last executing test programs: 24m32.877482736s ago: executing program 4 (id=201): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x4, 0x0, 0x500, 0x80, 0x0, 0x1, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) 24m32.413238204s ago: executing program 4 (id=202): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r2 = openat$cuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020}, 0x2020) wait4(r1, 0x0, 0x80000000, 0x0) syz_pidfd_open(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x3, &(0x7f0000000140)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x35, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x2f, 0x2, 0x1, "d569e8e1dd2f1ae97ee8d89301f40000000000000003fa4496ba21861e8ac11e"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_clone(0x1000000, &(0x7f0000000340)="94a8234e4cfc63aa618a83aeb1bc7e63a3adede0c856bcb86d09687900a49aa0d3f0ae9f71b7862fa6cb8f1389b8e9a1192c72a6ce33f96c0ad3d51e0d93d443eed0de156264401f311bff98238226b3acd5db1f298aa498448aa19161e8a725f4db2a79c3e7553653d68619bbe19d6227a39d488228070005d44757975279fd53b1cf252f847e7d6eec5232f34c80215ca7929200b6673ebcf0d2783ecfbddc5c1388dfbeead8409da7d44e6d1c8402751faf1336975fb18270d23d0fe887eebeeea94ce4ea13f96cdc051c4602", 0xce, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000500)="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") ptrace$ARCH_SET_GS(0x1e, r8, &(0x7f0000000240), 0x1001) r9 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000480)='s\xb5\x18\xf4\xd2Xr\x9a\x8b\x98c\x93y7ource', &(0x7f0000000980)='\\\\\xe9\x838\x9d<\f\x91\aM\v\x00\x00\x00A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18\xf2\x8e\x9a\xc0\xb09Bl{\x82\\\xbeA\x17\x00\x00\x00\xc1\xdf\xc2\xd9\x8c]\xe5P\x93\xd1+M|\xa4\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x02+\xb4\xc0\x9b\xf8Nt\xf0\x9fV\xf3\x03XV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea{?IO\xdf\x14+\xcd\xe66\x0f\xb6\xb1$i\x11tO\x86j%\xb1\x1d0}a)\xb4\xa9C\xad\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x13\xe1\xcf\xc0\x8c\x93\xbe\xac\x91W\x12\am\xf7_~\t\xe1\x1b\xe1\xe2\xdd}v\xa3\x00x\xa7\xc8h\xa7\xb9\xd4\x1c\x92\x16r\xed\xc2\xd2E\xf5\xa9i\xf5mj-K\xbf)82\x9b\"\r\"\xc4\x1cv\xd1\f{\xc7\x04H\\Z\xdb\xc4G\x85\xd6\x12\x80\xe1cX2\xcc\xe8\xb5\xb1\x03y\xaf\xab\x80\b\x8eGy!\x89\x8d\x88\xa5\xd5\x7f\xa7\xcb\x81!\x985\xb7U\xc7\xdb\xea&\xdf\x14\xacB&c)\xe65J\x80\xa4c\xa7w\x1f8UdWK/x\xbe\xa8\xe3^x\xc6\xe1\\\x88~\xd3/)B\x7f\xad\x85I\x8c\xc6^\a\'*F\x95\x8a\x86\xcc\xc8\x90\x82\x91\xf7\xd8\xe0Q`\x86\x80\x95\x01\xe3J\x05\xa8\xd0~\x91\x0e\xef5\xbc\xe4\xf0\xfc\'\x1c\xe0]\xb2\xb1Bv', 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000001500)=ANY=[@ANYBLOB="2740997eda5e389efd33df62005259022408680a9696b2c8399a8a800804102a78614c7ef6c1699629e8cf9673ed5e9004417f73a672742f4a645be0321ef3cda6c4a658e8adb96ced40ad04e1596f2b16331173313d5c92d530abf2f8fae886dd7ab514f1a71334eb2b9aa2932bd08eb1c40ee4995d4c4f5caa", @ANYRES8=r8, @ANYRES8=r7, @ANYBLOB="e02149f3a479bfa170b2c857b1aefed1c87d641b378c58ef2b1bfb8714ccf0b8102ce1321fd0097128063ead095ffafcc065daac36a27bb87b52867423c4aed897983406cd9af5347c36887d2286205d5827f0e127d706d51ca443d775c3c62baae8f7e6b664f5c67b025cd04f006adca38314731fe9549583785ed8e7bd01f62cfccdc481a9ae065ca6678461a51060d965959b9c1d554fb897e139866c129ebd3582635abdaf65142d2cb082f006c4836192b3c0aa76"]) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_mr_vif\x00') preadv(r11, &(0x7f0000003400)=[{&(0x7f0000000000)=""/83, 0x53}], 0x1, 0x200037, 0x4b3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x8, 0x0, 0x0, 0x8}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x1, 0x3, 0xf5, 0x3}, {0x6, 0x6, 0x5, 0x2}]}) 24m31.226279794s ago: executing program 4 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x10001, 0x28d, {{0x18, 0x4, 0x3, 0x8, 0xfffffffffffffff4, 0x6f, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x4c, 0xf, 0x1, 0xd, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xfffffffe}, {@remote, 0x7ff}, {@empty, 0x45d}, {@multicast2, 0x1}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7f}, {@empty, 0xc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/557, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000001c0)={0x3000, 0x101000, 0x28}) 24m30.240329813s ago: executing program 4 (id=212): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 24m29.586631189s ago: executing program 4 (id=214): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x3}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f86dd", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 24m27.843983648s ago: executing program 4 (id=219): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x2}]}, 0x8) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x6f) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x80, 0xa, 0x7ff, 0x5, 0x0, 0xf421, 0x0}) fsopen(0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000100), 0x94600, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r6, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000580)="81", 0x1, 0x10, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, 0x1c) accept4(r7, 0x0, 0x0, 0x800) 24m27.196550054s ago: executing program 32 (id=219): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x2}]}, 0x8) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x6f) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x80, 0xa, 0x7ff, 0x5, 0x0, 0xf421, 0x0}) fsopen(0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000100), 0x94600, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r6, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000580)="81", 0x1, 0x10, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, 0x1c) accept4(r7, 0x0, 0x0, 0x800) 21m5.803487804s ago: executing program 5 (id=1038): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 21m5.751803973s ago: executing program 5 (id=1041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000017020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x0) (fail_nth: 12) 21m5.351675608s ago: executing program 5 (id=1042): setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) unshare(0x2c020400) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) 21m5.281418573s ago: executing program 5 (id=1043): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb1, 0x0, &(0x7f0000000200)=0xff) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000000000000000800450000240000e0000001"], 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 21m5.173262789s ago: executing program 5 (id=1044): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e20, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8d69cdbd9d470f56c7ae4218d32c5d7fe44d5f0272890f24383fe450fb26ea7dcefadfa5e48e3bcf5693d"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000)=0x102, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="080000001000030500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030004000000"], 0x48}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x3d5}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="f0", 0x1}], 0x1}}], 0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 21m4.840053422s ago: executing program 5 (id=1047): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) unshare(0x24060400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fsmount(r2, 0x1, 0x1) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000000180)={0xc, &(0x7f0000000080)={0x20, 0x22, 0x70, {0x70, 0x9, "cb7215a920be660610dde16801fddefe52fd32956a8c2f73d08e9ccbbadd268802cee5da671a287e4c54d611e5a4452db5f2dc4fcf4a1f6eaf22d2417071e5291559d85582a46037c695240821c4a18c8997f323f97468ab4539133a8eed2c6f3a58dc72e5541c4c45436305975d"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="20126b000000ad7d540c7f0d9da85b054c7886e42af4254cffbf51b312cd8b83f812f65d3f55f1f9777c49460efd40756bcbfc179903e0a09d2237b8eca82f0952d1fecc9c5105ec8f8868316888a393f7784a0727f7706daf3f504f2294b32ebb0a39f6e7c88cab936fb27378c97e12cff13a3466b60200000011c32ed19ea49fd766de9745a670ad77b0b27981be81e2aae3a81993df"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x0, 0xe3, {0xe1, "f859646280d6a7e8fa48372f8d9d3b2efb186cb933ccb7aaac34ed7a37b6c7230882c27b31aa07b5c4621e81d9d9a193b4dc28713a80c1b427d31220f1460e0ac485926c61c07662efa686a8dd31a53e75ccbac62d7963118a85a387abe2aea96d67f45482ef9f7cc3b8bd0c3876e07246fceda1b4c97935137c6824a5244e21614a80db1aec78122cb87f75fe7f1c5fb6a22a8ca7efe770edfc041839a3c7e3afb7890725b1d4d01351622f102c8fed33dff7b197c8946524eeb5c2572e1329d84766fa8e1693f00ff2dcb21ad474344a0c94e69d7a215162732b1edb1cd33aa7"}}, &(0x7f0000000140)={0x20, 0x1, 0xfffffe94, 0x9}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x34}}) 21m3.720912575s ago: executing program 33 (id=1047): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) unshare(0x24060400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fsmount(r2, 0x1, 0x1) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000000180)={0xc, &(0x7f0000000080)={0x20, 0x22, 0x70, {0x70, 0x9, "cb7215a920be660610dde16801fddefe52fd32956a8c2f73d08e9ccbbadd268802cee5da671a287e4c54d611e5a4452db5f2dc4fcf4a1f6eaf22d2417071e5291559d85582a46037c695240821c4a18c8997f323f97468ab4539133a8eed2c6f3a58dc72e5541c4c45436305975d"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="20126b000000ad7d540c7f0d9da85b054c7886e42af4254cffbf51b312cd8b83f812f65d3f55f1f9777c49460efd40756bcbfc179903e0a09d2237b8eca82f0952d1fecc9c5105ec8f8868316888a393f7784a0727f7706daf3f504f2294b32ebb0a39f6e7c88cab936fb27378c97e12cff13a3466b60200000011c32ed19ea49fd766de9745a670ad77b0b27981be81e2aae3a81993df"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x0, 0xe3, {0xe1, "f859646280d6a7e8fa48372f8d9d3b2efb186cb933ccb7aaac34ed7a37b6c7230882c27b31aa07b5c4621e81d9d9a193b4dc28713a80c1b427d31220f1460e0ac485926c61c07662efa686a8dd31a53e75ccbac62d7963118a85a387abe2aea96d67f45482ef9f7cc3b8bd0c3876e07246fceda1b4c97935137c6824a5244e21614a80db1aec78122cb87f75fe7f1c5fb6a22a8ca7efe770edfc041839a3c7e3afb7890725b1d4d01351622f102c8fed33dff7b197c8946524eeb5c2572e1329d84766fa8e1693f00ff2dcb21ad474344a0c94e69d7a215162732b1edb1cd33aa7"}}, &(0x7f0000000140)={0x20, 0x1, 0xfffffe94, 0x9}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x34}}) 14.043543313s ago: executing program 1 (id=5600): r0 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0xaa, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x2}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000111100fc020000000000000000000000000000000000000100000e2200119078a1f800001f0409a9e400"/71], 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000040)={r8, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x39, 0xfffe, 0x200, 0xfffffffd, 0x4, 0xfffffffc, 0xfffff001, 0x7f42685e, r8}, &(0x7f00000001c0)=0x20) socket$netlink(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) 10.501180791s ago: executing program 1 (id=5611): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x4000005, 0x3, 0x6b, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x14, 0x119, 0xfffffffd, 0x0, {0x1, 0x6}}, 0x14}}, 0x20000000) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(r5, &(0x7f0000001600)=[{&(0x7f0000001380)="fd", 0x1}], 0x1) syz_usb_connect(0x4, 0x38, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES8=0x0, @ANYRES64=r0], 0x0) 9.946823214s ago: executing program 2 (id=5613): unshare(0x6a040000) r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000004a80)=""/4083, 0xff3}], 0x1}}], 0x1, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f0000000080)) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000034c0)="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", 0x7fa}], 0x1}}], 0x1, 0x9200000000000004) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x9, 0x402) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 8.542221902s ago: executing program 1 (id=5618): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000180), 0x1004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xd0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x80) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000076, 0x0, 0xb}]}) 8.403266431s ago: executing program 3 (id=5619): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x2, 0x1, 0x6, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xb3a9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0xff, 0x6}, {0x6, 0x24, 0x1a, 0xc, 0x14}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x9, 0x5, 0x58}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x2, 0xa9, 0xc, 0x9, 0x3}, @acm={0x4, 0x24, 0x2, 0x2}, @acm={0x5c}, @acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0x44, 0x24, 0x13, 0x80, "ae0d62dced1e43f3661806f2f73f4b9c36d86a093869c2cd3c8b264833bfbdcb10547b267c48acfc0657fbf61a64cad281fd82d136aed1be294c5ca5efb29cda"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x3, 0x7}}}}}}}]}}, 0x0) r0 = syz_usbip_server_init(0x4) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/152, 0x98}], 0x1, 0x5, 0x7) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x21, r1, 0x80000001, 0xfa2) r2 = syz_usb_connect(0x0, 0x130, &(0x7f0000001040)={{0x12, 0x1, 0x141, 0x74, 0xec, 0x6d, 0x20, 0x2294, 0x425b, 0xeeed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11e, 0x2, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xa, 0x3b, 0xea, 0x46, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x7f}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x3fc, 0x1, 0x4, 0x1}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0x6, 0x6}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x4, 0x48}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x8, "c7"}]}], [{{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x8, 0x1, 0x5, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x40, 0x5, 0xaa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xf18}, @generic={0x2, 0x1b}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0xa4, 0x1, 0x7, [@generic={0x1b, 0xc, "657a574a9fc1bee1b4e208c22f005b3769ca4de093cca835cc"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x9, 0x81, 0x7f, [@generic={0x2, 0x22}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x44, 0x6, 0x9, [@generic={0x2, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0xc, 0x2, 0x2}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x6, 0xa, 0xda, [@generic={0x2, 0x22}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xa}]}}, {{0x9, 0x5, 0x10, 0x0, 0x187, 0x14, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x8, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x7, 0xf5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x7}]}}]}}, {{0x9, 0x4, 0x6a, 0x89, 0x0, 0xff, 0xff, 0xff, 0x3, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'u'}, {0x5, 0x24, 0x0, 0x9475}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x2b}, [@country_functional={0x8, 0x24, 0x7, 0x8, 0xb, [0x1]}, @mdlm={0x15, 0x24, 0x12, 0xce}, @dmm={0x7, 0x24, 0x14, 0x6, 0x1}]}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) shmat(0x0, &(0x7f000000b000/0x2000)=nil, 0x4000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x1, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0xfe, 0x0, 0x5f, 0x9, 0x0, 0xa6, 0x3, 0x25, 0xfe}, {0xfffffffc, 0xffff, 0x0, 0x2, 0xff, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000001000}, {0xff, 0x6a, 0x0, 0x8, 0x4, 0x1, 0x4, 0xfe, 0x5, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x400, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000, 0x80}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x1c0) syz_usb_connect$uac1(0x5, 0xe1, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0x75, 0xb0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x6f}, [@extension_unit={0xa, 0x24, 0x8, 0x2, 0x1, 0x1, "b9eaf0"}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x0, 0xc8, "000e45513c8c"}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x1, 0x4, "a27f2f35"}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0xd, 0x3, "e3f844c86e"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x5, 0x4, 0x2}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0x4, "9e2017"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x4, 0x2, {0x7, 0x25, 0x1, 0x1, 0x2, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xc, 0x3, 0x40, 0x9d, "a6c308", "e3"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x5, "54a49d"}, @as_header={0x7, 0x24, 0x1, 0x60, 0x3}, @as_header={0x7, 0x24, 0x1, 0x2, 0xc, 0x1001}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0xb, 0x5, "3ade", '2g'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xa7, 0x8, 0x5, {0x7, 0x25, 0x1, 0xc2, 0x40, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x8, 0x4, 0x5, 0x10, 0x1}, 0x40, &(0x7f00000003c0)={0x5, 0xf, 0x40, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "e27ddc1c10a87ccf7e911384f53db2f2"}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x5, 0xf00, 0x9, [0x3f00, 0xc0, 0xfe8000, 0xc0, 0x0, 0xf]}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x43f}}]}) 8.33753316s ago: executing program 2 (id=5621): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 8.161253396s ago: executing program 0 (id=5622): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x11d3}}, './file0\x00'}) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x108, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0xdc, 0x4, 0x0, 0x1, [{0xb0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x9c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x90, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8c, 0x1, "6d758ba4d6e6f6e72f2ead4ca147b1299ebe071341bedaa2d5564a5a7309caa8eeced3caa20524bb3b5f819f13288d3f2086bf643cb1e0ed5f2647d53822bb5e26d1b70985c584cf8b68c857fafa3afd76683243ba9d3a4391063c4b1e5dcedb0f780bc007f129ffecb1f7e0a107bd3968e0548d7a856a8964132189f594aaac9879f753a4a959b7"}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x130}}, 0x0) 8.134091681s ago: executing program 2 (id=5623): syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000001cc0), 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400001, 0x0, 0x3, 0x4, 0x310, 0x1000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[], 0x0) 7.943334556s ago: executing program 0 (id=5624): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x10, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000060603000000000000000000010000030900020073797a32000100000900030073797a32000000000900020073797a3200000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000845}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0x1, &(0x7f0000000240)="0aaa37561cfafc48751a7fbd82e6e81fecfd93d599c79cbecf2a7b90fc47909e3f51ed10e706fa3f4bf0651d7f4d914b50e0d35ad43faeb32e7bd07d20c34de9519e3dcb64559d329edfe787a28064017db7313d", &(0x7f00000002c0)=""/211}, 0x1c) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000180)=0xffff0018) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000fbdbdf250a80800000002af712e62ce48fe9c8f100000000"], 0x24}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000), 0x0, 0x1e}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_io_uring_complete(r7) 6.728016831s ago: executing program 0 (id=5625): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "010400"}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0xfffffffd, 0xffffffff, 0x6f94, 0x6, 0xa45a2b2e, 0x7fff}) 6.185178305s ago: executing program 3 (id=5626): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000480)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @local, 0x0, 0x0, 0x2, 0x1000, 0x7, 0x6, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000280)=0x1800009, 0x48) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) r7 = socket(0x1e, 0x4, 0x0) sendfile(r7, r6, 0x0, 0x8010002b) close(r0) 5.299683384s ago: executing program 1 (id=5627): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000480)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @local, 0x0, 0x0, 0x2, 0x1000, 0x7, 0x6, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000280)=0x1800009, 0x48) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) r7 = socket(0x1e, 0x4, 0x0) sendfile(r7, r6, 0x0, 0x8010002b) close(r0) 4.923975398s ago: executing program 2 (id=5628): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x48a2}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000100)=""/83, 0x53}, {0x0}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f00000007c0)=""/162, 0xa2}], 0xa}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x60000100, 0x0) 3.959556801s ago: executing program 2 (id=5630): r0 = io_uring_setup(0x70c3, &(0x7f0000000040)={0x0, 0x2c43, 0x0, 0x1, 0x2}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) r2 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) close_range(r0, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r4, 0xfffffffffffffffd, 0x1) fcntl$lock(r4, 0x5, &(0x7f0000003980)={0x0, 0x1, 0x9, 0x4}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r1, 0x0, 0x200008d0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.770256349s ago: executing program 6 (id=5631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0xe03, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x15, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) 