last executing test programs: 4.425850247s ago: executing program 0 (id=1703): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee3, &(0x7f0000000000)) (async) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$midi(0x5, 0x97, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x1, 0x1, 0xd, 0x20, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x30, 0x4, [@midi_out_jack={0x13, 0x24, 0x3, 0x2, 0xb, 0x6, [{0x6, 0x8}, {0x7f, 0xf7}, {0x8, 0xf}, {0xd, 0x5a}, {0x6, 0x5}, {0xff, 0x2}], 0x9}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}], [{{0x9, 0x5, 0x5, 0x3, 0x200, 0x6, 0x0, 0x6, {0xf, 0x25, 0x1, 0xb, "977e9293a707a4a050936a"}}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x7, 0x7, 0xb0, {0x11, 0x25, 0x1, 0xd, "1271eeb4bcf5fcb63e46513018"}}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x8, 0x3, 0x0, {0x10, 0x25, 0x1, 0xc, "462fb3dd0d5ac78d51b95b29"}}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0x40, 0x2, 0x8, {0x5, 0x25, 0x1, 0x1, "b3"}}}]}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x0, 0x7, 0x89, 0x6, 0x10, 0x2}, 0x70, &(0x7f0000000540)={0x5, 0xf, 0x70, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1, 0x8, 0xe, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "6219b889529fbfc6d592752b75a33d9c"}, @generic={0x50, 0x10, 0xb, "fc33e0f9a366a70fbb3b7d4d5cac5ce78429337ba015711cbac1206d95aa02671961c81affb6f0e58d4c1b396e08cbb5230fdbdcff2e931244276e5169fc312ad1764fa3360b2d0bbc1a4efaa1"}]}, 0x1, [{0x52, &(0x7f00000005c0)=@string={0x52, 0x3, "d75822e0833e5f5d7efb917262f6b8ed2d7439914a2e1a41a7532bed0ef6f266e87293cb6b905bed358e087fddb04625130585794e86ab09bea159f66fb111c7bccc4983f281bd04d3d2f0560ad63552"}}]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 4.214492587s ago: executing program 1 (id=1707): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)={0x18, 0x2f, 0x9, 0x70bd28, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) landlock_create_ruleset(&(0x7f0000000000)={0xf008, 0x2, 0x2, 0x800, 0x9, 0x3}, 0x30, 0x1) 3.704676638s ago: executing program 1 (id=1708): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x140) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000001940)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fe19e7b5966c3537e16510e958589532a93ee4599f9ee6b6d7e978cb327da9b62678aaed3984e531653842da17b80dc872167b30eba393ccdff51fe8b930af0e094665b16e48efea68b396302702f4384b6d1119d8ca40b2b247e39a430a77434b44c1fb35d7c18f8311a1a0c27efce8620e16501f0661241ed799cd953fda64f5b7167384fed677ddefe5de0aa74dd5edf1bbba050f997aee1fa967d32c3731978512a52850af73a0fb742e821b7517a1e7cfcbc7cd5f5f17d584e007fdf59cc98d99687c4e825bd472c8aa7cf3d387c4fe1eff776acb4203d74c2142155ef66af039d7191d4e851d375ffa14c25ab3398603299ccc200e8bd708de795acc1618251df2b9242749094c3d03a13f315cbfc41c81bae051a9e36876a73eb99808fdfa422dc5485cf6a0bdaf7833f21eee35dfd8fe89d1cd0c7f40fc44deb1e07fe67914948706077c780a130d5f47fa6a5b4be45d951acf2f38daf207c902b1b2147607bc4a3074876fc80fff1d31e6d7ab244a04af495eb7c22a52220ffe3c91865300a76cb947da34af5dbc6d1a76375f9056b8fabb6ea43ee1a1bebb39a41b91a9ed9080c89d2b43b4213a468e6f19cd62a37c749a184dae2fd2bc03b005a2b6eb1403d3f0eb05a513b3f7e4f7b5e70d0fe6e1021418ec83a1bd115d293c51b49fefed2be6859b1126ba307ada587acbc74b652ab89ad312eff4dc7b58fbb4c2502e766258492d24b8786d5047825d33b6d7496cf2e71726078df81ff71faaaebc781afd39b2edeecec8e4f0ef654c522325", @ANYRES32=0x0, @ANYBLOB="09004500b2d188ce22000000550045007fca7da81d7158ab3d11f0dfc2bc68b871922c9e9d26546b94454ff7c07301689b4c296028c915cba79a02bcae3910b955cffc1998ac03111a402c693174434d8d3cebdfe741c1153844580da40ddc8f3a000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bb", 0x3f}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_dev$loop(0x0, 0xf, 0x183043) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f0000000600)={0xdb, 0x0, 0x6}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000340)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000940)={r8, 0x7}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20000023896) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_buf(r0, 0x0, 0x27, 0x0, 0x0) 3.613461797s ago: executing program 2 (id=1709): r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000880)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xff, 0x1000}, &(0x7f0000000080)=0x90) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001480)=@deltaction={0x128, 0x31, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x201d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x17200000}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x14}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc516}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='veth1_to_batadv\x00', 0x10) r5 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x400, 0x61) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r9, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) close(0x3) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000080)=0x0) process_vm_readv(r10, &(0x7f0000001900)=[{0x0}, {&(0x7f0000000800)=""/4096, 0x1000}, {0x0}], 0x3, &(0x7f0000002100)=[{0x0}, {0x0}, {&(0x7f0000001c40)=""/213, 0xd5}, {0x0}, {0x0}], 0x5, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000000), 0x0, 0x0, 0x3) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r1, r11}) symlinkat(&(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') listxattr(&(0x7f0000000480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 3.365976482s ago: executing program 2 (id=1710): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in=@dev={0xac, 0x14, 0x14, 0x31}, @in=@multicast2, 0x4e23, 0x20, 0x20, 0x3, 0xa, 0x80}, {0xef, 0x0, 0x40000000007, 0x6811221d, 0x8, 0x8000000000000003, 0x200000200000003, 0xd}, {0x7, 0x40, 0x6, 0x7}, 0x401, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0xfffffffd, 0x6c}, 0x2, @in=@remote, 0x3502, 0x1, 0x0, 0x0, 0x800006, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000d0400)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "3a85008fc6c867"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="38001bfe3c3a00000100000108000440000000070500d4271da701000100000006000640000000000a0000000000000400"/62], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000004740)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000002740)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x4, "eb8d13077e90be"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000d1400)={{0x0, 0x3, 0xfcc2, 0x0, 0x40, 0x6, 0xea3, 0x2, 0x9, 0x7, 0x10000, 0xd, 0x3, 0x8, 0xffffffff7fffffff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000d2400)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf5, "72201ec06bac63"}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, &(0x7f00000f5740)={0x0, 0x0, "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", "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"}) r13 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x140) r14 = syz_open_dev$loop(0x0, 0xf, 0x183043) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81e8943c, &(0x7f0000000340)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r14, 0xd0009412, &(0x7f0000000940)={r15, 0x7}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f00000f6740)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "cc0faf0a53ab73"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000f7740)={{0x0, 0x40, 0x7, 0x80000000, 0x4, 0xf, 0xfffffffffffffff9, 0x7, 0x42, 0xf, 0x401, 0xfffffffffffffff7, 0x8, 0xffffffffffff790d}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000f8740)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000f9740)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000f9940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f00000f9b40)={0xffffffffffffffff, [{}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {r15, r17}, {r18, r19}, {r20, r21}], 0x1, "ea5e40219f8516"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000d3400)={0x0, ""/256, 0x0, 0x0}) r23 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x140) r24 = syz_open_dev$loop(0x0, 0xf, 0x183043) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r23, 0x81e8943c, &(0x7f0000000340)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r24, 0xd0009412, &(0x7f0000000940)={r25, 0x7}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000d3600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000d3800)={0x8001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "7e4006cf37979c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000d4800)={0xd13000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {r8, r10}, {r20, r22}, {r25, r26}, {0x0, r27}], 0x6, "ef7682152f3d98"}) 3.128943279s ago: executing program 0 (id=1712): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, r2, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x74, 0x41, 0x300, 0x70bd27, 0x0, "", [@generic="d0eb45b5b34bcce3f1201939fbf6221ff94a6bf13d7de0ff4ccdd88e9f7ba746936b81ee1fae5a55e7568f94bbcf7d8069f1d49e7ffdd7aef394c022a1d2d5273b7e98a0040ca71bbb05b8f4cffd738ae48f691a2efcaa8495eb1a884eb0bb48", @nested={0x4, 0x11f}]}, 0x74}], 0x1, 0x0, 0x0, 0x6}, 0x4000800) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0xffffffff, 0x5, 0x80, 0x4, 0x9, 0x10001, 0x8}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) dup3(r5, r4, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xffffff87, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004051}, 0x4000040) 3.127977438s ago: executing program 2 (id=1713): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x4) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) pselect6(0x40, &(0x7f0000000080)={0x8, 0x6, 0x24000000, 0xffffffffffff8da7, 0xfd5, 0x7, 0x1, 0x81}, &(0x7f0000000280)={0x8000, 0x7f, 0x5, 0x9, 0x2, 0x9, 0xfffffffffffffff9, 0x8}, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000180)={r8}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(r3, &(0x7f0000000140)="9a", 0x1, 0x4, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @random='\b\x00'}, 0x14) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0xe, "43cc1505000000004763be9e0000"}}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="11000000020601040000000000000000030000000500040003004112d12b4afbd5c139cc0000000007800000064000000001000009c00000000300001500400000000000020073797a300000000005000100072000000000010007000000"], 0x70}, 0x1, 0x0, 0x0, 0x44806}, 0x8055) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r13, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4004000) 3.016222413s ago: executing program 3 (id=1714): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x2002002, &(0x7f0000002140)=ANY=[]) fsopen(&(0x7f00000000c0)='vxfs\x00', 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000500)='\x00\xab\\\xf8\xd2\xed\xac\x98\x96\x96DV\x90', &(0x7f00000002c0)='.\x00', r1) fanotify_init(0x200, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000400)={0xd, 0x7, 0x7fffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@gettaction={0x5c, 0x32, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtfilter={0x118, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe4, 0x2, [@TCA_MATCHALL_ACT={0xe0, 0x2, [@m_bpf={0xdc, 0xb, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x8, 0x0, 0x7, 0x2}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0x1b, 0x6, './file0/../file0/file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x5, 0xffffffffffffffff, 0xe, 0x8}}]}, {0x53, 0x6, "9cccb673e15d679753f3a53bfeb168eefc5f9584eb310f343bc3cbdd5579ab86929cf19b806dd87726e630a91dc5e594063980ad69413701712591d232c4eaaaab09064e3eeda745f3c2370dde0940"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) read$FUSE(r0, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0xfffffffffffffffe, 0x0, {0x3, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x2b, 0x1100, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffc00}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000044) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) 2.753759205s ago: executing program 2 (id=1715): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) 2.645735618s ago: executing program 3 (id=1716): r0 = socket$rds(0x15, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$rds(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000363000/0x2000)=nil, 0x2000, 0x3000014, 0x4001010, 0xffffffffffffffff, 0x74654000) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r3, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x6, 0x3d, @private1, @loopback, 0x40, 0x7800, 0xfffffffc, 0x2900}}) 2.599690869s ago: executing program 0 (id=1717): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, r2, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x74, 0x41, 0x300, 0x70bd27, 0x0, "", [@generic="d0eb45b5b34bcce3f1201939fbf6221ff94a6bf13d7de0ff4ccdd88e9f7ba746936b81ee1fae5a55e7568f94bbcf7d8069f1d49e7ffdd7aef394c022a1d2d5273b7e98a0040ca71bbb05b8f4cffd738ae48f691a2efcaa8495eb1a884eb0bb48", @nested={0x4, 0x11f}]}, 0x74}], 0x1, 0x0, 0x0, 0x6}, 0x4000800) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0xffffffff, 0x5, 0x80, 0x4, 0x9, 0x10001, 0x8}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) dup3(r5, r4, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xffffff87, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004051}, 0x4000040) 2.416709635s ago: executing program 3 (id=1718): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001580)=[{}]}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r3, &(0x7f000000cac0)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b3939", 0xfe8e}], 0x1) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.375619158s ago: executing program 1 (id=1719): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0xf4, 0x2, &(0x7f0000000cc0)={0x8, "f51d2a4cc4949d9c3a1df608c310f6aa436bba5f2faa4926deff85d80fe447883b"}}) 2.349155018s ago: executing program 0 (id=1720): timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000100)="1e5d3eb28c72d4c0a7421423ab512556c2726fa7d5338c420e3ca2ec83c6ab0f952338804482426e585ae6cab9801b82e9f0b7840820e9f8e363d2bc779f90610b872e5ed0f9cd5fcaee8efb01f28feff4b0acbf0a01ac3d2bef2a2fc81cef7195b253e37d8b7e7157723c92030aa408af81749214f5daa672abf2d3c90e3c546f9653f054b6988df014d85e5a596e55fe41f9fc8fa6613a1c58", &(0x7f00000001c0)="36a9362ccdf67a6cd603cc100cbdd34aa1937e53a8dc592e628f0835b71cec1778053f5e4c3bfd15b36f384895d5aabdf052f5701f8002a5af62989b16b561e4345bb805880e9cadc4fb2972f9e55266ae537878c35506f110ad9ba39120a2d995e46294bf8f73a1ebb4c0826f6d44701d37d9d330215c5791442fa6a01465acbab11323cbdc60fa6a9d29e0747ecf45c67e39fb7434"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0x7c778000) (async) getgroups(0x27, &(0x7f0000002540)) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x200402) (async) unshare(0x2a020400) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) 2.253132388s ago: executing program 0 (id=1721): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0xfac08}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) (fail_nth: 21) 2.252841166s ago: executing program 3 (id=1722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d07}]}) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa5, 0x4, 0x30, 0x46, @private0, @empty, 0x1, 0x80, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 1.713249351s ago: executing program 0 (id=1724): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x108, 0xfd, r2}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x28}}, 0x40010) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x803ff) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r4 = syz_clone(0xa0221400, &(0x7f0000000540)="7176ca91f726e7a8854996eae7306e98086dda5452f3b9deae5ff29b8716e9bab905d153ca4fbf5acd80356436c3eaca8b2119f156ce3d9b98d1df747d31de554b7c4ec7311703c605df7d13f29b0c1f5d9e4a007a49bf25416bf18fc9a844db6826242724a5b1b0d0da7db8b35a1781b678403ff9c4d726b4f28ce3f8276b751810e9f905d1ac47093aaa42776a2ad3c52981a95a5530a940b08d1cc0e2ec978ad990f3cc911bcd159958b3053650c62240efb4e57c268d64cb22e1d66edc9f4655707a7d24969dbc9368515c61095a2c879fc9c0a5e6a4d6fdb22fa69f2feeef3870e1", 0xe4, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="3ca65dd51f9124759cf54bf03d69e94020b2f0a8f2e9d5a72b8c27d059126d653a62751b18eea58e2e40165388c9ac65e6aa685d941c8d2738f4110dedeb37515cc525af3d") ptrace$ARCH_MAP_VDSO_64(0x1e, r4, 0x4, 0x2003) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000ff8000000000000005000600000000000a000000000000000000000000000000000000313e87218d64fdb7000000000002"], 0x80}, 0x1, 0x7}, 0x4008000) syz_usb_control_io(r3, &(0x7f0000000500)={0x18, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000304"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000900)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000740)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0xfffffffffffffffc, @random=0x2, 0x1, @void, @void, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6, {0xd, 0x0, 0xfeff, 0x4}}, @void, @val={0x5, 0x60, {0x1, 0x13, 0x1, "1245d9acebbc8d031c67fe81db0fe12aa749fe742a7c425c382977d890eab115538a700e903dd8a06af074a06eb680633c13852d9918a46783b0ba8fdcbc41b7458d29f70502dbebefcf51c630f927f90e25e6bd28f639a307c7eba799"}}, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x9}}, @void}, 0x9d) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000000) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x28004004) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000f140100000000000000000600004500736100000800030001008000"], 