182.794493][ T5715] usb usb1-port1: unable to enumerate USB device [ 182.797619][ T5724] usb usb2-port1: unable to enumerate USB device [ 183.893616][ T5644] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.896121][ T7577] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 184.723652][ T7577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.729832][ T7577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 184.736063][ T7577] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 184.868730][ T7609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.591'. [ 184.885303][ T7609] netlink: 29 bytes leftover after parsing attributes in process `syz.0.591'. [ 184.902675][ T7609] tipc: Invalid UDP bearer configuration [ 184.902734][ T7609] tipc: Enabling of bearer rejected, failed to enable media [ 185.001181][ T7616] sch_tbf: burst 20736 is lower than device lo mtu (11337746) ! [ 185.252984][ T5715] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 185.262920][ T5727] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 185.414339][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 185.434610][ T5715] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 185.450247][ T5715] usb 3-1: config 0 has no interface number 0 [ 185.461716][ T5715] usb 3-1: config 0 interface 12 has no altsetting 0 [ 185.470643][ T5715] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 185.480452][ T5727] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.481891][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.508736][ T5715] usb 3-1: Product: syz [ 185.514882][ T7631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.599'. [ 185.523910][ T5715] usb 3-1: Manufacturer: syz [ 185.528666][ T5715] usb 3-1: SerialNumber: syz [ 185.530909][ T5727] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 185.543946][ T5727] usb 4-1: config 0 interface 0 has no altsetting 0 [ 185.553273][ T5727] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 185.563537][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 185.571794][ T5727] usb 4-1: Product: syz [ 185.576613][ T5727] usb 4-1: Manufacturer: syz [ 185.582158][ T5727] usb 4-1: SerialNumber: syz [ 185.591031][ T5727] usb 4-1: config 0 descriptor?? [ 185.628333][ T5727] usb 4-1: selecting invalid altsetting 0 [ 185.675222][ T5715] usb 3-1: config 0 descriptor?? [ 185.845320][ T7616] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 185.972976][ T5644] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.093210][ T9] usb 4-1: USB disconnect, device number 47 [ 186.184444][ T7636] netlink: 'syz.1.600': attribute type 3 has an invalid length. [ 186.306483][ T7636] ipvlan2: entered promiscuous mode [ 186.312035][ T7636] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.325533][ T7636] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 186.336197][ T7636] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 186.487386][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 186.487409][ T30] audit: type=1804 audit(1779937436.244:209): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.605" name=A17378741A dev="mqueue" ino=18374 res=1 errno=0 [ 186.516312][ T7646] kernel read not supported for file /¡sxt (pid: 7646 comm: syz.1.605) [ 186.531149][ T30] audit: type=1800 audit(1779937436.284:210): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.605" name=A17378741A dev="mqueue" ino=18374 res=0 errno=0 [ 186.534028][ T7649] netlink: 'syz.0.603': attribute type 10 has an invalid length. [ 186.574319][ T7650] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 186.580091][ T7649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.593535][ T7649] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 186.637963][ T7650] bond2: entered promiscuous mode [ 186.643199][ T7650] bond2: entered allmulticast mode [ 186.648901][ T7650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.772915][ T5644] Bluetooth: hci4: command 0x0c1a tx timeout [ 186.773050][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.932221][ T5715] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 186.935085][ T7657] netlink: 32 bytes leftover after parsing attributes in process `syz.4.607'. [ 186.961451][ T5715] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 186.990279][ T7657] netlink: 'syz.4.607': attribute type 1 has an invalid length. [ 187.002936][ T5715] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 187.039463][ T5715] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 187.052035][ T7662] bond1: option min_links: invalid value (18446744073709551614) [ 187.083332][ T7662] bond1: option min_links: allowed values 0 - 2147483647 [ 187.091023][ T5715] usb 3-1: USB disconnect, device number 29 [ 187.154778][ T7662] bond1 (unregistering): Released all slaves [ 187.238313][ T7665] netlink: 'syz.0.610': attribute type 10 has an invalid length. [ 187.356335][ T5637] Bluetooth: hci4: unexpected event for opcode 0x0011 [ 187.363385][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 187.523036][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 187.547999][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.566553][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.587832][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 187.597896][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.611352][ T9] usb 1-1: Product: syz [ 187.612979][ T5727] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 187.618921][ T9] usb 1-1: Manufacturer: syz [ 187.636704][ T9] usb 1-1: SerialNumber: syz [ 187.776042][ T5727] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 187.794287][ T5727] usb 4-1: config 1 has no interface number 0 [ 187.814757][ T5727] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 187.832934][ T5727] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 187.852968][ T5727] usb 4-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 187.873057][ T7679] netlink: 'syz.1.615': attribute type 3 has an invalid length. [ 187.875162][ T5727] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 187.889933][ T7679] ipvlan2: entered promiscuous mode [ 187.895900][ T7679] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 187.902882][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.909874][ T7679] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 187.931664][ T7679] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 187.933147][ T5727] usb 4-1: Product: syz [ 187.952081][ T5727] usb 4-1: Manufacturer: syz [ 187.958513][ T5727] usb 4-1: SerialNumber: syz [ 187.967335][ T7671] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 187.979654][ T7671] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 187.991144][ T5727] usb 4-1: Expected 3 endpoints, found: 2 [ 188.210397][ T5727] usb 4-1: USB disconnect, device number 48 [ 188.615037][ T1233] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 188.752968][ T5727] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 188.793563][ T1233] usb 2-1: Using ep0 maxpacket: 32 [ 188.805633][ T1233] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.825455][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.826158][ T7698] netlink: 'syz.4.620': attribute type 16 has an invalid length. [ 188.840451][ T1233] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 188.849561][ T1233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.859219][ T7698] netlink: 'syz.4.620': attribute type 17 has an invalid length. [ 188.869211][ T1233] usb 2-1: config 0 descriptor?? [ 188.876269][ T1233] hub 2-1:0.0: bad descriptor, ignoring hub [ 188.884200][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.888288][ T1233] hub 2-1:0.0: probe with driver hub failed with error -5 [ 188.911650][ T1233] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 188.912925][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 188.930972][ T5727] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.950005][ T5727] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 188.975590][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.003181][ T5727] usb 3-1: config 0 descriptor?? [ 189.082035][ T7697] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 189.129762][ T7690] FAULT_INJECTION: forcing a failure. [ 189.129762][ T7690] name failslab, interval 1, probability 0, space 0, times 0 [ 189.144909][ T7690] CPU: 0 UID: 0 PID: 7690 Comm: syz.1.618 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.144937][ T7690] Tainted: [L]=SOFTLOCKUP [ 189.144941][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.144950][ T7690] Call Trace: [ 189.144956][ T7690] [ 189.144962][ T7690] dump_stack_lvl+0xe8/0x150 [ 189.144985][ T7690] should_fail_ex+0x412/0x560 [ 189.145005][ T7690] should_failslab+0xa8/0x100 [ 189.145020][ T7690] __kvmalloc_node_noprof+0x178/0x8a0 [ 189.145062][ T7690] ? __lock_acquire+0x6b5/0x2cf0 [ 189.145077][ T7690] ? simple_xattr_alloc+0x5e/0x100 [ 189.145102][ T7690] ? kernfs_root+0x1c/0x230 [ 189.145123][ T7690] simple_xattr_alloc+0x5e/0x100 [ 189.145144][ T7690] simple_xattr_set+0x33/0x2770 [ 189.145164][ T7690] ? kernfs_root+0x1c/0x230 [ 189.145180][ T7690] ? kernfs_root+0x1c/0x230 [ 189.145196][ T7690] ? kernfs_root+0x1c/0x230 [ 189.145218][ T7690] simple_xattr_set_limited+0xfe/0x210 [ 189.145243][ T7690] ? __pfx_kernfs_vfs_user_xattr_set+0x10/0x10 [ 189.145264][ T7690] __vfs_setxattr+0x43c/0x480 [ 189.145293][ T7690] __vfs_setxattr_noperm+0x12d/0x660 [ 189.145318][ T7690] vfs_setxattr+0x163/0x360 [ 189.145345][ T7690] ? __pfx_vfs_setxattr+0x10/0x10 [ 189.145374][ T7690] filename_setxattr+0x296/0x630 [ 189.145404][ T7690] ? __pfx_filename_setxattr+0x10/0x10 [ 189.145425][ T7690] ? do_getname+0x151/0x250 [ 189.145445][ T7690] path_setxattrat+0x3eb/0x440 [ 189.145478][ T7690] ? __pfx_path_setxattrat+0x10/0x10 [ 189.145500][ T7690] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 189.145543][ T7690] ? ksys_write+0x242/0x270 [ 189.145570][ T7690] ? __pfx_ksys_write+0x10/0x10 [ 189.145596][ T7690] __x64_sys_setxattr+0xbc/0xe0 [ 189.145618][ T7690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.145637][ T7690] do_syscall_64+0x174/0x580 [ 189.145655][ T7690] ? clear_bhb_loop+0x40/0x90 [ 189.145676][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.145693][ T7690] RIP: 0033:0x7f101b39ce59 [ 189.145709][ T7690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.145723][ T7690] RSP: 002b:00007f101c305028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 189.145741][ T7690] RAX: ffffffffffffffda RBX: 00007f101b615fa0 RCX: 00007f101b39ce59 [ 189.145753][ T7690] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000080 [ 189.145764][ T7690] RBP: 00007f101c305090 R08: 0000000000000000 R09: 0000000000000000 [ 189.145774][ T7690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.145784][ T7690] R13: 00007f101b616038 R14: 00007f101b615fa0 R15: 00007f101b73fa48 [ 189.145812][ T7690] [ 189.452612][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.459785][ T7698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.474892][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.482066][ T7698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.514641][ T7698] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 189.533097][ T5686] usb 2-1: USB disconnect, device number 30 [ 189.578144][ T7698] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 189.587644][ T7698] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 189.613685][ T7698] macvlan2: left allmulticast mode [ 189.618832][ T7698] hsr0: left allmulticast mode [ 189.623862][ T7698] hsr_slave_0: left allmulticast mode [ 189.629258][ T7698] hsr_slave_1: left allmulticast mode [ 189.636873][ T7698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.647152][ T5727] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 189.660396][ T7698] batadv0: entered promiscuous mode [ 189.666305][ T7698] batadv0: entered allmulticast mode [ 189.671771][ T7698] macvtap1: left promiscuous mode [ 189.681463][ T7698] macvtap1: left allmulticast mode [ 189.686631][ T7698] batadv0: left allmulticast mode [ 189.691962][ T7698] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 189.700940][ T7698] bond2: left promiscuous mode [ 189.712297][ T5727] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 189.720547][ T7698] bond2: left allmulticast mode [ 189.732100][ T5727] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 189.748892][ T5727] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 189.765858][ T5727] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 189.781807][ T5727] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 189.799025][ T5727] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 189.819431][ T5727] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 189.835824][ T5727] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 189.866809][ T5727] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 189.929098][ T5727] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input32 [ 190.175293][ T5727] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 190.257897][ T5727] usb 3-1: USB disconnect, device number 30 [ 190.323130][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 190.380478][ T9] usb 1-1: USB disconnect, device number 38 [ 190.410645][ T7713] fido_id[7713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 190.484026][ T7715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.494877][ T24] usb 2-1: device descriptor read/64, error -71 [ 190.530080][ T7715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.629912][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.671016][ T7722] syzkaller1: entered promiscuous mode [ 190.678037][ T7722] syzkaller1: entered allmulticast mode [ 190.750330][ T5715] IPVS: starting estimator thread 0... [ 190.753043][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 190.853012][ T7727] IPVS: using max 54 ests per chain, 129600 per kthread [ 190.894739][ T24] usb 2-1: device descriptor read/64, error -71 [ 191.005671][ T24] usb usb2-port1: attempt power cycle [ 191.095243][ T5637] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 191.098697][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.114163][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.342990][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 191.374012][ T24] usb 2-1: device descriptor read/8, error -71 [ 191.409573][ T7736] FAULT_INJECTION: forcing a failure. [ 191.409573][ T7736] name failslab, interval 1, probability 0, space 0, times 0 [ 191.423724][ T7736] CPU: 0 UID: 0 PID: 7736 Comm: syz.0.632 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.423753][ T7736] Tainted: [L]=SOFTLOCKUP [ 191.423759][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.423769][ T7736] Call Trace: [ 191.423776][ T7736] [ 191.423782][ T7736] dump_stack_lvl+0xe8/0x150 [ 191.423797][ T7736] should_fail_ex+0x412/0x560 [ 191.423812][ T7736] should_failslab+0xa8/0x100 [ 191.423822][ T7736] ? security_inode_alloc+0x39/0x310 [ 191.423839][ T7736] kmem_cache_alloc_noprof+0x87/0x650 [ 191.423856][ T7736] security_inode_alloc+0x39/0x310 [ 191.423876][ T7736] inode_init_always_gfp+0x995/0xd50 [ 191.423891][ T7736] ? __pfx_sock_alloc_inode+0x10/0x10 [ 191.423904][ T7736] alloc_inode+0x82/0x1b0 [ 191.423916][ T7736] do_accept+0x13e/0x760 [ 191.423932][ T7736] ? __pfx_do_accept+0x10/0x10 [ 191.423955][ T7736] io_accept+0x310/0x7a0 [ 191.423973][ T7736] ? __pfx_io_accept+0x10/0x10 [ 191.423985][ T7736] ? __mutex_lock+0x319/0x1550 [ 191.423997][ T7736] __io_issue_sqe+0x180/0x4b0 [ 191.424011][ T7736] io_poll_issue+0x125/0x1d0 [ 191.424023][ T7736] io_poll_task_func+0x33d/0xc30 [ 191.424040][ T7736] ? __pfx_io_poll_task_func+0x10/0x10 [ 191.424052][ T7736] ? percpu_ref_get+0x1c/0x1d0 [ 191.424065][ T7736] ? percpu_ref_get+0x1c/0x1d0 [ 191.424079][ T7736] ? __pfx_io_poll_task_func+0x10/0x10 [ 191.424094][ T7736] io_handle_tw_list+0x258/0x540 [ 191.424111][ T7736] tctx_task_work_run+0x55/0x300 [ 191.424126][ T7736] tctx_task_work+0x3f/0x90 [ 191.424139][ T7736] task_work_run+0x1d9/0x270 [ 191.424156][ T7736] ? __pfx_task_work_run+0x10/0x10 [ 191.424171][ T7736] ? sock_def_readable+0xae/0x550 [ 191.424185][ T7736] get_signal+0x11eb/0x1330 [ 191.424195][ T7736] ? refcount_dec_and_test+0x4f/0x80 [ 191.424209][ T7736] ? unix_stream_connect+0xddb/0x1050 [ 191.424238][ T7736] arch_do_signal_or_restart+0xbc/0x840 [ 191.424266][ T7736] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 191.424305][ T7736] exit_to_user_mode_loop+0xa9/0x680 [ 191.424321][ T7736] ? rcu_is_watching+0x15/0xb0 [ 191.424339][ T7736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.424356][ T7736] do_syscall_64+0x353/0x580 [ 191.424371][ T7736] ? trace_irq_disable+0x3b/0x140 [ 191.424395][ T7736] ? clear_bhb_loop+0x40/0x90 [ 191.424415][ T7736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.424432][ T7736] RIP: 0033:0x7facf2b9ce59 [ 191.424447][ T7736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.424462][ T7736] RSP: 002b:00007facf3a86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 191.424480][ T7736] RAX: 0000000000000000 RBX: 00007facf2e15fa0 RCX: 00007facf2b9ce59 [ 191.424489][ T7736] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000005 [ 191.424495][ T7736] RBP: 00007facf3a86090 R08: 0000000000000000 R09: 0000000000000000 [ 191.424500][ T7736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.424506][ T7736] R13: 00007facf2e16038 R14: 00007facf2e15fa0 R15: 00007facf2f3fa48 [ 191.424521][ T7736] [ 191.622928][ T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 191.864848][ T24] usb 2-1: device descriptor read/8, error -71 [ 191.889279][ T7743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.914196][ T7743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.973264][ T24] usb usb2-port1: unable to enumerate USB device [ 192.038937][ T7750] netlink: 'syz.2.637': attribute type 13 has an invalid length. [ 192.047861][ T7750] netlink: 'syz.2.637': attribute type 17 has an invalid length. [ 192.174244][ T7750] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 192.230145][ T7754] team0: entered promiscuous mode [ 192.972340][ T7770] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 193.419375][ T7786] netlink: 'syz.3.646': attribute type 12 has an invalid length. [ 194.163230][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169655][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.185213][ T7795] netlink: 64 bytes leftover after parsing attributes in process `syz.2.648'. [ 194.926086][ T7797] usb usb8: usbfs: process 7797 (syz.0.649) did not claim interface 0 before use [ 194.963024][ T30] audit: type=1326 audit(1779937444.714:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf2b9ce59 code=0x7ffc0000 [ 194.998063][ T7802] FAULT_INJECTION: forcing a failure. [ 194.998063][ T7802] name failslab, interval 1, probability 0, space 0, times 0 [ 194.999768][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.011913][ T30] audit: type=1326 audit(1779937444.714:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf2b9ce59 code=0x7ffc0000 [ 195.046371][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.051946][ T7802] CPU: 1 UID: 0 PID: 7802 Comm: syz.3.651 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.051974][ T7802] Tainted: [L]=SOFTLOCKUP [ 195.051980][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.051991][ T7802] Call Trace: [ 195.051997][ T7802] [ 195.052010][ T7802] dump_stack_lvl+0xe8/0x150 [ 195.052036][ T7802] should_fail_ex+0x412/0x560 [ 195.052059][ T7802] should_failslab+0xa8/0x100 [ 195.052078][ T7802] __kmalloc_cache_noprof+0x88/0x660 [ 195.052102][ T7802] ? __vb2_init_fileio+0x1e8/0xff0 [ 195.052131][ T7802] __vb2_init_fileio+0x1e8/0xff0 [ 195.052165][ T7802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 195.052193][ T7802] vb2_core_poll+0x4f5/0x840 [ 195.052220][ T7802] vb2_fop_poll+0x193/0x310 [ 195.052242][ T7802] ? __fget_files+0x2a/0x420 [ 195.052265][ T7802] ? __pfx_vb2_fop_poll+0x10/0x10 [ 195.052289][ T7802] v4l2_poll+0x147/0x2c0 [ 195.052310][ T7802] ? __pfx_v4l2_poll+0x10/0x10 [ 195.052334][ T7802] do_sys_poll+0x96c/0x10e0 [ 195.052359][ T7802] ? do_sys_poll+0x431/0x10e0 [ 195.052383][ T7802] ? __pfx_do_sys_poll+0x10/0x10 [ 195.052406][ T7802] ? aa_file_perm+0x192/0x15e0 [ 195.052422][ T7802] ? __pfx___pollwait+0x10/0x10 [ 195.052443][ T7802] ? __pfx_pollwake+0x10/0x10 [ 195.052541][ T7802] ? set_user_sigmask+0xcd/0x1c0 [ 195.052558][ T7802] ? __pfx_set_user_sigmask+0x10/0x10 [ 195.052585][ T7802] __se_sys_ppoll+0x209/0x2b0 [ 195.052603][ T7802] ? fput+0xa0/0xd0 [ 195.052624][ T7802] ? __pfx___se_sys_ppoll+0x10/0x10 [ 195.052642][ T7802] ? __pfx_ksys_write+0x10/0x10 [ 195.052670][ T7802] ? __x64_sys_ppoll+0x20/0xc0 [ 195.052688][ T7802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.052706][ T7802] do_syscall_64+0x174/0x580 [ 195.052722][ T7802] ? trace_irq_disable+0x3b/0x140 [ 195.052746][ T7802] ? clear_bhb_loop+0x40/0x90 [ 195.052766][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.052786][ T7802] RIP: 0033:0x7f7eed99ce59 [ 195.052801][ T7802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.052815][ T7802] RSP: 002b:00007f7eee846028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 195.052833][ T7802] RAX: ffffffffffffffda RBX: 00007f7eedc15fa0 RCX: 00007f7eed99ce59 [ 195.052845][ T7802] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 195.052856][ T7802] RBP: 00007f7eee846090 R08: 0000000000000000 R09: 0000000000000000 [ 195.052866][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.052876][ T7802] R13: 00007f7eedc16038 R14: 00007f7eedc15fa0 R15: 00007f7eedd3fa48 [ 195.052904][ T7802] [ 195.072277][ T30] audit: type=1326 audit(1779937444.714:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf2b9ce59 code=0x7ffc0000 [ 195.343212][ T30] audit: type=1326 audit(1779937444.724:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7facf2b9ce59 code=0x7ffc0000 [ 195.345232][ T5715] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 195.370290][ T30] audit: type=1326 audit(1779937444.724:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf2b9ce59 code=0x7ffc0000 [ 195.401122][ T30] audit: type=1326 audit(1779937444.724:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf2b9ce59 code=0x7ffc0000 [ 195.426652][ T30] audit: type=1326 audit(1779937444.724:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf2b9ce59 code=0x7ffc0000 [ 195.451095][ T30] audit: type=1326 audit(1779937444.724:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7facf2b9ce59 code=0x7ffc0000 [ 195.475546][ T30] audit: type=1326 audit(1779937444.724:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf2b9ce59 code=0x7ffc0000 [ 195.500983][ T30] audit: type=1326 audit(1779937444.724:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf2b9ce59 code=0x7ffc0000 [ 195.533105][ T1233] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 195.562942][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 195.570323][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.579540][ T5715] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 195.593547][ T5715] usb 1-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 195.604313][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.612321][ T5715] usb 1-1: Product: syz [ 195.617435][ T5715] usb 1-1: Manufacturer: syz [ 195.622050][ T5715] usb 1-1: SerialNumber: syz [ 195.693278][ T1233] usb 4-1: Using ep0 maxpacket: 32 [ 195.702190][ T1233] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 195.711739][ T1233] usb 4-1: config 0 has no interface number 0 [ 195.720115][ T1233] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 195.733829][ T1233] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 195.743607][ T1233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.751634][ T1233] usb 4-1: Product: syz [ 195.756202][ T1233] usb 4-1: Manufacturer: syz [ 195.760863][ T1233] usb 4-1: SerialNumber: syz [ 195.767948][ T1233] usb 4-1: config 0 descriptor?? [ 195.825043][ T7724] udevd[7724]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.855839][ T5715] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 195.934737][ T5727] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 195.961227][ T5715] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 195.973992][ T7815] FAULT_INJECTION: forcing a failure. [ 195.973992][ T7815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.001763][ T5715] usb 1-1: USB disconnect, device number 39 [ 196.002672][ T7815] CPU: 1 UID: 0 PID: 7815 Comm: syz.1.656 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.002699][ T7815] Tainted: [L]=SOFTLOCKUP [ 196.002705][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.002715][ T7815] Call Trace: [ 196.002722][ T7815] [ 196.002729][ T7815] dump_stack_lvl+0xe8/0x150 [ 196.002753][ T7815] should_fail_ex+0x412/0x560 [ 196.002778][ T7815] _copy_from_user+0x2d/0xb0 [ 196.002803][ T7815] snd_seq_write+0x309/0x820 [ 196.002835][ T7815] ? __pfx_snd_seq_write+0x10/0x10 [ 196.002856][ T7815] ? bpf_lsm_file_permission+0x9/0x20 [ 196.002878][ T7815] ? security_file_permission+0x75/0x260 [ 196.002900][ T7815] ? rw_verify_area+0x255/0x4d0 [ 196.002929][ T7815] ? __pfx_snd_seq_write+0x10/0x10 [ 196.002950][ T7815] vfs_write+0x29a/0xb90 [ 196.002980][ T7815] ? __pfx_vfs_write+0x10/0x10 [ 196.003004][ T7815] ? __fget_files+0x2a/0x420 [ 196.003026][ T7815] ? __fget_files+0x2a/0x420 [ 196.003044][ T7815] ? __fget_files+0x3a0/0x420 [ 196.003062][ T7815] ? __fget_files+0x2a/0x420 [ 196.003089][ T7815] ksys_write+0x150/0x270 [ 196.003114][ T7815] ? __pfx_ksys_write+0x10/0x10 [ 196.003144][ T7815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.003161][ T7815] do_syscall_64+0x174/0x580 [ 196.003177][ T7815] ? trace_irq_disable+0x3b/0x140 [ 196.003200][ T7815] ? clear_bhb_loop+0x40/0x90 [ 196.003220][ T7815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.003236][ T7815] RIP: 0033:0x7f101b39ce59 [ 196.003252][ T7815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.003265][ T7815] RSP: 002b:00007f101c305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.003282][ T7815] RAX: ffffffffffffffda RBX: 00007f101b615fa0 RCX: 00007f101b39ce59 [ 196.003295][ T7815] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 196.003305][ T7815] RBP: 00007f101c305090 R08: 0000000000000000 R09: 0000000000000000 [ 196.003315][ T7815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.003325][ T7815] R13: 00007f101b616038 R14: 00007f101b615fa0 R15: 00007f101b73fa48 [ 196.003358][ T7815] [ 196.096468][ T5727] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 196.156401][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.248068][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.256546][ T5727] usb 3-1: Product: syz [ 196.260749][ T5727] usb 3-1: Manufacturer: syz [ 196.273822][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.279657][ T5727] usb 3-1: SerialNumber: syz [ 196.299201][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.358196][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.389388][ T5727] usb 3-1: config 0 descriptor?? [ 196.401610][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.435993][ T5637] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 196.683392][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 196.732065][ T5727] mos7840 3-1:0.0: required endpoints missing [ 196.805334][ T5727] usb 3-1: USB disconnect, device number 31 [ 196.920859][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 196.935822][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 196.961365][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 197.022005][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.044920][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.065576][ T9] usb 2-1: Product: syz [ 197.075607][ T9] usb 2-1: Manufacturer: syz [ 197.089095][ T9] usb 2-1: SerialNumber: syz [ 197.103612][ T9] usb 2-1: config 0 descriptor?? [ 197.119158][ T7822] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 197.346169][ T7822] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 197.853084][ T5686] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 198.014651][ T5686] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 198.032615][ T5686] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.054403][ T5686] usb 1-1: config 0 has no interface number 0 [ 198.065808][ T5686] usb 1-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x49, changing to 0x9 [ 198.090177][ T5686] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 198.118882][ T5686] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 198.155813][ T5686] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 198.181420][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.211861][ T5686] usb 1-1: config 0 descriptor?? [ 198.237268][ T7835] ip6tnl0: Caught tx_queue_len zero misconfig [ 198.269312][ T5686] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 198.297977][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.318979][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.940102][ T7840] netlink: set zone limit has 4 unknown bytes [ 199.027228][ T5686] usb 4-1: USB disconnect, device number 49 [ 199.149359][ T7845] netlink: 64 bytes leftover after parsing attributes in process `syz.4.664'. [ 199.298414][ T9] usb 2-1: USB