3.577212206s ago: executing program 0 (id=5632): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8fbad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x8000) r3 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@ax25={{0x3, @netrom}, [@rose, @remote, @rose, @bcast, @default, @bcast, @default, @bcast]}, &(0x7f00000000c0)=0x80, 0x80000) sendmsg$inet(r3, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 3.576717998s ago: executing program 6 (id=5633): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.349856036s ago: executing program 6 (id=5634): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) stat(&(0x7f0000019080)='./file0\x00', &(0x7f00000190c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000240)=""/9, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x101602, 0x3, 0x1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_IOCTL(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001440)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) 2.256072392s ago: executing program 6 (id=5635): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) read$FUSE(r1, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000900)={0x0}) pselect6(0xa0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80000000000300, 0x0, 0x0, 0x4, 0x80000000000}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={@loopback, 0xcda4f8a06b4901a0, 0x0, 0x50, 0x0, [{@dev}, {@initdev}, {@dev}, {@broadcast}, {@remote}]}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x4000) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x3e, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x48a2}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000100)=""/83, 0x53}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f00000007c0)=""/162, 0xa2}], 0xa}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x60000100, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x3c, r7, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x4, &(0x7f0000006680)) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf256a0000000500d200010000000a000600080211ffffffffff00000a00060008021100000000000a000600ffffffffffff0000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8d1) 2.072284217s ago: executing program 1 (id=5636): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) dup(r0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x356}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x41}, 0x1}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff000008"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc01000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000080000000000000000000000000000000000000000009000000000000000800000000000000000000000000000000000000000000000000000000000000010000080000000000000000000000008000000000000000000000000000000000000000000000000100000344010500ac1414aa000000000000000000000000000000003200000000000000ac14143b0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000002b00000000000000fe80000000000000000000000000000000000000000000000008ecffffffffffffff000020010000000000000000000000000001800004d43200000000000000fe8000000000000000000000000000aa0000800003000000000000000000000000000000ff0100000000000000000000000000010000000033000000"], 0x1fc}}, 0x0) 1.96509896s ago: executing program 3 (id=5637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8040) 1.817923129s ago: executing program 0 (id=5638): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xb10e66ae4b996507, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff7ab5}, 0x94) rt_sigaction(0x4, &(0x7f00000000c0)={0x0, 0x80000003, 0x0, {[0x2, 0x3f1]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,allow_other,subj_type=:,smackfstransmute=group_id,fsmagic=0x0000000000000002,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=system_u,appraise_type=imasig,uid>', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c280000500060004000000"], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1f10c0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000500)={0x0, 0x200, 0x0, 'queue0\x00', 0xf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x1, 0xaf, 0x2, 0x2}, 0x802}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000d00000000000001008989b490a6a7740000040000007511000000000000caaee907cdb53f47bca9760e12098cf9e6960cba4f9a3ab7c0ac39a1f37e1ffb3ece52be64555917c99abe3d9a8da1fd175ed80da4184fe22f799c57ba917391417c19834c86a3e05129d9b90ff50c03afdcaaa808dbcddc8a9558e44e75b8b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000304fcffffff3fda487b58b4d1c3bf1b000000008000004020793831cf933c772bc1adb23409cc07", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000348028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a45323, &(0x7f00000005c0)={{0x3, 0x3}, 'port1\x00', 0x53, 0x0, 0x3, 0x3ff, 0x8, 0x5, 0x10000, 0x0, 0x0, 0x6}) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x29, 0xfd, @time={0x9, 0x4}, {}, {}, @addr={0xfa, 0x5}}], 0x1c) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) 1.425236877s ago: executing program 3 (id=5639): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xac0e, 0x0, 0x210000, 0x3e}, &(0x7f0000000000)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000000}) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) write$cgroup_type(r0, &(0x7f0000000040), 0x4) 1.421866941s ago: executing program 1 (id=5640): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) write$FUSE_INIT(r0, &(0x7f0000002b40)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xebc0, 0x2000c1, 0x9, 0xb156, 0x101, 0x4, 0x0, 0x0, 0x2, 0x6}}, 0x50) ppoll(&(0x7f0000000180)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0x3, 0x5, 0x1011, 0x6, 0x8, 0x1, 0x2, 0x2}}) sendmmsg$inet_sctp(r0, &(0x7f0000000080), 0x0, 0x40011) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=@routing={0x2f, 0xc, 0x1, 0x40, 0x0, [@mcast2, @empty, @mcast1, @loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, 0x68) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000400)=@multiplanar_mmap={0x9, 0x4, 0x4, 0x0, 0x6, {}, {0x3, 0x18, 0x43, 0x4, 0x9, 0xfd, "1b90b9ed"}, 0x4, 0x1, {0x0}, 0x8}) close_range(r4, 0xffffffffffffffff, 0x2000000000000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000000b06010300005c89249261b65124000805000100070000000900020073797a3100000000100007800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x30000001}, 0x4880) 1.276566397s ago: executing program 3 (id=5641): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000001100)=0x8000002, 0x4) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@host}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000240)={&(0x7f0000001240)=[0x7, 0x5c, 0x6, 0xacbc, 0x6, 0xe, 0x5, 0x7, 0x10, 0xa, 0x4821, 0x5, 0x0, 0x81, 0x2, 0x7, 0xfffffffd, 0x9, 0x800, 0x8, 0x2, 0x4, 0x0, 0x1, 0x0, 0x12c16fb0, 0xfffffff0, 0x7, 0x83, 0x0, 0x0, 0x6, 0x0, 0xb, 0x401, 0x5, 0x3, 0x9, 0x9d3, 0xfff, 0x272, 0x6, 0x8, 0x2f9c, 0x1, 0x3, 0x6, 0x5, 0x0, 0x6, 0x800, 0x4, 0x2, 0x9, 0xd71c, 0x5, 0x6, 0x8, 0x4, 0x8, 0xaf99, 0x7, 0x9, 0x7, 0x0, 0x120, 0x4, 0x8000, 0x1, 0xd, 0x47, 0x99, 0x9b1, 0x2e4, 0x1, 0xc, 0x4, 0x5, 0xd2, 0x1000, 0x515, 0x9, 0x5, 0xffff, 0x2cb, 0x7fffffff, 0x9, 0x10001, 0x9, 0x1, 0x927a, 0x3, 0x8, 0x7ff, 0xb, 0x1, 0xa, 0x214, 0x3ff, 0x4d5, 0x9, 0xf7, 0x3, 0x3, 0x5, 0x1004, 0xffff, 0x1, 0x4, 0x4a0f9eb0, 0xffffffff, 0x4, 0xfff, 0x0, 0x5d, 0xfffffff8, 0x200, 0x4, 0x400, 0xe, 0x62, 0x3ff, 0x9, 0x2, 0x81, 0x0, 0x3, 0x9, 0x7, 0x5, 0x20, 0x2204, 0xfffffffd, 0x337f, 0x5, 0x6, 0x4, 0x8187, 0x6, 0x148, 0xffffffff, 0x5, 0x383, 0x5, 0xf8, 0x9, 0x6, 0xfffffff8, 0x5, 0x4e528e6a, 0x6265, 0x5, 0x9, 0x6, 0xffffffff, 0xb, 0x7f, 0x9, 0x8000, 0x871f, 0x0, 0x1c58, 0x9, 0x1, 0x2f, 0x9, 0x6, 0xc1, 0x8, 0xc50, 0x54, 0x9, 0x4, 0x8, 0x4, 0x0, 0xb13, 0x80, 0x486, 0x9, 0xfffffffb, 0x0, 0x7fff, 0x1, 0x208, 0x73c9, 0x6, 0xd9, 0x10001, 0xc9f, 0x7, 0xf, 0x9, 0xffffff01, 0x8, 0x9, 0x401, 0x4, 0x1, 0x81, 0x2, 0xfffffffb, 0x6, 0x5, 0x4, 0xb, 0xffff30d6, 0x5e465a8e, 0x8, 0x9, 0x5, 0x5, 0x3, 0x4, 0x100, 0xc96, 0xdb2c, 0xc64, 0x8, 0x4, 0x7, 0x7, 0x757, 0x2, 0x8, 0x8, 0x1, 0x2, 0x7, 0x1, 0xb78, 0x1000, 0xf780, 0x8000, 0x800, 0x2, 0x4, 0xb93, 0x3, 0xa, 0x978, 0x7, 0x8, 0x10, 0x1, 0x3, 0xf12, 0xfff, 0x4, 0x9, 0x401, 0x8, 0xcbd, 0x7, 0xf0000000, 0x7, 0x2, 0xffffff53, 0x1, 0x6, 0x4, 0x3ff, 0x5, 0x5, 0x1000, 0x0, 0x0, 0xb, 0x3, 0xf7d, 0x9, 0x5, 0x0, 0x51, 0xff, 0x3, 0x7fffffff, 0xfcfe, 0x80000000, 0xf, 0x0, 0x2, 0x2, 0x4, 0x8, 0xf, 0x8, 0x84, 0x9, 0x6, 0x8000, 0x5, 0xb936, 0x3, 0x8, 0x3, 0xffffffff, 0x8, 0x1, 0x0, 0x2, 0x6, 0x9, 0x3, 0x3, 0xfffffffc, 0xa3a, 0x7, 0x5, 0x10001, 0x4, 0x1, 0x4, 0x8, 0x7, 0x0, 0xf, 0x0, 0x4, 0x2559, 0x1, 0x7, 0x3, 0x9, 0x6, 0x0, 0xd8000000, 0x4c, 0x1, 0xdd, 0x0, 0x1, 0x800, 0x2, 0x1, 0x3, 0xfff, 0x0, 0xffffffff, 0x3, 0x8f, 0x6, 0x5, 0x7f, 0x401, 0x78c, 0x7ff, 0x3, 0x1ff, 0x396, 0xffff, 0x6, 0x4a, 0xfffffffd, 0x56, 0xfd, 0x6, 0x2, 0x4, 0x4, 0x6, 0x4, 0x401, 0x6, 0x9, 0x101, 0x2, 0xffffffff, 0xffff, 0x8c, 0x8, 0x4, 0x4, 0x6, 0x7ff, 0x5, 0x7, 0xffffffff, 0x5, 0x28a03838, 0x9, 0x800, 0x7f, 0x2000, 0x0, 0x7, 0x5, 0x5, 0xffffff84, 0x2, 0x4, 0x3, 0x10, 0x42, 0x4, 0x0, 0x8001, 0x6, 0x8, 0xfffffffb, 0x6, 0x3, 0x7fff, 0x3, 0x9, 0x9, 0x800, 0xb40, 0x0, 0x5, 0xb34f, 0x5, 0xf, 0x5, 0x10, 0x4, 0x56, 0x1, 0x2, 0x0, 0x9, 0xfffffff9, 0x63, 0xff, 0x9, 0x0, 0xfffffffc, 0x10001, 0x6, 0x1000, 0x7, 0x8, 0x6, 0x81, 0x0, 0x400, 0x4, 0x79, 0x0, 0xb, 0x3, 0x7, 0xfff, 0x5, 0x8, 0x2, 0x2, 0xfffffffc, 0xbc, 0x89e, 0x0, 0xfffffff8, 0x2, 0x80000000, 0xffff275a, 0x3, 0x5, 0x80, 0x0, 0x4, 0xb, 0x3, 0x245, 0x4, 0x7, 0x10, 0x7, 0x7, 0x1ff, 0x8001, 0x65, 0x4, 0x914, 0xfffffffd, 0x2, 0x2f, 0x5, 0xb15, 0x9, 0x2, 0x4, 0xd, 0x8, 0x0, 0x8, 0xd7, 0x6, 0xa00000, 0x0, 0x0, 0x80, 0x0, 0xffff, 0x8, 0x8, 0x1, 0x0, 0x280000, 0x480, 0x9, 0x9, 0x45, 0x9, 0x3, 0x10, 0x48c, 0x5, 0x6, 0x2, 0x5, 0x401, 0x8, 0xe, 0x3, 0x2, 0x0, 0xc683, 0x7, 0x2, 0x9, 0x7ff, 0x9cb, 0x7, 0x860, 0xff, 0xa8, 0x8, 0x8, 0xb, 0x7, 0x800, 0x1, 0x7fffffff, 0x80, 0x5, 0x6, 0xfffffff2, 0x10, 0xf, 0x2, 0x10000, 0xeca5, 0x5, 0x8000, 0x2, 0xd, 0x160, 0x1, 0x99, 0x1, 0x800, 0x7, 0x7f, 0x753018e3, 0x3, 0x80000000, 0x4, 0x2, 0x36, 0x0, 0x5, 0xfffffff7, 0x7, 0x542, 0x40, 0x8fd3, 0x1, 0x7, 0x6, 0x1, 0x81, 0x40, 0x5, 0x0, 0x8, 0x0, 0x6, 0x9, 0x2, 0xe07, 0x4, 0x5, 0xfffffffb, 0x7, 0xa7e, 0x3ff, 0x7, 0xfffffff8, 0xfffffff5, 0x8, 0x7, 0xff, 0x0, 0x4, 0x3, 0x3, 0xffffffff, 0x2, 0x8e, 0x0, 0x1ff, 0x8, 0x7, 0x4, 0x3c0b, 0x5, 0x2, 0x80000001, 0x8001, 0x10, 0x9, 0xf, 0x8001, 0x7, 0x8, 0xf, 0x801, 0x3, 0x6, 0x400, 0x81, 0xf0, 0x0, 0xfffff801, 0x6, 0x2, 0x5, 0x6, 0x6, 0x7, 0xfffffff9, 0x5, 0x200, 0x72, 0xae66, 0x32, 0x7, 0x6, 0x47, 0x7, 0x3000000, 0x3, 0xbbfb, 0x2f, 0x1, 0x6a, 0x3, 0x9, 0x0, 0x4, 0x6, 0x8c, 0x0, 0xffff0000, 0x20ff, 0x1, 0x8, 0xff, 0x6, 0x5, 0x325, 0x6, 0xfffff37c, 0x0, 0x401, 0x2b8, 0x80000000, 0x400, 0xdf4, 0x3, 0x0, 0xffffffff, 0x4, 0x1, 0xffff8000, 0x7, 0x9, 0x81, 0x9, 0xd80f, 0x9, 0x9, 0x7, 0x4373, 0x1000, 0x68, 0x3ff, 0x7, 0x8000, 0x9, 0x38, 0x7, 0xc, 0xfffffffb, 0xc, 0xa3, 0x0, 0x848d, 0x1, 0x1, 0x7ff, 0x7, 0x6, 0x0, 0x7ff, 0x7, 0x0, 0x8000, 0x8, 0xca1, 0x2, 0x1, 0x814, 0x2, 0x8, 0x2, 0x4, 0x15e, 0x8, 0x1, 0x0, 0x3, 0x7, 0x9, 0xfffffff9, 0xe, 0x4, 0x0, 0x6, 0xfffffff6, 0x5, 0x1ff, 0x8, 0x9, 0x2, 0x2, 0xa, 0xfffffff2, 0x9a8, 0xfffffffb, 0xffff, 0xffffff3c, 0xffffffff, 0xffffff72, 0xffffb7e5, 0x2, 0x6, 0x8, 0xffffffa8, 0x0, 0xa23, 0x4, 0x800, 0x5, 0x1, 0x5, 0xb, 0x8, 0x1, 0x5, 0x8b, 0xf, 0x7, 0x7, 0x797, 0x4, 0x2, 0xfffffffb, 0x5, 0x5, 0x6, 0xfff, 0x3, 0xc47, 0x9, 0x4, 0x0, 0x4, 0x6, 0x5, 0x1, 0x2, 0x1, 0xd, 0x7ff, 0x8, 0x1, 0xf7, 0x6, 0x8, 0x1fee0, 0x4, 0x0, 0xbd8, 0x6d, 0x5, 0x0, 0x91, 0x7f, 0x6, 0xffffffff, 0x9, 0x3, 0x81, 0x80, 0x8, 0x3, 0x9, 0x1, 0x10001, 0x6, 0x4, 0x6, 0xf, 0xffff022f, 0x9, 0x2, 0x10, 0x8, 0x5, 0xa000, 0x10, 0xffff, 0x3ff, 0x9, 0x1, 0xfffffff9, 0x1, 0x7, 0x40, 0xffffffff, 0x1c0000, 0x6, 0x7fff, 0x8851, 0x200, 0x2, 0x200, 0x401, 0x5, 0x9, 0x1, 0xfd, 0x0, 0xa3, 0x5, 0x9, 0xffffffc6, 0x4, 0xffffffff, 0x18, 0x99, 0xffff, 0x8, 0x3ff, 0x8001, 0x80000001, 0x2, 0x3, 0x3, 0x8, 0x2, 0x47061a20, 0x0, 0xfffffc00, 0x7, 0xe09, 0xffff, 0xffff1109, 0x0, 0x8, 0x2, 0x3, 0x6a, 0xa, 0x9, 0x8, 0x6, 0xfffffff7, 0x3, 0xfffffff8, 0xfffffffe, 0x8, 0x9, 0x9, 0x7, 0x4, 0x4, 0x0, 0x4, 0x9b48, 0x5, 0x1, 0x2, 0xfffffe00, 0xb, 0x80, 0x6000000, 0x15, 0xfff, 0x2, 0x5, 0x9, 0x200, 0x1, 0x8, 0xd4, 0x5, 0x6, 0x7, 0xb8d, 0xcb3, 0x0, 0x1, 0xfff, 0x3, 0x80000000, 0xfffffffb, 0x9, 0x1000, 0x7, 0x6, 0x2, 0x9, 0x7ff, 0xc, 0x3000, 0x1, 0x1, 0x101, 0x80000000, 0x9, 0x401, 0x401, 0x9c, 0x0, 0xea9, 0x6, 0x1, 0x0, 0x6, 0x5, 0x5, 0x79, 0x80000001, 0x3, 0x7, 0x3, 0xfff, 0x9, 0x80000001, 0x1, 0xf3c, 0x4, 0x4, 0xb, 0xfffffff7, 0x5, 0x3, 0x1, 0x9, 0x8, 0x1, 0x7fff, 0x1, 0x7, 0x4, 0x9, 0x10, 0x0, 0x4, 0x1, 0x3, 0x8cd0, 0x9, 0x1, 0x8, 0x5, 0x8000, 0x9, 0xf, 0x2, 0x1ff, 0x7, 0x23c7f1ae, 0x4, 0x0, 0xe, 0x2, 0x8, 0x6, 0x8, 0x2, 0x7, 0x6, 0x37, 0x2, 0x9, 0x5, 0x1, 0x6, 0x1, 0xc, 0x7fff, 0x10f, 0x200, 0xd, 0x400, 0x20000000, 0x2, 0x7, 0xb, 0x8, 0x3, 0x7f, 0x8b1, 0x6d, 0x81, 0x4, 0xffffffff, 0x1, 0x2, 0x5, 0xfff], 0x6, 0x400, 0xe}) unshare(0x22020400) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r3, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") syz_usb_disconnect(r3) connect$pptp(r2, 0x0, 0x0) 1.194531393s ago: executing program 6 (id=5642): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f00000000c0)='.\x00', 0x800, 0xd0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 998.881428ms ago: executing program 2 (id=5643): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "010400"}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0xfffffffd, 0xffffffff, 0x6f94, 0x6, 0xa45a2b2e, 0x7fff}) 572.827585ms ago: executing program 6 (id=5644): unshare(0x6a040000) r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000004a80)=""/4083, 0xff3}], 0x1}}], 0x1, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f0000000080)) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000034c0)="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", 0x7fa}], 0x1}}], 0x1, 0x9200000000000004) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x9, 0x402) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 1.08876ms ago: executing program 0 (id=5645): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x44000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_vhci(0x0, 0x7) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES16=r9, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES16=r7, @ANYRES32=r10, @ANYRESOCT=0x0], 0x20}}, 0x20002804) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100060000"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010070000904000000010100000a240104000d020202"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 0s ago: executing program 3 (id=5646): socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, &(0x7f0000000300)) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r3], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x5e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0xe000000, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe4) sendmmsg(r2, &(0x7f0000001d40)=[{{&(0x7f0000000380)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000000280)=[{&(0x7f00000004c0)="b285e8f88adf977515bc8373a8588f821f981360f4cb27ec017067b8f17f657b967812c07bcd13c09e8c5f3e492ff5d82424d3f3a4ed95cba468836566436753633fdeec23987b8aaf28875319f4e4f623194b4d876cef9b7b458233fd86effb90655a539d8bf87f518be29b66851cdec111d1365999f1c619dd85af7934b9c00f9179c6", 0x84}, {&(0x7f0000000100)="eb988ae5c70f907c1badcff5bc67fa22d3f38ec50c84e91bdf9da9a4044c605873e54736595fc4d06fc9235503082b5e1a495336", 0x34}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="bb6da817452f49e1a9522092cd81f93661a9384be20038abef9b6fd64ae1fa6dba4a90992d57cf8012cec63bbac868aed9a5237fbde332969872e60e3370d9da4769f2f5041a9b52f5bf90754f8fd1cece59a83b43b4d08c1196049fe9035bf5319770f7221ad275dd025b6d7353a79917b47b40f2bf54300f66491e6b6f82677d98bd8d13127c2b225eb1fdaf800cffde2e8b45453867600cedc7bdf96015b802f1c923efa228265455bfcfebfe7621", 0xb0}, {&(0x7f0000000400)='\r', 0x1}], 0x2, &(0x7f0000001e00)=ANY=[@ANYBLOB="ec0000001701000006000000879b0ef1b809a319c0f45b8b6f12fe556127e6a02e95187ca53d6ce83bf49e1899b25b57ac6a1a9a6e66473f9f606693f08b52150be1db4bc658011f803b7d8fea268cf2fbaef413dd2ee6a95cee4de813cc3b55c4ba14a2a996b69446a66f64dd22d17ec24778615af67cceadc6a55446f1b931babe710e27a8c4e089ddf148f24da998963a16d90f375d0111f98716c0230a88bb47882e5e1803030f63f8999c11769c6d3a6d79f17cad9f8d4b5ea0ff1e1886e34ac6e95db2680298e56ed5ebcedfcaca1064ed6a60d0af1c663a5b974d9ab647710ece9199e98262000000c4000000000000000104000046564018f92818f6bcf10ff01290de46d4254a827788e2713d15ce131aa4acabc2bd5790987e4b827530da96208c087f045bafefaff1ea78faa37150571d6c959921630c5440eb9f06a1f7d3f2ed4d97f55542d005bbb9317b84d26797c376b14b75dfe0920db4e98418520cd833a38c11e8a7b8ee6813c92f0127ee4fa0dbb13a13d241159c2bccd844a571500d85e643115c6b576aa9a0a7492c1601f4ca6eeb7834a9ad32f5511eacc3e1e97048eed617f84bc20000005c00000002010000fbfffffff0e584fc46c5a1d2e8f376d5182a09e9c7c68f99fa05a830984c7055635c95b0996d316a46be14f86a8bc2fc61a8d6d378934088f7ada34e8c52b5519967cd5f07e9795331d34ea0a551d68ce8060000ec00000088000000600000000be266f0933ab44879f21c8e3d5eb130d42243290af5ca2d2ddaf71617090f894357c143ebba7db3dbbbef8d1f75be3fdbd9b0640a3353928278c45732b4c3f54320fa46430d67e154b9f2fa2bbb3ef01117d5f9563f30b7ea8a386f944ff875d15baff2f498e89d58b9b744c93bb0d030bc06cb45191e224ec6df2e36dd2730f00f8ceb7cec2d82b1bcd2ea5b35f3bd550df14cbb236f0af870263c1d1cdd11a772d6fc4e76d58074e698abc8c2fa2d2df4e63e9b7105842b2a6baaa3c3a366b6be4e7984ff659674553f4f4c99eac9062ec672833d7579f70e5b8fb162a100883351ed82cb3f52f34b47018a84aa0823b310b91019afb83a957f76d6aa64da799e443444beb6573eb3dbc7cf9a7caae24e7aaaab0c9c548eed71413d3b25324db31b5074c3b5c8d3cdef6e3057b0f4f236f23a8e53a30d9331df4c883c173d7807255918f50d95cfeb902786b3479680712208e5ab5c637871d8779577241828181c0580fe5fdb49292fc6d01f13663527e14158e8"], 0x2f8}}, {{&(0x7f0000000940)=@pppoe={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'syz_tun\x00'}}, 0x80, &(0x7f0000000f40)=[{&(0x7f00000009c0)="0af9dd4cca70601641be11f961f8fe86f3bca5f9ae29dfa174c255a8504d45a3b6e05e60f1790b3d7cfae58631936ac57a4a931453ad64a3c6d0b4658fd485a3ff16e1b1e7f72d98799ad0c38419508a93aa7ba1dc4deea6d2e656b0d98d1733b164", 0x62}, {&(0x7f0000000a40)="6b69d00c032cbb81a518fd8847830984f1097fd30bf1e8b871f8f3988d07aaa2bdc4df222087d97361de3a812ea307cace3c7f1f03e3fdd98371416f53b7788b1bd7bac624ecd168fe06994feb8b7dda26a134301d80a57a895f5f7c39634eac75f8c3211b7c94c2f0d584d8c541c797767b0848d707cbd360c710c202cbc0e9f0f3e316e0082390e06fb5a922a44051e0d00e65e40a6d5b288f2629c568ee06cc463091e7aaedb416b5cbe6073fa2ed9d58548d17d63b024abfc5158db7aaa2dfc12b12ca26b13d00e6b3d420271d75e9e49700", 0xd4}, {&(0x7f0000000b40)="5d040cfe05034141b8a13ab758176a1b33efdb6e1d5347b500889c7f6e0583d6455d6d80e42fb9a561653bceb1b44c4643134160aca4805a80331d99a52f4755c5766f452a633f99208d0192c32acd35d472eeaccf537c94ca177b03bafbd1ebe4a6b470bcfaf2fa397f9131c23ffd2940e7ea53962845b1a4475ac8ccddf9e527a82ebe83da23fa11291e16058c", 0x8e}, {&(0x7f0000000c00)="1272fdb736f0a718e825c8f3dd2247dadb0ff7d39fa56ffd759eabf95863f247bf8d4ac27ed4b61c1ee3b03824d255deb45079ae1949e15d6dbee1b5d7ba07bbd2fe0f9a105e13b7c8c7735d86cde989261c39f71173ea46b140be0b4b6550c001b055396bcc06f73cc98b32419098357a755faae27cb6cfd78ae6b8fc8c95466c3686a33f134faf7ffa4fc454f232e01951e667fa9f1225619e", 0x9a}, {&(0x7f0000000cc0)="ffe4ce44e3613d892867cf4107b091075d9c9389b7f7400b0471d38b709a948ab678e82f3ce990be7792478531c76377905c095916eec2b005638cf8aff59e8bbf56053531471b379bce482826631819efd6b6581a9cb7626b1a1d0d1767cbf8997b8a40a5b70607e3a8ec1ba9f122f77485e392050a8abee09264dcc748e97a", 0x80}, {&(0x7f0000000d40)="b915902577a6703d39f4bdafdc553d75b901fc9d79f760d1f4d9aad525f53a53e54d9f6539972307fea1eeff357d34901b327b48fd5e0b88b08ce88fda1a8fd95eaaf4ff38d80b61c1ba8996121739b087127258042cb6f7eb1fe06b3b642179a4301f824e23cd979fe6efcac36ae8bed6925f4c0b2e1a1bf6b08c376e42a64996e537eea79d8daf7db62cf514bc012f8e09f9eff434cb47906c197ab7b89a9d793d8b1867287a5b", 0xa8}, {&(0x7f0000000e00)="13ef18147df52e41ecd1003034813c89dfcd93c44be5c83341096505eb28771efb216105b373b51576d5ddfd3484f6d718645f33eaf8b8c64037bceb4d3ba7bc97134e5ef2fa86cf1b45a00336edae6c1cef2c48f8d23ed55e0753aaaae0e08243ba669c3c5d2ad28a1871dff0cf6bb7fd", 0x71}, {&(0x7f0000000e80)="245f0c9825e32b9ba72cbca687cf0a1de382a3d0798934a94d2615a77acca717460318e9b139a577f3ae797fc6b221f56ae9567e93a5a8d680ff6db3e2fa055ef93ed2d5f12cba48d5db9c58043e9043d5c91edf39cb30803b55819bc785cb25bbbde52d6faa1fe5e3e2690d120457cbcd65d0dc486191e33ef03cc1785a657c02dfe44264bcfb2b07101c9f5b0b50ee1512d9e86e95", 0x96}], 0x8, &(0x7f0000000f80)=[{0x90, 0x103, 0x7ff, "0020b0b02fd101ded10074dd9dcc2f2ee01b8b678a06b59ffa06304996d4f29e9f3cac3e3b3488de7501f3bda2eff9d245a99077bed53b474e8c378e2ee4168d93d8e88967b511e4ad4c36a20ec10086636adfa25ad57f0d02106bd16da4460a26e7ba07163283d0ed84bdee3efcc4fa91fd49a9be94889e204a955d883aa9d75d"}, {0x1c, 0x29, 0xec6, "a3a891cb0954bbf662fa7e48ca"}], 0xac}}, {{&(0x7f0000001040)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x2, 