0x20}}, 0x0) 1.686784797s ago: executing program 2 (id=1725): bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820f54c7beef915d564c90c200", 0x11) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x1000000, 0x80c, 0x3, 0x1c, 0x7, 0x0, 0x10, 0x3, 0xe9, 0x1, 0x9, 0x4, 0x3f70}, {0x6, 0x6, 0xa, 0xc1, 0x4, 0x1, 0x47, 0xf5, 0x7, 0x8b, 0x44, 0x5, 0x3fffffffffe}, {0x7fffffff, 0x4, 0x0, 0x2, 0x5a, 0xd, 0x8, 0xf8, 0x5, 0x6, 0x3, 0x3, 0x4}], 0x800000}) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="0c0276aa6ceefaf08d71511f1dc39c506673e026afb468228d4a19ba6df63c388a88ac46f7863e6682b746375f53b8eb26df4b8946c1dc24badfa9936d06bffc5a607a3e2c5ab412556b4c0199b7a694be6c0f85e7fe41c86c1d3b382da1edba80b608f1e7537f77a2be4390b140c8f903161bc9b65153246d0add0d7bb32a234f70f36d000cf40a2b300312f3552f0a49edf33a05059eff824752589c564b514d2513cd7f9aa85583496ca8c69bc2f7e0eea2defde4a7f363f1863c74170a99dc9d49b8b2c7da25"], 0x28}}, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$unix(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="4db5a48f366fc09f4e317605ec0c22fe70728e40392ca3523476c5f2c0988ac625639688e7b2432dfda7eb31847fc029147435bd", 0x34}, {0x0}, {&(0x7f0000000000)="77528bea7173a0aea4a4e8ac8140ab495e5bcb21778366caf7c7e1001a7569f7b173921c0afc", 0x26}], 0x3, 0x0, 0x0, 0x400c085}}], 0x1, 0x800) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x5, 0x25dfdbfd, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x4000) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x0, 0xfffffffb, {0x7, r11}}, 0x18}, 0x1, 0x2000000, 0x0, 0x20000084}, 0x0) r12 = socket(0x2d, 0x2, 0x0) connect$qrtr(r12, &(0x7f0000000180)={0x2d, 0x4, 0xfffffffe}, 0xc) 1.505443095s ago: executing program 3 (id=1726): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001000)={{0x12, 0x1, 0x300, 0x26, 0x68, 0x4d, 0x8, 0x2040, 0xc602, 0x2aaf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x2e, 0xc8, 0x8, "", [{{0x9, 0x4, 0x0, 0x3, 0x0, 0xaf, 0xe8, 0x53, 0x2}}]}}]}}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x64e90, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020400) r4 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000800)={0x0, 0x0, 0x1000, 0x40001, 0x7c}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x2a1, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) pread64$ublk_ch(0xffffffffffffffff, &(0x7f0000001f80)=@buf_max_buf, 0x1000, 0x3c) 1.047959339s ago: executing program 1 (id=1728): r0 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x8000, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x2000000, r3}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x800c884, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000240)='+', 0x1, 0x40008c0, 0x0, 0x0) 921.235742ms ago: executing program 4 (id=1729): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x810}}], 0x400000000000172, 0x4001c00) 904.674712ms ago: executing program 1 (id=1730): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x6328, 0x4) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x40002063, 0x0) 885.482902ms ago: executing program 4 (id=1731): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, r2, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x74, 0x41, 0x300, 0x70bd27, 0x0, "", [@generic="d0eb45b5b34bcce3f1201939fbf6221ff94a6bf13d7de0ff4ccdd88e9f7ba746936b81ee1fae5a55e7568f94bbcf7d8069f1d49e7ffdd7aef394c022a1d2d5273b7e98a0040ca71bbb05b8f4cffd738ae48f691a2efcaa8495eb1a884eb0bb48", @nested={0x4, 0x11f}]}, 0x74}], 0x1, 0x0, 0x0, 0x6}, 0x4000800) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0xffffffff, 0x5, 0x80, 0x4, 0x9, 0x10001, 0x8}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) dup3(r5, r4, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xffffff87, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004051}, 0x4000040) 766.172617ms ago: executing program 4 (id=1732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0xf) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0xfac0d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) 605.190749ms ago: executing program 1 (id=1733): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x4, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0x0, 0x4, 0x0, 0x9}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7aa, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x3, 0x3, 0x1}) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x44, 0x18}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x2f, @loopback, 0x4e24, 0x4, 'lblc\x00', 0x2a, 0x8, 0x13}, 0x2c) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) 573.040462ms ago: executing program 4 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @ioapic={0x8082801, 0x5f7, 0x0, 0x1fe, 0x0, [{0x6d, 0xda, 0x9, '\x00', 0x6}, {0x5, 0xa, 0x6b, '\x00', 0xc}, {0xfe, 0x2, 0x6, '\x00', 0x5}, {0x81, 0x3, 0x48, '\x00', 0x81}, {0xb, 0x50, 0x7f, '\x00', 0x6}, {0x0, 0x0, 0x4, '\x00', 0xc}, {0x6, 0x9, 0x84, '\x00', 0xa}, {0x7, 0x7, 0xb, '\x00', 0x45}, {0x16, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x2, 0x35, '\x00', 0x8}, {0x40, 0x8, 0x0, '\x00', 0x1}, {0x8, 0x4, 0x1d, '\x00', 0x2}, {0x3, 0x87, 0xc, '\x00', 0xd6}, {0x5, 0x4f, 0xfe}, {0x4, 0x0, 0xd6, '\x00', 0x7}, {0xb, 0x0, 0x3, '\x00', 0x2}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x64, 0x1, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0x5, '\x00', 0x2}, {0x3e, 0x48, 0x2, '\x00', 0x8}, {0x7, 0x9, 0x2, '\x00', 0x4c}, {0x83, 0xa, 0x3, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x1, 0x7f, 0x8, '\x00', 0x47}]}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f00000002c0)=0x6, 0x4) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x40000000, 0xbd5, 0x2, {0x2, @raw_data="f919d2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fadd74a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecc4927a36eb8037fbba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc04c560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x1, {}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, '\x00\x00\x00\b'}, 0x5141, 0x1, {0x0}, 0x2, 0x20000000}) keyctl$KEYCTL_WATCH_KEY(0x4, 0x0, 0xffffffffffffffff, 0xf9ffffffffffffff) sendto$inet(r4, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x5, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0x81, 0x6d, 0x26, 0xfa, 0x7, 0x95, 0xd}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_ttl={{0x10, 0x0, 0x2, 0xe98c}}], 0x10}}], 0x1, 0x4000810) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18edffffff445c00080000001805000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000229bd010000000b255a00000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000010000056000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48001) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) 297.780904ms ago: executing program 4 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @ioapic={0x8082801, 0x5f7, 0x0, 0x1fe, 0x0, [{0x6d, 0xda, 0x9, '\x00', 0x6}, {0x5, 0xa, 0x6b, '\x00', 0xc}, {0xfe, 0x2, 0x6, '\x00', 0x5}, {0x81, 0x3, 0x48, '\x00', 0x81}, {0xb, 0x50, 0x7f, '\x00', 0x6}, {0x0, 0x0, 0x4, '\x00', 0xc}, {0x6, 0x9, 0x84, '\x00', 0xa}, {0x7, 0x7, 0xb, '\x00', 0x45}, {0x16, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x2, 0x35, '\x00', 0x8}, {0x40, 0x8, 0x0, '\x00', 0x1}, {0x8, 0x4, 0x1d, '\x00', 0x2}, {0x3, 0x87, 0xc, '\x00', 0xd6}, {0x5, 0x4f, 0xfe}, {0x4, 0x0, 0xd6, '\x00', 0x7}, {0xb, 0x0, 0x3, '\x00', 0x2}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x64, 0x1, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0x5, '\x00', 0x2}, {0x3e, 0x48, 0x2, '\x00', 0x8}, {0x7, 0x9, 0x2, '\x00', 0x4c}, {0x83, 0xa, 0x3, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x1, 0x7f, 0x8, '\x00', 0x47}]}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f00000002c0)=0x6, 0x4) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x40000000, 0xbd5, 0x2, {0x2, @raw_data="f919d2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fadd74a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecc4927a36eb8037fbba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc04c560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x1, {}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, '\x00\x00\x00\b'}, 0x5141, 0x1, {0x0}, 0x2, 0x20000000}) keyctl$KEYCTL_WATCH_KEY(0x4, 0x0, 0xffffffffffffffff, 0xf9ffffffffffffff) sendto$inet(r4, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x5, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0x81, 0x6d, 0x26, 0xfa, 0x7, 0x95, 0xd}}) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0xff, 0x3ff, 0x7, 0x7}]}) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_ttl={{0x10, 0x0, 0x2, 0xe98c}}], 0x10}}], 0x1, 0x4000810) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18edffffff445c00080000001805000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000229bd010000000b255a00000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000010000056000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48001) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) 65.063732ms ago: executing program 4 (id=1736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000500)="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", 0x298) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff09058202000000010009050302"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup2(r0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 54.179171ms ago: executing program 3 (id=1737): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0xf4, 0x2, &(0x7f0000000cc0)={0x8, "f51d2a4cc4949d9c3a1df608c310f6aa436bba5f2faa4926deff85d80fe447883b"}}) 0s ago: executing program 2 (id=1738): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0xf4, 0x2, &(0x7f0000000cc0)={0x8, "f51d2a4cc4949d9c3a1df608c310f6aa436bba5f2faa4926deff85d80fe447883b"}}) kernel console output (not intermixed with test programs): number 89 using dummy_hcd [ 326.696575][ T1224] usb 3-1: device descriptor read/8, error -71 [ 326.765875][ T5356] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 326.795836][ T5677] usb 1-1: device descriptor read/64, error -71 [ 326.806515][ T1224] usb usb3-port1: unable to enumerate USB device [ 326.835830][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 326.844443][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.856672][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.866896][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 326.880178][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 326.890376][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.900972][ T10] usb 4-1: config 0 descriptor?? [ 326.910664][ T5677] usb usb1-port1: attempt power cycle [ 326.921988][ T5356] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.934290][ T5356] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 326.935815][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 326.943810][ T5356] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 326.960795][ T5356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.971445][ T5356] usb 5-1: config 0 descriptor?? [ 326.981363][ T5356] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 326.988541][ T5356] dvb-usb: bulk message failed: -22 (3/0) [ 327.000280][ T5356] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 327.010106][ T5356] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 327.018043][ T5356] usb 5-1: media controller created [ 327.025015][ T5356] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.039722][ T5356] dvb-usb: bulk message failed: -22 (6/0) [ 327.047065][ T5356] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 327.057304][ T5356] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input49 [ 327.071607][ T5356] dvb-usb: schedule remote query interval to 150 msecs. [ 327.081867][ T5356] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 327.128137][T15132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.139459][T15132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.194415][T15139] dibusb: i2c wr: len=101 is too big! [ 327.194415][T15139] [ 327.203776][ T807] usb 5-1: USB disconnect, device number 85 [ 327.236327][ T807] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 327.265963][ T5677] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 327.289200][ T5677] usb 1-1: device descriptor read/8, error -71 [ 327.525895][ T5677] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 327.558282][ T5677] usb 1-1: device descriptor read/8, error -71 [ 327.676025][ T5677] usb usb1-port1: unable to enumerate USB device [ 327.775910][ T5356] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 327.905843][ T5356] usb 2-1: device descriptor read/64, error -71 [ 327.965844][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 328.029775][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1451'. [ 328.156235][ T5356] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 328.296480][ T5356] usb 2-1: device descriptor read/64, error -71 [ 328.426091][ T5356] usb usb2-port1: attempt power cycle [ 328.775896][ T5356] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 328.796544][ T5356] usb 2-1: device descriptor read/8, error -71 [ 329.005815][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 329.035859][ T5356] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 329.057540][ T5356] usb 2-1: device descriptor read/8, error -71 [ 329.107080][T15223] netlink: 'syz.0.1457': attribute type 10 has an invalid length. [ 329.119957][T15223] team0: Device ipvlan0 failed to register rx_handler [ 329.139112][ T29] audit: type=1326 audit(1782238252.577:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15216 comm="syz.2.1456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 329.179159][ T5356] usb usb2-port1: unable to enumerate USB device [ 329.201129][T15223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1457'. [ 329.219670][ T29] audit: type=1326 audit(1782238252.607:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15216 comm="syz.2.1456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 329.297212][T15223] bond8: entered promiscuous mode [ 329.309221][ T29] audit: type=1326 audit(1782238252.617:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15216 comm="syz.2.1456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 329.346874][ T29] audit: type=1326 audit(1782238252.617:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15216 comm="syz.2.1456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 329.372803][ T29] audit: type=1326 audit(1782238252.617:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15216 comm="syz.2.1456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 329.403484][ T29] audit: type=1326 audit(1782238252.617:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15216 comm="syz.2.1456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 329.474928][ T29] audit: type=1326 audit(1782238252.627:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15216 comm="syz.2.1456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 329.580513][ T29] audit: type=1326 audit(1782238252.627:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15216 comm="syz.2.1456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 329.651552][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 329.675594][ T29] audit: type=1326 audit(1782238252.687:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15216 comm="syz.2.1456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 329.706972][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 329.756493][ T10] usb 4-1: USB disconnect, device number 89 [ 329.811004][ T29] audit: type=1326 audit(1782238252.687:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15216 comm="syz.2.1456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 330.045996][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 330.456159][ T24] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 330.630781][ T24] usb 3-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 330.641332][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.651113][ T24] usb 3-1: Product: syz [ 330.657696][ T24] usb 3-1: Manufacturer: syz [ 330.664308][ T24] usb 3-1: SerialNumber: syz [ 330.697637][ T24] usb 3-1: config 0 descriptor?? [ 330.732852][ T24] rndis_host 3-1:0.0: skipping garbage [ 330.768419][ T24] rndis_host 3-1:0.0: More than one union descriptor, skipping ... [ 330.805149][ T24] rndis_host 3-1:0.0: rndis: master #0/ffff888075891000 slave #1/0000000000000000 [ 330.840539][ T24] cdc_acm 3-1:0.0: skipping garbage [ 330.857970][ T24] cdc_acm 3-1:0.0: More than one union descriptor, skipping ... [ 331.025854][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 331.085821][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 331.117399][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1467'. [ 331.186993][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 331.199009][ T10] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.211817][ T10] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.222923][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 331.240003][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.616366][ T5677] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 