disconnect, device number 35 [ 199.346892][ T6435] usb 1-1: Failed to submit usb control message: -110 [ 199.376374][ T6435] usb 1-1: unable to send the bmi data to the device: -110 [ 199.400570][ T6435] usb 1-1: unable to get target info from device [ 199.424776][ T6435] usb 1-1: could not get target info (-110) [ 199.469585][ T6435] usb 1-1: could not probe fw (-110) [ 199.873727][ T5637] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 200.511641][ T5715] usb 1-1: USB disconnect, device number 40 [ 201.109703][ T7896] netlink: 96 bytes leftover after parsing attributes in process `syz.4.681'. [ 201.118812][ T5727] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 201.167935][ T7896] vlan2: entered allmulticast mode [ 201.189446][ T7896] syz_tun: entered allmulticast mode [ 201.247107][ T5686] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 201.282902][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 201.289337][ T5727] usb 3-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 201.300805][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.312527][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 201.324509][ T5727] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 201.335073][ T5727] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.351149][ T5727] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 201.361816][ T5727] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 201.372547][ T5727] usb 3-1: Manufacturer: syz [ 201.379935][ T5727] usb 3-1: config 0 descriptor?? [ 201.413709][ T5686] usb 1-1: Using ep0 maxpacket: 32 [ 201.423578][ T5686] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 201.433624][ T5686] usb 1-1: config 0 has no interface number 0 [ 201.445226][ T5686] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 201.463749][ T5686] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 201.473276][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.484437][ T5686] usb 1-1: Product: syz [ 201.488939][ T5686] usb 1-1: Manufacturer: syz [ 201.494286][ T5686] usb 1-1: SerialNumber: syz [ 201.504420][ T5686] usb 1-1: config 0 descriptor?? [ 201.513701][ T7890] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 201.567513][ T7902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.591982][ T7902] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.648688][ T7902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.659764][ T5727] rc_core: IR keymap rc-hauppauge not found [ 201.670679][ T5727] Registered IR keymap rc-empty [ 201.681100][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.714584][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.726816][ T7890] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 201.767466][ T5727] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 201.811876][ T5727] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33 [ 201.832436][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.853416][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.875097][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.893168][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.909871][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.923658][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.955117][ T7902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.968768][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.980651][ T7902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.006213][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.035394][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.078130][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.113119][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.163008][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.194811][ T7902] veth1_vlan: left promiscuous mode [ 202.205206][ T5727] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 202.218135][ T7902] veth0_vlan: left promiscuous mode [ 202.223493][ T5727] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 202.233689][ T7902] veth0_vlan: entered promiscuous mode [ 202.245787][ T5727] usb 3-1: USB disconnect, device number 32 [ 202.321706][ T7902] veth1_vlan: entered promiscuous mode [ 202.333560][ T5715] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 202.362178][ T7902] veth1_macvtap: left promiscuous mode [ 202.375107][ T7902] veth0_macvtap: left promiscuous mode [ 202.382455][ T7902] veth0_macvtap: entered promiscuous mode [ 202.391706][ T7902] veth1_macvtap: entered promiscuous mode [ 202.419868][ T7902] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 202.432542][ T7902] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 202.446762][ T7902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.458112][ T7902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.494174][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 202.501880][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 202.501894][ T30] audit: type=1326 audit(1779937452.254:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.4.683" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c09d9ce59 code=0x0 [ 202.502327][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.545922][ T7902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.553044][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.563612][ T5715] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.577301][ T5715] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.586714][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.597128][ T5715] usb 4-1: config 0 descriptor?? [ 202.657051][ T7902] geneve2: left promiscuous mode [ 202.678135][ T7902] geneve2: left allmulticast mode [ 202.719815][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.726977][ T6433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.752893][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.760012][ T6433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.824554][ T6428] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0 [ 202.850167][ T6428] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0 [ 202.867422][ T6428] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0 [ 202.901032][ T6428] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0 [ 202.971482][ T5727] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 203.015839][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.040042][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.080014][ T5715] hid_parser_main: 5 callbacks suppressed [ 203.080029][ T5715] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 203.122677][ T5715] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 203.142388][ T5715] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 203.155399][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 203.164970][ T5727] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.166680][ T5715] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 203.187982][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.205260][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 203.207617][ T5715] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 203.236146][ T5727] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 203.246911][ T5727] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.257944][ T5715] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 203.274070][ T5727] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 203.280232][ T5715] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 203.296094][ T5727] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 203.306219][ T5715] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 203.325604][ T5727] usb 3-1: Manufacturer: syz [ 203.332692][ T5715] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 203.354078][ T5715] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 203.375094][ T5727] usb 3-1: config 0 descriptor?? [ 203.426063][ T7920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.452383][ T7920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.463847][ T5715] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0008/input/input34 [ 203.509488][ T5715] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 203.743619][ T5727] rc_core: IR keymap rc-hauppauge not found [ 203.751340][ T5727] Registered IR keymap rc-empty [ 203.762181][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 203.793007][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 203.824645][ T5727] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 203.844608][ T5727] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 203.866888][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 203.904712][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 203.943368][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 203.963008][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 203.983198][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 204.013098][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 204.025603][ T24] usb 4-1: USB disconnect, device number 50 [ 204.064881][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 204.103696][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 204.142954][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 204.164593][ T5727] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 204.256882][ T5727] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 204.284191][ T5727] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 204.709196][ T7926] program syz.0.