0x0, "7fdd4480d144b95b40ee382e2bceb6a7966fcbf9e72d94312a785acf15216cf2a5f87ad2d48f93160415523c479072f21727f088dbc02cca9246325b379163", 0x1d}, 0x80, &(0x7f0000001240)=[{&(0x7f00000010c0)="ddaf1b3ca660bb086f2078490bc3d4bad6cb6dcb091db6fbca5bfc35bf528fc4e7d26a833dab55af40970f9e6cfb2e0860fbbf05489a2fe92b5f63092cbc70d1e78ec30c69c5f195df7871981b6a42020aec6956071a79d1a16f08c4de87821a1be7231b3efeee4ae830206fb5a7053cfcb77c4a85517b2c9bed7f3c90e35855ef7860680e73633426cb374a5ee9216baafb3c75e9343d3a1d611a8527d8520494671906b57b2cbac996ce5cdb259361537a8434b9f9550d4088175c66ccf4e30c4d793c5d9484", 0xc7}, {&(0x7f00000011c0)="5c005e59d7e967d045a9560fee92ab0922ff1a80f6ee75bef7edf212ac5cccdaee8c54d6ea446901d947cdb37ff5c66c030294b0256b2767129e0b18d49dee6afd45011b418271fd95fe1f0f6ecd0dc7ec45afdb9f1d1b68aeacbb45de2e5630d8ff15a394f480e2fd72945a4ab0ba908625b146e39c9d7ef3", 0x79}, {&(0x7f0000002500)="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", 0x1000}], 0x3, &(0x7f0000001280)=[{0xb0, 0x109, 0x7, "897eff738a651135116444dfa4fe4bca04ac95fa0fd50aeb1d8f673a65b4ad92ecd71529980c829c13aefdfcbccd4889de3b81d93f93537236e6c7613c014e40e0a0f6b9ac00a2fdd2ec42965231d76009b28cab029115a96b3654ef0150e14cd52295ba0e30a52a5827eec803ec0545fc8f420b8d5ed94bcde681bfc07e345268a3e1acf5606622df8c915884e5e5fc33fb864a4edb13844f8fd52c251b654295"}, {0xe4, 0x117, 0x8, "2af85fe48358dab0c8a4b5cdec76444e68dd7d73349421e39aa6dd1f181e69be0d5080a3f37bd5addae4092dc1c397bd2dc6db1adecfda29a70731e3f1de95e9180f6c637f17486a8811b94caad31efa8b8c3fc3aa9ea8d40e77c98e16b6b8ccc94391858d39a34ac2e56479497cb84d322dddbd1c7d3961c11d817a302e3fbbca17be1225b7aa06a62fc3d6dca00e27558216bf8a5e5b40e942aab6b7a189d78f1a0f848d93f27124deb3c2e5258758df84752cbb72cdc84569a6b264f307eb2efdc0f7184e00176c5eca210af1ef9ff34997052b"}], 0x194}}, {{&(0x7f0000001440)=@ax25={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000001980)=[{&(0x7f00000014c0)="01c0e477776378041579a05cdbb0b95cc3cb83d06ee4e7c5b1caf4eedfcee89bebe3fce756cba98591", 0x29}, {&(0x7f0000001680)="d0202b2d6530b8e4610550f282e08b5fa58bb496966f3e5d13029c80f2b700018762b89765d7fea2b5071f05152aed9d6b4961cc9680913a0630df0bdacfbf4eda4b64fd78894df5b49a94c17ce82bc1c1d7d1c10c3d087490e26528f7b280af0f80d8de69c640af40fe56c9584286d5c58b80ae2240fd9631e08d23d7353e6af57de4f9fe899dc335c57ef7515474d603750168e04bb00d0b9265fb89efe8d3496967fdddcf3f316707c7d71b7391d0f35b4251e3ab53e3ef632aaf78e16735b8eeec5cc1", 0xc5}, {&(0x7f0000001780)="665deb96f007dbf59cf9de099364226524b7ee6ceb04b5ba7a65dd725ad921ed29040f7a952a220c932f9fbbada41759f2039ef6f656f44d15ce96eb88f029f87698d737e36bd6a3ab52dfebab9983208842b14653e8036bec36e3397c7b6c7259994cea5c063c4f905d8eddb3cb1a93c4df2e7fb26876d78f4073592c7a04e914b7f883c1a8bc369228b3417becbee21798353b9f9b00492b7fe52141b031844a3ebd493125734346cdad9fb984a50f8969a55efa3b33656baea4901a85c015df9c689fdd24df1288ef097039c2333c6b09d4f5c0e06a2a8ecf3e45f966d9eab15654", 0xe3}, {&(0x7f0000001500)='9e', 0x2}, {&(0x7f0000001880)="94db9bebbd6bc9c9e45995a4bf0fae26590ff6d00a8ef60959724fbe0743e0436e72801d7f3fa7472d40a6bf7d7e7488f81817f1b55795dbcc1fade9db42d24561e8869493bbf2497821488f16147e5d9c7ca5bd655a0970fdc11860e63cb5c1e0838d1b0509ccf48ba0a221082078e4f6cd301d4455472d13fe3b7626b20c60e5f960f3e3d5d19e6264fc6217ff4aba52a8369b8977aca5df49a756", 0x9c}, {&(0x7f0000001540)}, {&(0x7f0000001940)="28625ab5be3c8a0f966d8c56be56187233d120e7688ab71b2bfba5d4df167b917f0e4487e7beb0013227fba5fe641377b7265a17a96fba88e8d89eaecc", 0x3d}, {&(0x7f0000003500)="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", 0x1000}], 0x8, &(0x7f00000019c0)=[{0x80, 0x102, 0x0, "8b68d1c51f7be8aad25db1868629ba78957276bf753e7f05339118d8bd245bb1ba704875433f0e3cceb8a271fd9c302e4102866834d34d66e52274f1e11f36ba34611b13cd60f4a4eebca4d04ed48a24b634dc0f0741cff3f794bfb7a78dafd8805d3186239235ed76be9ad938769ae9e6ad"}], 0x80}}, {{&(0x7f0000001a40)=@in6={0xa, 0x4e20, 0x1, @remote, 0x9}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001ac0)="4c55520a396dd4a53a911c43dd60c402868ed7b4dc8310e69cd697d7d7528b2bf338f1cf4671b53b95d4839a1928de50b8cfba1493cec61da15b715dd72013901752d21690eee481c132314aeebbd6dda27b527e6892faff91a5172632459e497c05c0d3a875b553d807074783e3626dc17fed61980e87c6850ef0e081e8825398747a885d3c", 0x86}, {&(0x7f0000001b80)="105d160187e7215608031c6128562beca7f11d46cb9266f094910df3bee25135502ad4eb9e592256036e7605db5fe42d6550c7717d93d1eb45edd276645bf568d70d0d357298f3d8e39b57b08dcdc9c2d9df2c27b16c4d8d90efe2f88d6fa9632560ec578b9620bf40c9b9eabf77fa9ba56136174193daffdcb893a56c35", 0x7e}, {&(0x7f0000001c00)="eec00a2bc9b9108e8ada4836710cd3d706bdf33ac1cbd12aaf6acd6b5a3b53c67c8a58143c81668d16d47c245175d5f7fc649219fccf75a5f40deb064cb67b4f6e9702f2bbd0060dbc9fc029b0fe0a43d6e7d27deb943031ced85391d402dfbe9fd18dfd24e314b1b7ed260d935b423605ea87e46e1286445543f5cf67d4d65533dd9838d85a5cdc552eeef74c3a408ffa842504957697cc45f7ae1908c6a186f8a1d63b654324ba53048c2b38459eb9c59d7e8d23e9380925cff824d3ebbd5fed39b24ebc7f175ed155a33c83d7de13aa6bbfbbf8c1ae51780ecd70030c49c70d7045006f91a9", 0xe7}], 0x3}}], 0x6, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x100, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, 0x4982, 0x4200}}, 0x20}, 0x1, 0x0, 0x0, 0x8c14}, 0x8000) kernel console output (not intermixed with test programs): 755][ T977] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1544.936825][ T977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1544.953027][ T977] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1544.965067][ T977] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1544.977411][ T977] usb 1-1: Product: syz [ 1544.994360][ T977] usb 1-1: Manufacturer: syz [ 1545.011427][ T977] usb 1-1: SerialNumber: syz [ 1545.021457][ T977] usb 1-1: config 0 descriptor?? [ 1545.028201][T17798] usb 3-1: device descriptor read/64, error -71 [ 1545.053481][ C1] sd 0:0:1:0: [sda] tag#1448 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1545.063951][ C1] sd 0:0:1:0: [sda] tag#1448 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 1545.076736][ T977] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1545.153970][T19836] udevd[19836]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1545.170055][T22344] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1545.241041][ T977] usb 1-1: USB disconnect, device number 93 [ 1545.279400][T17798] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1545.327704][T22344] usb 4-1: Using ep0 maxpacket: 8 [ 1545.335319][T22344] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1545.343748][T22344] usb 4-1: config 2 has no interface number 0 [ 1545.350328][ T5897] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1545.358155][T22344] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1545.368211][T22344] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1545.377393][T22344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.385500][T22344] usb 4-1: Product: syz [ 1545.390214][T22344] usb 4-1: Manufacturer: syz [ 1545.394817][T22344] usb 4-1: SerialNumber: syz [ 1545.417913][T17798] usb 3-1: device descriptor read/64, error -71 [ 1545.507757][ T5897] usb 7-1: Using ep0 maxpacket: 16 [ 1545.514766][ T5897] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1545.524150][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.533344][T17798] usb usb3-port1: attempt power cycle [ 1545.543152][ T5897] usb 7-1: config 0 descriptor?? [ 1545.570278][ T5897] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1545.857684][ T977] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1545.887798][T17798] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1545.908701][T17798] usb 3-1: device descriptor read/8, error -71 [ 1546.017683][ T977] usb 2-1: Using ep0 maxpacket: 8 [ 1546.034472][ T977] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1546.066255][ T977] usb 2-1: config 179 has no interface number 0 [ 1546.073169][ T977] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1546.094253][ T977] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1546.117770][ T977] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1546.131589][T27798] FAULT_INJECTION: forcing a failure. [ 1546.131589][T27798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1546.149689][T27799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5322'. [ 1546.159248][ T977] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1546.159400][T27798] CPU: 1 UID: 0 PID: 27798 Comm: syz.0.5326 Not tainted syzkaller #0 PREEMPT(full) [ 1546.159422][T27798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1546.159433][T27798] Call Trace: [ 1546.159445][T27798] [ 1546.159452][T27798] dump_stack_lvl+0x189/0x250 [ 1546.159479][T27798] ? __pfx____ratelimit+0x10/0x10 [ 1546.159499][T27798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1546.159519][T27798] ? __pfx__printk+0x10/0x10 [ 1546.159542][T27798] ? __might_fault+0xb0/0x130 [ 1546.159576][T27798] should_fail_ex+0x414/0x560 [ 1546.159606][T27798] _copy_from_user+0x2d/0xb0 [ 1546.159629][T27798] kstrtouint_from_user+0xc4/0x170 [ 1546.159650][T27798] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1546.159687][T27798] proc_fail_nth_write+0x88/0x200 [ 1546.159707][T27798] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1546.159732][T27798] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1546.159753][T27798] vfs_write+0x27b/0xb30 [ 1546.159784][T27798] ? __pfx_vfs_write+0x10/0x10 [ 1546.159807][T27798] ? __fget_files+0x2a/0x420 [ 1546.159835][T27798] ? __fget_files+0x3a0/0x420 [ 1546.159856][T27798] ? __fget_files+0x2a/0x420 [ 1546.159888][T27798] ksys_write+0x145/0x250 [ 1546.159912][T27798] ? __pfx_ksys_write+0x10/0x10 [ 1546.159937][T27798] ? lockdep_hardirqs_on+0x9c/0x150 [ 1546.159959][T27798] __do_fast_syscall_32+0xb6/0x2b0 [ 1546.159979][T27798] ? lockdep_hardirqs_on+0x9c/0x150 [ 1546.160000][T27798] do_fast_syscall_32+0x34/0x80 [ 1546.160019][T27798] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1546.160039][T27798] RIP: 0023:0xf701e539 [ 1546.160054][T27798] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1546.160069][T27798] RSP: 002b:00000000f540e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1546.160087][T27798] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540e620 [ 1546.160100][T27798] RDX: 0000000000000001 RSI: 00000000f73b5ff4 RDI: 0000000000000000 [ 1546.160110][T27798] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1546.160120][T27798] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1546.160131][T27798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1546.160159][T27798] [ 1546.187794][T17798] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1546.403785][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.410419][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.420058][ T5897] gspca_sonixj: reg_r err -110 [ 1546.424967][ T5897] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 1546.448742][T17798] usb 3-1: device descriptor read/8, error -71 [ 1546.468197][ T977] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1546.500562][ T977] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1546.521760][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.555325][T27794] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1546.568225][T17798] usb usb3-port1: unable to enumerate USB device [ 1546.828419][T27802] tipc: Enabled bearer , priority 0 [ 1546.838726][T27802] syzkaller0: entered promiscuous mode [ 1546.838787][T22344] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 1546.844636][T27802] syzkaller0: entered allmulticast mode [ 1546.874419][T27803] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1546.899984][T27802] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1546.913920][T27802] tipc: Resetting bearer [ 1546.921710][T27801] tipc: Resetting bearer [ 1546.941244][T27801] tipc: Disabling bearer [ 1546.991797][T22344] usb 2-1: USB disconnect, device number 62 [ 1546.991833][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1547.006611][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 1547.185106][T27810] fuse: Unknown parameter '0x0000000000000003' [ 1547.427765][ T977] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1547.589916][ T977] usb 1-1: config 0 has an invalid interface number: 212 but max is 0 [ 1547.612699][ T977] usb 1-1: config 0 has no interface number 0 [ 1547.633582][ T977] usb 1-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 1547.653503][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.677221][ T977] usb 1-1: config 0 descriptor?? [ 1547.709288][ T977] quatech2 1-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 1548.007548][T22344] usb 4-1: USB disconnect, device number 91 [ 1548.108320][T17798] usb 7-1: USB disconnect, device number 13 [ 1548.121314][ T977] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1548.167494][ T977] quatech2 1-1:0.212: probe with driver quatech2 failed with error -71 [ 1548.196372][ T977] usb 1-1: USB disconnect, device number 94 [ 1548.408679][T22344] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1548.703505][T22344] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1548.714422][T22344] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1548.729103][T22344] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1548.774026][T22344] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1548.829518][T22344] usb 4-1: Product: syz [ 1548.852526][T22344] usb 4-1: Manufacturer: syz [ 1548.870784][T22344] usb 4-1: SerialNumber: syz [ 1548.896046][T22344] usb 4-1: config 0 descriptor?? [ 1548.921985][T22344] usb 4-1: selecting invalid altsetting 0 [ 1549.009917][T27848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5338'. [ 1549.019520][T27848] 8021q: VLANs not supported on caif0 [ 1549.132639][T22344] usb 4-1: USB disconnect, device number 92 [ 1549.325049][T19960] udevd[19960]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1549.512052][T27854] netlink: 'syz.0.5340': attribute type 6 has an invalid length. [ 1549.529255][T27854] netlink: 'syz.0.5340': attribute type 1 has an invalid length. [ 1549.537340][T27854] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.5340'. [ 1549.679845][T27857] FAULT_INJECTION: forcing a failure. [ 1549.679845][T27857] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.735310][T27857] CPU: 0 UID: 0 PID: 27857 Comm: syz.1.5341 Not tainted syzkaller #0 PREEMPT(full) [ 1549.735339][T27857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1549.735351][T27857] Call Trace: [ 1549.735360][T27857] [ 1549.735369][T27857] dump_stack_lvl+0x189/0x250 [ 1549.735399][T27857] ? __pfx____ratelimit+0x10/0x10 [ 1549.735421][T27857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1549.735444][T27857] ? __pfx__printk+0x10/0x10 [ 1549.735468][T27857] ? netlink_sendmsg+0x805/0xb30 [ 1549.735492][T27857] ? __sys_sendmsg+0x164/0x220 [ 1549.735513][T27857] ? do_fast_syscall_32+0x34/0x80 [ 1549.735545][T27857] should_fail_ex+0x414/0x560 [ 1549.735577][T27857] should_failslab+0xa8/0x100 [ 1549.735609][T27857] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1549.735635][T27857] ? skb_clone+0x212/0x3a0 [ 1549.735666][T27857] skb_clone+0x212/0x3a0 [ 1549.735697][T27857] __netlink_deliver_tap+0x404/0x850 [ 1549.735734][T27857] ? netlink_deliver_tap+0x2e/0x1b0 [ 1549.735759][T27857] netlink_deliver_tap+0x19c/0x1b0 [ 1549.735783][T27857] netlink_sendskb+0x68/0x140 [ 1549.735806][T27857] netlink_unicast+0x397/0x9e0 [ 1549.735824][T27857] ? __asan_memcpy+0x40/0x70 [ 1549.735857][T27857] ? __pfx_netlink_unicast+0x10/0x10 [ 1549.735889][T27857] netlink_rcv_skb+0x28c/0x470 [ 1549.735909][T27857] ? lockdep_hardirqs_on+0x9c/0x150 [ 1549.735930][T27857] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1549.735954][T27857] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1549.735996][T27857] ? bpf_lsm_capable+0x9/0x20 [ 1549.736018][T27857] ? security_capable+0x7e/0x2e0 [ 1549.736054][T27857] nfnetlink_rcv+0x282/0x2590 [ 1549.736077][T27857] ? __dev_queue_xmit+0x27b/0x3b50 [ 1549.736105][T27857] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1549.736137][T27857] ? kasan_save_track+0x3e/0x80 [ 1549.736159][T27857] ? __kasan_slab_alloc+0x6c/0x80 [ 1549.736195][T27857] ? __dev_queue_xmit+0x27b/0x3b50 [ 1549.736235][T27857] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1549.736261][T27857] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1549.736303][T27857] ? ref_tracker_free+0x63a/0x7d0 [ 1549.736324][T27857] ? __asan_memcpy+0x40/0x70 [ 1549.736346][T27857] ? __pfx_ref_tracker_free+0x10/0x10 [ 1549.736364][T27857] ? __skb_clone+0x63/0x7a0 [ 1549.736393][T27857] ? __skb_clone+0x483/0x7a0 [ 1549.736426][T27857] ? skb_clone+0x246/0x3a0 [ 1549.736456][T27857] ? __netlink_deliver_tap+0x807/0x850 [ 1549.736477][T27857] ? netlink_deliver_tap+0x2e/0x1b0 [ 1549.736507][T27857] ? netlink_deliver_tap+0x2e/0x1b0 [ 1549.736539][T27857] netlink_unicast+0x82c/0x9e0 [ 1549.736570][T27857] ? __pfx_netlink_unicast+0x10/0x10 [ 1549.736593][T27857] ? netlink_sendmsg+0x642/0xb30 [ 1549.736613][T27857] ? skb_put+0x11b/0x210 [ 1549.736640][T27857] netlink_sendmsg+0x805/0xb30 [ 1549.736673][T27857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1549.736700][T27857] ? __import_iovec+0x5d4/0x7f0 [ 1549.736722][T27857] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1549.736743][T27857] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1549.736761][T27857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1549.736785][T27857] __sock_sendmsg+0x219/0x270 [ 1549.736809][T27857] ____sys_sendmsg+0x505/0x830 [ 1549.736840][T27857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1549.736885][T27857] ___sys_sendmsg+0x21f/0x2a0 [ 1549.736913][T27857] ? __pfx____sys_sendmsg+0x10/0x10 [ 1549.736980][T27857] ? __fget_files+0x2a/0x420 [ 1549.737021][T27857] ? __fget_files+0x3a0/0x420 [ 1549.737060][T27857] __sys_sendmsg+0x164/0x220 [ 1549.737088][T27857] ? __pfx___sys_sendmsg+0x10/0x10 [ 1549.737139][T27857] ? lockdep_hardirqs_on+0x9c/0x150 [ 1549.737163][T27857] __do_fast_syscall_32+0xb6/0x2b0 [ 1549.737186][T27857] ? lockdep_hardirqs_on+0x9c/0x150 [ 1549.737211][T27857] do_fast_syscall_32+0x34/0x80 [ 1549.737233][T27857] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1549.737257][T27857] RIP: 0023:0xf704e539 [ 1549.737274][T27857] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1549.737291][T27857] RSP: 002b:00000000f543e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1549.737314][T27857] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 1549.737328][T27857] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1549.737340][T27857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1549.737351][T27857] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1549.737362][T27857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1549.737393][T27857] [ 1549.797714][T22344] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 1550.310469][T22344] usb 1-1: device descriptor read/64, error -71 [ 1550.327876][T27858] usb usb8: usbfs: process 27858 (syz.2.5339) did not claim interface 0 before use [ 1550.569795][T22344] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1550.578367][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1550.707976][T22344] usb 1-1: device descriptor read/64, error -71 [ 1550.737910][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1550.834357][T27870] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5346'. [ 1550.868953][T22344] usb usb1-port1: attempt power cycle [ 1550.871834][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1550.885174][ T10] usb 4-1: config 179 has no interface number 0 [ 1550.952108][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1550.976800][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1551.078340][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1551.100620][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1551.117165][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1551.149074][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1551.158679][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.181723][T27860] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1551.239765][T22344] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1551.287409][T22344] usb 1-1: device descriptor read/8, error -71 [ 1551.570142][T22344] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1551.620907][T22344] usb 1-1: device descriptor read/8, error -71 [ 1551.699551][T17798] usb 4-1: USB disconnect, device number 93 [ 1551.699581][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1551.714116][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1551.733241][T22344] usb usb1-port1: unable to enumerate USB device [ 1551.773031][T27879] fuse: Unknown parameter '0x0000000000000003' [ 1552.087725][T22344] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1552.239601][T22344] usb 7-1: config 0 has an invalid interface number: 212 but max is 0 [ 1552.279687][T22344] usb 7-1: config 0 has no interface number 0 [ 1552.348259][T22344] usb 