331.674499][ T10] mcp2221 0003:04D8:00DD.002E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 331.775803][ T5677] usb 4-1: Using ep0 maxpacket: 8 [ 331.785649][ T5677] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 331.796083][ T5677] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.807276][ T5677] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.819933][ T5677] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.832986][ T5677] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.848231][ T5677] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 331.858573][ T5677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.881986][ T10] usb 1-1: USB disconnect, device number 76 [ 331.977176][ T5356] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 332.074353][ T5677] usb 4-1: GET_CAPABILITIES returned 0 [ 332.088184][ T5677] usbtmc 4-1:16.0: can't read capabilities [ 332.095621][ T807] usb 3-1: USB disconnect, device number 80 [ 332.125807][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 332.160149][ T5356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.172801][ T5356] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 332.183475][ T5356] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 332.197182][ T5356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.239510][ T5356] usb 2-1: config 0 descriptor?? [ 332.244582][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'. [ 332.291841][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.300991][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.310101][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.319209][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.328320][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.343750][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.351296][ T5356] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 332.352884][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.352925][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.370254][ T5356] dvb-usb: bulk message failed: -22 (3/0) [ 332.378052][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.393148][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.402266][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.411373][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.423101][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.432226][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.441332][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 332.450446][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 332.470967][ T5356] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 332.514205][ T5677] usb 4-1: USB disconnect, device number 90 [ 332.521029][ T5356] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 332.546085][ T807] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 332.565928][ T5356] usb 2-1: media controller created [ 332.578062][ T5356] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.604953][ T5356] dvb-usb: bulk message failed: -22 (6/0) [ 332.617738][ T5356] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 332.627771][ T5356] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input50 [ 332.641551][ T5356] dvb-usb: schedule remote query interval to 150 msecs. [ 332.649526][ T5356] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 332.699439][ T807] usb 3-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 332.719583][ T807] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 332.732753][ T807] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.741115][T15334] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 332.747478][ T807] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 332.773171][T15334] input: syz0 as /devices/virtual/input/input51 [ 332.779074][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.803094][ T807] hub 3-1:1.0: bad descriptor, ignoring hub [ 332.809542][ T807] hub 3-1:1.0: probe with driver hub failed with error -5 [ 332.817387][ T807] cdc_wdm 3-1:1.0: skipping garbage [ 332.817458][ T5356] dvb-usb: bulk message failed: -22 (1/0) [ 332.822836][ T807] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 332.825829][ T10] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 332.837972][ T5356] dvb-usb: error while querying for an remote control event. [ 332.936907][ T807] usb 2-1: USB disconnect, device number 70 [ 332.959192][ T807] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 332.998063][ T10] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 333.026355][ T10] usb 1-1: config 150 has no interface number 0 [ 333.043222][ T10] usb 1-1: config 150 interface 204 has no altsetting 0 [ 333.054450][T15377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.064910][ T10] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 333.076606][T15377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.087207][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.096472][ T10] usb 1-1: Product: syz [ 333.100842][ T10] usb 1-1: Manufacturer: syz [ 333.105469][ T10] usb 1-1: SerialNumber: syz [ 333.165824][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 333.335690][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'. [ 333.595838][ T807] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 333.639578][T15385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.673768][T15385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.717113][ T10] xr_serial 1-1:150.204: xr_serial converter detected [ 333.727414][ T10] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 333.743511][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 333.765383][ T10] usb 1-1: USB disconnect, device number 77 [ 333.772060][ T807] usb 4-1: Using ep0 maxpacket: 16 [ 333.782624][ T807] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 333.795814][ T10] xr_serial 1-1:150.204: device disconnected [ 333.804087][ T807] usb 4-1: config 0 has no interface number 0 [ 333.813403][ T807] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 333.831202][ T807] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 333.843676][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.856537][ T807] usb 4-1: Product: syz [ 333.864085][ T807] usb 4-1: Manufacturer: syz [ 333.872430][ T807] usb 4-1: SerialNumber: syz [ 333.891511][ T807] usb 4-1: config 0 descriptor?? [ 333.903175][ T807] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 334.111958][ T807] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 334.131332][ T807] usb 4-1: USB disconnect, device number 91 [ 334.152543][ T807] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 334.172115][ T807] cypress_m8 4-1:0.35: device disconnected [ 334.205799][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 334.437896][T15538] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 334.453056][T15538] IPVS: Unknown mcast interface: ip6erspan0 [ 334.775922][ T807] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 334.938405][T15541] FAULT_INJECTION: forcing a failure. [ 334.938405][T15541] name failslab, interval 1, probability 0, space 0, times 0 [ 334.951976][T15541] CPU: 1 UID: 0 PID: 15541 Comm: syz.0.1483 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.951997][T15541] Tainted: [L]=SOFTLOCKUP [ 334.952001][T15541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.952009][T15541] Call Trace: [ 334.952014][T15541] [ 334.952019][T15541] dump_stack_lvl+0xe8/0x150 [ 334.952043][T15541] should_fail_ex+0x40c/0x560 [ 334.952067][T15541] should_failslab+0xa8/0x100 [ 334.952086][T15541] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 334.952113][T15541] ? __alloc_skb+0x1d7/0x7a0 [ 334.952127][T15541] ? __alloc_skb+0x1d7/0x7a0 [ 334.952139][T15541] __alloc_skb+0x1d7/0x7a0 [ 334.952151][T15541] netlink_ack+0x136/0xb30 [ 334.952165][T15541] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 334.952180][T15541] ? trace_irq_enable+0x3b/0x140 [ 334.952206][T15541] ? irqentry_exit+0x218/0x8f0 [ 334.952227][T15541] ? trace_irq_disable+0x3b/0x140 [ 334.952255][T15541] netlink_rcv_skb+0x2a4/0x4a0 [ 334.952272][T15541] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 334.952284][T15541] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.952301][T15541] netlink_unicast+0x7bb/0x940 [ 334.952315][T15541] netlink_sendmsg+0x813/0xb40 [ 334.952335][T15541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.952359][T15541] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 334.952382][T15541] ? __import_iovec+0x5d7/0x7e0 [ 334.952408][T15541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.952428][T15541] sock_sendmsg_nosec+0x13a/0x180 [ 334.952440][T15541] ____sys_sendmsg+0x54e/0x850 [ 334.952454][T15541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.952469][T15541] ___sys_sendmsg+0x2a5/0x360 [ 334.952482][T15541] ? get_pid_task+0x20/0x1f0 [ 334.952500][T15541] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.952524][T15541] ? get_pid_task+0x20/0x1f0 [ 334.952540][T15541] ? get_pid_task+0x20/0x1f0 [ 334.952567][T15541] ? __fget_files+0x2a/0x420 [ 334.952578][T15541] ? __fget_files+0x3a2/0x420 [ 334.952588][T15541] __sys_sendmsg+0x177/0x240 [ 334.952601][T15541] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.952616][T15541] ? rcu_is_watching+0x15/0xb0 [ 334.952628][T15541] __do_fast_syscall_32+0x23e/0x6f0 [ 334.952649][T15541] ? do_fast_syscall_32+0x33/0x70 [ 334.952671][T15541] ? asm_int80_emulation+0x1a/0x20 [ 334.952688][T15541] ? do_int80_emulation+0x29f/0x550 [ 334.952709][T15541] ? trace_irq_disable+0x3b/0x140 [ 334.952726][T15541] do_fast_syscall_32+0x33/0x70 [ 334.952746][T15541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.952758][T15541] RIP: 0023:0xf7ff40ec [ 334.952768][T15541] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 334.952777][T15541] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 334.952797][T15541] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008000bf00 [ 334.952810][T15541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.952820][T15541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.952831][T15541] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 334.952842][T15541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.952859][T15541] [ 335.245829][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.262990][ T5356] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 335.265975][ T807] usb 1-1: unable to get BOS descriptor or descriptor too short [ 335.272867][ T24] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 335.281355][ T807] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 335.303294][ T807] usb 1-1: can't read configurations, error -71 [ 335.312104][T15530] netlink: 'syz.1.1480': attribute type 4 has an invalid length. [ 335.515941][ T5677] usb 3-1: USB disconnect, device number 81 [ 335.536138][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 335.544241][ T5356] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 335.552849][ T24] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.564520][ T24] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.574900][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 335.584565][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.594687][ T5356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.616002][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 335.616136][ T5356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.640424][ T5356] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.654794][ T5356] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.666274][ T5356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.685472][ T5356] usb 4-1: config 0 descriptor?? [ 335.775899][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 335.795065][ T10] usb 2-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config [ 335.826033][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 293 [ 335.952475][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 335.963374][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.986307][ T10] usb 2-1: Product: syz [ 335.995540][ T10] usb 2-1: Manufacturer: syz [ 336.003838][ T10] usb 2-1: SerialNumber: syz [ 336.015234][T15545] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 336.037479][ T24] mcp2221 0003:04D8:00DD.002F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 336.040366][T15617] syz_tun: entered allmulticast mode [ 336.129336][ T5356] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xd [ 336.171413][ T5356] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 336.250380][ T5356] usb 5-1: USB disconnect, device number 86 [ 336.285864][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 336.490701][T15551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.501619][T15551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.515649][ T5356] usb 4-1: USB disconnect, device number 92 [ 336.601489][T15617] syz_tun: left allmulticast mode [ 336.618235][T12373] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 336.795304][T12373] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 336.825993][T12373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.836378][T12373] usb 3-1: Product: syz [ 336.841785][T12373] usb 3-1: Manufacturer: syz [ 336.857643][T12373] usb 3-1: SerialNumber: syz [ 336.873289][T12373] usb 3-1: config 0 descriptor?? [ 337.185638][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 337.185681][ T29] audit: type=1800 audit(1782238260.617:3123): pid=15689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1495" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 337.254970][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 337.325880][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 337.469972][T12373] usb 3-1: Firmware: major: 229, minor: 0, hardware type: ATUSB (0) [ 337.605938][ T5356] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 337.671303][T12373] usb 3-1: Read permanent extended address be:2a:9c:a2:b7:b3:87:80 from device [ 337.767802][ T5356] usb 4-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 337.793148][ T5356] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 337.806686][ T5356] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.821549][ T5356] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 337.832240][ T5356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.863668][ T5356] hub 4-1:1.0: bad descriptor, ignoring hub [ 337.870792][ T5356] hub 4-1:1.0: probe with driver hub failed with error -5 [ 337.883879][ T5356] cdc_wdm 4-1:1.0: skipping garbage [ 337.891512][ T5356] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 337.902748][T12373] usb 3-1: USB disconnect, device number 82 [ 337.965402][ T6093] udevd[6093]: setting mode of /dev/bus/usb/003/082 to 020664 failed: No such file or directory [ 337.982885][ T6093] udevd[6093]: setting owner of /dev/bus/usb/003/082 to uid=0, gid=0 failed: No such file or directory [ 338.073503][T15695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.085281][T15695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.365862][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 338.841753][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1502'. [ 338.900048][T15747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1502'. [ 339.105871][ T5356] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 339.405994][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 339.423339][T15768] netlink: 'syz.4.1504': attribute type 10 has an invalid length. [ 339.485540][T15768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1504'. [ 339.574086][T15768] bond6: entered promiscuous mode [ 339.698665][T15803] input: syz1 as /devices/virtual/input/input53 [ 340.445820][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 340.556215][T12373] usb 4-1: USB disconnect, device number 93 [ 340.756315][T15835] syzkaller0: entered promiscuous mode [ 340.765261][T15835] syzkaller0: entered allmulticast mode [ 340.927609][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 341.172812][ T10] usb 2-1: selecting invalid altsetting 1 [ 341.321452][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 341.379665][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.416627][ T24] usb 2-1: USB disconnect, device number 71 [ 341.469083][ T5677] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 341.486477][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 341.625860][ T5677] usb 4-1: Using ep0 maxpacket: 8 [ 341.632186][ T5677] usb 4-1: config 0 has no interfaces? [ 341.637921][ T5677] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 341.647326][ T5677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.656900][ T5677] usb 4-1: config 0 descriptor?? [ 341.924307][ T5677] usb 4-1: USB disconnect, device number 94 [ 342.045865][ T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 342.207618][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 342.219161][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.230982][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.241303][T12373] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 342.249303][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 342.264080][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 342.273609][ T24] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 342.282320][ T24] usb 2-1: Manufacturer: syz [ 342.287280][ T5356] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 342.297375][ T24] usb 2-1: config 0 descriptor?? [ 342.407187][T12373] usb 3-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 342.418092][T12373] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 342.427696][T12373] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.441552][T12373] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 342.455866][ T5356] usb 1-1: Using ep0 maxpacket: 32 [ 342.467506][T12373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.508416][T15919] bridge0: entered allmulticast mode [ 342.525882][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 342.692869][ T5356] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.706485][T12373] hub 3-1:1.0: bad descriptor, ignoring hub [ 342.726312][ T5356] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 342.738342][T12373] hub 3-1:1.0: probe with driver hub failed with error -5 [ 342.756599][T12373] cdc_wdm 3-1:1.0: skipping garbage [ 342.762073][ T5356] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 342.775874][T12373] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 342.798775][ T5356] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 342.815882][ T1224] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 342.829137][ T5356] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 342.841664][ T5356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.856550][ T5356] usb 1-1: Product: syz [ 342.861545][ T5356] usb 1-1: Manufacturer: syz [ 342.866659][ T5356] usb 1-1: SerialNumber: syz [ 342.888913][ T24] appleir 0003:05AC:8243.0031: unknown main item tag 0x0 [ 342.901432][T15910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.918434][ T24] appleir 0003:05AC:8243.0031: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 342.923546][T15910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.947203][T15933] bridge0: left promiscuous mode [ 342.981988][T15933] team0: Port device bridge0 removed [ 343.011384][T15919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.027715][T15919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.038613][ T1224] usb 5-1: unable to get BOS descriptor or descriptor too short [ 343.056651][ T1224] usb 5-1: too many configurations: 170, using maximum allowed: 8 [ 343.066749][ T1224] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 343.075296][ T1224] usb 5-1: can't read configurations, error -71 [ 343.091001][ T5356] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.133921][ T5356] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 343.146936][ T5356] usb 1-1: USB disconnect, device number 82 [ 343.167481][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.315823][ T5677] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 343.471713][T15933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.483129][T15933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.499333][ T5677] usb 4-1: unable to get BOS descriptor or descriptor too short [ 343.510158][ T5677] usb 4-1: too many configurations: 170, using maximum allowed: 8 [ 343.519038][ T5677] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 343.527520][ T5677] usb 4-1: can't read configurations, error -71 [ 343.565802][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 343.812572][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 343.823416][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 343.906005][ T1224] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 344.059327][ T1224] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.077573][ T1224] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 344.088198][ T1224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.106686][ T1224] usb 5-1: config 0 descriptor?? [ 344.133359][ T1224] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 344.262678][T10736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.277230][T10736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.465990][ T1224] usb 2-1: reset high-speed USB device number 72 using dummy_hcd [ 344.610665][T16014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1525'. [ 344.619909][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 344.627766][T15882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1514'. [ 345.455820][T15881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.645799][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 345.796770][T16046] syzkaller0: entered promiscuous mode [ 345.802628][T16046] syzkaller0: entered allmulticast mode [ 345.813833][T16046] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 345.846729][T16051] input: syz0 as /devices/virtual/input/input54 [ 345.857112][ T5677] usb 3-1: USB disconnect, device number 83 [ 345.985459][T16068] FAULT_INJECTION: forcing a failure. [ 345.985459][T16068] name fail_futex, interval 1, probability 0, space 0, times 0 [ 345.998566][T16068] CPU: 0 UID: 0 PID: 16068 Comm: syz.1.1535 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.998596][T16068] Tainted: [L]=SOFTLOCKUP [ 345.998602][T16068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.998612][T16068] Call Trace: [ 345.998619][T16068] [ 345.998626][T16068] dump_stack_lvl+0xe8/0x150 [ 345.998652][T16068] should_fail_ex+0x40c/0x560 [ 345.998686][T16068] futex_lock_pi_atomic+0xe2/0x970 [ 345.998712][T16068] futex_lock_pi+0x30a/0xab0 [ 345.998740][T16068] ? rcu_is_watching+0x15/0xb0 [ 345.998762][T16068] ? __pfx_futex_lock_pi+0x10/0x10 [ 345.998789][T16068] ? __mutex_trylock_common+0x15f/0x270 [ 345.998812][T16068] ? __pfx_futex_wake_mark+0x10/0x10 [ 345.998836][T16068] ? preempt_count_add+0x91/0x190 [ 345.998860][T16068] ? rcu_is_watching+0x15/0xb0 [ 345.998878][T16068] do_futex+0x330/0x4e0 [ 345.998897][T16068] ? __pfx_do_futex+0x10/0x10 [ 345.998918][T16068] __se_sys_futex_time32+0x3ab/0x440 [ 345.998940][T16068] ? fput+0xa0/0xd0 [ 345.998963][T16068] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 345.998983][T16068] ? ksys_write+0x242/0x270 [ 345.999003][T16068] ? rcu_is_watching+0x15/0xb0 [ 345.999022][T16068] ? __ia32_sys_futex_time32+0x21/0xf0 [ 345.999044][T16068] __do_fast_syscall_32+0x23e/0x6f0 [ 345.999063][T16068] ? do_fast_syscall_32+0x33/0x70 [ 345.999084][T16068] ? asm_int80_emulation+0x1a/0x20 [ 345.999100][T16068] ? do_int80_emulation+0x29f/0x550 [ 345.999123][T16068] do_fast_syscall_32+0x33/0x70 [ 345.999144][T16068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.999163][T16068] RIP: 0023:0xf709f0ec [ 345.999178][T16068] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 345.999193][T16068] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 345.999212][T16068] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 0000000000000086 [ 345.999224][T16068] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.999235][T16068] RBP: 00000000fffffffc R08: 0000000000000000 R09: 0000000000000000 [ 345.999245][T16068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 345.999255][T16068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.999272][T16068] [ 346.470438][ T5356] usb 2-1: USB disconnect, device number 72 [ 346.650933][ T1224] usb 5-1: USB disconnect, device number 88 [ 346.685913][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 346.861992][T16135] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1542'. [ 347.116027][ T5677] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 347.289785][ T5677] usb 5-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 347.318626][ T5677] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 347.334710][ T5677] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.369667][ T5677] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 347.395800][ T5677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.460192][ T5677] hub 5-1:1.0: bad descriptor, ignoring hub [ 347.487226][ T5677] hub 5-1:1.0: probe with driver hub failed with error -5 [ 347.518808][ T5677] cdc_wdm 5-1:1.0: skipping garbage [ 347.537798][ T5677] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 347.591109][T16156] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 347.683538][T16136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.693283][T16160] FAULT_INJECTION: forcing a failure. [ 347.693283][T16160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.707334][T16136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.716874][T16160] CPU: 0 UID: 0 PID: 16160 Comm: syz.3.1546 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.716902][T16160] Tainted: [L]=SOFTLOCKUP [ 347.716909][T16160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 347.716920][T16160] Call Trace: [ 347.716927][T16160] [ 347.716934][T16160] dump_stack_lvl+0xe8/0x150 [ 347.716959][T16160] should_fail_ex+0x40c/0x560 [ 347.716983][T16160] _copy_from_iter+0x1d3/0x1660 [ 347.717007][T16160] ? kmem_cache_alloc_node_noprof+0x101/0x610 [ 347.717032][T16160] ? rcu_is_watching+0x15/0xb0 [ 347.717053][T16160] ? trace_kmem_cache_alloc+0x29/0xe0 [ 347.717076][T16160] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 347.717098][T16160] ? __pfx__copy_from_iter+0x10/0x10 [ 347.717119][T16160] ? __alloc_skb+0x276/0x7a0 [ 347.717139][T16160] ? __alloc_skb+0x276/0x7a0 [ 347.717161][T16160] ? netlink_sendmsg+0x650/0xb40 [ 347.717184][T16160] ? skb_put+0x112/0x210 [ 347.717206][T16160] netlink_sendmsg+0x6c0/0xb40 [ 347.717233][T16160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.717257][T16160] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 347.717277][T16160] ? __import_iovec+0x5d7/0x7e0 [ 347.717300][T16160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.717322][T16160] sock_sendmsg_nosec+0x13a/0x180 [ 347.717339][T16160] ____sys_sendmsg+0x54e/0x850 [ 347.717364][T16160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.717391][T16160] ___sys_sendmsg+0x2a5/0x360 [ 347.717413][T16160] ? get_pid_task+0x20/0x1f0 [ 347.717433][T16160] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.717453][T16160] ? __mutex_trylock_common+0x15f/0x270 [ 347.717475][T16160] ? get_pid_task+0x20/0x1f0 [ 347.717490][T16160] ? get_pid_task+0x20/0x1f0 [ 347.717516][T16160] ? __fget_files+0x2a/0x420 [ 347.717531][T16160] ? __fget_files+0x3a2/0x420 [ 347.717559][T16160] __sys_sendmsg+0x177/0x240 [ 347.717584][T16160] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.717611][T16160] ? rcu_is_watching+0x15/0xb0 [ 347.717633][T16160] __do_fast_syscall_32+0x23e/0x6f0 [ 347.717656][T16160] ? do_fast_syscall_32+0x33/0x70 [ 347.717677][T16160] ? asm_int80_emulation+0x1a/0x20 [ 347.717695][T16160] ? do_int80_emulation+0x29f/0x550 [ 347.717716][T16160] ? trace_irq_disable+0x3b/0x140 [ 347.717742][T16160] do_fast_syscall_32+0x33/0x70 [ 347.717764][T16160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.717785][T16160] RIP: 0023:0xf7f540ec [ 347.717801][T16160] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 347.717816][T16160] RSP: 002b:00000000f51f450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 347.717836][T16160] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000240 [ 347.717849][T16160] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.717860][T16160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.717871][T16160] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 347.717882][T16160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.717899][T16160] [ 348.027429][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 348.055774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 348.197553][T16167] netlink: 'syz.2.1550': attribute type 10 has an invalid length. [ 348.206359][T16167] team0: Device ipvlan0 failed to register rx_handler [ 348.251651][T16168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1550'. [ 348.293043][T16168] bond11: entered promiscuous mode [ 348.366414][ T5677] usb 5-1: USB disconnect, device number 89 [ 348.499281][T16219] FAULT_INJECTION: forcing a failure. [ 348.499281][T16219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.573363][T16219] CPU: 0 UID: 0 PID: 16219 Comm: syz.0.1553 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.573394][T16219] Tainted: [L]=SOFTLOCKUP [ 348.573401][T16219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.573411][T16219] Call Trace: [ 348.573419][T16219] [ 348.573427][T16219] dump_stack_lvl+0xe8/0x150 [ 348.573452][T16219] should_fail_ex+0x40c/0x560 [ 348.573475][T16219] _copy_from_iter+0x1d3/0x1660 [ 348.573498][T16219] ? kmem_cache_alloc_node_noprof+0x101/0x610 [ 348.573524][T16219] ? rcu_is_watching+0x15/0xb0 [ 348.573545][T16219] ? trace_kmem_cache_alloc+0x29/0xe0 [ 348.573567][T16219] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 348.573592][T16219] ? __pfx__copy_from_iter+0x10/0x10 [ 348.573613][T16219] ? __alloc_skb+0x276/0x7a0 [ 348.573634][T16219] ? __alloc_skb+0x276/0x7a0 [ 348.573657][T16219] ? netlink_sendmsg+0x650/0xb40 [ 348.573681][T16219] ? skb_put+0x112/0x210 [ 348.573704][T16219] netlink_sendmsg+0x6c0/0xb40 [ 348.573732][T16219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.573757][T16219] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 348.573780][T16219] ? __import_iovec+0x5d7/0x7e0 [ 348.573806][T16219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.573831][T16219] sock_sendmsg_nosec+0x13a/0x180 [ 348.573852][T16219] ____sys_sendmsg+0x54e/0x850 [ 348.573878][T16219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.573916][T16219] ___sys_sendmsg+0x2a5/0x360 [ 348.573939][T16219] ? get_pid_task+0x20/0x1f0 [ 348.573959][T16219] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.573982][T16219] ? __mutex_trylock_common+0x15f/0x270 [ 348.574005][T16219] ? get_pid_task+0x20/0x1f0 [ 348.574021][T16219] ? get_pid_task+0x20/0x1f0 [ 348.574049][T16219] ? __fget_files+0x2a/0x420 [ 348.574065][T16219] ? __fget_files+0x3a2/0x420 [ 348.574085][T16219] __sys_sendmsg+0x177/0x240 [ 348.574110][T16219] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.574137][T16219] ? rcu_is_watching+0x15/0xb0 [ 348.574159][T16219] __do_fast_syscall_32+0x23e/0x6f0 [ 348.574183][T16219] ? do_fast_syscall_32+0x33/0x70 [ 348.574205][T16219] ? asm_int80_emulation+0x1a/0x20 [ 348.574222][T16219] ? do_int80_emulation+0x29f/0x550 [ 348.574245][T16219] do_fast_syscall_32+0x33/0x70 [ 348.574267][T16219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.574288][T16219] RIP: 0023:0xf7ff40ec [ 348.574305][T16219] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 348.574320][T16219] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 348.574340][T16219] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 348.574353][T16219] RDX: 0000000000000844 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.574365][T16219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.574376][T16219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 348.574389][T16219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.574407][T16219] [ 348.949307][T16224] netlink: 'syz.0.1555': attribute type 10 has an invalid length. [ 348.971871][T16224] team0: Device ipvlan0 failed to register rx_handler [ 349.086011][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 349.287781][T16234] syzkaller0: entered promiscuous mode [ 349.322974][T16234] syzkaller0: entered allmulticast mode [ 349.535876][ T1224] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 349.584803][T16275] netlink: 'syz.3.1559': attribute type 6 has an invalid length. [ 349.634186][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1559'. [ 349.700114][ T1224] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 349.721215][ T1224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.740304][ T1224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.752094][T16279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 349.762239][ T1224] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 349.786819][ T1224] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 349.796725][ T1224] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 349.807077][ T1224] usb 1-1: Manufacturer: syz [ 349.816573][ T1224] usb 1-1: config 0 descriptor?? [ 349.972962][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'. [ 350.035776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 350.125797][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 350.292448][ T1224] appleir 0003:05AC:8243.0032: unknown main item tag 0x0 [ 350.311129][ T1224] appleir 0003:05AC:8243.0032: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 350.526101][ T5677] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 350.557575][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 350.592734][T16326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1568'. [ 350.686275][ T5698] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 350.694010][ T5677] usb 4-1: Using ep0 maxpacket: 32 [ 350.708894][ T5677] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 350.725408][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 350.730974][ T5677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 350.743795][ T5677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 350.754179][ T5677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 350.766669][ T5677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 350.766783][ T10] usb 2-1: config 0 has no interfaces? [ 350.796625][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 350.806787][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.818097][ T5677] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 350.827677][ T5677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.837467][ T10] usb 2-1: config 0 descriptor?? [ 350.842624][ T5677] usb 4-1: Product: syz [ 350.847673][ T5677] usb 4-1: Manufacturer: syz [ 350.852343][ T5677] usb 4-1: SerialNumber: syz [ 350.860853][ T5698] usb 5-1: config 0 has no interfaces? [ 350.869204][ T5677] usb 4-1: config 0 descriptor?? [ 350.880359][ T5698] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 350.891566][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.903593][ T5698] usb 5-1: config 0 descriptor?? [ 351.063511][T10718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.072102][T10718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.103285][T16237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1556'. [ 351.119864][T16235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.136225][ T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 351.153519][ T5356] usb 1-1: USB disconnect, device number 83 [ 351.165674][ T5698] usb 5-1: USB disconnect, device number 90 [ 351.171794][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 351.191835][ T1224] usb 2-1: USB disconnect, device number 73 [ 351.285978][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 351.295573][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 351.304284][ T10] usb 3-1: config 0 has no interface number 0 [ 351.313018][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 351.322729][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.331427][ T10] usb 3-1: Product: syz [ 351.335715][ T10] usb 3-1: Manufacturer: syz [ 351.340743][ T10] usb 3-1: SerialNumber: syz [ 351.348036][ T10] usb 3-1: config 0 descriptor?? [ 351.359067][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 351.452200][ T5677] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 351.461739][ T5677] input input55: Device does not respond to id packet M [ 351.469483][ T5677] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 351.475704][ T5677] input input55: Device does not respond to id packet P [ 351.483733][ T5677] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 351.490193][ T5677] input input55: Device does not respond to id packet B [ 351.499901][ T5677] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 351.507227][ T5677] input input55: Device does not respond to id packet N [ 351.514599][ T5677] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 351.521453][ T5677] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 351.528154][ T5677] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 351.534695][ T5677] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 351.542719][ T5677] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input55 [ 351.563287][ T5677] usb 4-1: USB disconnect, device number 97 [ 351.605580][ T10] usb 3-1: qt2_attach - failed to power on unit: -71 [ 351.623075][ T10] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 351.639952][ T10] usb 3-1: USB disconnect, device number 84 [ 351.957518][T16426] syzkaller0: entered promiscuous mode [ 351.963027][T16426] syzkaller0: entered allmulticast mode [ 351.995944][ T5677] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 352.047387][ T10] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 352.087171][ T5698] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 352.147335][ T5677] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.155447][ T5677] usb 1-1: config 0 has no interface number 0 [ 352.162036][ T5677] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.174894][ T5677] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.185190][ T5677] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 352.194670][ T5677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.205809][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 352.213992][ T5677] usb 1-1: config 0 descriptor?? [ 352.223131][ T10] usb 3-1: config 0 has no interfaces? [ 352.235869][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 352.246036][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 352.252438][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.262524][ T5698] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 352.271467][ T10] usb 3-1: config 0 descriptor?? [ 352.282953][ T5698] usb 5-1: config 0 has no interface number 0 [ 352.297229][ T5698] usb 5-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 352.310486][ T5698] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 352.319884][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.328705][ T5698] usb 5-1: Product: syz [ 352.332953][ T5698] usb 5-1: Manufacturer: syz [ 352.337642][ T5698] usb 5-1: SerialNumber: syz [ 352.351112][ T5698] usb 5-1: config 0 descriptor?? [ 352.361683][ T5698] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 352.372216][ T5698] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 352.453134][ T5677] usbhid 1-1:0.1: can't add hid device: -71 [ 352.460405][ T5677] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 352.470332][ T5677] usb 1-1: USB disconnect, device number 84 [ 352.511904][ T5698] usb 3-1: USB disconnect, device number 85 [ 352.579133][T16421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.604432][T16421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.669775][T16421] program syz.4.1574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.695454][T16468] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 352.792402][T16469] gtp0: entered promiscuous mode [ 352.802070][T16469] gtp0: entered allmulticast mode [ 353.141132][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 353.245864][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 353.338879][T16491] syzkaller0: entered promiscuous mode [ 353.345312][T16491] syzkaller0: entered allmulticast mode [ 353.431486][ T1224] usb 5-1: USB disconnect, device number 91 [ 353.502091][T16505] syzkaller0: entered promiscuous mode [ 353.538788][T16505] syzkaller0: entered allmulticast mode [ 353.602446][T16514] FAULT_INJECTION: forcing a failure. [ 353.602446][T16514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.648570][T16514] CPU: 1 UID: 0 PID: 16514 Comm: syz.2.1584 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.648600][T16514] Tainted: [L]=SOFTLOCKUP [ 353.648607][T16514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.648619][T16514] Call Trace: [ 353.648627][T16514] [ 353.648635][T16514] dump_stack_lvl+0xe8/0x150 [ 353.648660][T16514] should_fail_ex+0x40c/0x560 [ 353.648683][T16514] _copy_from_iter+0x3b0/0x1660 [ 353.648711][T16514] ? __pfx__copy_from_iter+0x10/0x10 [ 353.648737][T16514] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 353.648765][T16514] skb_copy_datagram_from_iter+0xe6/0x720 [ 353.648793][T16514] ? skb_put+0x112/0x210 [ 353.648814][T16514] packet_sendmsg+0x36ab/0x5040 [ 353.648839][T16514] ? trace_irq_enable+0x3b/0x140 [ 353.648873][T16514] ? irqentry_exit+0x218/0x8f0 [ 353.648894][T16514] ? trace_irq_disable+0x3b/0x140 [ 353.648931][T16514] ? unwind_next_frame+0x8f/0x2550 [ 353.648957][T16514] ? is_bpf_text_address+0x26/0x2b0 [ 353.648974][T16514] ? rcu_is_watching+0x15/0xb0 [ 353.648992][T16514] ? __pfx_packet_sendmsg+0x10/0x10 [ 353.649017][T16514] ? aa_sk_perm+0x6d5/0x900 [ 353.649034][T16514] ? rcu_is_watching+0x15/0xb0 [ 353.649055][T16514] ? __pfx_aa_sk_perm+0x10/0x10 [ 353.649071][T16514] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 353.649091][T16514] ? __import_iovec+0x40b/0x7e0 [ 353.649124][T16514] ? __pfx_packet_sendmsg+0x10/0x10 [ 353.649147][T16514] sock_sendmsg_nosec+0x13a/0x180 [ 353.649168][T16514] ____sys_sendmsg+0x54e/0x850 [ 353.649192][T16514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.649219][T16514] ___sys_sendmsg+0x2a5/0x360 [ 353.649241][T16514] ? get_pid_task+0x20/0x1f0 [ 353.649260][T16514] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.649282][T16514] ? __mutex_trylock_common+0x15f/0x270 [ 353.649305][T16514] ? get_pid_task+0x20/0x1f0 [ 353.649321][T16514] ? get_pid_task+0x20/0x1f0 [ 353.649349][T16514] ? __fget_files+0x2a/0x420 [ 353.649365][T16514] ? __fget_files+0x3a2/0x420 [ 353.649385][T16514] __sys_sendmsg+0x177/0x240 [ 353.649409][T16514] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.649444][T16514] ? rcu_is_watching+0x15/0xb0 [ 353.649465][T16514] __do_fast_syscall_32+0x23e/0x6f0 [ 353.649496][T16514] ? do_fast_syscall_32+0x33/0x70 [ 353.649518][T16514] ? asm_int80_emulation+0x1a/0x20 [ 353.649534][T16514] ? do_int80_emulation+0x29f/0x550 [ 353.649556][T16514] ? trace_irq_disable+0x3b/0x140 [ 353.649581][T16514] do_fast_syscall_32+0x33/0x70 [ 353.649602][T16514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.649623][T16514] RIP: 0023:0xf704f0ec [ 353.649638][T16514] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 353.649654][T16514] RSP: 002b:00000000f541c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 353.649673][T16514] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 353.649686][T16514] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.649697][T16514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.649708][T16514] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 353.649719][T16514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.649737][T16514] [ 354.085287][ T5356] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 354.137014][ T24] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 354.235850][ T5356] usb 4-1: Using ep0 maxpacket: 8 [ 354.242393][ T5356] usb 4-1: config 0 has no interfaces? [ 354.248113][ T5356] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 354.257795][ T5356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.268154][ T5356] usb 4-1: config 0 descriptor?? [ 354.285853][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 354.297585][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 354.306167][ T24] usb 1-1: config 0 has no interface number 0 [ 354.312777][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.324473][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.334837][ T24] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 354.344408][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.353072][ T1224] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 354.363635][ T24] usb 1-1: config 0 descriptor?? [ 354.515828][ T1224] usb 5-1: Using ep0 maxpacket: 32 [ 354.523486][ T1224] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.535905][ T1224] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.549470][ T1224] usb 5-1: config 0 interface 0 has no altsetting 0 [ 354.556636][ T1224] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 354.566650][ T1224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.578005][ T1224] usb 5-1: config 0 descriptor?? [ 354.594672][ T5677] usb 4-1: USB disconnect, device number 98 [ 354.615508][ T24] usbhid 1-1:0.1: can't add hid device: -71 [ 354.623472][ T24] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 354.635870][ T5698] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 354.642043][ T24] usb 1-1: USB disconnect, device number 85 [ 354.795206][T16561] syzkaller1: entered promiscuous mode [ 354.800880][T16561] syzkaller1: entered allmulticast mode [ 354.808342][ T5698] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 354.819494][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.830063][ T5698] usb 3-1: config 0 descriptor?? [ 354.839031][ T5698] cp210x 3-1:0.0: cp210x converter detected [ 355.025762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 355.056506][ T1224] hid (null): unknown global tag 0xc [ 355.071094][ T1224] itetech 0003:258A:6A88.0033: unknown main item tag 0x3 [ 355.083868][ T1224] itetech 0003:258A:6A88.0033: unknown main item tag 0x0 [ 355.095042][ T1224] itetech 0003:258A:6A88.0033: unknown global tag 0xc [ 355.129345][ T1224] itetech 0003:258A:6A88.0033: item 0 1 1 12 parsing failed [ 355.135818][ T5698] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 355.157835][ T5698] cp210x 3-1:0.0: querying part number failed [ 355.161159][ T1224] itetech 0003:258A:6A88.0033: probe with driver itetech failed with error -22 [ 355.195953][ T5698] usb 3-1: cp210x converter now attached to ttyUSB0 [ 355.231244][ T5698] usb 3-1: USB disconnect, device number 86 [ 355.263969][ T5698] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 355.294259][ T5698] cp210x 3-1:0.0: device disconnected [ 355.315972][ T1224] usb 5-1: USB disconnect, device number 92 [ 355.325886][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 355.875817][ T5698] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 355.920229][T16634] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 4, id = 0 [ 355.992337][T16644] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1601'. [ 356.027354][ T5698] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 356.036028][ T5677] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 356.044512][ T5698] usb 1-1: config 150 has no interface number 0 [ 356.051428][ T5698] usb 1-1: config 150 interface 204 has no altsetting 0 [ 356.068323][ T5698] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 356.081788][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.090911][ T5698] usb 1-1: Product: syz [ 356.102460][ T5698] usb 1-1: Manufacturer: syz [ 356.119257][ T5698] usb 1-1: SerialNumber: syz [ 356.121162][ T29] audit: type=1326 audit(1782238279.557:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.4.1603" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 356.185920][ T5677] usb 3-1: Using ep0 maxpacket: 8 [ 356.193091][ T29] audit: type=1326 audit(1782238279.587:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.4.1603" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 356.197076][ T5677] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.230762][ T5677] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 356.241075][ T5677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.241102][ T29] audit: type=1326 audit(1782238279.587:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.4.1603" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 356.241137][ T29] audit: type=1326 audit(1782238279.587:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.4.1603" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 356.267558][ T5677] usb 3-1: Product: syz [ 356.282333][ T29] audit: type=1326 audit(1782238279.587:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.4.1603" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=460 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 356.327574][ T29] audit: type=1326 audit(1782238279.597:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.4.1603" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 356.352193][ T29] audit: type=1326 audit(1782238279.597:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.4.1603" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 356.365856][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 356.376527][ T29] audit: type=1326 audit(1782238279.597:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.4.1603" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 356.414172][ T5677] usb 3-1: Manufacturer: syz [ 356.419313][ T5677] usb 3-1: SerialNumber: syz [ 356.433770][ T5677] usb 3-1: config 0 descriptor?? [ 356.439971][ T5698] xr_serial 1-1:150.204: xr_serial converter detected [ 356.459425][ T5677] imon_raw 3-1:0.0: IR endpoint missing [ 356.480288][ T29] audit: type=1326 audit(1782238279.597:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.4.1603" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 356.505529][ T29] audit: type=1326 audit(1782238279.597:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.4.1603" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 356.631308][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 356.769642][ T1224] usb 3-1: USB disconnect, device number 87 [ 356.946060][ T5677] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 357.105814][ T5677] usb 5-1: Using ep0 maxpacket: 16 [ 357.123547][ T5677] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 357.154020][ T5677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 357.197242][ T5677] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 357.227084][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.246039][ T5677] usb 5-1: Product: syz [ 357.259913][ T5677] usb 5-1: Manufacturer: syz [ 357.274146][ T5677] usb 5-1: SerialNumber: syz [ 357.301888][ T5677] usb 5-1: config 0 descriptor?? [ 357.325252][ T5677] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 357.356020][ T5677] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 357.405809][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 357.468002][T16611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.501172][T16611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.534545][ T5698] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 357.541078][ T5698] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 