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.757096][ T7926] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 204.809441][ T5727] usb 3-1: USB disconnect, device number 33 [ 204.831585][ T7927] IPVS: sync thread started: state = MASTER, mcast_ifn = xfrm0, syncid = 3, id = 0 [ 204.859914][ T5686] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 204.877964][ T7929] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 204.887163][ T7929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.893417][ T5686] asix 1-1:0.188: probe with driver asix failed with error -71 [ 204.939605][ T5686] usb 1-1: USB disconnect, device number 41 [ 205.116314][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.124158][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.245306][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.267470][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.292958][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 205.326089][ T7932] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 205.429978][ T7932] erspan1: left promiscuous mode [ 205.443118][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 205.452967][ T7932] erspan1: left allmulticast mode [ 205.466289][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 205.466486][ T6439] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.495643][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.526181][ T9] usb 2-1: Product: syz [ 205.540374][ T9] usb 2-1: Manufacturer: syz [ 205.543918][ T6439] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.558750][ T9] usb 2-1: SerialNumber: syz [ 205.579496][ T9] usb 2-1: config 0 descriptor?? [ 205.607274][ T6439] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.608613][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 205.649035][ T6439] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.319051][ T7969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.444150][ T7973] FAULT_INJECTION: forcing a failure. [ 206.444150][ T7973] name failslab, interval 1, probability 0, space 0, times 0 [ 206.457941][ T7973] CPU: 1 UID: 0 PID: 7973 Comm: syz.0.702 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.457969][ T7973] Tainted: [L]=SOFTLOCKUP [ 206.457975][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.457985][ T7973] Call Trace: [ 206.457993][ T7973] [ 206.458001][ T7973] dump_stack_lvl+0xe8/0x150 [ 206.458025][ T7973] should_fail_ex+0x412/0x560 [ 206.458050][ T7973] should_failslab+0xa8/0x100 [ 206.458070][ T7973] __kmalloc_cache_noprof+0x88/0x660 [ 206.458095][ T7973] ? br_multicast_new_group+0x169/0x12c0 [ 206.458124][ T7973] br_multicast_new_group+0x169/0x12c0 [ 206.458148][ T7973] ? kasan_save_free_info+0x46/0x50 [ 206.458167][ T7973] ? __kasan_slab_free+0x5c/0x80 [ 206.458189][ T7973] ? kmem_cache_free+0x182/0x650 [ 206.458210][ T7973] ? nlmon_xmit+0xb0/0x100 [ 206.458226][ T7973] ? dev_hard_start_xmit+0x2cd/0x830 [ 206.458243][ T7973] ? __dev_queue_xmit+0x14d9/0x3950 [ 206.458260][ T7973] ? __netlink_deliver_tap+0x5ad/0x850 [ 206.458283][ T7973] ? netlink_unicast+0x730/0x8e0 [ 206.458304][ T7973] ? ____sys_sendmsg+0x972/0x9f0 [ 206.458335][ T7973] ? __pfx_br_multicast_new_group+0x10/0x10 [ 206.458355][ T7973] ? do_raw_spin_lock+0x12b/0x2f0 [ 206.458380][ T7973] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 206.458404][ T7973] ? __br_mdb_add+0x165/0x14f0 [ 206.458426][ T7973] __br_mdb_add+0x1e3/0x14f0 [ 206.458452][ T7973] ? __pfx_br_mdb_config_init+0x10/0x10 [ 206.458467][ T7973] ? __pfx___br_mdb_add+0x10/0x10 [ 206.458483][ T7973] ? __pfx___nla_validate_parse+0x10/0x10 [ 206.458501][ T7973] ? __mutex_trylock_common+0x158/0x260 [ 206.458531][ T7973] br_mdb_add+0x67b/0x8c0 [ 206.458548][ T7973] ? trace_contention_end+0x3d/0x140 [ 206.458570][ T7973] ? __pfx_br_mdb_add+0x10/0x10 [ 206.458588][ T7973] ? __mutex_lock+0x319/0x1550 [ 206.458610][ T7973] ? __local_bh_enable_ip+0xd0/0x130 [ 206.458631][ T7973] ? __nla_parse+0x40/0x60 [ 206.458652][ T7973] ? __pfx_br_mdb_add+0x10/0x10 [ 206.458672][ T7973] rtnl_mdb_add+0x2bf/0x4d0 [ 206.458697][ T7973] ? __pfx_rtnl_mdb_add+0x10/0x10 [ 206.458731][ T7973] ? __pfx_rtnl_mdb_add+0x10/0x10 [ 206.458751][ T7973] rtnetlink_rcv_msg+0x77e/0xbe0 [ 206.458776][ T7973] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 206.458800][ T7973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.458820][ T7973] ? ref_tracker_free+0x693/0x840 [ 206.458840][ T7973] ? __pfx_ref_tracker_free+0x10/0x10 [ 206.458856][ T7973] ? __asan_memcpy+0x40/0x70 [ 206.458876][ T7973] ? __skb_clone+0x63/0x7a0 [ 206.458909][ T7973] netlink_rcv_skb+0x232/0x4b0 [ 206.458932][ T7973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.458956][ T7973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.458991][ T7973] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.459014][ T7973] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.459042][ T7973] netlink_unicast+0x75c/0x8e0 [ 206.459072][ T7973] netlink_sendmsg+0x813/0xb40 [ 206.459105][ T7973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.459131][ T7973] ? aa_sock_msg_perm+0xf1/0x1b0 [ 206.459156][ T7973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.459182][ T7973] ____sys_sendmsg+0x972/0x9f0 [ 206.459205][ T7973] ? __might_fault+0xaf/0x130 [ 206.459233][ T7973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.459267][ T7973] ? import_iovec+0x73/0xa0 [ 206.459292][ T7973] ___sys_sendmsg+0x2a5/0x360 [ 206.459308][ T7973] ? __lock_acquire+0x6b5/0x2cf0 [ 206.459330][ T7973] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.459360][ T7973] ? kstrtouint+0x6e/0xe0 [ 206.459412][ T7973] ? __fget_files+0x2a/0x420 [ 206.459431][ T7973] ? __fget_files+0x3a0/0x420 [ 206.459462][ T7973] __sys_sendmmsg+0x27c/0x4e0 [ 206.459483][ T7973] ? __pfx___sys_sendmmsg+0x10/0x10 [ 206.459498][ T7973] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 206.459539][ T7973] ? ksys_write+0x242/0x270 [ 206.459564][ T7973] ? __pfx_ksys_write+0x10/0x10 [ 206.459595][ T7973] __x64_sys_sendmmsg+0xa0/0xc0 [ 206.459612][ T7973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.459630][ T7973] do_syscall_64+0x174/0x580 [ 206.459645][ T7973] ? trace_irq_disable+0x3b/0x140 [ 206.459669][ T7973] ? clear_bhb_loop+0x40/0x90 [ 206.459687][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.459702][ T7973] RIP: 0033:0x7facf2b9ce59 [ 206.459718][ T7973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.459732][ T7973] RSP: 002b:00007facf3a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 206.459751][ T7973] RAX: ffffffffffffffda RBX: 00007facf2e15fa0 RCX: 00007facf2b9ce59 [ 206.459762][ T7973] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 206.459774][ T7973] RBP: 00007facf3a86090 R08: 0000000000000000 R09: 0000000000000000 [ 206.459784][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.459793][ T7973] R13: 00007facf2e16038 R14: 00007facf2e15fa0 R15: 00007facf2f3fa48 [ 206.459822][ T7973] [ 206.931862][ T9] gspca_sonixj: reg_r err -110 [ 206.938061][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 207.104816][ T7981] netlink: 16 bytes leftover after parsing attributes in process `syz.4.701'. [ 207.353063][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 207.504375][ T9] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 207.528534][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.567638][ T9] usb 1-1: config 0 descriptor?? [ 207.585477][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 207.768577][ T7984] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 207.775317][ T7984] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 207.950109][ T7984] vhci_hcd vhci_hcd.0: Device attached [ 207.995778][ T9] gp8psk: usb in 128 operation failed. [ 208.005269][ T9] gp8psk: usb in 137 operation failed. [ 208.018782][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 208.050777][ T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 208.074977][ T9] usb 1-1: media controller created [ 208.104601][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.139956][ T9] gp8psk_fe: Frontend attached [ 208.148731][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 208.168422][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 208.183079][ T5724] usb 38-1: SetAddress Request (2) to port 0 [ 208.199157][ T5724] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 208.241964][ T7990] fuse: Unknown parameter 'fdæUЭ3v½|¾' [ 208.327001][ T9] gp8psk: usb in 138 operation failed. [ 208.353844][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 208.356278][ T5693] usb 2-1: USB disconnect, device number 36 [ 208.369509][ T9] gp8psk: found Genpix USB device pID = 203 (hex) [ 208.393652][ T9] usb 1-1: USB disconnect, device number 42 [ 208.678120][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 208.706734][ T8003] sit1: entered promiscuous mode [ 208.824419][ T8008] FAULT_INJECTION: forcing a failure. [ 208.824419][ T8008] name failslab, interval 1, probability 0, space 0, times 0 [ 208.848113][ T8008] CPU: 0 UID: 0 PID: 8008 Comm: syz.1.712 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.848140][ T8008] Tainted: [L]=SOFTLOCKUP [ 208.848144][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.848150][ T8008] Call Trace: [ 208.848156][ T8008] [ 208.848161][ T8008] dump_stack_lvl+0xe8/0x150 [ 208.848177][ T8008] should_fail_ex+0x412/0x560 [ 208.848191][ T8008] should_failslab+0xa8/0x100 [ 208.848203][ T8008] __kmalloc_cache_noprof+0x88/0x660 [ 208.848218][ T8008] ? tcf_exts_init_ex+0x10e/0x7c0 [ 208.848236][ T8008] tcf_exts_init_ex+0x10e/0x7c0 [ 208.848250][ T8008] ? __kmalloc_cache_noprof+0x31c/0x660 [ 208.848264][ T8008] ? __kmalloc_cache_noprof+0x15b/0x660 [ 208.848279][ T8008] cls_bpf_change+0x2a4/0xd90 [ 208.848296][ T8008] ? __pfx___mutex_lock+0x10/0x10 [ 208.848312][ T8008] ? __pfx_cls_bpf_change+0x10/0x10 [ 208.848338][ T8008] tc_new_tfilter+0xff8/0x1780 [ 208.848363][ T8008] ? __pfx_tc_new_tfilter+0x10/0x10 [ 208.848380][ T8008] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 208.848402][ T8008] ? __pfx_tc_new_tfilter+0x10/0x10 [ 208.848414][ T8008] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 208.848430][ T8008] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 208.848443][ T8008] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.848455][ T8008] ? ref_tracker_free+0x693/0x840 [ 208.848468][ T8008] ? __pfx_ref_tracker_free+0x10/0x10 [ 208.848478][ T8008] ? __asan_memcpy+0x40/0x70 [ 208.848491][ T8008] ? __skb_clone+0x63/0x7a0 [ 208.848504][ T8008] netlink_rcv_skb+0x232/0x4b0 [ 208.848520][ T8008] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.848534][ T8008] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.848554][ T8008] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.848569][ T8008] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.848586][ T8008] netlink_unicast+0x75c/0x8e0 [ 208.848604][ T8008] netlink_sendmsg+0x813/0xb40 [ 208.848624][ T8008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.848640][ T8008] ? aa_sock_msg_perm+0xf1/0x1b0 [ 208.848656][ T8008] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.848672][ T8008] ____sys_sendmsg+0x972/0x9f0 [ 208.848687][ T8008] ? __might_fault+0xaf/0x130 [ 208.848706][ T8008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.848725][ T8008] ? import_iovec+0x73/0xa0 [ 208.848739][ T8008] ___sys_sendmsg+0x2a5/0x360 [ 208.848748][ T8008] ? __lock_acquire+0x6b5/0x2cf0 [ 208.848761][ T8008] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.848793][ T8008] ? __fget_files+0x2a/0x420 [ 208.848805][ T8008] ? __fget_files+0x3a0/0x420 [ 208.848822][ T8008] __x64_sys_sendmsg+0x1bd/0x2a0 [ 208.848833][ T8008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.848847][ T8008] ? __pfx_ksys_write+0x10/0x10 [ 208.848866][ T8008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.848876][ T8008] do_syscall_64+0x174/0x580 [ 208.848886][ T8008] ? trace_irq_disable+0x3b/0x140 [ 208.848901][ T8008] ? clear_bhb_loop+0x40/0x90 [ 208.848912][ T8008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.848922][ T8008] RIP: 0033:0x7f101b39ce59 [ 208.848932][ T8008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.848940][ T8008] RSP: 002b:00007f101c305028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.848956][ T8008] RAX: ffffffffffffffda RBX: 00007f101b615fa0 RCX: 00007f101b39ce59 [ 208.848964][ T8008] RDX: 0000000000000004 RSI: 0000200000002280 RDI: 0000000000000006 [ 208.848970][ T8008] RBP: 00007f101c305090 R08: 0000000000000000 R09: 0000000000000000 [ 208.848976][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.848981][ T8008] R13: 00007f101b616038 R14: 00007f101b615fa0 R15: 00007f101b73fa48 [ 208.848996][ T8008] [ 209.460970][ T1233] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 209.476754][ T7986] vhci_hcd: connection reset by peer [ 209.486159][ T6441] vhci_hcd vhci_hcd.2: stop threads [ 209.492061][ T6441] vhci_hcd vhci_hcd.2: release socket [ 209.506950][ T6441] vhci_hcd vhci_hcd.2: disconnect device [ 209.559733][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 209.572962][ T8013] binder: 8012:8013 ioctl 4018620d 200000000100 returned -16 [ 209.595456][ T8013] binder: BINDER_SET_CONTEXT_MGR already set [ 209.612927][ T8013] binder: 8012:8013 ioctl 4018620d 200000004a80 returned -16 [ 209.614852][ T1233] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 209.629634][ T1233] usb 4-1: config 0 has no interface number 0 [ 209.635929][ T1233] usb 4-1: config 0 interface 98 has no altsetting 0 [ 209.646299][ T1233] usb 4-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=48.03 [ 209.656096][ T1233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.664480][ T1233] usb 4-1: Product: syz [ 209.668854][ T1233] usb 4-1: Manufacturer: syz [ 209.673816][ T1233] usb 4-1: SerialNumber: syz [ 209.677964][ T8017] binder: 8012:8017 unknown command 0 [ 209.685023][ T1233] usb 4-1: config 0 descriptor?? [ 209.700239][ T8017] binder: 8012:8017 ioctl c0306201 200000004a40 returned -22 [ 209.752936][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 209.905221][ T9] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 209.921889][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.939141][ T9] usb 1-1: config 0 has no interface number 0 [ 209.955625][ T9] usb 1-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x49, changing to 0x9 [ 209.982656][ T9] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 210.013234][ T9] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 210.046204][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 210.057559][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.069720][ T9] usb 1-1: config 0 descriptor?? [ 210.113200][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 210.297329][ T1233] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in warm state. [ 210.311726][ T1233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.322703][ T1233] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T) [ 210.331488][ T1233] usb 4-1: media controller created [ 210.350323][ T1233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.383003][ T5693] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 210.557829][ T5693] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 210.566977][ T5693] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 210.589069][ T5693] usb 2-1: config 220 has an invalid descriptor of length 39, skipping remainder of the config [ 210.608079][ T5693] usb 2-1: config 220 has no interface number 2 [ 210.615666][ T5693] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 210.629724][ T5693] usb 2-1: config 220 interface 0 has no altsetting 0 [ 210.636955][ T5693] usb 2-1: config 220 interface 76 has no altsetting 0 [ 210.637549][ T8040] FAULT_INJECTION: forcing a failure. [ 210.637549][ T8040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 210.644376][ T5693] usb 2-1: config 220 interface 1 has no altsetting 0 [ 210.671401][ T8040] CPU: 0 UID: 0 PID: 8040 Comm: syz.2.722 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.671435][ T8040] Tainted: [L]=SOFTLOCKUP [ 210.671440][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.671453][ T8040] Call Trace: [ 210.671461][ T8040] [ 210.671469][ T8040] dump_stack_lvl+0xe8/0x150 [ 210.671505][ T8040] should_fail_ex+0x412/0x560 [ 210.671530][ T8040] prepare_alloc_pages+0x22a/0x650 [ 210.671583][ T8040] __alloc_frozen_pages_noprof+0x12f/0x380 [ 210.671612][ T8040] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 210.671639][ T8040] ? __pfx_policy_nodemask+0x10/0x10 [ 210.671659][ T8040] ? mas_next_node+0x3b4/0xe10 [ 210.671681][ T8040] alloc_pages_mpol+0x235/0x490 [ 210.671700][ T8040] alloc_pages_noprof+0xac/0x2a0 [ 210.671720][ T8040] __pud_alloc+0x3a/0x460 [ 210.671743][ T8040] handle_mm_fault+0x2b2c/0x3170 [ 210.671762][ T8040] ? mt_find+0x186/0x630 [ 210.671794][ T8040] ? handle_mm_fault+0xf1/0x3170 [ 210.671813][ T8040] ? __pfx_mt_find+0x10/0x10 [ 210.671835][ T8040] ? __pfx_handle_mm_fault+0x10/0x10 [ 210.671852][ T8040] ? mas_find+0xb0e/0xd30 [ 210.671889][ T8040] __get_user_pages+0x167f/0x2730 [ 210.671939][ T8040] get_user_pages_remote+0x2f6/0xab0 [ 210.671968][ T8040] ? __pfx_get_user_pages_remote+0x10/0x10 [ 210.671986][ T8040] ? mmap_read_lock_maybe_expand+0xb0/0x3a0 [ 210.672013][ T8040] ? mmap_read_lock_maybe_expand+0xc6/0x3a0 [ 210.672040][ T8040] copy_string_kernel+0x2f9/0x5f0 [ 210.672074][ T8040] ? __pfx_copy_string_kernel+0x10/0x10 [ 210.672094][ T8040] ? do_raw_spin_unlock+0xf5/0x210 [ 210.672120][ T8040] ? alloc_bprm+0x508/0x5c0 [ 210.672140][ T8040] ? count+0x1cb/0x230 [ 210.672165][ T8040] do_execveat_common+0x38b/0x690 [ 210.672199][ T8040] __x64_sys_execveat+0xc7/0xf0 [ 210.672224][ T8040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.672244][ T8040] do_syscall_64+0x174/0x580 [ 210.672260][ T8040] ? trace_irq_disable+0x3b/0x140 [ 210.672285][ T8040] ? clear_bhb_loop+0x40/0x90 [ 210.672306][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.672323][ T8040] RIP: 0033:0x7fbae2d9ce59 [ 210.672339][ T8040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.672352][ T8040] RSP: 002b:00007fbae3ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 210.672371][ T8040] RAX: ffffffffffffffda RBX: 00007fbae3015fa0 RCX: 00007fbae2d9ce59 [ 210.672382][ T8040] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 210.672392][ T8040] RBP: 00007fbae3ced090 R08: 0000000000001000 R09: 0000000000000000 [ 210.672401][ T8040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.672411][ T8040] R13: 00007fbae3016038 R14: 00007fbae3015fa0 R15: 00007fbae313fa48 [ 210.672438][ T8040] [ 210.972234][ T5693] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 210.997303][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.007405][ T5693] usb 2-1: Product: syz [ 211.016207][ T5693] usb 2-1: Manufacturer: syz [ 211.023120][ T5693] usb 2-1: SerialNumber: syz [ 211.155426][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.166804][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.203250][ T6433] usb 1-1: Failed to submit usb control message: -110 [ 211.210273][ T6433] usb 1-1: unable to send the bmi data to the device: -110 [ 211.217607][ T6433] usb 1-1: unable to get target info from device [ 211.224198][ T6433] usb 1-1: could not get target info (-110) [ 211.230112][ T6433] usb 1-1: could not probe fw (-110) [ 211.376554][ T5693] usb 2-1: selecting invalid altsetting 0 [ 211.410628][ T5693] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 211.428798][ T5693] uvcvideo 2-1:220.0: No valid video chain found. [ 211.449651][ T5693] usb 2-1: selecting invalid altsetting 0 [ 211.460769][ T5693] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 211.486123][ T5693] usb 2-1: USB disconnect, device number 37 [ 211.755890][ T8049] binder_alloc: 8048: pid 8048 spamming oneway? 