7-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 1552.377685][T22344] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.473706][T27883] FAULT_INJECTION: forcing a failure. [ 1552.473706][T27883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1552.488117][T27883] CPU: 0 UID: 0 PID: 27883 Comm: syz.0.5350 Not tainted syzkaller #0 PREEMPT(full) [ 1552.488145][T27883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1552.488156][T27883] Call Trace: [ 1552.488165][T27883] [ 1552.488173][T27883] dump_stack_lvl+0x189/0x250 [ 1552.488202][T27883] ? __pfx____ratelimit+0x10/0x10 [ 1552.488223][T27883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1552.488245][T27883] ? __pfx__printk+0x10/0x10 [ 1552.488271][T27883] ? __might_fault+0xb0/0x130 [ 1552.488306][T27883] should_fail_ex+0x414/0x560 [ 1552.488349][T27883] _copy_from_user+0x2d/0xb0 [ 1552.488373][T27883] __ia32_sys_epoll_ctl+0x120/0x1a0 [ 1552.488403][T27883] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 1552.488433][T27883] ? lockdep_hardirqs_on+0x9c/0x150 [ 1552.488457][T27883] __do_fast_syscall_32+0xb6/0x2b0 [ 1552.488479][T27883] ? lockdep_hardirqs_on+0x9c/0x150 [ 1552.488503][T27883] do_fast_syscall_32+0x34/0x80 [ 1552.488522][T27883] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1552.488543][T27883] RIP: 0023:0xf701e539 [ 1552.488559][T27883] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1552.488575][T27883] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 1552.488597][T27883] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000001 [ 1552.488609][T27883] RDX: 0000000000000003 RSI: 0000000080000080 RDI: 0000000000000000 [ 1552.488620][T27883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1552.488631][T27883] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1552.488642][T27883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1552.488670][T27883] [ 1552.495832][T22344] usb 7-1: config 0 descriptor?? [ 1552.627545][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1552.812265][T22344] quatech2 7-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 1552.844126][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.854674][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1552.867026][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1552.880346][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.894276][ T10] usb 4-1: config 0 descriptor?? [ 1553.327532][T22344] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1553.328206][T27881] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1553.341119][T22344] quatech2 7-1:0.212: probe with driver quatech2 failed with error -71 [ 1553.358057][T22344] usb 7-1: USB disconnect, device number 14 [ 1553.358074][T27881] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1553.508813][T27881] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1553.515266][T27881] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1553.603302][T27881] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1553.697241][T27881] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1553.724095][T27881] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1553.845763][T27881] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1553.853728][T27881] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1554.035417][ T5833] usb 4-1: USB disconnect, device number 94 [ 1554.502354][T27907] FAULT_INJECTION: forcing a failure. [ 1554.502354][T27907] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.557883][T27907] CPU: 0 UID: 0 PID: 27907 Comm: syz.6.5357 Not tainted syzkaller #0 PREEMPT(full) [ 1554.557911][T27907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1554.557923][T27907] Call Trace: [ 1554.557931][T27907] [ 1554.557940][T27907] dump_stack_lvl+0x189/0x250 [ 1554.557968][T27907] ? __pfx____ratelimit+0x10/0x10 [ 1554.557989][T27907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1554.558011][T27907] ? __pfx__printk+0x10/0x10 [ 1554.558045][T27907] ? __pfx___might_resched+0x10/0x10 [ 1554.558072][T27907] should_fail_ex+0x414/0x560 [ 1554.558106][T27907] should_failslab+0xa8/0x100 [ 1554.558136][T27907] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1554.558164][T27907] ? alloc_pipe_info+0xe9/0x4d0 [ 1554.558196][T27907] alloc_pipe_info+0xe9/0x4d0 [ 1554.558234][T27907] splice_direct_to_actor+0xa5d/0xcc0 [ 1554.558280][T27907] ? __pfx_aa_file_perm+0x10/0x10 [ 1554.558299][T27907] ? __lock_acquire+0xab9/0xd20 [ 1554.558319][T27907] ? __pfx_direct_splice_actor+0x10/0x10 [ 1554.558345][T27907] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1554.558384][T27907] do_splice_direct+0x181/0x270 [ 1554.558414][T27907] ? __pfx_do_splice_direct+0x10/0x10 [ 1554.558437][T27907] ? common_file_perm+0x1b5/0x230 [ 1554.558456][T27907] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1554.558477][T27907] ? bpf_lsm_file_permission+0x9/0x20 [ 1554.558496][T27907] ? security_file_permission+0x75/0x290 [ 1554.558522][T27907] ? rw_verify_area+0x255/0x4d0 [ 1554.558551][T27907] do_sendfile+0x4da/0x7e0 [ 1554.558582][T27907] ? __pfx_do_sendfile+0x10/0x10 [ 1554.558610][T27907] ? __might_fault+0xb0/0x130 [ 1554.558640][T27907] __ia32_compat_sys_sendfile+0x120/0x1d0 [ 1554.558665][T27907] __do_fast_syscall_32+0xb6/0x2b0 [ 1554.558688][T27907] ? lockdep_hardirqs_on+0x9c/0x150 [ 1554.558713][T27907] do_fast_syscall_32+0x34/0x80 [ 1554.558735][T27907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1554.558758][T27907] RIP: 0023:0xf704e539 [ 1554.558777][T27907] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1554.558793][T27907] RSP: 002b:00000000f543e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 1554.558816][T27907] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 1554.558829][T27907] RDX: 0000000080000000 RSI: 0000000000020001 RDI: 0000000000000000 [ 1554.558841][T27907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1554.558853][T27907] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1554.558865][T27907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1554.558894][T27907] [ 1555.139707][T27918] netlink: 'syz.3.5360': attribute type 6 has an invalid length. [ 1555.200891][T27918] netlink: 'syz.3.5360': attribute type 1 has an invalid length. [ 1555.234495][T27924] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 1555.287763][T27918] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5360'. [ 1555.427113][T24522] Bluetooth: hci0: command 0x0406 tx timeout [ 1555.427128][T24787] Bluetooth: hci5: command 0x0406 tx timeout [ 1555.427401][T27932] fuse: Unknown parameter '0x0000000000000003' [ 1555.451232][T27931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5365'. [ 1555.451822][T27931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5365'. [ 1555.452852][T27931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5365'. [ 1555.453284][T27931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5365'. [ 1555.478066][T22344] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1555.478245][T27274] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1555.549622][T24787] Bluetooth: hci2: command 0x0c1a tx timeout [ 1555.549635][T24522] Bluetooth: hci1: command 0x0419 tx timeout [ 1555.622876][T27274] usb 4-1: device descriptor read/64, error -71 [ 1555.639958][T22344] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1555.650117][T22344] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1555.659601][T22344] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1555.668830][T22344] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1555.677147][T22344] usb 1-1: Product: syz [ 1555.681460][T22344] usb 1-1: Manufacturer: syz [ 1555.686093][T22344] usb 1-1: SerialNumber: syz [ 1555.687698][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1555.726483][T22344] usb 1-1: config 0 descriptor?? [ 1555.827519][T24787] Bluetooth: hci4: command 0x0c1a tx timeout [ 1555.841458][T22344] usb 1-1: selecting invalid altsetting 0 [ 1556.208599][ T10] usb 3-1: config 0 has an invalid interface number: 212 but max is 0 [ 1556.261076][T27274] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1556.272887][ T10] usb 3-1: config 0 has no interface number 0 [ 1556.287990][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 1556.297165][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.332592][T26894] usb 1-1: USB disconnect, device number 99 [ 1556.374784][ T10] usb 3-1: config 0 descriptor?? [ 1556.417506][ T10] quatech2 3-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 1556.474955][T19913] udevd[19913]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1556.491005][T27274] usb 4-1: device descriptor read/64, error -71 [ 1556.630365][T27274] usb usb4-port1: attempt power cycle [ 1556.827509][ T10] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1556.856048][ T10] quatech2 3-1:0.212: probe with driver quatech2 failed with error -71 [ 1557.047830][T27274] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1557.058998][ T10] usb 3-1: USB disconnect, device number 42 [ 1557.086649][T27274] usb 4-1: device descriptor read/8, error -71 [ 1557.399625][T27274] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1557.430063][T27274] usb 4-1: device descriptor read/8, error -71 [ 1557.562447][T27274] usb usb4-port1: unable to enumerate USB device [ 1557.627906][T24787] Bluetooth: hci2: command 0x0c1a tx timeout [ 1557.717056][T27958] FAULT_INJECTION: forcing a failure. [ 1557.717056][T27958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.750457][T27958] CPU: 0 UID: 0 PID: 27958 Comm: syz.6.5374 Not tainted syzkaller #0 PREEMPT(full) [ 1557.750485][T27958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1557.750497][T27958] Call Trace: [ 1557.750505][T27958] [ 1557.750514][T27958] dump_stack_lvl+0x189/0x250 [ 1557.750544][T27958] ? __pfx____ratelimit+0x10/0x10 [ 1557.750567][T27958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1557.750589][T27958] ? __pfx__printk+0x10/0x10 [ 1557.750617][T27958] ? __might_fault+0xb0/0x130 [ 1557.750653][T27958] should_fail_ex+0x414/0x560 [ 1557.750687][T27958] _copy_from_user+0x2d/0xb0 [ 1557.750713][T27958] get_compat_msghdr+0xad/0x4a0 [ 1557.750744][T27958] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1557.750783][T27958] ___sys_sendmsg+0x193/0x2a0 [ 1557.750812][T27958] ? __pfx____sys_sendmsg+0x10/0x10 [ 1557.750842][T27958] ? __lock_acquire+0xab9/0xd20 [ 1557.750894][T27958] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1557.750930][T27958] __sys_sendmmsg+0x28e/0x430 [ 1557.750962][T27958] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1557.751000][T27958] ? count_memcg_event_mm+0x21/0x260 [ 1557.751039][T27958] ? ksys_write+0x1e1/0x250 [ 1557.751077][T27958] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1557.751105][T27958] __do_fast_syscall_32+0xb6/0x2b0 [ 1557.751128][T27958] ? lockdep_hardirqs_on+0x9c/0x150 [ 1557.751154][T27958] do_fast_syscall_32+0x34/0x80 [ 1557.751186][T27958] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1557.751209][T27958] RIP: 0023:0xf704e539 [ 1557.751226][T27958] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1557.751243][T27958] RSP: 002b:00000000f543e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1557.751266][T27958] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800bd000 [ 1557.751279][T27958] RDX: 0000000000000318 RSI: 0000000000000000 RDI: 0000000000000000 [ 1557.751290][T27958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1557.751301][T27958] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1557.751313][T27958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1557.751343][T27958] [ 1557.754932][T27955] FAULT_INJECTION: forcing a failure. [ 1557.754932][T27955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.983427][T24787] Bluetooth: hci4: command 0x0c1a tx timeout [ 1558.004562][T27955] CPU: 1 UID: 0 PID: 27955 Comm: syz.1.5373 Not tainted syzkaller #0 PREEMPT(full) [ 1558.004590][T27955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1558.004601][T27955] Call Trace: [ 1558.004610][T27955] [ 1558.004618][T27955] dump_stack_lvl+0x189/0x250 [ 1558.004646][T27955] ? __pfx____ratelimit+0x10/0x10 [ 1558.004667][T27955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1558.004688][T27955] ? __pfx__printk+0x10/0x10 [ 1558.004712][T27955] ? __might_fault+0xb0/0x130 [ 1558.004747][T27955] should_fail_ex+0x414/0x560 [ 1558.004780][T27955] _copy_from_user+0x2d/0xb0 [ 1558.004805][T27955] get_compat_msghdr+0xad/0x4a0 [ 1558.004834][T27955] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1558.004870][T27955] ___sys_sendmsg+0x193/0x2a0 [ 1558.004896][T27955] ? __pfx____sys_sendmsg+0x10/0x10 [ 1558.004967][T27955] ? __fget_files+0x2a/0x420 [ 1558.004994][T27955] ? __fget_files+0x3a0/0x420 [ 1558.005032][T27955] __sys_sendmsg+0x164/0x220 [ 1558.005060][T27955] ? __pfx___sys_sendmsg+0x10/0x10 [ 1558.005102][T27955] ? lockdep_hardirqs_on+0x9c/0x150 [ 1558.005127][T27955] __do_fast_syscall_32+0xb6/0x2b0 [ 1558.005149][T27955] ? lockdep_hardirqs_on+0x9c/0x150 [ 1558.005173][T27955] do_fast_syscall_32+0x34/0x80 [ 1558.005195][T27955] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1558.005218][T27955] RIP: 0023:0xf704e539 [ 1558.005235][T27955] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1558.005253][T27955] RSP: 002b:00000000f543e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1558.005274][T27955] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 1558.005288][T27955] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1558.005300][T27955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1558.005311][T27955] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1558.005323][T27955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1558.005353][T27955] [ 1558.207899][ C1] vkms_vblank_simulate: vblank timer overrun [ 1558.603038][T27274] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1558.603605][ T5833] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1558.843777][T27274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1558.847777][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 1558.863572][T27274] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1558.883110][ T10] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1558.898762][T27274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.911090][ T5833] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1558.920629][ T5833] usb 7-1: config 179 has no interface number 0 [ 1558.926171][T27274] usb 2-1: config 0 descriptor?? [ 1558.937953][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1558.954054][T27964] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1558.977473][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1559.011446][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1559.037366][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1559.061500][ T5833] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1559.084726][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1559.121476][ T5833] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1559.138426][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.142954][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1559.239457][T27965] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1559.252405][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1559.343698][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1559.412730][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1559.436507][T27964] netlink: 'syz.1.5376': attribute type 1 has an invalid length. [ 1559.443717][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.501472][ T10] usb 4-1: config 0 descriptor?? [ 1559.634134][T27274] hid_parser_main: 6 callbacks suppressed [ 1559.634158][T27274] kone 0003:1E7D:2CED.0036: unknown main item tag 0x0 [ 1559.704655][T27274] kone 0003:1E7D:2CED.0036: item fetching failed at offset 3/5 [ 1559.715304][T24787] Bluetooth: hci2: command 0x0c1a tx timeout [ 1559.740714][T27274] kone 0003:1E7D:2CED.0036: parse failed [ 1559.746619][T27274] kone 0003:1E7D:2CED.0036: probe with driver kone failed with error -22 [ 1559.756781][T27984] FAULT_INJECTION: forcing a failure. [ 1559.756781][T27984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1559.776545][T27964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.853159][T27981] bond0: (slave geneve2): making interface the new active one [ 1559.864687][T27984] CPU: 0 UID: 0 PID: 27984 Comm: syz.2.5384 Not tainted syzkaller #0 PREEMPT(full) [ 1559.864718][T27984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1559.864729][T27984] Call Trace: [ 1559.864737][T27984] [ 1559.864747][T27984] dump_stack_lvl+0x189/0x250 [ 1559.864776][T27984] ? __pfx____ratelimit+0x10/0x10 [ 1559.864803][T27984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1559.864825][T27984] ? __pfx__printk+0x10/0x10 [ 1559.864851][T27984] ? __might_fault+0xb0/0x130 [ 1559.864888][T27984] should_fail_ex+0x414/0x560 [ 1559.864931][T27984] _copy_from_user+0x2d/0xb0 [ 1559.864955][T27984] ucma_write+0x158/0x2e0 [ 1559.864977][T27984] ? __pfx_ucma_write+0x10/0x10 [ 1559.864994][T27984] ? security_file_permission+0x75/0x290 [ 1559.865021][T27984] ? rw_verify_area+0x255/0x4d0 [ 1559.865042][T27984] ? __lock_acquire+0xab9/0xd20 [ 1559.865060][T27984] ? __pfx_ucma_write+0x10/0x10 [ 1559.865081][T27984] vfs_write+0x27b/0xb30 [ 1559.865115][T27984] ? __pfx_vfs_write+0x10/0x10 [ 1559.865141][T27984] ? __fget_files+0x2a/0x420 [ 1559.865169][T27984] ? __fget_files+0x2a/0x420 [ 1559.865193][T27984] ? __fget_files+0x3a0/0x420 [ 1559.865218][T27984] ? __fget_files+0x2a/0x420 [ 1559.865252][T27984] ksys_write+0x145/0x250 [ 1559.865279][T27984] ? __pfx_ksys_write+0x10/0x10 [ 1559.865308][T27984] ? lockdep_hardirqs_on+0x9c/0x150 [ 1559.865332][T27984] __do_fast_syscall_32+0xb6/0x2b0 [ 1559.865355][T27984] ? lockdep_hardirqs_on+0x9c/0x150 [ 1559.865379][T27984] do_fast_syscall_32+0x34/0x80 [ 1559.865400][T27984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1559.865421][T27984] RIP: 0023:0xf7fd6539 [ 1559.865438][T27984] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1559.865455][T27984] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1559.865477][T27984] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 1559.865490][T27984] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1559.865502][T27984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1559.865514][T27984] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1559.865526][T27984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1559.865556][T27984] [ 1559.891389][T27981] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1559.988209][ T10] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1560.028164][T24787] Bluetooth: hci4: command 0x0c1a tx timeout [ 1560.049702][T27988] warn_alloc: 1 callbacks suppressed [ 1560.049724][T27988] syz.0.5385: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 1560.167317][T26894] usb 2-1: USB disconnect, device number 63 [ 1560.207889][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1560.216263][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1560.247255][ T5833] usb 7-1: USB disconnect, device number 16 [ 1560.257945][T27988] ,cpuset=/,mems_allowed=0-1 [ 1560.262797][T27988] CPU: 1 UID: 0 PID: 27988 Comm: syz.0.5385 Not tainted syzkaller #0 PREEMPT(full) [ 1560.262824][T27988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1560.262836][T27988] Call Trace: [ 1560.262845][T27988] [ 1560.262854][T27988] dump_stack_lvl+0x189/0x250 [ 1560.262888][T27988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1560.262913][T27988] ? __pfx__printk+0x10/0x10 [ 1560.262940][T27988] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1560.262981][T27988] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1560.263009][T27988] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1560.263037][T27988] warn_alloc+0x214/0x310 [ 1560.263072][T27988] ? __pfx_warn_alloc+0x10/0x10 [ 1560.263110][T27988] ? __get_vm_area_node+0x28f/0x300 [ 1560.263136][T27988] ? kvm_set_memslot+0x4e2/0x1310 [ 1560.263161][T27988] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1560.263188][T27988] ? rcu_is_watching+0x15/0xb0 [ 1560.263232][T27988] ? kvm_set_memslot+0x3e/0x1310 [ 1560.263255][T27988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1560.263294][T27988] ? kvm_set_memslot+0x4e2/0x1310 [ 1560.263311][T27988] __vmalloc_noprof+0xb1/0xf0 [ 1560.263336][T27988] ? kvm_set_memslot+0x4e2/0x1310 [ 1560.263359][T27988] kvm_set_memslot+0x4e2/0x1310 [ 1560.263379][T27988] ? kvm_check_memslot_overlap+0x301/0x380 [ 1560.263408][T27988] kvm_set_memory_region+0x9bb/0xc00 [ 1560.263452][T27988] kvm_vm_ioctl_set_memory_region+0x6f/0xd0 [ 1560.263477][T27988] kvm_vm_ioctl+0x957/0xc60 [ 1560.263500][T27988] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1560.263518][T27988] ? __kasan_save_free_info+0x46/0x50 [ 1560.263537][T27988] ? __kasan_slab_free+0x5c/0x80 [ 1560.263561][T27988] ? kfree+0x19a/0x6d0 [ 