357.582210][ T5698] usb 1-1: USB disconnect, device number 86 [ 357.616083][ T5698] xr_serial 1-1:150.204: device disconnected [ 357.930544][ T5677] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 357.939865][ T5677] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 358.153411][T16667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.177701][T16667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.363604][ T5677] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 358.389238][ T5677] em28xx 5-1:0.0: No AC97 audio processor [ 358.424934][ T5677] usb 5-1: USB disconnect, device number 93 [ 358.445804][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 358.466928][ T5677] em28xx 5-1:0.0: Disconnecting em28xx [ 358.501400][ T5677] em28xx 5-1:0.0: Freeing device [ 358.521636][ T1224] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 358.726341][ T1224] usb 4-1: Using ep0 maxpacket: 8 [ 358.738930][ T1224] usb 4-1: unable to get BOS descriptor or descriptor too short [ 358.755894][ T1224] usb 4-1: config 4 interface 0 has no altsetting 0 [ 358.777101][ T1224] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice=2a.af [ 358.786334][ T5698] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 358.796567][ T1224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.805352][ T1224] usb 4-1: Product: syz [ 358.810259][ T1224] usb 4-1: Manufacturer: syz [ 358.816160][ T1224] usb 4-1: SerialNumber: syz [ 358.920815][T16776] FAULT_INJECTION: forcing a failure. [ 358.920815][T16776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.936391][ T5698] usb 1-1: Using ep0 maxpacket: 16 [ 358.943329][T16776] CPU: 0 UID: 0 PID: 16776 Comm: syz.2.1611 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.943358][T16776] Tainted: [L]=SOFTLOCKUP [ 358.943365][T16776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.943375][T16776] Call Trace: [ 358.943383][T16776] [ 358.943390][T16776] dump_stack_lvl+0xe8/0x150 [ 358.943415][T16776] should_fail_ex+0x40c/0x560 [ 358.943439][T16776] _copy_from_user+0x2d/0xb0 [ 358.943464][T16776] cmsghdr_from_user_compat_to_kern+0x3c2/0x810 [ 358.943492][T16776] ? __might_fault+0xaf/0x130 [ 358.943518][T16776] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 358.943548][T16776] ____sys_sendmsg+0x217/0x850 [ 358.943573][T16776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.943599][T16776] ? rcu_is_watching+0x15/0xb0 [ 358.943621][T16776] ___sys_sendmsg+0x2a5/0x360 [ 358.943643][T16776] ? rcu_is_watching+0x15/0xb0 [ 358.943664][T16776] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.943687][T16776] ? kstrtoull+0x12f/0x1d0 [ 358.943715][T16776] ? __fget_files+0x2a/0x420 [ 358.943731][T16776] ? __fget_files+0x3a2/0x420 [ 358.943751][T16776] __sys_sendmmsg+0x2de/0x4d0 [ 358.943774][T16776] ? __pfx___sys_sendmmsg+0x10/0x10 [ 358.943806][T16776] ? fput+0xa0/0xd0 [ 358.943829][T16776] ? ksys_write+0x242/0x270 [ 358.943851][T16776] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 358.943877][T16776] __do_fast_syscall_32+0x23e/0x6f0 [ 358.943900][T16776] ? do_fast_syscall_32+0x33/0x70 [ 358.943922][T16776] ? asm_int80_emulation+0x1a/0x20 [ 358.943939][T16776] ? do_int80_emulation+0x29f/0x550 [ 358.943972][T16776] ? trace_irq_disable+0x3b/0x140 [ 358.943998][T16776] do_fast_syscall_32+0x33/0x70 [ 358.944020][T16776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 358.944044][T16776] RIP: 0023:0xf704f0ec [ 358.944060][T16776] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 358.944076][T16776] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 358.944095][T16776] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002c00 [ 358.944107][T16776] RDX: 0000000000000001 RSI: 0000000020040080 RDI: 0000000000000000 [ 358.944119][T16776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 358.944129][T16776] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 358.944140][T16776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 358.944157][T16776] [ 359.219990][ T5698] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 359.231081][ T5698] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 359.244301][ T5698] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 359.257631][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.270624][ T5698] usb 1-1: config 0 descriptor?? [ 359.384177][T16795] syzkaller0: entered promiscuous mode [ 359.400790][T16795] syzkaller0: entered allmulticast mode [ 359.485862][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 359.576038][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 359.621491][T16800] netlink: 'syz.2.1615': attribute type 10 has an invalid length. [ 359.630714][T16800] team0: Device ipvlan0 failed to register rx_handler [ 359.654115][T16800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1615'. [ 359.700366][T16800] bond12: entered promiscuous mode [ 359.749988][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.766075][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.790896][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 359.812606][T16836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1616'. [ 359.825111][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 359.825156][T16836] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1616'. [ 359.874769][ T24] usb 5-1: SerialNumber: syz [ 360.048436][T16847] netlink: 'syz.3.1617': attribute type 10 has an invalid length. [ 360.058781][T16847] team0: Device ipvlan0 failed to register rx_handler [ 360.073277][ T1224] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 360.105092][ T1224] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 360.132377][T16847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1617'. [ 360.164403][ T1224] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 360.176241][ T1224] usb 4-1: media controller created [ 360.227927][T16847] bond9: entered promiscuous mode [ 360.345017][T16889] sg_write: data in/out 196864/1 bytes for SCSI command 0x68-- guessing data in; [ 360.345017][T16889] program syz.3.1618 not setting count and/or reply_len properly [ 360.371730][ T1224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.411383][ T1224] usb 4-1: selecting invalid altsetting 1 [ 360.418072][ T1224] set interface failed [ 360.418138][ T1224] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 360.429247][ T1224] error writing reg: 0xff, val: 0x00 [ 360.478012][ T1224] dvb_usb_mxl111sf 4-1:4.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 360.514873][ T1224] usb 4-1: USB disconnect, device number 99 [ 360.525800][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 360.588364][T16903] netlink: 'syz.3.1619': attribute type 61 has an invalid length. [ 360.597541][T16903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 360.834364][T16909] netlink: 'syz.2.1620': attribute type 7 has an invalid length. [ 360.842557][T16909] netlink: 'syz.2.1620': attribute type 8 has an invalid length. [ 360.950889][ T5698] usbhid 1-1:0.0: can't add hid device: -71 [ 360.957042][ T5698] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 360.968166][ T5698] usb 1-1: USB disconnect, device number 87 [ 361.215600][T16923] FAULT_INJECTION: forcing a failure. [ 361.215600][T16923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.231204][T16923] CPU: 1 UID: 0 PID: 16923 Comm: syz.2.1623 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.231239][T16923] Tainted: [L]=SOFTLOCKUP [ 361.231245][T16923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.231256][T16923] Call Trace: [ 361.231264][T16923] [ 361.231272][T16923] dump_stack_lvl+0xe8/0x150 [ 361.231296][T16923] should_fail_ex+0x40c/0x560 [ 361.231319][T16923] _copy_from_user+0x2d/0xb0 [ 361.231344][T16923] copy_uabi_to_xstate+0x4d3/0xa10 [ 361.231361][T16923] ? rcu_is_watching+0x15/0xb0 [ 361.231382][T16923] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 361.231400][T16923] ? fpu__restore_sig+0xc25/0x1200 [ 361.231416][T16923] ? rcu_is_watching+0x15/0xb0 [ 361.231435][T16923] ? trace_irq_enable+0x3b/0x140 [ 361.231458][T16923] ? x86_task_fpu+0x4c/0x90 [ 361.231487][T16923] fpu__restore_sig+0x1092/0x1200 [ 361.231503][T16923] ? fpu__restore_sig+0xc25/0x1200 [ 361.231519][T16923] ? rcu_is_watching+0x15/0xb0 [ 361.231538][T16923] ? lock_release+0x4b/0x3c0 [ 361.231555][T16923] ? __pfx_fpu__restore_sig+0x10/0x10 [ 361.231577][T16923] ? __might_fault+0xaf/0x130 [ 361.231599][T16923] ? __might_fault+0xcb/0x130 [ 361.231623][T16923] ia32_restore_sigcontext+0x40c/0x560 [ 361.231643][T16923] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 361.231662][T16923] ? freezing_slow_path+0x115/0x160 [ 361.231688][T16923] ? rcu_is_watching+0x15/0xb0 [ 361.231707][T16923] ? trace_irq_enable+0x3b/0x140 [ 361.231732][T16923] __ia32_compat_sys_rt_sigreturn+0x1ad/0x270 [ 361.231753][T16923] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 361.231773][T16923] ? rcu_is_watching+0x15/0xb0 [ 361.231792][T16923] ? rcu_is_watching+0x15/0xb0 [ 361.231811][T16923] ? asm_int80_emulation+0x1a/0x20 [ 361.231829][T16923] do_int80_emulation+0x19a/0x550 [ 361.231852][T16923] ? trace_irq_disable+0x3b/0x140 [ 361.231874][T16923] ? asm_int80_emulation+0x1a/0x20 [ 361.231890][T16923] ? clear_bhb_loop+0x40/0x90 [ 361.231907][T16923] ? clear_bhb_loop+0x40/0x90 [ 361.231926][T16923] asm_int80_emulation+0x1a/0x20 [ 361.231943][T16923] RIP: 0023:0xf704f0ea [ 361.231958][T16923] Code: 03 c9 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 361.231972][T16923] RSP: 002b:00000000f543d50c EFLAGS: 00000206 [ 361.231988][T16923] RAX: 0000000000000173 RBX: 0000000000000006 RCX: 00000000800001c0 [ 361.232000][T16923] RDX: 0000000000000039 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.232011][T16923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.232022][T16923] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 361.232033][T16923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.232050][T16923] [ 361.565822][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 361.905806][ T5698] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 361.924341][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1626'. [ 361.994094][ T24] usb 5-1: 0:2 : does not exist [ 362.008905][ T24] usb 5-1: unit 5 not found! [ 362.066580][ T5698] usb 4-1: Using ep0 maxpacket: 32 [ 362.085331][ T5698] usb 4-1: unable to get BOS descriptor or descriptor too short [ 362.102861][ T5698] usb 4-1: config 14 has an invalid interface number: 228 but max is 0 [ 362.121802][ T5698] usb 4-1: config 14 has no interface number 0 [ 362.138951][ T5698] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 362.175352][ T5698] usb 4-1: config 14 interface 228 has no altsetting 0 [ 362.193155][ T24] usb 5-1: USB disconnect, device number 94 [ 362.212318][ T5698] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 362.254321][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.297843][ T5698] usb 4-1: Product: syz [ 362.319121][ T5698] usb 4-1: Manufacturer: syz [ 362.334670][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.355239][ T5698] usb 4-1: SerialNumber: syz [ 362.475867][ T5677] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 362.581925][ T5698] legousbtower 4-1:14.228: interrupt endpoints not found [ 362.605800][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 362.629515][ T5698] usb 4-1: USB disconnect, device number 100 [ 362.639364][ T5677] usb 3-1: Using ep0 maxpacket: 8 [ 362.660209][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.695538][ T5677] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 362.725922][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.752295][ T5677] usb 3-1: config 0 descriptor?? [ 362.888701][T16973] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1630'. [ 362.980865][T16956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.993960][T16956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.155105][T16997] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 363.166007][ T5698] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 363.335869][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 363.357497][ T5698] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.386970][ T5677] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 363.402836][ T5698] usb 5-1: config 0 has no interfaces? [ 363.412882][ T5698] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 363.429587][ T5677] usb 3-1: USB disconnect, device number 88 [ 363.436951][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.466739][ T5698] usb 5-1: config 0 descriptor?? [ 363.645918][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 363.652980][ T10] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 363.685883][ T5711] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 363.805810][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 363.815279][ T10] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 363.827467][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.838753][ T10] usb 1-1: Product: syz [ 363.846855][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 363.854034][ T10] usb 1-1: Manufacturer: syz [ 363.854308][ T5711] usb 4-1: unable to get BOS descriptor or descriptor too short [ 363.868741][ T10] usb 1-1: SerialNumber: syz [ 363.879583][ T10] usb 1-1: config 0 descriptor?? [ 363.887144][ T5711] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.900596][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 363.910109][ T5711] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 363.936305][ T5711] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 363.965692][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.995096][ T5711] usb 4-1: Product: syz [ 364.007577][ T5711] usb 4-1: Manufacturer: syz [ 364.012446][ T5711] usb 4-1: SerialNumber: syz [ 364.225032][T17047] netlink: 'syz.2.1639': attribute type 10 has an invalid length. [ 364.225640][T17047] team0: Device ipvlan0 failed to register rx_handler [ 364.238699][T17047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1639'. [ 364.239828][T17048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.240216][T17048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.245095][T17048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.247301][T17048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.262797][T17048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.265352][T17048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.273670][T17048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.274068][T17048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.280380][T17048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.280766][T17048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.283360][T17047] bond13: entered promiscuous mode [ 364.358414][ T10] gspca_ov534_9: reg_w failed -71 [ 364.406553][ T5711] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 364.406766][ T5711] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 364.448199][ T5711] usb 4-1: USB disconnect, device number 101 [ 364.493267][ T6093] udevd[6093]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.527439][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1642'. [ 364.569011][ T5698] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 364.646691][ T10] gspca_ov534_9: Unknown sensor 0000 [ 364.646757][ T10] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 364.671682][ T10] usb 1-1: USB disconnect, device number 88 [ 364.685817][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 364.739702][ T5698] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 364.739732][ T5698] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.741477][ T5698] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 364.741508][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 364.741528][ T5698] usb 2-1: SerialNumber: syz [ 365.126123][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 365.283768][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 365.287588][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 365.287639][ T10] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 365.287676][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 365.287701][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.385909][ T24] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 365.387790][ T5356] usb 5-1: USB disconnect, device number 95 [ 365.555627][T17161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.725808][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 365.823380][ T5698] usb 2-1: 0:2 : does not exist [ 365.829119][ T5698] usb 2-1: unit 255 not found! [ 365.839276][T17161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.872509][T17190] FAULT_INJECTION: forcing a failure. [ 365.872509][T17190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.873506][ T5698] usb 2-1: USB disconnect, device number 74 [ 365.899370][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 365.909414][T17190] CPU: 1 UID: 0 PID: 17190 Comm: syz.2.1647 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.909442][T17190] Tainted: [L]=SOFTLOCKUP [ 365.909447][T17190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.909458][T17190] Call Trace: [ 365.909464][T17190] [ 365.909479][T17190] dump_stack_lvl+0xe8/0x150 [ 