2 buffers allocated for a total size of 4104 [ 211.781141][ T5727] usb 1-1: USB disconnect, device number 43 [ 211.813588][ T1233] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T' [ 211.845554][ T1233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.864647][ T1233] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T) [ 211.874119][ T1233] usb 4-1: media controller created [ 211.907247][ T1233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.000691][ T1233] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T' [ 212.144579][ T1233] rc_core: IR keymap rc-dib0700-rc5 not found [ 212.145735][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 212.152724][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.175501][ T1233] Registered IR keymap rc-empty [ 212.181868][ T1233] dvb-usb: could not initialize remote control. [ 212.191086][ T1233] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully initialized and connected. [ 212.202281][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.220925][ T1233] usb 4-1: USB disconnect, device number 51 [ 212.375124][ T1233] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully deinitialized and disconnected. [ 212.447554][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.480264][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.607775][ T8066] netlink: 164 bytes leftover after parsing attributes in process `syz.1.730'. [ 212.736872][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 212.746216][ T8073] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 212.823123][ T1233] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 212.983102][ T1233] usb 4-1: Using ep0 maxpacket: 32 [ 212.990608][ T1233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.002009][ T1233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.012132][ T1233] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 213.022533][ T1233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.033983][ T5726] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 213.051854][ T5727] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 213.062329][ T1233] usb 4-1: config 0 descriptor?? [ 213.077471][ T1233] hub 4-1:0.0: USB hub found [ 213.193212][ T5726] usb 1-1: Using ep0 maxpacket: 32 [ 213.206696][ T5726] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 213.222910][ T5727] usb 3-1: Using ep0 maxpacket: 32 [ 213.223121][ T5726] usb 1-1: config 0 has no interface number 0 [ 213.235291][ T5726] usb 1-1: config 0 interface 12 has no altsetting 0 [ 213.253181][ T5724] usb 38-1: device descriptor read/8, error -110 [ 213.266232][ T5726] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 213.277246][ T1233] hub 4-1:0.0: 1 port detected [ 213.277424][ T5727] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 213.287792][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.298908][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.311720][ T5727] usb 3-1: config 0 descriptor?? [ 213.313245][ T5726] usb 1-1: Product: syz [ 213.323439][ T5726] usb 1-1: Manufacturer: syz [ 213.330320][ T5726] usb 1-1: SerialNumber: syz [ 213.345291][ T5726] usb 1-1: config 0 descriptor?? [ 213.530697][ T5727] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 213.540843][ T5727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.557006][ T5727] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 213.564346][ T5727] usb 3-1: media controller created [ 213.579733][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.633842][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 213.656400][ T5724] usb usb38-port1: attempt power cycle [ 213.731744][ T8075] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 213.743730][ T8075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.733'. [ 213.762000][ T5727] az6027: usb out operation failed. (-71) [ 213.772169][ T5727] az6027: usb out operation failed. (-71) [ 213.778986][ T5727] stb0899_attach: Driver disabled by Kconfig [ 213.785186][ T5727] az6027: no front-end attached [ 213.785186][ T5727] [ 213.792582][ T5727] az6027: usb out operation failed. (-71) [ 213.799159][ T5727] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 213.810533][ T5727] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 213.815837][ T9] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 213.824362][ T5727] dvb-usb: schedule remote query interval to 400 msecs. [ 213.837156][ T5727] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 213.850669][ T5727] usb 3-1: USB disconnect, device number 34 [ 213.854964][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.875021][ T9] usb 2-1: config 0 has no interface number 0 [ 213.881401][ T9] usb 2-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x49, changing to 0x9 [ 213.895598][ T9] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 213.907264][ T9] usb 2-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 213.921452][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 213.935779][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.965684][ T9] usb 2-1: config 0 descriptor?? [ 214.009664][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 214.044022][ T5727] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 214.134763][ T1233] hub 4-1:0.0: activate --> -90 [ 214.225944][ T5724] usb usb38-port1: unable to enumerate USB device [ 214.582040][ T5726] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 98 failed: -71 [ 214.594040][ T5726] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 214.601369][ T5726] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 214.610841][ T5726] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 214.625901][ T5726] usb 1-1: USB disconnect, device number 44 [ 214.746860][ T10] usb 4-1: USB disconnect, device number 52 [ 214.783139][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 214.957521][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.975186][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 214.992209][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.018910][ T9] usb 3-1: config 0 descriptor?? [ 215.094192][ T6439] usb 2-1: Failed to submit usb control message: -110 [ 215.113731][ T6439] usb 2-1: unable to send the bmi data to the device: -110 [ 215.121089][ T6439] usb 2-1: unable to get target info from device [ 215.129506][ T6439] usb 2-1: could not get target info (-110) [ 215.141276][ T6439] usb 2-1: could not probe fw (-110) [ 215.242753][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 215.260071][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 215.311304][ T9] usb 3-1: USB disconnect, device number 35 [ 215.374571][ T8102] batadv_slave_1: entered promiscuous mode [ 215.423239][ T5724] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 215.582918][ T5724] usb 1-1: Using ep0 maxpacket: 8 [ 215.607997][ T5724] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 215.617898][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.627567][ T5724] usb 1-1: Product: syz [ 215.631936][ T5724] usb 1-1: Manufacturer: syz [ 215.637128][ T5724] usb 1-1: SerialNumber: syz [ 215.657615][ T5724] usb 1-1: config 0 descriptor?? [ 215.675326][ T5724] gspca_main: sq930x-2.14.0 probing 2770:930c [ 215.773169][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 215.945767][ T9] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 215.958447][ T9] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 215.972132][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 215.993565][ T9] usb 3-1: string descriptor 0 read error: -22 [ 216.002955][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 216.025559][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.301363][ T10] usb 2-1: USB disconnect, device number 38 [ 216.656670][ T8116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.705766][ T8101] batadv_slave_1: left promiscuous mode [ 216.706568][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.735243][ T8119] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 216.781455][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5013.0009/input/input38 [ 216.820320][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.977627][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5013.0009/input/input39 [ 217.191934][ T9] kye 0003:0458:5013.0009: input,hiddev0,hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 217.234033][ T5724] gspca_sq930x: reg_w 0105 0c00 failed -110 [ 217.249613][ T8121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.277667][ T5724] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 217.304307][ T8121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.678941][ T8128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.723413][ T8128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.898144][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 217.990404][ T8136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.066724][ T9] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 218.086288][ T8127] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 218.090669][ T9] usb 4-1: config 0 has no interface number 0 [ 218.126341][ T1233] usb 1-1: USB disconnect, device number 45 [ 218.139343][ T9] usb 4-1: config 0 interface 98 has no altsetting 0 [ 218.169775][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=48.03 [ 218.190077][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.208483][ T9] usb 4-1: Product: syz [ 218.217246][ T9] usb 4-1: Manufacturer: syz [ 218.233497][ T9] usb 4-1: SerialNumber: syz [ 218.251885][ T9] usb 4-1: config 0 descriptor?? [ 218.276219][ T8141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.286209][ T8141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.496944][ T1233] usb 3-1: USB disconnect, device number 36 [ 218.663111][ T5727] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 218.813063][ T5727] usb 2-1: Using ep0 maxpacket: 32 [ 218.827087][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.838361][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.848435][ T5727] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 218.858869][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.874123][ T9] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in warm state. [ 218.876428][ T5727] usb 2-1: config 0 descriptor?? [ 218.901456][ T5727] hub 2-1:0.0: USB hub found [ 218.907786][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 218.917159][ T1233] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 218.943912][ T9] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T) [ 218.965012][ T9] usb 4-1: media controller created [ 218.992261][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.044600][ T8150] x_tables: duplicate underflow at hook 1 [ 219.056795][ T8150] kAFS: unable to lookup cell 'ÿ' [ 219.083087][ T1233] usb 3-1: Using ep0 maxpacket: 32 [ 219.089832][ T1233] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 219.101461][ T1233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.101919][ T5727] hub 2-1:0.0: 1 port detected [ 219.117507][ T1233] usb 3-1: config 0 descriptor?? [ 219.327222][ T1233] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 219.338843][ T1233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.356807][ T1233] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 219.366663][ T1233] usb 3-1: media controller created [ 219.387937][ T1233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.580434][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.752'. [ 219.678891][ T8145] ------------[ cut here ]------------ [ 219.684505][ T8145] usb 4-1: BOGUS control dir, pipe 80003580 doesn't match bRequestType c0 [ 219.693068][ T8145] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#1: syz.2.752/8145 [ 219.703491][ T8145] Modules linked in: [ 219.707726][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.2.752 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.718504][ T8145] Tainted: [L]=SOFTLOCKUP [ 219.722855][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.732817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 219.734274][ T8145] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 219.743326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 219.748093][ T8145] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 219.775934][ T8145] RSP: 0018:ffffc90003d47948 EFLAGS: 00010246 [ 219.782239][ T8145] RAX: 0000000000000000 RBX: ffff888011c7d400 RCX: 0000000080003580 [ 219.790731][ T8145] RDX: ffff888021fb5980 RSI: ffffffff8c80bf00 RDI: ffffffff903d8840 [ 219.798824][ T8145] RBP: 1ffff1100eb8ef20 R08: 00000000000000c0 R09: 0000000000000000 [ 219.806816][ T8145] R10: ffffc90003d47a40 R11: fffff520007a8f54 R12: ffff88807c7a0100 [ 219.814835][ T8145] R13: ffff888075c77900 R14: 0000000080003580 R15: ffff888021fb5980 [ 219.822864][ T8145] FS: 00007fbae3ced6c0(0000) GS:ffff88812539f000(0000) knlGS:0000000000000000 [ 219.831826][ T8145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.838533][ T8145] CR2: 0000001b34b0bff8 CR3: 00000000676a0000 CR4: 00000000003526f0 [ 219.846544][ T8145] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 00000000000000a9 [ 219.854569][ T8145] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 219.862659][ T8145] Call Trace: [ 219.865994][ T8145] [ 219.868945][ T8145] ? __init_swait_queue_head+0xa9/0x150 [ 219.874613][ T8145] usb_start_wait_urb+0x13f/0x5b0 [ 219.880609][ T8145] ? rcu_is_watching+0x15/0xb0 [ 219.885707][ T8145] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 219.891272][ T8145] ? trace_kmalloc+0x2a/0xf0 [ 219.896125][ T8145] usb_control_msg+0x234/0x3e0 [ 219.900917][ T8145] dib0700_i2c_xfer+0xbb2/0xf80 [ 219.905826][ T8145] __i2c_transfer+0x79a/0x1f70 [ 219.910596][ T8145] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 219.916449][ T8145] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 219.922251][ T8145] ? i2c_transfer+0xc8/0x2d0 [ 219.926926][ T8145] i2c_transfer+0x1cc/0x2d0 [ 219.931459][ T8145] i2cdev_ioctl_rdwr+0x460/0x740 [ 219.936435][ T8145] i2cdev_ioctl+0x6a5/0x880 [ 219.940932][ T8145] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 219.945972][ T8145] ? __fget_files+0x3a0/0x420 [ 219.950651][ T8145] ? __fget_files+0x2a/0x420 [ 219.955306][ T8145] ? bpf_lsm_file_ioctl+0x9/0x20 [ 219.960265][ T8145] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 219.965350][ T8145] __se_sys_ioctl+0xfc/0x170 [ 219.969958][ T8145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.976132][ T8145] do_syscall_64+0x174/0x580 [ 219.980756][ T8145] ? trace_irq_disable+0x3b/0x140 [ 219.986139][ T8145] ? clear_bhb_loop+0x40/0x90 [ 219.990834][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.997013][ T8145] RIP: 0033:0x7fbae2d9ce59 [ 220.001432][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.021120][ T8145] RSP: 002b:00007fbae3ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.029571][ T8145] RAX: ffffffffffffffda RBX: 00007fbae3015fa0 RCX: 00007fbae2d9ce59 [ 220.037568][ T8145] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 000000000000000b [ 220.045579][ T8145] RBP: 00007fbae2e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 220.053585][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.061553][ T8145] R13: 00007fbae3016038 R14: 00007fbae3015fa0 R15: 00007fbae313fa48 [ 220.069564][ T8145] [ 220.072597][ T8145] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 220.079866][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.2.752 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.090634][ T8145] Tainted: [L]=SOFTLOCKUP [ 220.094953][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 220.104994][ T8145] Call Trace: [ 220.108278][ T8145] [ 220.111208][ T8145] vpanic+0x56c/0xa60 [ 220.115204][ T8145] ? __pfx__printk+0x10/0x10 [ 220.119807][ T8145] ? __pfx_vpanic+0x10/0x10 [ 220.124302][ T8145] ? is_bpf_text_address+0x292/0x2b0 [ 220.129578][ T8145] ? is_bpf_text_address+0x26/0x2b0 [ 220.134784][ T8145] panic+0xc5/0xd0 [ 220.138507][ T8145] ? __pfx_panic+0x10/0x10 [ 220.142946][ T8145] __warn+0x315/0x4c0 [ 220.146941][ T8145] ? usb_submit_urb+0x1053/0x18b0 [ 220.151970][ T8145] ? usb_submit_urb+0x1053/0x18b0 [ 220.156996][ T8145] __report_bug+0x29a/0x540 [ 220.161507][ T8145] ? usb_submit_urb+0x1053/0x18b0 [ 220.166523][ T8145] ? __pfx___report_bug+0x10/0x10 [ 220.171556][ T8145] ? lockdep_hardirqs_on+0x7a/0x110 [ 220.176755][ T8145] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 220.182560][ T8145] report_bug_entry+0x19a/0x290 [ 220.187397][ T8145] ? usb_submit_urb+0x1115/0x18b0 [ 220.192427][ T8145] ? usb_submit_urb+0x111a/0x18b0 [ 220.197459][ T8145] handle_bug+0xce/0x200 [ 220.201704][ T8145] exc_invalid_op+0x1a/0x50 [ 220.206210][ T8145] asm_exc_invalid_op+0x1a/0x20 [ 220.211047][ T8145] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 220.216696][ T8145] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 220.236308][ T8145] RSP: 0018:ffffc90003d47948 EFLAGS: 00010246 [ 220.242363][ T8145] RAX: 0000000000000000 RBX: ffff888011c7d400 RCX: 0000000080003580 [ 220.250421][ T8145] RDX: ffff888021fb5980 RSI: ffffffff8c80bf00 RDI: ffffffff903d8840 [ 220.258401][ T8145] RBP: 1ffff1100eb8ef20 R08: 00000000000000c0 R09: 0000000000000000 [ 220.266378][ T8145] R10: ffffc90003d47a40 R11: fffff520007a8f54 R12: ffff88807c7a0100 [ 220.274336][ T8145] R13: ffff888075c77900 R14: 0000000080003580 R15: ffff888021fb5980 [ 220.282312][ T8145] ? usb_submit_urb+0x10a4/0x18b0 [ 220.287359][ T8145] ? __init_swait_queue_head+0xa9/0x150 [ 220.292923][ T8145] usb_start_wait_urb+0x13f/0x5b0 [ 220.297971][ T8145] ? rcu_is_watching+0x15/0xb0 [ 220.302741][ T8145] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 220.308295][ T8145] ? trace_kmalloc+0x2a/0xf0 [ 220.312909][ T8145] usb_control_msg+0x234/0x3e0 [ 220.317706][ T8145] dib0700_i2c_xfer+0xbb2/0xf80 [ 220.322577][ T8145] __i2c_transfer+0x79a/0x1f70 [ 220.327338][ T8145] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 220.333164][ T8145] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 220.338983][ T8145] ? i2c_transfer+0xc8/0x2d0 [ 220.343581][ T8145] i2c_transfer+0x1cc/0x2d0 [ 220.348092][ T8145] i2cdev_ioctl_rdwr+0x460/0x740 [ 220.353032][ T8145] i2cdev_ioctl+0x6a5/0x880 [ 220.357541][ T8145] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 220.362563][ T8145] ? __fget_files+0x3a0/0x420 [ 220.367240][ T8145] ? __fget_files+0x2a/0x420 [ 220.371828][ T8145] ? bpf_lsm_file_ioctl+0x9/0x20 [ 220.376767][ T8145] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 220.381798][ T8145] __se_sys_ioctl+0xfc/0x170 [ 220.386414][ T8145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.392482][ T8145] do_syscall_64+0x174/0x580 [ 220.397073][ T8145] ? trace_irq_disable+0x3b/0x140 [ 220.402113][ T8145] ? clear_bhb_loop+0x40/0x90 [ 220.406791][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.412678][ T8145] RIP: 0033:0x7fbae2d9ce59 [ 220.417087][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.436700][ T8145] RSP: 002b:00007fbae3ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.445105][ T8145] RAX: ffffffffffffffda RBX: 00007fbae3015fa0 RCX: 00007fbae2d9ce59 [ 220.453079][ T8145] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 000000000000000b [ 220.461044][ T8145] RBP: 00007fbae2e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 220.468998][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.476971][ T8145] R13: 00007fbae3016038 R14: 00007fbae3015fa0 R15: 00007fbae313fa48 [ 220.484962][ T8145] [ 220.488451][ T8145] Kernel Offset: disabled [ 220.492767][ T8145] Rebooting in 86400 seconds..