1560.263580][T27988] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1560.263604][T27988] ? security_file_ioctl_compat+0xcb/0x2d0 [ 1560.263626][T27988] ? __ia32_compat_sys_ioctl+0x128/0x840 [ 1560.263647][T27988] ? __do_fast_syscall_32+0xb6/0x2b0 [ 1560.263668][T27988] ? do_fast_syscall_32+0x34/0x80 [ 1560.263687][T27988] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1560.263757][T27988] ? kasan_quarantine_put+0xdd/0x220 [ 1560.263781][T27988] ? lockdep_hardirqs_on+0x9c/0x150 [ 1560.263811][T27988] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1560.263838][T27988] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1560.263868][T27988] ? do_vfs_ioctl+0xbe8/0x1430 [ 1560.263895][T27988] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1560.263934][T27988] ? __lock_acquire+0xab9/0xd20 [ 1560.263980][T27988] kvm_vm_compat_ioctl+0x265/0x330 [ 1560.264009][T27988] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 1560.264036][T27988] ? __fget_files+0x3a0/0x420 [ 1560.264062][T27988] ? __fget_files+0x2a/0x420 [ 1560.264093][T27988] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1560.264118][T27988] __ia32_compat_sys_ioctl+0x540/0x840 [ 1560.264146][T27988] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1560.264178][T27988] ? __se_sys_futex_time32+0x360/0x3e0 [ 1560.264204][T27988] ? fd_install+0x97/0x540 [ 1560.264248][T27988] ? lockdep_hardirqs_on+0x9c/0x150 [ 1560.264273][T27988] __do_fast_syscall_32+0xb6/0x2b0 [ 1560.264304][T27988] do_fast_syscall_32+0x34/0x80 [ 1560.264326][T27988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1560.264348][T27988] RIP: 0023:0xf701e539 [ 1560.264366][T27988] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1560.264383][T27988] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1560.264404][T27988] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000004020ae46 [ 1560.264418][T27988] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1560.264431][T27988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1560.264442][T27988] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1560.264453][T27988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1560.264486][T27988] [ 1560.264632][T27988] Mem-Info: [ 1560.523002][T27998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5386'. [ 1560.571438][T27988] active_anon:14447 inactive_anon:0 isolated_anon:0 [ 1560.571438][T27988] active_file:14887 inactive_file:4414 isolated_file:0 [ 1560.571438][T27988] unevictable:768 dirty:110 writeback:0 [ 1560.571438][T27988] slab_reclaimable:11489 slab_unreclaimable:141249 [ 1560.571438][T27988] mapped:34275 shmem:8628 pagetables:1615 [ 1560.571438][T27988] sec_pagetables:0 bounce:0 [ 1560.571438][T27988] kernel_misc_reclaimable:0 [ 1560.571438][T27988] free:1292825 free_pcp:9784 free_cma:0 [ 1560.615100][ T10] usb 4-1: USB disconnect, device number 99 [ 1560.653214][T27988] Node 0 active_anon:57988kB inactive_anon:0kB active_file:59444kB inactive_file:17520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136996kB dirty:440kB writeback:0kB shmem:32976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13988kB pagetables:6292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1560.757987][T27988] Node 1 active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1560.794743][T27988] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.846261][T27988] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1560.854750][T27988] Node 0 DMA32 free:1247180kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58188kB inactive_anon:0kB active_file:59444kB inactive_file:17520kB unevictable:1536kB writepending:440kB zspages:0kB present:3129332kB managed:2566224kB mlocked:0kB bounce:0kB free_pcp:32328kB local_pcp:15692kB free_cma:0kB [ 1560.978089][T27988] lowmem_reserve[]: 0 0 0 0 0 [ 1560.983439][T27988] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1561.024978][T27988] lowmem_reserve[]: 0 0 0 0 0 [ 1561.035187][T27988] Node 1 Normal free:3908760kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7156kB local_pcp:6900kB free_cma:0kB [ 1561.076537][T27988] lowmem_reserve[]: 0 0 0 0 0 [ 1561.091814][T27988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1561.118709][T27988] Node 0 DMA32: 3647*4kB (UME) 1344*8kB (UME) 389*16kB (UME) 488*32kB (UME) 476*64kB (UME) 153*128kB (UME) 96*256kB (UM) 42*512kB (UM) 30*1024kB (UM) 14*2048kB (UM) 255*4096kB (UM) = 1247180kB [ 1561.138273][T27988] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1561.150656][T27988] Node 1 Normal: 227*4kB (UME) 68*8kB (UME) 40*16kB (UME) 213*32kB (UME) 98*64kB (UME) 41*128kB (UME) 27*256kB (UME) 5*512kB (UM) 2*1024kB (UE) 3*2048kB (ME) 945*4096kB (UM) = 3908812kB [ 1561.355430][T28006] netlink: 'syz.3.5389': attribute type 6 has an invalid length. [ 1561.357814][T27988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1561.363650][T28006] netlink: 'syz.3.5389': attribute type 1 has an invalid length. [ 1561.401305][T28006] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5389'. [ 1561.405172][T27988] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1561.450830][T27988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1561.468465][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1561.477114][T27988] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1561.506032][T27988] 27919 total pagecache pages [ 1561.516207][T27988] 0 pages in swap cache [ 1561.521108][T27988] Free swap = 124996kB [ 1561.525286][T27988] Total swap = 124996kB [ 1561.530065][T27988] 2097051 pages RAM [ 1561.533910][T27988] 0 pages HighMem/MovableOnly [ 1561.540745][T27988] 423789 pages reserved [ 1561.544933][T27988] 0 pages cma reserved [ 1561.643900][ T10] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1561.652237][ T10] usb 2-1: config 1 has no interface number 0 [ 1561.697740][T21536] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1561.711859][T28016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5390'. [ 1561.761687][ T10] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1561.837402][ T10] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1561.852419][ T10] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1561.880568][T21536] usb 4-1: device descriptor read/64, error -71 [ 1561.890819][T28020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5390'. [ 1561.900616][ T10] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1561.913995][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.922430][ T10] usb 2-1: Product: syz [ 1561.926719][ T10] usb 2-1: Manufacturer: syz [ 1561.932353][ T10] usb 2-1: SerialNumber: syz [ 1561.959574][T28004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1562.121199][T21536] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1562.173960][T28004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1562.238850][T28025] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1562.257114][ T10] usb 2-1: No status endpoint found [ 1562.297695][T21536] usb 4-1: device descriptor read/64, error -71 [ 1562.408254][T21536] usb usb4-port1: attempt power cycle [ 1562.805966][ T5833] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1563.057735][T21536] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1563.138438][T21536] usb 4-1: device descriptor read/8, error -71 [ 1563.149062][ T5833] usb 1-1: Using ep0 maxpacket: 8 [ 1563.170883][ T5833] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.181774][ T5833] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1563.258145][ T5833] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1563.267529][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.275711][ T5833] usb 1-1: Product: syz [ 1563.311100][ T5833] usb 1-1: Manufacturer: syz [ 1563.319001][ T5833] usb 1-1: SerialNumber: syz [ 1563.397739][T21536] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1563.431512][T17798] usb 2-1: USB disconnect, device number 64 [ 1563.500068][T21536] usb 4-1: device descriptor read/8, error -71 [ 1563.684847][T21536] usb usb4-port1: unable to enumerate USB device [ 1564.368799][T28043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5399'. [ 1564.381676][T28043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5399'. [ 1564.402102][T28043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5399'. [ 1564.426097][T28043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5399'. [ 1564.525690][T17798] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1564.589290][T28047] fuse: Unknown parameter '0x0000000000000003' [ 1564.699395][T17798] usb 3-1: Using ep0 maxpacket: 8 [ 1564.706517][T17798] usb 3-1: config 0 has no interfaces? [ 1564.715459][T17798] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1564.725397][T17798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.733577][T17798] usb 3-1: Product: syz [ 1564.738464][T17798] usb 3-1: Manufacturer: syz [ 1564.744122][T17798] usb 3-1: SerialNumber: syz [ 1564.763958][T17798] usb 3-1: config 0 descriptor?? [ 1564.847903][ T5897] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1564.989561][T28041] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5398'. [ 1564.998893][T28041] netlink: 'syz.2.5398': attribute type 1 has an invalid length. [ 1565.020146][ T5897] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 1565.029148][ T5897] usb 2-1: config 0 has no interface number 0 [ 1565.035673][ T5897] usb 2-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 1565.044827][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.055619][ T5897] usb 2-1: config 0 descriptor?? [ 1565.065334][ T5897] quatech2 2-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 1565.167701][T21536] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1565.342439][T21536] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1565.353039][T21536] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1565.354245][T28059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5406'. [ 1565.363398][T21536] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1565.379485][T21536] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1565.388432][T28059] 8021q: VLANs not supported on caif0 [ 1565.397835][T21536] usb 4-1: Product: syz [ 1565.402441][T21536] usb 4-1: Manufacturer: syz [ 1565.407170][T21536] usb 4-1: SerialNumber: syz [ 1565.415636][T21536] usb 4-1: config 0 descriptor?? [ 1565.464957][ T5897] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1565.478843][ T5897] quatech2 2-1:0.212: probe with driver quatech2 failed with error -71 [ 1565.500529][ T5897] usb 2-1: USB disconnect, device number 65 [ 1566.066116][ T5833] usb 1-1: 0:2 : does not exist [ 1566.177140][T21536] usb 4-1: selecting invalid altsetting 0 [ 1566.199636][ T5833] usb 1-1: USB disconnect, device number 100 [ 1566.275680][T21536] usb 4-1: USB disconnect, device number 104 [ 1566.955243][T19836] udevd[19836]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1566.974773][T28081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5412'. [ 1567.101312][T19913] udevd[19913]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1567.219172][ T5897] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1567.388693][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 1567.396900][T17798] usb 3-1: USB disconnect, device number 43 [ 1567.412155][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 1567.446919][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1567.470117][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 1567.487715][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1567.550098][ T5897] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1567.565403][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.597754][ T5897] usb 2-1: Product: syz [ 1567.604233][ T5897] usb 2-1: Manufacturer: syz [ 1567.634682][ T5897] usb 2-1: SerialNumber: syz [ 1567.682687][ T5897] usb 2-1: config 0 descriptor?? [ 1567.710436][ T5897] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1567.923634][T28078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.016078][T28078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.042372][T28078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.051566][T28078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.066482][T17798] usb 2-1: USB disconnect, device number 66 [ 1568.248078][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1568.381181][T28099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5417'. [ 1568.419622][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.433177][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1568.442688][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1568.452030][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.463397][ T10] usb 3-1: config 0 descriptor?? [ 1568.739285][T28094] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1568.748016][T28094] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1568.754332][T28094] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1568.765566][T28094] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1568.772770][T28094] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1568.898080][T17798] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1568.953704][T28113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5424'. [ 1568.974287][T28113] 8021q: VLANs not supported on caif0 [ 1568.993840][ T5897] usb 3-1: USB disconnect, device number 44 [ 1569.047683][T17798] usb 2-1: Using ep0 maxpacket: 8 [ 1569.067029][T17798] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1569.093500][T17798] usb 2-1: config 179 has no interface number 0 [ 1569.109563][T17798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1569.134432][T17798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1569.146557][T17798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1569.169413][T17798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1569.188892][T17798] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1569.221396][T17798] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1569.238401][T17798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.255374][T28105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1569.368095][T22344] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 1569.371535][T28128] delete_channel: no stack [ 1569.414180][ T30] audit: type=1800 audit(1759509757.952:1053): pid=28124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5427" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1569.896642][T28134] FAULT_INJECTION: forcing a failure. [ 1569.896642][T28134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1569.923268][T28134] CPU: 0 UID: 0 PID: 28134 Comm: syz.2.5430 Not tainted syzkaller #0 PREEMPT(full) [ 1569.923301][T28134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1569.923313][T28134] Call Trace: [ 1569.923322][T28134] [ 1569.923330][T28134] dump_stack_lvl+0x189/0x250 [ 1569.923368][T28134] ? __pfx____ratelimit+0x10/0x10 [ 1569.923390][T28134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1569.923413][T28134] ? __pfx__printk+0x10/0x10 [ 1569.923441][T28134] ? __might_fault+0xb0/0x130 [ 1569.923477][T28134] should_fail_ex+0x414/0x560 [ 1569.923512][T28134] _copy_from_user+0x2d/0xb0 [ 1569.923536][T28134] v4l2_compat_get_user+0x333/0x1380 [ 1569.923569][T28134] ? __pfx_v4l2_compat_get_user+0x10/0x10 [ 1569.923613][T28134] ? rcu_is_watching+0x15/0xb0 [ 1569.923635][T28134] ? trace_kmalloc+0x1f/0xd0 [ 1569.923655][T28134] ? __kmalloc_noprof+0x432/0x7f0 [ 1569.923676][T28134] ? do_vfs_ioctl+0xbe8/0x1430 [ 1569.923703][T28134] video_usercopy+0x412/0x1450 [ 1569.923732][T28134] ? __pfx___video_do_ioctl+0x10/0x10 [ 1569.923751][T28134] ? __pfx_video_usercopy+0x10/0x10 [ 1569.923790][T28134] ? __fget_files+0x2a/0x420 [ 1569.923826][T28134] v4l2_ioctl+0x18a/0x1e0 [ 1569.923855][T28134] v4l2_compat_ioctl32+0x1d7/0x260 [ 1569.923872][T28134] __ia32_compat_sys_ioctl+0x540/0x840 [ 1569.923888][T28134] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1569.923902][T28134] ? __fget_files+0x3a0/0x420 [ 1569.923933][T28134] ? fput+0xa0/0xd0 [ 1569.923954][T28134] ? ksys_write+0x22a/0x250 [ 1569.923988][T28134] ? lockdep_hardirqs_on+0x9c/0x150 [ 1569.924012][T28134] __do_fast_syscall_32+0xb6/0x2b0 [ 1569.924033][T28134] ? lockdep_hardirqs_on+0x9c/0x150 [ 1569.924053][T28134] do_fast_syscall_32+0x34/0x80 [ 1569.924068][T28134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1569.924082][T28134] RIP: 0023:0xf7fd6539 [ 1569.924094][T28134] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1569.924107][T28134] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1569.924129][T28134] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 1569.924143][T28134] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1569.924156][T28134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1569.924167][T28134] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1569.924179][T28134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1569.924207][T28134] [ 1570.172353][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.211653][ T10] usb 2-1: USB disconnect, device number 67 [ 1570.217643][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1570.217701][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1570.401717][T28137] sctp: [Deprecated]: syz.0.5431 (pid 28137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1570.401717][T28137] Use struct sctp_sack_info instead [ 1570.748196][T24787] Bluetooth: hci5: command 0x0406 tx timeout [ 1570.827814][T24787] Bluetooth: hci4: command 0x0c1a tx timeout [ 1570.833934][T24522] Bluetooth: hci2: command 0x0c1a tx timeout [ 1570.840668][T13739] Bluetooth: hci1: command 0x0419 tx timeout [ 1570.846949][T13739] Bluetooth: hci0: command 0x0406 tx timeout [ 1570.897798][T22344] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1571.028590][T28150] netlink: 'syz.1.5436': attribute type 6 has an invalid length. [ 1571.056996][T28150] netlink: 'syz.1.5436': attribute type 1 has an invalid length. [ 1571.085878][T28150] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1571.109775][T22344] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1571.139095][T22344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.159815][T22344] usb 1-1: Product: syz [ 1571.170958][T22344] usb 1-1: Manufacturer: syz [ 1571.181514][T22344] usb 1-1: SerialNumber: syz [ 1571.328163][T21536] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1571.506162][T21536] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1571.549009][T21536] usb 2-1: not running at top speed; connect to a high speed hub [ 1571.586129][T21536] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.602506][T21536] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1571.636004][T21536] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1571.666531][T21536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.707680][T21536] usb 2-1: Product: syz [ 1571.712069][T21536] usb 2-1: Manufacturer: syz [ 1571.716690][T21536] usb 2-1: SerialNumber: syz [ 1571.877462][T28162] fuse: Unknown parameter 'fd0x0000000000000003' [ 1572.038985][T21536] usb 2-1: 0:2 : does not exist [ 1572.064327][T21536] usb 2-1: USB disconnect, device number 68 [ 1572.100960][T19888] udevd[19888]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1572.138715][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1572.319565][ T10] usb 3-1: config 0 has an invalid interface number: 212 but max is 0 [ 1572.439433][ T10] usb 3-1: config 0 has no interface number 0 [ 1572.455915][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 1572.476169][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.488892][ T10] usb 3-1: config 0 descriptor?? [ 1572.506447][ T10] quatech2 3-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 1572.951453][ T10] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1572.959048][ T10] quatech2 3-1:0.212: probe with driver quatech2 failed with error -71 [ 1572.972592][ T10] usb 3-1: USB disconnect, device number 45 [ 1573.004828][T28171] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5443'. [ 1573.057849][T17798] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1573.261278][T22344] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1573.295941][T17798] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1573.305121][T17798] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1573.345765][T17798] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1573.457745][T17798] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1573.474714][T17798] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1573.491909][T28144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5434'. [ 1573.533199][T22344] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1573.583627][T22344] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1573.608088][T17798] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1573.618826][T28187] netlink: 'syz.3.5444': attribute type 13 has an invalid length. [ 1573.626657][T28187] netlink: 'syz.3.5444': attribute type 27 has an invalid length. [ 