365.909504][T17190] should_fail_ex+0x40c/0x560 [ 365.909526][T17190] _copy_to_user+0x31/0xb0 [ 365.909542][T17190] simple_read_from_buffer+0xe1/0x170 [ 365.909570][T17190] proc_fail_nth_read+0x1bb/0x230 [ 365.909589][T17190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.909606][T17190] ? rw_verify_area+0x24a/0x4c0 [ 365.909623][T17190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.909638][T17190] vfs_read+0x213/0xa80 [ 365.909657][T17190] ? __pfx___mutex_lock+0x10/0x10 [ 365.909680][T17190] ? __pfx_vfs_read+0x10/0x10 [ 365.909705][T17190] ? __fget_files+0x3a2/0x420 [ 365.909720][T17190] ? __fget_files+0x2a/0x420 [ 365.909738][T17190] ksys_read+0x150/0x270 [ 365.909757][T17190] ? __pfx_ksys_read+0x10/0x10 [ 365.909776][T17190] ? rcu_is_watching+0x15/0xb0 [ 365.909796][T17190] ? rcu_is_watching+0x15/0xb0 [ 365.909814][T17190] ? asm_int80_emulation+0x1a/0x20 [ 365.909834][T17190] do_int80_emulation+0x19a/0x550 [ 365.909861][T17190] ? asm_int80_emulation+0x1a/0x20 [ 365.909877][T17190] ? clear_bhb_loop+0x40/0x90 [ 365.909894][T17190] ? clear_bhb_loop+0x40/0x90 [ 365.909913][T17190] asm_int80_emulation+0x1a/0x20 [ 365.909930][T17190] RIP: 0023:0xf71871eb [ 365.909945][T17190] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 365.909962][T17190] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 365.909980][T17190] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f543d5d0 [ 365.909990][T17190] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 365.910000][T17190] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 365.910011][T17190] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 365.910023][T17190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.910040][T17190] [ 365.912719][ T24] usb 4-1: too many configurations: 170, using maximum allowed: 8 [ 365.918456][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.030815][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 366.176592][ T10] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 366.191567][ T24] usb 4-1: can't read configurations, error -71 [ 366.250591][T17215] netlink: 'syz.0.1644': attribute type 10 has an invalid length. [ 366.259219][T17215] syz_tun: entered promiscuous mode [ 366.290710][T17215] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 366.333707][T17178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.344093][T17178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.360408][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 366.373022][ T10] usb 5-1: too many configurations: 170, using maximum allowed: 8 [ 366.382787][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 366.390488][ T10] usb 5-1: can't read configurations, error -71 [ 366.425842][ T5711] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 366.575851][ T5711] usb 3-1: Using ep0 maxpacket: 8 [ 366.582468][ T5711] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 366.591052][ T5711] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.603084][ T5711] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.612964][ T5711] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.623302][ T5711] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.636592][ T5711] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.646044][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.765879][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 366.864907][ T5711] usb 3-1: usb_control_msg returned -32 [ 366.871049][ T5711] usbtmc 3-1:16.0: can't read capabilities [ 367.088269][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1655'. [ 367.253217][ T5711] usb 3-1: USB disconnect, device number 89 [ 367.259394][T17270] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 367.805859][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 367.871779][ T24] usb 1-1: USB disconnect, device number 89 [ 368.057996][T17297] netlink: 'syz.2.1661': attribute type 10 has an invalid length. [ 368.113488][T17297] team0: Device ipvlan0 failed to register rx_handler [ 368.130065][T17301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1661'. [ 368.171353][T17302] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 368.199466][T17301] bond14: entered promiscuous mode [ 368.600846][T17356] FAULT_INJECTION: forcing a failure. [ 368.600846][T17356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.626671][T17356] CPU: 1 UID: 0 PID: 17356 Comm: syz.3.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.626702][T17356] Tainted: [L]=SOFTLOCKUP [ 368.626708][T17356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.626718][T17356] Call Trace: [ 368.626724][T17356] [ 368.626731][T17356] dump_stack_lvl+0xe8/0x150 [ 368.626754][T17356] should_fail_ex+0x40c/0x560 [ 368.626775][T17356] _copy_from_user+0x2d/0xb0 [ 368.626798][T17356] snd_pcm_oss_write2+0x227/0x440 [ 368.626816][T17356] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 368.626834][T17356] ? __pfx_snd_pcm_post_prepare+0x10/0x10 [ 368.626854][T17356] ? snd_pcm_action_nonatomic+0x25c/0x2b0 [ 368.626875][T17356] snd_pcm_oss_write+0x65e/0xb40 [ 368.626895][T17356] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 368.626912][T17356] vfs_write+0x296/0xba0 [ 368.626931][T17356] ? __pfx_vfs_write+0x10/0x10 [ 368.626945][T17356] ? lock_release+0x4b/0x3c0 [ 368.626961][T17356] ? __mutex_unlock_slowpath+0x731/0x900 [ 368.626982][T17356] ? __fget_files+0x2a/0x420 [ 368.626996][T17356] ? __fget_files+0x3a2/0x420 [ 368.627011][T17356] ? __fget_files+0x2a/0x420 [ 368.627028][T17356] ksys_write+0x150/0x270 [ 368.627047][T17356] ? __pfx_ksys_write+0x10/0x10 [ 368.627066][T17356] ? rcu_is_watching+0x15/0xb0 [ 368.627086][T17356] __do_fast_syscall_32+0x23e/0x6f0 [ 368.627108][T17356] ? do_fast_syscall_32+0x33/0x70 [ 368.627127][T17356] ? asm_int80_emulation+0x1a/0x20 [ 368.627143][T17356] ? do_int80_emulation+0x29f/0x550 [ 368.627162][T17356] ? trace_irq_disable+0x3b/0x140 [ 368.627185][T17356] do_fast_syscall_32+0x33/0x70 [ 368.627206][T17356] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 368.627225][T17356] RIP: 0023:0xf7f540ec [ 368.627241][T17356] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 368.627255][T17356] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 368.627274][T17356] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 368.627286][T17356] RDX: 000000000000fc36 RSI: 0000000000000000 RDI: 0000000000000000 [ 368.627295][T17356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.627304][T17356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 368.627310][T17356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.627320][T17356] [ 368.845910][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 369.132767][T17357] bridge0: entered allmulticast mode [ 369.416263][ T10] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 369.475868][ T5711] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 369.591657][T17357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.602655][T17357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.613667][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 369.629440][ T10] usb 2-1: too many configurations: 170, using maximum allowed: 8 [ 369.644373][ T5711] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 369.655391][ T5711] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 369.665465][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 369.673160][ T10] usb 2-1: can't read configurations, error -71 [ 369.682464][ T5711] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 369.696547][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.708838][ T5711] usb 5-1: Product: syz [ 369.713479][ T5711] usb 5-1: Manufacturer: syz [ 369.718496][ T5711] usb 5-1: SerialNumber: syz [ 369.733437][ T5711] usb 5-1: config 0 descriptor?? [ 369.742466][T17386] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 369.751017][T17386] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 369.756930][ T24] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 369.885821][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 369.905877][ T24] usb 3-1: device descriptor read/64, error -71 [ 369.962962][T17386] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 369.973260][T17386] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 370.043126][ T5711] Error reading MAC address [ 370.045864][ T1224] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 370.052721][ T5711] usb 5-1: USB disconnect, device number 98 [ 370.145967][ T24] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 370.235838][ T1224] usb 4-1: Using ep0 maxpacket: 32 [ 370.244938][ T1224] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 370.255386][ T1224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.267312][ T1224] usb 4-1: config 0 descriptor?? [ 370.275896][ T24] usb 3-1: device descriptor read/64, error -71 [ 370.284908][ T1224] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 370.320727][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 370.386368][ T24] usb usb3-port1: attempt power cycle [ 370.395937][ T5711] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 370.546000][ T5711] usb 5-1: Using ep0 maxpacket: 16 [ 370.552896][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.564067][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.574344][ T5711] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 370.588427][ T5711] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 370.597906][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.608742][ T5711] usb 5-1: config 0 descriptor?? [ 370.725955][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 370.746962][ T24] usb 3-1: device descriptor read/8, error -71 [ 370.822561][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 370.822617][ T29] audit: type=1326 audit(1782238294.257:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.4.1675" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 370.860805][ T29] audit: type=1326 audit(1782238294.297:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.4.1675" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 370.887003][ T29] audit: type=1326 audit(1782238294.297:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.4.1675" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 370.913053][ T29] audit: type=1326 audit(1782238294.297:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.4.1675" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 370.937408][ T29] audit: type=1326 audit(1782238294.297:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.4.1675" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 370.961793][ T29] audit: type=1326 audit(1782238294.297:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.4.1675" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 370.965824][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 370.986416][ T29] audit: type=1326 audit(1782238294.297:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.4.1675" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 371.023632][ T5356] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 371.032568][ T29] audit: type=1326 audit(1782238294.297:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.4.1675" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 371.059381][ T29] audit: type=1326 audit(1782238294.297:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.4.1675" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 371.073264][ T5711] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0034/input/input56 [ 371.086307][ T24] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 371.107292][ T29] audit: type=1326 audit(1782238294.297:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.4.1675" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 371.145075][ T24] usb 3-1: device descriptor read/8, error -71 [ 371.168271][ T5711] microsoft 0003:045E:07DA.0034: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 371.206336][ T5356] usb 2-1: Using ep0 maxpacket: 8 [ 371.236401][ T5356] usb 2-1: config 0 has no interfaces? [ 371.249773][ T5356] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 371.261365][ T24] usb usb3-port1: unable to enumerate USB device [ 371.271600][ T5356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.283919][ T5356] usb 2-1: config 0 descriptor?? [ 371.313649][ T5711] usb 5-1: USB disconnect, device number 99 [ 371.321004][T17462] bridge0: entered allmulticast mode [ 371.503348][ T5698] usb 2-1: USB disconnect, device number 77 [ 371.635831][ T10] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 371.791170][T17462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.800932][T17462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.816853][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 371.826993][ T10] usb 1-1: too many configurations: 170, using maximum allowed: 8 [ 371.835618][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 371.843346][ T10] usb 1-1: can't read configurations, error -71 [ 372.045896][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 372.145257][T17414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.157237][T17414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.184189][T17414] C: renamed from veth1_to_team (while UP) [ 372.197763][T17414] netlink: 'syz.3.1674': attribute type 4 has an invalid length. [ 372.207882][T17414] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1674'. [ 372.217672][T17414] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 372.244015][ T1224] gspca_vc032x: reg_r err -71 [ 372.248951][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.254554][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.263705][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.269377][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.280061][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.287337][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.294013][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.299884][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.305414][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.311091][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.316764][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.322366][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.328095][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.333826][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.340749][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.347239][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.352890][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.358771][ T1224] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.364735][ T1224] gspca_vc032x: Unknown sensor... [ 372.371714][ T1224] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 372.393706][ T1224] usb 4-1: USB disconnect, device number 104 [ 372.608820][T17513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1683'. [ 372.927076][ T24] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 373.085817][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 373.089082][ T24] usb 3-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 373.104253][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 373.113607][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.125846][ T10] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 373.134529][ T24] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 373.144340][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.160479][ T24] hub 3-1:1.0: bad descriptor, ignoring hub [ 373.171409][ T24] hub 3-1:1.0: probe with driver hub failed with error -5 [ 373.182508][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 373.188416][ T24] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 373.287370][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.298748][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 373.310964][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.322141][ T10] usb 4-1: config 0 descriptor?? [ 373.369289][T17519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.382542][T17519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.515896][ T5711] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 373.671852][T17537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.684045][T17537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.695411][ T5711] usb 1-1: unable to get BOS descriptor or descriptor too short [ 373.707996][ T5711] usb 1-1: too many configurations: 170, using maximum allowed: 8 [ 373.717058][ T5711] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 373.726192][ T5711] usb 1-1: can't read configurations, error -71 [ 374.125811][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 374.155835][ T5698] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 374.429543][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'. [ 374.439168][ T5698] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 374.456173][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.472145][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.493326][ T5698] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 374.523107][ T5698] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 374.558446][ T5698] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 