1573.634795][T17798] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1573.643060][T22344] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1573.852701][T17798] usb 7-1: Product: syz [ 1573.890427][T22344] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1573.913523][T17798] usb 7-1: Manufacturer: syz [ 1574.173546][T17798] usb 7-1: can't set config #1, error -71 [ 1574.208279][T17798] usb 7-1: USB disconnect, device number 18 [ 1574.272410][T22344] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1574.653856][T22344] usb 1-1: USB disconnect, device number 101 [ 1574.693900][T28183] FAULT_INJECTION: forcing a failure. [ 1574.693900][T28183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.740654][T28199] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5450'. [ 1574.750120][T28183] CPU: 0 UID: 0 PID: 28183 Comm: syz.1.5447 Not tainted syzkaller #0 PREEMPT(full) [ 1574.750147][T28183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1574.750157][T28183] Call Trace: [ 1574.750166][T28183] [ 1574.750175][T28183] dump_stack_lvl+0x189/0x250 [ 1574.750203][T28183] ? __pfx____ratelimit+0x10/0x10 [ 1574.750224][T28183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1574.750244][T28183] ? __pfx__printk+0x10/0x10 [ 1574.750269][T28183] ? __might_fault+0xb0/0x130 [ 1574.750305][T28183] should_fail_ex+0x414/0x560 [ 1574.750336][T28183] _copy_from_user+0x2d/0xb0 [ 1574.750358][T28183] get_compat_msghdr+0xad/0x4a0 [ 1574.750376][T28183] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1574.750392][T28183] ? ___sys_recvmsg+0x1c4/0x510 [ 1574.750406][T28183] ? kfree+0x4d/0x6d0 [ 1574.750423][T28183] ___sys_recvmsg+0x17f/0x510 [ 1574.750441][T28183] ? __pfx____sys_recvmsg+0x10/0x10 [ 1574.750471][T28183] ? __fget_files+0x3a0/0x420 [ 1574.750494][T28183] do_recvmmsg+0x36a/0x770 [ 1574.750515][T28183] ? __pfx_do_recvmmsg+0x10/0x10 [ 1574.750537][T28183] ? __pfx_vfs_write+0x10/0x10 [ 1574.750562][T28183] __sys_recvmmsg+0x19d/0x280 [ 1574.750578][T28183] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1574.750592][T28183] ? ksys_write+0x22a/0x250 [ 1574.750612][T28183] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1574.750629][T28183] __do_fast_syscall_32+0xb6/0x2b0 [ 1574.750642][T28183] ? lockdep_hardirqs_on+0x9c/0x150 [ 1574.750657][T28183] do_fast_syscall_32+0x34/0x80 [ 1574.750669][T28183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1574.750682][T28183] RIP: 0023:0xf704e539 [ 1574.750693][T28183] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1574.750703][T28183] RSP: 002b:00000000f543e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1574.750717][T28183] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002940 [ 1574.750725][T28183] RDX: 000000000000f000 RSI: 0000000000010002 RDI: 0000000000000000 [ 1574.750732][T28183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1574.750739][T28183] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1574.750748][T28183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1574.750765][T28183] [ 1574.777708][T17798] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1575.417703][T22344] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1575.541677][T17798] usb 7-1: Using ep0 maxpacket: 8 [ 1575.572306][T17798] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.585103][T22344] usb 1-1: Using ep0 maxpacket: 32 [ 1575.599355][T22344] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1575.609707][T17798] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1575.623486][T22344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.691154][T17798] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1575.722342][T17798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.741463][T22344] usb 1-1: Product: syz [ 1575.794889][T17798] usb 7-1: Product: syz [ 1575.804989][T22344] usb 1-1: Manufacturer: syz [ 1575.809975][T17798] usb 7-1: Manufacturer: syz [ 1575.814778][T22344] usb 1-1: SerialNumber: syz [ 1575.819609][T17798] usb 7-1: SerialNumber: syz [ 1575.830622][T22344] usb 1-1: config 0 descriptor?? [ 1576.074416][T22344] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 1576.084092][T22344] b3 c1 69 eb 50 3d 29 15 [ 1576.090555][T22344] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1576.256561][T28219] delete_channel: no stack [ 1576.291407][ T30] audit: type=1800 audit(1759509764.832:1054): pid=28215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5454" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1576.302977][ T5833] usb 1-1: USB disconnect, device number 102 [ 1576.310915][ C0] vkms_vblank_simulate: vblank timer overrun [ 1576.497755][ T10] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1576.679861][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1576.711577][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1576.800265][ T10] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1576.852119][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.996729][T28224] program syz.1.5456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1577.080730][ T10] usb 3-1: config 0 descriptor?? [ 1577.177960][T28220] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1577.393593][T28220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.412880][T28232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.413208][T28220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.421808][T28232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.435159][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1577.445545][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1577.465579][ T10] usb 3-1: USB disconnect, device number 46 [ 1577.826361][T17798] usb 7-1: 0:2 : does not exist [ 1577.931806][T17798] usb 7-1: USB disconnect, device number 19 [ 1578.147377][T19888] udevd[19888]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1578.697684][T26894] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1578.957668][T26894] usb 4-1: Using ep0 maxpacket: 16 [ 1578.989914][T26894] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1579.030581][T26894] usb 4-1: config 1 has no interface number 0 [ 1579.074450][T26894] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1579.147726][T26894] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1579.191687][T26894] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1579.235582][T26894] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1579.268079][T26894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.276133][T26894] usb 4-1: Product: syz [ 1579.338142][T26894] usb 4-1: Manufacturer: syz [ 1579.346898][T26894] usb 4-1: SerialNumber: syz [ 1579.361239][T28252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1579.427992][T28252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1579.772340][T28269] sg_write: data in/out 1756/10 bytes for SCSI command 0xfd-- guessing data in; [ 1579.772340][T28269] program syz.6.5467 not setting count and/or reply_len properly [ 1579.840697][ T5833] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1579.954777][T28252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1580.008613][T28252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1580.088025][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 1580.106633][ T5833] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1580.117106][ T5833] usb 2-1: config 179 has no interface number 0 [ 1580.145144][ T5833] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1580.166941][ T5833] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1580.222184][ T5833] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1580.236017][ T5833] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1580.297721][ T5833] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1580.346152][T28239] syz.2.5459 (28239): drop_caches: 2 [ 1580.494312][ T5833] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1580.564695][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.609742][T28260] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1580.771820][T28271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5469'. [ 1580.961662][T26894] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1580.990538][T28252] hsr0: entered promiscuous mode [ 1581.019393][T28252] hsr0: left promiscuous mode [ 1581.114178][T26894] aqc111 4-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 1581.116545][T17798] usb 2-1: USB disconnect, device number 69 [ 1581.116621][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1581.141592][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1581.257706][T26894] usb 4-1: USB disconnect, device number 105 [ 1581.266263][T26894] aqc111 4-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1581.379375][T26894] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1581.399055][T26894] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1581.416458][T26894] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1581.480878][T28283] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1581.577702][T21536] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 1581.860337][T21536] usb 3-1: Invalid ep0 maxpacket: 32 [ 1581.997690][T21536] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 1582.024509][ T10] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1582.087910][T27274] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1582.163531][T28291] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5475'. [ 1582.165200][T21536] usb 3-1: Invalid ep0 maxpacket: 32 [ 1582.208474][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1582.217928][T21536] usb usb3-port1: attempt power cycle [ 1582.235340][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.250047][T28291] 8021q: VLANs not supported on caif0 [ 1582.328978][T27274] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1582.452361][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1582.461574][T27274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.478647][T27274] usb 4-1: Product: syz [ 1582.484999][T27274] usb 4-1: Manufacturer: syz [ 1582.493080][T27274] usb 4-1: SerialNumber: syz [ 1582.524831][T27274] usb 4-1: config 0 descriptor?? [ 1582.536957][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1582.547272][T27274] ch341 4-1:0.0: ch341-uart converter detected [ 1582.594923][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.625157][ T10] usb 1-1: Product: syz [ 1582.639790][ T10] usb 1-1: Manufacturer: syz [ 1582.657929][ T10] usb 1-1: SerialNumber: syz [ 1582.827951][T21536] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 1582.861605][T21536] usb 3-1: Invalid ep0 maxpacket: 32 [ 1583.098216][T21536] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 1583.128375][T21536] usb 3-1: Invalid ep0 maxpacket: 32 [ 1583.134672][T21536] usb usb3-port1: unable to enumerate USB device [ 1583.645346][T27274] ch341-uart ttyUSB0: break control not supported, using simulated break [ 1583.655620][T27274] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 1584.911785][ T10] usb 1-1: 0:2 : does not exist [ 1584.919715][T28321] FAULT_INJECTION: forcing a failure. [ 1584.919715][T28321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1584.947479][T27274] usb 4-1: USB disconnect, device number 106 [ 1584.992020][T27274] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1585.000708][T28321] CPU: 0 UID: 0 PID: 28321 Comm: syz.2.5485 Not tainted syzkaller #0 PREEMPT(full) [ 1585.000735][T28321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1585.000747][T28321] Call Trace: [ 1585.000755][T28321] [ 1585.000764][T28321] dump_stack_lvl+0x189/0x250 [ 1585.000794][T28321] ? __pfx____ratelimit+0x10/0x10 [ 1585.000816][T28321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1585.000838][T28321] ? __pfx__printk+0x10/0x10 [ 1585.000878][T28321] should_fail_ex+0x414/0x560 [ 1585.000911][T28321] _copy_to_user+0x31/0xb0 [ 1585.000936][T28321] simple_read_from_buffer+0xe1/0x170 [ 1585.000970][T28321] proc_fail_nth_read+0x1b3/0x220 [ 1585.000994][T28321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1585.001017][T28321] ? rw_verify_area+0x2a6/0x4d0 [ 1585.001037][T28321] ? __lock_acquire+0xab9/0xd20 [ 1585.001054][T28321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1585.001078][T28321] vfs_read+0x200/0xa30 [ 1585.001101][T28321] ? fdget_pos+0x247/0x320 [ 1585.001122][T28321] ? __pfx___mutex_lock+0x10/0x10 [ 1585.001142][T28321] ? __pfx_vfs_read+0x10/0x10 [ 1585.001166][T28321] ? __fget_files+0x2a/0x420 [ 1585.001198][T28321] ? __fget_files+0x3a0/0x420 [ 1585.001220][T28321] ? __fget_files+0x2a/0x420 [ 1585.001256][T28321] ksys_read+0x145/0x250 [ 1585.001281][T28321] ? __pfx_ksys_read+0x10/0x10 [ 1585.001310][T28321] ? lockdep_hardirqs_on+0x9c/0x150 [ 1585.001336][T28321] __do_fast_syscall_32+0xb6/0x2b0 [ 1585.001357][T28321] ? lockdep_hardirqs_on+0x9c/0x150 [ 1585.001382][T28321] do_fast_syscall_32+0x34/0x80 [ 1585.001402][T28321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1585.001423][T28321] RIP: 0023:0xf7fd6539 [ 1585.001441][T28321] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1585.001458][T28321] RSP: 002b:00000000f54c6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1585.001479][T28321] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54c6620 [ 1585.001494][T28321] RDX: 000000000000000f RSI: 00000000f7465ff4 RDI: 0000000000000000 [ 1585.001506][T28321] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1585.001517][T28321] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1585.001530][T28321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1585.001561][T28321] [ 1585.258195][ T10] usb 1-1: USB disconnect, device number 103 [ 1585.267887][T27274] ch341 4-1:0.0: device disconnected [ 1585.335990][T28324] bridge_slave_0: entered promiscuous mode [ 1585.370895][T19836] udevd[19836]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1585.737664][ T10] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1585.868172][ T5833] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1585.957691][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1585.968554][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1585.978723][ T10] usb 1-1: config 179 has no interface number 0 [ 1585.985240][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1585.996959][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1586.011269][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1586.024333][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1586.024786][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.053743][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1586.067931][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1586.077922][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.087371][ T5833] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1586.096843][T28326] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1586.105016][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1586.119407][ T5833] usb 4-1: Product: syz [ 1586.134516][ T5833] usb 4-1: Manufacturer: syz [ 1586.140662][ T5833] usb 4-1: SerialNumber: syz [ 1586.155941][ T5833] usb 4-1: config 0 descriptor?? [ 1586.233120][ T5833] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1586.329001][T19836] udevd[19836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1586.528662][ T5833] usb 1-1: USB disconnect, device number 104 [ 1586.528708][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1586.543667][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 1586.992244][T28344] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1587.003211][T28344] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1587.545200][T28354] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1587.997783][ T10] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1588.221958][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1588.341666][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.442465][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1588.462261][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1588.482970][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.503750][ T10] usb 1-1: Product: syz [ 1588.527216][T21536] usb 4-1: USB disconnect, device number 107 [ 1588.595819][ T10] usb 1-1: Manufacturer: syz [ 1588.639575][ T10] usb 1-1: SerialNumber: syz [ 1588.672867][T28371] tipc: Started in network mode [ 1588.683291][T28371] tipc: Node identity ea78faf2d, cluster identity 4711 [ 1588.692931][T28371] tipc: Enabled bearer , priority 0 [ 1588.707372][T28371] syzkaller0: entered promiscuous mode [ 1588.713431][T28371] syzkaller0: entered allmulticast mode [ 1589.097717][T21536] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1589.311902][T21536] usb 4-1: config 0 has an invalid interface number: 212 but max is 0 [ 1589.322335][T21536] usb 4-1: config 0 has no interface number 0 [ 1589.374452][T28369] tipc: Resetting bearer [ 1589.408016][T21536] usb 4-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 1589.451656][T28369] tipc: Disabling bearer [ 1589.464269][T21536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.494422][T21536] usb 4-1: config 0 descriptor?? [ 1589.716640][T28384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5505'. [ 1589.767981][T21536] quatech2 4-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 1590.008387][T21536] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1590.063769][T21536] quatech2 4-1:0.212: probe with driver quatech2 failed with error -71 [ 1590.248106][T21536] usb 4-1: USB disconnect, device number 108 [ 1590.537707][ T5833] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1590.699017][T28397] netlink: 'syz.6.5509': attribute type 6 has an invalid length. [ 1590.708909][T28397] netlink: 'syz.6.5509': attribute type 1 has an invalid length. [ 1590.717011][T28397] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.5509'. [ 1590.746564][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 1590.762954][ T5833] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1590.785943][ T5833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.800687][ T5833] usb 3-1: config 0 has no interface number 0 [ 1590.815778][T28402] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5511'. [ 1591.037908][ T5897] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1591.110196][ T5833] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1591.119897][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.129220][ T5833] usb 3-1: Product: syz [ 1591.134899][ T5833] usb 3-1: Manufacturer: syz [ 1591.139917][ T5833] usb 3-1: SerialNumber: syz [ 1591.155588][ T5833] usb 3-1: config 0 descriptor?? [ 1591.166720][ T5833] uvcvideo 3-1:0.31: Found UVC 0.00 device syz (046d:08c3) [ 1591.174541][ T5833] uvcvideo 3-1:0.31: No valid video chain found. [ 1591.207369][ T10] usb 1-1: 0:2 : does not exist [ 1591.248130][ T5897] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1591.262907][ T5897] usb 7-1: not running at top speed; connect to a high speed hub [ 1591.284918][ T5897] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.295426][ T10] usb 1-1: USB disconnect, device number 105 [ 1591.324987][ T5897] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1591.363515][ T5897] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1591.379726][T19836] udevd[19836]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1591.407211][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.445177][ T5897] usb 7-1: Product: syz [ 1591.456015][ T5897] usb 7-1: Manufacturer: syz [ 1591.484366][ T5897] usb 7-1: SerialNumber: syz [ 1591.925422][ T5897] usb 7-1: 0:2 : does not exist [ 1591.953023][ T5897] usb 7-1: USB disconnect, device number 20 [ 1592.013989][T19836] udevd[19836]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1593.118197][ T5897] usb 3-1: USB disconnect, device number 51 [ 1593.387814][T28432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5519'. [ 1593.397214][T28432] 8021q: VLANs not supported on caif0 [ 1593.412096][T27274] IPVS: starting estimator thread 0... [ 1593.439481][T28431] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1593.464197][T28434] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1593.517782][T28435] IPVS: using max 24 ests per chain, 57600 per kthread [ 1593.544542][T28434] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1593.596363][T28434] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1593.608198][T28434] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1593.630518][T28434] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1593.669213][T28434] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1593.676589][T28434] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1593.684007][T27274] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1593.731185][T28434] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1593.751438][T28434] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1593.849891][T27274] usb 4-1: config 0 has an invalid interface number: 212 but max is 0 [ 1593.868753][T27274] usb 4-1: config 0 has no interface number 0 [ 1593.877709][ T5833] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1593.878518][T27274] usb 4-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 1593.902195][T27274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.966988][T27274] usb 4-1: config 0 descriptor?? [ 1593.995557][T28451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5525'. [ 1594.038023][ T5833] usb 1-1: device descriptor read/64, error -71 [ 1594.044363][T27274] quatech2 4-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 1594.292497][ T5833] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1594.306091][T28457] netlink: 'syz.1.5526': attribute type 6 has an invalid length. [ 1594.337829][T28457] netlink: 'syz.1.5526': attribute type 1 has an invalid length. [ 1594.345770][T28457] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.5526'. [ 1594.434078][ T5833] usb 1-1: device descriptor read/64, error -71 [ 1594.482905][T27274] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1594.491057][T27274] quatech2 4-1:0.212: probe with driver quatech2 failed with error -71 [ 1594.521802][T27274] usb 4-1: USB disconnect, device number 109 [ 1594.618407][ T5833] usb usb1-port1: attempt power cycle [ 1594.649981][ T10] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1594.940771][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1594.952314][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 1594.962161][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.982802][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1594.988547][ T5833] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 1595.007689][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1595.016944][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.018589][ T5833] usb 1-1: device descriptor read/8, error -71 [ 1595.026798][ T10] usb 2-1: Product: syz [ 1595.036300][ T10] usb 2-1: Manufacturer: syz [ 1595.041039][ T10] usb 2-1: SerialNumber: syz [ 1595.169061][T28461] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1595.278555][ T5833] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 1595.298708][ T5833] usb 1-1: device descriptor read/8, error -71 [ 1595.343251][ T10] usb 2-1: 0:2 : does not exist [ 1595.370662][T28468] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5529'. [ 1595.428334][ T5833] usb usb1-port1: unable to enumerate USB device [ 1595.766734][ T10] usb 2-1: USB disconnect, device number 70 [ 1595.998100][ T5897] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1596.135871][T28480] kernel read not supported for file /Ħsxt (pid: 28480 comm: syz.6.5532) [ 1596.155068][ T30] audit: type=1800 audit(1759509784.692:1055): pid=28480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5532" name=A17378741A dev="mqueue" ino=114686 res=0 errno=0 [ 1596.167671][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 1596.190675][ T5897] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1596.202138][ T5897] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1596.211892][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.220583][ T5897] usb 3-1: Product: syz [ 1596.269241][ T5897] usb 3-1: Manufacturer: syz [ 1596.273981][ T5897] usb 3-1: SerialNumber: syz [ 1596.296970][ T5897] usb 3-1: config 0 descriptor?? [ 1596.317076][ T5897] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1596.326616][ T5897] usb 3-1: setting power ON [ 1596.332521][ T5897] dvb-usb: bulk message failed: -22 (2/0) [ 1596.395210][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1596.478801][ T5897] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1596.502361][ T5897] usb 3-1: media controller created [ 1596.573660][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1596.721251][ T5897] usb 3-1: selecting invalid altsetting 6 [ 1596.728395][ T5897] usb 3-1: digital interface selection failed (-22) [ 1596.736247][ T5897] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1596.753066][ T5897] usb 3-1: setting power OFF [ 1596.782138][ T5897] dvb-usb: bulk message failed: -22 (2/0) [ 1596.790191][ T5897] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1596.801785][ T5897] (NULL device *): no alternate interface [ 1596.896233][ T5897] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1597.113948][T28493] netlink: 'syz.0.5535': attribute type 13 has an invalid length. [ 1597.432987][ T5897] usb 3-1: USB disconnect, device number 52 [ 1597.570864][T28493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1597.580310][T28493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.167741][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1598.340581][ T10] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 1598.349238][ T10] usb 2-1: config 0 has no interface number 0 [ 1598.355756][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 1598.419673][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.551517][ T10] usb 2-1: config 0 descriptor?? [ 1599.021654][ T10] quatech2 2-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 1599.453608][ T10] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1599.464124][ T10] quatech2 2-1:0.212: probe with driver quatech2 failed with error -71 [ 1599.491433][ T10] usb 2-1: USB disconnect, device number 71 [ 1601.187870][T21536] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1601.408708][T21536] usb 7-1: Using ep0 maxpacket: 8 [ 1601.424916][T21536] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.450728][T21536] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1601.496499][T21536] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1601.516844][T21536] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.547092][T21536] usb 7-1: Product: syz [ 1601.559907][T21536] usb 7-1: Manufacturer: syz [ 1601.566366][T21536] usb 7-1: SerialNumber: syz [ 1601.767957][T27274] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1602.053088][T27274] usb 2-1: Using ep0 maxpacket: 16 [ 1602.077907][T27274] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1602.172019][T27274] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1602.410842][T28551] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 1602.449424][T27274] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1602.462591][T27274] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1602.472730][T27274] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1602.826488][T27274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.846320][T27274] usb 2-1: Product: syz [ 1602.882423][T27274] usb 2-1: Manufacturer: syz [ 1602.891978][T27274] usb 2-1: SerialNumber: syz [ 1603.346366][T27274] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 72 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1603.629784][T27274] usb 2-1: USB disconnect, device number 72 [ 1604.146096][T21536] usb 7-1: 0:2 : does not exist [ 1604.286131][T21536] usb 7-1: USB disconnect, device number 21 [ 1605.247898][T19836] udevd[19836]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1605.533166][T28565] usblp0: removed [ 1605.607171][ T5833] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1606.540180][ T5833] usb 4-1: config 0 has an invalid interface number: 212 but max is 0 [ 1606.548996][ T5833] usb 4-1: config 0 has no interface number 0 [ 1606.555217][ T5833] usb 4-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 1606.583624][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.608698][ T5833] usb 4-1: config 0 descriptor?? [ 1606.629213][ T5833] quatech2 4-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 1607.034842][ T5833] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1607.087213][ T5833] quatech2 4-1:0.212: probe with driver quatech2 failed with error -71 [ 1607.150967][ T5833] usb 4-1: USB disconnect, device number 110 [ 1607.739655][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.746039][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.497200][T28627] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1609.908359][T27274] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1610.009405][ T5833] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1610.167650][ T5833] usb 4-1: Using ep0 maxpacket: 8 [ 1610.188384][ T5833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.228540][ T5833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1610.243620][ T5833] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1610.247643][T28638] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5567'. [ 1610.253384][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.299059][ T5833] usb 4-1: Product: syz [ 1610.310296][ T5833] usb 4-1: Manufacturer: syz [ 1610.322816][ T5833] usb 4-1: SerialNumber: syz [ 1610.446384][T27274] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1610.458076][T28638] netlink: 'syz.6.5567': attribute type 13 has an invalid length. [ 1610.557692][T27274] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.649395][T27274] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1610.657006][T27274] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 1610.666749][T27274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.755476][T27274] usb 2-1: config 0 descriptor?? [ 1611.504793][T28638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.512551][T28638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.975689][T28638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1612.233408][T28638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1612.332459][ T5833] usb 4-1: 0:2 : does not exist [ 1612.407103][ T5833] usb 4-1: USB disconnect, device number 111 [ 1612.605678][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.630142][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.644777][T27274] usbhid 2-1:0.0: can't add hid device: -71 [ 1612.651553][T27274] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1612.663386][T27274] usb 2-1: USB disconnect, device number 73 [ 1612.757422][T28643] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1612.773852][T21536] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1612.814363][T28652] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1612.844857][T28652] bond3: (slave macvlan2): Enslaving as a backup interface with a down link [ 1612.877897][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.897207][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.919300][T28660] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1612.944552][T21536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1612.960707][T21536] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1613.009096][T21536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.031457][T21536] usb 3-1: config 0 descriptor?? [ 1613.044654][T28653] netlink: 'syz.3.5571': attribute type 13 has an invalid length. [ 1613.295971][T28648] netlink: 'syz.2.5570': attribute type 10 has an invalid length. [ 1613.305148][T28648] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5570'. [ 1613.348314][T28650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.358336][T28650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.388052][T27274] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1613.564691][T27274] usb 7-1: Using ep0 maxpacket: 8 [ 1613.580878][T27274] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.591415][T27274] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1613.607678][T27274] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1613.637418][T27274] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.647278][T27274] usb 7-1: Product: syz [ 1613.652155][T27274] usb 7-1: Manufacturer: syz [ 1613.656874][T27274] usb 7-1: SerialNumber: syz [ 1613.957972][T28673] input: syz1 as /devices/virtual/input/input125 [ 1614.458464][T19888] udevd[19888]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 1614.560656][T28653] tipc: Resetting bearer [ 1615.416054][T21536] usbhid 3-1:0.0: can't add hid device: -71 [ 1615.423041][T21536] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1615.438259][T21536] usb 3-1: USB disconnect, device number 53 [ 1616.179770][T28681] vivid-002: disconnect [ 1616.303089][T28680] vivid-002: reconnect [ 1616.320311][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.344749][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.397753][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.406790][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.605129][T27274] usb 7-1: 0:2 : does not exist [ 1616.692007][T27274] usb 7-1: USB disconnect, device number 22 [ 1616.788457][T28696] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1616.858252][T19836] udevd[19836]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1617.139049][ T5897] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1617.182634][T28706] net_ratelimit: 565 callbacks suppressed [ 1617.182655][T28706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1617.294385][T28704] netlink: 'syz.3.5582': attribute type 13 has an invalid length. [ 1617.419663][T27274] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1617.677664][T27274] usb 7-1: Using ep0 maxpacket: 8 [ 1617.720039][T27274] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.737717][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 1617.823252][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.837001][T27274] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1617.855730][T28704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1617.871742][T28704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.923435][T28704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1617.946157][ T5897] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1617.966966][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.240662][ T5897] usb 1-1: config 0 descriptor?? [ 1618.296972][T27274] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1618.318313][T27274] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.656099][T28691] delete_channel: no stack [ 1618.661025][T27274] usb 7-1: Product: syz [ 1618.665533][T27274] usb 7-1: Manufacturer: syz [ 1618.670788][T27274] usb 7-1: SerialNumber: syz [ 1618.892296][ T5897] mcp2221 0003:04D8:00DD.0038: unknown main item tag 0x0 [ 1618.907893][ T5897] mcp2221 0003:04D8:00DD.0038: unknown main item tag 0x0 [ 1618.936738][ T5897] mcp2221 0003:04D8:00DD.0038: unknown main item tag 0x0 [ 1619.138845][ T5897] mcp2221 0003:04D8:00DD.0038: unknown main item tag 0x0 [ 1619.156924][ T5897] mcp2221 0003:04D8:00DD.0038: unknown main item tag 0x0 [ 1619.323303][ T5897] mcp2221 0003:04D8:00DD.0038: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1619.653813][ T5897] usb 1-1: USB disconnect, device number 110 [ 1620.153739][T27274] usb 7-1: 0:2 : does not exist [ 1620.172834][T27274] usb 7-1: USB disconnect, device number 23 [ 1620.261076][T19836] udevd[19836]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1620.289123][T17798] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1620.449766][T17798] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1620.868273][T27274] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1621.317677][T27274] usb 7-1: Using ep0 maxpacket: 16 [ 1621.324634][T27274] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1621.338596][T27274] usb 7-1: config 1 has an invalid interface number: 68 but max is 0 [ 1621.346845][T27274] usb 7-1: config 1 has no interface number 0 [ 1621.560441][T17798] usb 3-1: not running at top speed; connect to a high speed hub [ 1621.597721][T27274] usb 7-1: config 1 interface 68 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1621.610006][T17798] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.637692][T27274] usb 7-1: config 1 interface 68 has no altsetting 0 [ 1621.644561][T17798] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1621.741854][T17798] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1621.748582][T27274] usb 7-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=51.65 [ 1621.768079][T17798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.776643][T27274] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.784934][T17798] usb 3-1: Product: syz [ 1621.808262][T27274] usb 7-1: Product: syz [ 1621.815362][T17798] usb 3-1: Manufacturer: syz [ 1621.819306][T27274] usb 7-1: Manufacturer: syz [ 1621.820082][T17798] usb 3-1: SerialNumber: syz [ 1621.824600][T27274] usb 7-1: SerialNumber: syz [ 1621.888881][T28713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5583'. [ 1622.184935][T17798] usb 3-1: 0:2 : does not exist [ 1622.252920][T17798] usb 3-1: USB disconnect, device number 54 [ 1622.370583][T19888] udevd[19888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1622.474803][ T30] audit: type=1326 audit(1759509811.012:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28734 comm="syz.0.5590" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701e539 code=0x0 [ 1622.496594][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.459149][T27274] smsusb:smsusb_probe: board id=9, interface number 68 [ 1623.469967][T27274] usb 7-1: USB disconnect, device number 24 [ 1623.736768][T28757] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5597'. [ 1624.069125][T27274] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1624.288391][T27274] usb 7-1: Using ep0 maxpacket: 16 [ 1624.518117][T27274] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.718153][T27274] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1624.740878][T27274] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.826543][T27274] usb 7-1: config 0 descriptor?? [ 1625.104111][T28752] delete_channel: no stack [ 1625.319742][T27274] mcp2221 0003:04D8:00DD.0039: unknown main item tag 0x0 [ 1625.337115][T27274] mcp2221 0003:04D8:00DD.0039: unknown main item tag 0x0 [ 1625.371183][T27274] mcp2221 0003:04D8:00DD.0039: unknown main item tag 0x0 [ 1625.467667][T27274] mcp2221 0003:04D8:00DD.0039: unknown main item tag 0x0 [ 1625.475529][T27274] mcp2221 0003:04D8:00DD.0039: unknown main item tag 0x0 [ 1625.490407][T27274] mcp2221 0003:04D8:00DD.0039: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1626.240764][ T977] usb 7-1: USB disconnect, device number 25 [ 1626.607919][ T5897] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 1626.790719][ T5897] usb 1-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 1626.801352][ T5897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1626.836826][ T5897] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1626.879231][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1626.887341][ T5897] usb 1-1: SerialNumber: syz [ 1627.307654][T17798] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1627.387269][ T5897] usb 1-1: 0:2 : does not exist [ 1627.453427][ T5897] usb 1-1: unit 5 not found! [ 1627.955051][ T5897] usb 1-1: USB disconnect, device number 111 [ 1627.982094][T17798] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1628.028497][T17798] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1628.062405][T19836] udevd[19836]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1628.099179][T17798] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1628.166951][T17798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.223497][T17798] usb 4-1: config 0 descriptor?? [ 1628.288959][T17798] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1628.549053][T28816] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5609'. [ 1628.647473][T28816] dvmrp1: entered allmulticast mode [ 1628.657228][T28818] dvmrp1: left allmulticast mode [ 1628.817681][ T977] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 1628.929230][T17798] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1628.997375][ T977] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1629.005569][ T977] usb 1-1: config 0 has no interface number 0 [ 1629.014186][ T977] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1629.021188][T28820] openvswitch: netlink: Flow key attr not present in new flow. [ 1629.038963][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.063505][ T977] usb 1-1: config 0 descriptor?? [ 1629.072923][ T977] usb 1-1: selecting invalid altsetting 1 [ 1629.079419][ T977] dvb_ttusb_budget: ttusb_init_controller: error [ 1629.087730][T17798] usb 2-1: Using ep0 maxpacket: 8 [ 1629.089649][ T977] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1629.120895][T17798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.135400][T17798] usb 2-1: config 0 has no interfaces? [ 1629.154367][T17798] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1629.173042][T17798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.198760][T17798] usb 2-1: config 0 descriptor?? [ 1629.348436][ T977] DVB: Unable to find symbol cx22700_attach() [ 1629.582091][ T977] DVB: Unable to find symbol tda10046_attach() [ 1629.592442][ T977] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1629.613475][T27274] usb 2-1: USB disconnect, device number 74 [ 1629.725447][ T977] usb 1-1: USB disconnect, device number 112 [ 1630.270855][ T977] usb 4-1: USB disconnect, device number 112 [ 1630.480740][T28836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5615'. [ 1630.500645][T28836] 8021q: VLANs not supported on caif0 [ 1630.552058][T28841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5617'. [ 1630.597974][T28841] ip6_vti0: entered allmulticast mode [ 1630.686908][T28845] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1630.693488][T28845] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1630.722493][T28845] vhci_hcd vhci_hcd.0: Device attached [ 1630.897702][ T977] vhci_hcd: vhci_device speed not set [ 1630.961590][ T977] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 1630.997662][ T10] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1631.087910][T28864] futex_wake_op: syz.0.5624 tries to shift op by -1; fix this program [ 1631.107852][T17798] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1631.157974][T27274] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1631.169192][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1631.196638][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1631.216650][ T10] usb 4-1: config 220 descriptor has 1 excess byte, ignoring [ 1631.237003][ T10] usb 4-1: config 220 has no interface number 2 [ 1631.245089][T21536] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1631.273905][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1631.305228][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1631.313099][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1631.320356][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1631.334144][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1631.344276][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.354522][ T10] usb 4-1: Product: syz [ 1631.369929][T17798] usb 7-1: Using ep0 maxpacket: 16 [ 1631.395250][T17798] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.414826][ T10] usb 4-1: Manufacturer: syz [ 1631.420054][ T10] usb 4-1: SerialNumber: syz [ 1631.427672][T21536] usb 3-1: device descriptor read/64, error -71 [ 1631.627341][T17798] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.638858][T17798] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1631.638923][T27274] usb 2-1: config 0 has no interfaces? [ 1631.648838][T17798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.676360][T17798] usb 7-1: config 0 descriptor?? [ 1631.698006][T27274] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1631.739469][T27274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.749029][T27274] usb 2-1: Product: syz [ 1631.753283][T27274] usb 2-1: Manufacturer: syz [ 1631.758632][T27274] usb 2-1: SerialNumber: syz [ 1631.766477][T27274] usb 2-1: config 0 descriptor?? [ 1631.877704][T21536] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1631.900819][T28845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1631.909787][T28845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.921360][T28845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1631.930433][T28845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.987822][T28845] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1632.008092][T21536] usb 3-1: device descriptor read/64, error -71 [ 1632.026596][T28845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.042441][T28845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.114175][T17798] hid (null): invalid report_count 55922 [ 1632.119281][T21536] usb usb3-port1: attempt power cycle [ 1632.125758][T17798] hid (null): invalid report_size 4380 [ 1632.132954][T17798] hid (null): unknown global tag 0xc [ 1632.467732][T21536] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1632.488391][T21536] usb 3-1: device descriptor read/8, error -71 [ 1632.557644][T27274] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1632.709927][T27274] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1632.727755][T27274] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1632.740989][T21536] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1632.748755][T27274] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1632.759514][T27274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.773500][T27274] usb 1-1: config 0 descriptor?? [ 1632.787744][T21536] usb 3-1: device descriptor read/8, error -71 [ 1632.803216][T27274] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1632.907993][T21536] usb usb3-port1: unable to enumerate USB device [ 1632.916360][T17798] letsketch 0003:6161:4D15.003A: Device info: ఁ [ 1633.633041][T21536] usb 2-1: USB disconnect, device number 75 [ 1634.224648][T17798] usb 7-1: Max retries (5) exceeded reading string descriptor 201 [ 1634.240039][T17798] letsketch 0003:6161:4D15.003A: probe with driver letsketch failed with error -71 [ 1634.256649][T17798] usb 7-1: USB disconnect, device number 26 [ 1635.047039][T28888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5629'. [ 1635.100285][T28888] 8021q: VLANs not supported on caif0 [ 1635.362147][T21536] usb 1-1: USB disconnect, device number 113 [ 1635.407749][T27274] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1635.489470][T28896] netlink: 'syz.0.5632': attribute type 6 has an invalid length. [ 1635.519933][T28896] netlink: 'syz.0.5632': attribute type 1 has an invalid length. [ 1635.545804][T28896] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.5632'. [ 1635.605862][T27274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.632340][T27274] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1635.652447][T27274] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1635.662648][T27274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.672658][T27274] usb 3-1: Product: syz [ 1635.677711][T27274] usb 3-1: Manufacturer: syz [ 1635.682524][T27274] usb 3-1: SerialNumber: syz [ 1635.708852][T27274] cdc_mbim 3-1:1.0: skipping garbage [ 1635.817670][T26894] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 1636.249952][T28891] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1636.251990][T26894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1636.279021][T26894] usb 1-1: not running at top speed; connect to a high speed hub [ 1636.290590][T26894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.304904][T26894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1636.320044][T26894] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1636.329511][T26894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.338722][T26894] usb 1-1: Product: syz [ 1636.342952][T26894] usb 1-1: Manufacturer: syz [ 1636.351286][T26894] usb 1-1: SerialNumber: syz [ 1636.594256][T26894] usb 1-1: 0:2 : does not exist [ 1636.610209][T26894] usb 1-1: unit 0 not found! [ 1636.824260][ T10] usb 4-1: selecting invalid altsetting 0 [ 1636.841782][T26894] usb 1-1: USB disconnect, device number 114 [ 1636.850099][ T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1636.857496][ T10] uvcvideo 4-1:220.0: No valid video chain found. [ 1636.871277][T28891] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1636.885884][T27274] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1636.906536][T27274] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 1636.922463][T21554] udevd[21554]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1636.930223][ T10] usb 4-1: selecting invalid altsetting 0 [ 1636.954321][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1637.089150][T27274] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 1637.106584][T27274] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 1637.147161][T27274] wwan wwan0: port wwan0mbim0 attached [ 1637.196715][T27274] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, e2:32:12:75:e3:04 [ 1637.263804][T28916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5636'. [ 1637.308388][ C0] wdm_int_callback: 49 callbacks suppressed [ 1637.308415][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 1637.321060][ C0] wdm_int_callback: 49 callbacks suppressed [ 1637.321083][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 1637.333532][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 1637.340258][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 1637.347146][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 1637.353958][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 1637.360482][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 1637.367289][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 1637.373755][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 1637.380471][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 1637.387301][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 1637.394039][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 1637.400406][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1637.419865][ T5897] usb 3-1: USB disconnect, device number 59 [ 1637.444528][ T5897] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 1637.569509][ T5897] wwan wwan0: port wwan0mbim0 disconnected [ 1637.689557][ T30] audit: type=1326 audit(1759509826.232:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28907 comm="syz.6.5635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7fc00000 [ 1637.761773][T28928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.774921][T28928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.927755][T27274] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1637.941918][T28934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5642'. [ 1637.994244][T28935] fuse: Bad value for 'fd' [ 1638.040023][T28935] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5638'. [ 1638.095584][T28934] 8021q: VLANs not supported on caif0 [ 1638.122257][T27274] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1638.135033][T27274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.173601][T27274] usb 2-1: Product: syz [ 1638.262790][T27274] usb 2-1: Manufacturer: syz [ 1638.270464][T27274] usb 2-1: SerialNumber: syz [ 1638.357314][T27274] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1638.404576][T26894] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1638.537729][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1638.610255][T28925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5640'. [ 1638.713573][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1638.737723][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1638.758805][ T5897] usb 2-1: USB disconnect, device number 76 [ 1638.789698][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1638.953465][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.988331][ T10] usb 3-1: config 0 descriptor?? [ 1639.072986][T28954] ------------[ cut here ]------------ [ 1639.073082][T28954] WARNING: CPU: 0 PID: 28954 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x137/0x160 [ 1639.073129][T28954] Modules linked in: [ 1639.073206][T28954] CPU: 0 UID: 0 PID: 28954 Comm: syz.6.5644 Not tainted syzkaller #0 PREEMPT(full) [ 1639.073228][T28954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1639.073241][T28954] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 1639.073267][T28954] Code: 42 80 3c 28 00 74 08 48 89 df e8 f4 e1 6b fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 ea 3f 06 fc 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 1639.073283][T28954] RSP: 0018:ffffc9000e236ee8 EFLAGS: 00010287 [ 1639.073299][T28954] RAX: ffffffff85b83eb6 RBX: ffffc9000e237060 RCX: 0000000000080000 [ 1639.073313][T28954] RDX: ffffc9001d211000 RSI: 0000000000000cda RDI: 0000000000000cdb [ 1639.073328][T28954] RBP: 1ffff92001c46e0c R08: ffffc900033f9000 R09: 0000000000000000 [ 1639.073344][T28954] R10: ffffc900033f9000 R11: ffffffff85b83d80 R12: 0000017d9d5ae126 [ 1639.073362][T28954] R13: dffffc0000000000 R14: ffff8881452e4028 R15: 0000017d9d5ae126 [ 1639.073379][T28954] FS: 0000000000000000(0000) GS:ffff888126396000(0063) knlGS:00000000f4bb6b40 [ 1639.073396][T28954] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1639.073413][T28954] CR2: 0000000080080018 CR3: 0000000064d9a000 CR4: 00000000003526f0 [ 1639.073435][T28954] Call Trace: [ 1639.073447][T28954] [ 1639.073457][T28954] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1639.073489][T28954] drm_crtc_next_vblank_start+0x226/0x470 [ 1639.073531][T28954] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 1639.073567][T28954] ? drm_gem_fb_vmap+0x230/0x8d0 [ 1639.073599][T28954] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 1639.073643][T28954] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1639.073674][T28954] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 1639.073711][T28954] drm_atomic_helper_commit+0x5c7/0xb10 [ 1639.073742][T28954] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1639.073764][T28954] drm_atomic_commit+0x262/0x2c0 [ 1639.073798][T28954] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1639.073825][T28954] ? __pfx___drm_printfn_info+0x10/0x10 [ 1639.073874][T28954] ? drm_client_rotation+0x47c/0x5b0 [ 1639.073909][T28954] drm_client_modeset_commit_atomic+0x620/0x760 [ 1639.073955][T28954] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1639.074015][T28954] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1639.074057][T28954] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 1639.074092][T28954] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 1639.074133][T28954] fb_pan_display+0x39e/0x680 [ 1639.074161][T28954] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 1639.074191][T28954] fb_set_var+0x85a/0xf50 [ 1639.074233][T28954] ? __pfx_fb_set_var+0x10/0x10 [ 1639.074268][T28954] ? __mutex_lock+0x335/0x1350 [ 1639.074295][T28954] ? do_raw_spin_lock+0x121/0x290 [ 1639.074336][T28954] ? __lock_acquire+0xab9/0xd20 [ 1639.074358][T28954] ? do_fb_ioctl+0x598/0x750 [ 1639.074423][T28954] do_fb_ioctl+0x63b/0x750 [ 1639.074457][T28954] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1639.074538][T28954] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1639.074579][T28954] ? do_vfs_ioctl+0xbe8/0x1430 [ 1639.074617][T28954] fb_compat_ioctl+0x2f4/0x780 [ 1639.074660][T28954] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 1639.074689][T28954] ? __lock_acquire+0xab9/0xd20 [ 1639.074739][T28954] ? __fget_files+0x2a/0x420 [ 1639.074778][T28954] ? __fget_files+0x3a0/0x420 [ 1639.074808][T28954] ? __fget_files+0x2a/0x420 [ 1639.074920][T28954] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1639.074952][T28954] __ia32_compat_sys_ioctl+0x540/0x840 [ 1639.074986][T28954] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1639.075023][T28954] ? __se_sys_futex_time32+0x360/0x3e0 [ 1639.075082][T28954] ? lockdep_hardirqs_on+0x9c/0x150 [ 1639.075111][T28954] __do_fast_syscall_32+0xb6/0x2b0 [ 1639.075147][T28954] do_fast_syscall_32+0x34/0x80 [ 1639.075175][T28954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1639.075201][T28954] RIP: 0023:0xf704e539 [ 1639.075223][T28954] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1639.075243][T28954] RSP: 002b:00000000f4bb655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1639.075269][T28954] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000004601 [ 1639.075285][T28954] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1639.075301][T28954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1639.075315][T28954] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1639.075330][T28954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1639.075368][T28954] [ 1639.075382][T28954] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1639.075397][T28954] CPU: 0 UID: 0 PID: 28954 Comm: syz.6.5644 Not tainted syzkaller #0 PREEMPT(full) [ 1639.075421][T28954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1639.075434][T28954] Call Trace: [ 1639.075444][T28954] [ 1639.075454][T28954] dump_stack_lvl+0x99/0x250 [ 1639.075481][T28954] ? __asan_memcpy+0x40/0x70 [ 1639.075509][T28954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1639.075536][T28954] ? __pfx__printk+0x10/0x10 [ 1639.075584][T28954] vpanic+0x237/0x6d0 [ 1639.075611][T28954] ? __pfx_vpanic+0x10/0x10 [ 1639.075652][T28954] panic+0xb9/0xc0 [ 1639.075677][T28954] ? __pfx_panic+0x10/0x10 [ 1639.075723][T28954] __warn+0x31b/0x4b0 [ 1639.075747][T28954] ? vkms_get_vblank_timestamp+0x137/0x160 [ 1639.075780][T28954] ? vkms_get_vblank_timestamp+0x137/0x160 [ 1639.075809][T28954] report_bug+0x2be/0x4f0 [ 1639.075831][T28954] ? vkms_get_vblank_timestamp+0x137/0x160 [ 1639.075890][T28954] ? vkms_get_vblank_timestamp+0x137/0x160 [ 1639.075920][T28954] ? vkms_get_vblank_timestamp+0x139/0x160 [ 1639.075949][T28954] handle_bug+0x84/0x160 [ 1639.075977][T28954] exc_invalid_op+0x1a/0x50 [ 1639.076004][T28954] asm_exc_invalid_op+0x1a/0x20 [ 1639.076023][T28954] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 1639.076053][T28954] Code: 42 80 3c 28 00 74 08 48 89 df e8 f4 e1 6b fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 ea 3f 06 fc 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 1639.076070][T28954] RSP: 0018:ffffc9000e236ee8 EFLAGS: 00010287 [ 1639.076089][T28954] RAX: ffffffff85b83eb6 RBX: ffffc9000e237060 RCX: 0000000000080000 [ 1639.076103][T28954] RDX: ffffc9001d211000 RSI: 0000000000000cda RDI: 0000000000000cdb [ 1639.076116][T28954] RBP: 1ffff92001c46e0c R08: ffffc900033f9000 R09: 0000000000000000 [ 1639.076131][T28954] R10: ffffc900033f9000 R11: ffffffff85b83d80 R12: 0000017d9d5ae126 [ 1639.076146][T28954] R13: dffffc0000000000 R14: ffff8881452e4028 R15: 0000017d9d5ae126 [ 1639.076169][T28954] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1639.076206][T28954] ? vkms_get_vblank_timestamp+0x136/0x160 [ 1639.076243][T28954] ? vkms_get_vblank_timestamp+0x136/0x160 [ 1639.076270][T28954] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1639.076300][T28954] drm_crtc_next_vblank_start+0x226/0x470 [ 1639.076338][T28954] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 1639.076370][T28954] ? drm_gem_fb_vmap+0x230/0x8d0 [ 1639.076399][T28954] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 1639.076439][T28954] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1639.076468][T28954] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 1639.076503][T28954] drm_atomic_helper_commit+0x5c7/0xb10 [ 1639.076530][T28954] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1639.076550][T28954] drm_atomic_commit+0x262/0x2c0 [ 1639.076581][T28954] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1639.076607][T28954] ? __pfx___drm_printfn_info+0x10/0x10 [ 1639.076643][T28954] ? drm_client_rotation+0x47c/0x5b0 [ 1639.076675][T28954] drm_client_modeset_commit_atomic+0x620/0x760 [ 1639.076718][T28954] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1639.076774][T28954] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1639.076812][T28954] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 1639.076853][T28954] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 1639.076893][T28954] fb_pan_display+0x39e/0x680 [ 1639.076918][T28954] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 1639.076946][T28954] fb_set_var+0x85a/0xf50 [ 1639.076985][T28954] ? __pfx_fb_set_var+0x10/0x10 [ 1639.077018][T28954] ? __mutex_lock+0x335/0x1350 [ 1639.077043][T28954] ? do_raw_spin_lock+0x121/0x290 [ 1639.077082][T28954] ? __lock_acquire+0xab9/0xd20 [ 1639.077101][T28954] ? do_fb_ioctl+0x598/0x750 [ 1639.077163][T28954] do_fb_ioctl+0x63b/0x750 [ 1639.077195][T28954] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1639.077267][T28954] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1639.077299][T28954] ? do_vfs_ioctl+0xbe8/0x1430 [ 1639.077328][T28954] fb_compat_ioctl+0x2f4/0x780 [ 1639.077362][T28954] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 1639.077383][T28954] ? __lock_acquire+0xab9/0xd20 [ 1639.077425][T28954] ? __fget_files+0x2a/0x420 [ 1639.077458][T28954] ? __fget_files+0x3a0/0x420 [ 1639.077484][T28954] ? __fget_files+0x2a/0x420 [ 1639.077512][T28954] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1639.077536][T28954] __ia32_compat_sys_ioctl+0x540/0x840 [ 1639.077564][T28954] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1639.077596][T28954] ? __se_sys_futex_time32+0x360/0x3e0 [ 1639.077645][T28954] ? lockdep_hardirqs_on+0x9c/0x150 [ 1639.077672][T28954] __do_fast_syscall_32+0xb6/0x2b0 [ 1639.077705][T28954] do_fast_syscall_32+0x34/0x80 [ 1639.077728][T28954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1639.077752][T28954] RIP: 0023:0xf704e539 [ 1639.077768][T28954] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1639.077785][T28954] RSP: 002b:00000000f4bb655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1639.077806][T28954] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000004601 [ 1639.077820][T28954] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1639.077833][T28954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1639.077855][T28954] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1639.077868][T28954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1639.077902][T28954] [ 1639.078349][T28954] Kernel Offset: disabled