374.594062][ T5698] usb 2-1: Manufacturer: syz [ 374.618419][ T5698] usb 2-1: config 0 descriptor?? [ 375.165798][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 375.771210][ T1224] usb 3-1: USB disconnect, device number 94 [ 375.886973][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 375.898292][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 375.941068][ T10] usb 4-1: USB disconnect, device number 105 [ 376.068909][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 376.108998][T17614] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1698'. [ 376.112888][T17597] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1696'. [ 376.128744][T17597] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1696'. [ 376.146482][T17614] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1698'. [ 376.205843][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 376.355818][ T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 376.510321][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 376.522882][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.532919][ T10] usb 4-1: Product: syz [ 376.540399][ T10] usb 4-1: Manufacturer: syz [ 376.547636][ T10] usb 4-1: SerialNumber: syz [ 376.559244][ T10] usb 4-1: config 0 descriptor?? [ 376.568841][ T10] ch341 4-1:0.0: ch341-uart converter detected [ 376.681359][T17623] netlink: 'syz.2.1699': attribute type 10 has an invalid length. [ 376.703547][T17623] team0: Device ipvlan0 failed to register rx_handler [ 376.759504][T17623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1699'. [ 376.799484][ T10] usb 4-1: failed to receive control message: -121 [ 376.831270][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 376.864713][T17623] bond15: entered promiscuous mode [ 377.032905][ T24] usb 4-1: USB disconnect, device number 106 [ 377.053686][ T24] ch341 4-1:0.0: device disconnected [ 377.245804][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 377.510689][T17682] netlink: 'syz.2.1702': attribute type 10 has an invalid length. [ 377.521089][T17682] team0: Device ipvlan0 failed to register rx_handler [ 377.550729][ T5698] usbhid 2-1:0.0: can't add hid device: -71 [ 377.558249][T17682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1702'. [ 377.567585][ T5698] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 377.601147][ T5698] usb 2-1: USB disconnect, device number 78 [ 377.668481][T17682] bond16: entered promiscuous mode [ 377.825808][ T10] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 377.865874][ T5711] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 377.989285][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 378.005240][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 378.016672][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 64, changing to 7 [ 378.029570][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice= 0.40 [ 378.038967][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.047230][ T10] usb 1-1: Product: syz [ 378.061946][ T5711] usb 5-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 378.075802][ T5711] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 378.084894][ T10] usb 1-1: Manufacturer: syz [ 378.089599][ T10] usb 1-1: SerialNumber: syz [ 378.095060][ T5711] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.108783][ T5711] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 378.124928][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.151596][ T5711] hub 5-1:1.0: bad descriptor, ignoring hub [ 378.160293][ T5711] hub 5-1:1.0: probe with driver hub failed with error -5 [ 378.171382][ T5711] cdc_wdm 5-1:1.0: skipping garbage [ 378.178126][ T5711] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 378.287984][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 378.331351][T17686] netlink: 'syz.0.1703': attribute type 1 has an invalid length. [ 378.367299][T17690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.397994][T17690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.620889][T17686] 8021q: adding VLAN 0 to HW filter on device bond9 [ 378.675007][T17810] netlink: 'syz.3.1711': attribute type 10 has an invalid length. [ 378.687760][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.694197][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.705422][T17810] team0: Device ipvlan0 failed to register rx_handler [ 378.735565][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.745692][T17810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1711'. [ 378.757107][ T10] usb 1-1: invalid MIDI in EP 0 [ 378.804205][T17810] bond10: entered promiscuous mode [ 378.843217][T17858] netlink: 'syz.0.1712': attribute type 10 has an invalid length. [ 378.861459][T17861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1713'. [ 378.878485][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 378.894320][T17858] team0: Device ipvlan0 failed to register rx_handler [ 378.940779][ T10] usb 1-1: USB disconnect, device number 94 [ 379.036796][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.038435][T17858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1712'. [ 379.159132][T17858] bond10: entered promiscuous mode [ 379.203277][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 379.203294][ T29] audit: type=1326 audit(1782238302.637:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.2.1715" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704f0ec code=0x0 [ 379.247062][ T24] usb 5-1: USB disconnect, device number 100 [ 379.336099][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 379.364296][T17949] netlink: 'syz.0.1717': attribute type 10 has an invalid length. [ 379.379186][T17949] team0: Device ipvlan0 failed to register rx_handler [ 379.406074][T17949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1717'. [ 379.518171][T17949] bond11: entered promiscuous mode [ 379.603266][T17985] tipc: Failed to remove unknown binding: 66,0,0/0:568963649/568963651 [ 379.612062][T17985] tipc: Failed to remove unknown binding: 66,0,0/0:568963649/568963650 [ 379.644074][T17992] FAULT_INJECTION: forcing a failure. [ 379.644074][T17992] name failslab, interval 1, probability 0, space 0, times 0 [ 379.661785][T17992] CPU: 0 UID: 0 PID: 17992 Comm: syz.0.1721 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.661814][T17992] Tainted: [L]=SOFTLOCKUP [ 379.661821][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.661832][T17992] Call Trace: [ 379.661839][T17992] [ 379.661846][T17992] dump_stack_lvl+0xe8/0x150 [ 379.661872][T17992] should_fail_ex+0x40c/0x560 [ 379.661896][T17992] should_failslab+0xa8/0x100 [ 379.661917][T17992] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 379.661941][T17992] ? rcu_is_watching+0x15/0xb0 [ 379.661962][T17992] ? __kernfs_new_node+0xe6/0x980 [ 379.661979][T17992] ? __kernfs_new_node+0xe6/0x980 [ 379.661999][T17992] __kernfs_new_node+0xe6/0x980 [ 379.662016][T17992] ? up_write+0x19f/0x4a0 [ 379.662041][T17992] ? __pfx___kernfs_new_node+0x10/0x10 [ 379.662059][T17992] ? rcu_is_watching+0x15/0xb0 [ 379.662078][T17992] ? kernfs_root+0x1c/0x230 [ 379.662094][T17992] ? rcu_is_watching+0x15/0xb0 [ 379.662112][T17992] ? kernfs_root+0x1c/0x230 [ 379.662128][T17992] ? lock_release+0x4b/0x3c0 [ 379.662145][T17992] ? sysfs_create_dir_ns+0x12f/0x2a0 [ 379.662169][T17992] ? kernfs_root+0x1c/0x230 [ 379.662185][T17992] ? kernfs_root+0x1c/0x230 [ 379.662202][T17992] kernfs_new_node+0xea/0x140 [ 379.662222][T17992] __kernfs_create_file+0x4b/0x2e0 [ 379.662245][T17992] sysfs_add_file_mode_ns+0x237/0x300 [ 379.662272][T17992] sysfs_create_file_ns+0x12b/0x1b0 [ 379.662296][T17992] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 379.662327][T17992] ? __dev_fwnode+0x50/0x80 [ 379.662346][T17992] ? device_create_file+0xf4/0x1b0 [ 379.662364][T17992] device_add+0x432/0xb80 [ 379.662382][T17992] device_create+0x269/0x300 [ 379.662403][T17992] ? timer_init_key+0x161/0x2c0 [ 379.662429][T17992] ? __pfx_device_create+0x10/0x10 [ 379.662449][T17992] ? ieee80211_roc_setup+0x119/0x1d0 [ 379.662477][T17992] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 379.662500][T17992] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 379.662529][T17992] ? __pfx___nla_validate_parse+0x10/0x10 [ 379.662557][T17992] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 379.662581][T17992] ? trace_kmalloc+0x2a/0xf0 [ 379.662607][T17992] hwsim_new_radio_nl+0xd8b/0xf90 [ 379.662636][T17992] genl_family_rcv_msg_doit+0x233/0x340 [ 379.662658][T17992] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 379.662681][T17992] ? bpf_lsm_capable+0x9/0x20 [ 379.662698][T17992] ? security_capable+0x7e/0x2c0 [ 379.662718][T17992] genl_rcv_msg+0x614/0x7a0 [ 379.662740][T17992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.662758][T17992] ? ref_tracker_free+0x689/0x830 [ 379.662780][T17992] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 379.662802][T17992] ? __pfx_ref_tracker_free+0x10/0x10 [ 379.662830][T17992] netlink_rcv_skb+0x226/0x4a0 [ 379.662854][T17992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.662874][T17992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 379.662903][T17992] ? down_read+0x2be/0x330 [ 379.662927][T17992] genl_rcv+0x28/0x40 [ 379.662945][T17992] netlink_unicast+0x7bb/0x940 [ 379.662971][T17992] netlink_sendmsg+0x813/0xb40 [ 379.663000][T17992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.663025][T17992] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 379.663048][T17992] ? __import_iovec+0x5d7/0x7e0 [ 379.663074][T17992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.663098][T17992] sock_sendmsg_nosec+0x13a/0x180 [ 379.663119][T17992] ____sys_sendmsg+0x54e/0x850 [ 379.663146][T17992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.663176][T17992] ___sys_sendmsg+0x2a5/0x360 [ 379.663200][T17992] ? get_pid_task+0x20/0x1f0 [ 379.663220][T17992] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.663243][T17992] ? __mutex_trylock_common+0x15f/0x270 [ 379.663265][T17992] ? get_pid_task+0x20/0x1f0 [ 379.663282][T17992] ? get_pid_task+0x20/0x1f0 [ 379.663317][T17992] ? __fget_files+0x2a/0x420 [ 379.663334][T17992] ? __fget_files+0x3a2/0x420 [ 379.663355][T17992] __sys_sendmsg+0x177/0x240 [ 379.663378][T17992] ? __pfx___sys_sendmsg+0x10/0x10 [ 379.663406][T17992] ? rcu_is_watching+0x15/0xb0 [ 379.663428][T17992] __do_fast_syscall_32+0x23e/0x6f0 [ 379.663451][T17992] ? do_fast_syscall_32+0x33/0x70 [ 379.663474][T17992] ? asm_int80_emulation+0x1a/0x20 [ 379.663491][T17992] ? do_int80_emulation+0x29f/0x550 [ 379.663512][T17992] ? trace_irq_disable+0x3b/0x140 [ 379.663538][T17992] do_fast_syscall_32+0x33/0x70 [ 379.663561][T17992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.663582][T17992] RIP: 0023:0xf7ff40ec [ 379.663599][T17992] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 379.663614][T17992] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 379.663635][T17992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 379.663648][T17992] RDX: 0000000004000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.663660][T17992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.663671][T17992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 379.663682][T17992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.663700][T17992] [ 380.365879][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 380.515834][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 380.523789][ T9] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 380.635824][ T807] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 380.677876][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 380.686533][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 380.697600][ T10] usb 3-1: config 220 has an invalid descriptor of length 69, skipping remainder of the config [ 380.708138][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.719620][ T10] usb 3-1: config 220 has no interface number 2 [ 380.726346][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 380.739648][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.749610][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 380.762772][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 380.769741][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 380.776957][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 380.785229][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 380.794772][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 380.803021][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 380.809358][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 380.825044][ T9] usb 1-1: Manufacturer: syz [ 380.830671][ T807] usb 4-1: unable to get BOS descriptor or descriptor too short [ 380.838509][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.848206][ T10] usb 3-1: Product: syz [ 380.853469][ T9] usb 1-1: config 0 descriptor?? [ 380.859257][ T807] usb 4-1: config 4 interface 0 has no altsetting 0 [ 380.866402][ T10] usb 3-1: Manufacturer: syz [ 380.883234][ T807] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice=2a.af [ 380.900672][ T10] usb 3-1: SerialNumber: syz [ 380.908394][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.928554][ T807] usb 4-1: Product: syz [ 380.932847][ T807] usb 4-1: Manufacturer: syz [ 380.938144][ T807] usb 4-1: SerialNumber: syz [ 381.076285][T18043] netlink: 'syz.4.1731': attribute type 10 has an invalid length. [ 381.093949][T18043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1731'. [ 381.123163][T18043] bond7: entered promiscuous mode [ 381.144404][T18009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1725'. [ 381.243319][ T10] uvcvideo 3-1:220.1: Unknown video format 448b07f5-fe05-ffff-ffff-030000ffffff [ 381.270190][ T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 381.282480][ T10] uvcvideo 3-1:220.0: No valid video chain found. [ 381.290077][ T10] usb 3-1: selecting invalid altsetting 0 [ 381.303619][ T10] usb 3-1: selecting invalid altsetting 0 [ 381.311178][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 381.333853][ T10] usb 3-1: USB disconnect, device number 95 [ 381.405804][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 381.427960][ T9] appleir 0003:05AC:8243.0035: unknown main item tag 0x0 [ 381.449066][ T9] appleir 0003:05AC:8243.0035: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 381.851610][ T807] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 381.867880][ T807] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 381.915315][ T807] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 381.946136][ T807] usb 4-1: media controller created [ 381.970012][ T807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.979974][T18146] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 381.991994][T18146] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 382.000493][T18146] CPU: 0 UID: 0 PID: 18146 Comm: syz.2.1738 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.011539][T18146] Tainted: [L]=SOFTLOCKUP [ 382.015875][T18146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.026026][T18146] RIP: 0010:__mutex_lock+0x149/0x1550 [ 382.031516][T18146] Code: c0 80 85 4a 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 35 12 00 00 83 3d f5 86 96 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 fc c3 7f f6 4d 39 64 24 58 0f 85 48 11 00 00 [ 382.051317][T18146] RSP: 0018:ffffc9001033efc0 EFLAGS: 00010206 [ 382.057401][T18146] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a4a8503 [ 382.065678][T18146] RDX: 0000000000000000 RSI: 000000000000026f RDI: 00000000000000c0 [ 382.074365][T18146] RBP: ffffc9001033f158 R08: ffffc9001033f0c7 R09: 0000000000000000 [ 382.082354][T18146] R10: ffffc9001033f0a0 R11: fffff52002067e19 R12: 0000000000000068 [ 382.090424][T18146] R13: 0000000000000000 R14: 1ffff92002067e0c R15: 0000000000000000 [ 382.098415][T18146] FS: 0000000000000000(0000) GS:ffff88812522d000(0063) knlGS:00000000f543db40 [ 382.107354][T18146] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 382.113951][T18146] CR2: 00000000f543b4d8 CR3: 0000000038d0c000 CR4: 00000000003526f0 [ 382.121933][T18146] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000002 [ 382.129914][T18146] DR3: ffffffffafffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 382.137896][T18146] Call Trace: [ 382.141189][T18146] [ 382.144128][T18146] ? __mutex_lock+0x30d/0x1550 [ 382.148917][T18146] ? rcu_is_watching+0x15/0xb0 [ 382.153710][T18146] ? dvb_usbv2_generic_write+0x26/0x60 [ 382.159191][T18146] ? __mutex_trylock_common+0x15f/0x270 [ 382.164755][T18146] ? __pfx___mutex_lock+0x10/0x10 [ 382.169816][T18146] ? __pfx___mutex_lock+0x10/0x10 [ 382.174927][T18146] ? trace_contention_end+0x3d/0x140 [ 382.180228][T18146] ? __mutex_lock+0x30d/0x1550 [ 382.185011][T18146] dvb_usbv2_generic_write+0x26/0x60 [ 382.190317][T18146] mxl111sf_ctrl_msg+0x160/0x2f0 [ 382.195271][T18146] mxl111sf_write_reg+0xa9/0x1b0 [ 382.200309][T18146] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 382.205962][T18146] ? stack_trace_save+0xa9/0x100 [ 382.210936][T18146] ? __pfx_stack_trace_save+0x10/0x10 [ 382.216332][T18146] ? stack_depot_save_flags+0x33/0x800 [ 382.221813][T18146] mxl111sf_i2c_xfer+0x463/0x5060 [ 382.226941][T18146] ? lock_release+0x4b/0x3c0 [ 382.231539][T18146] ? post_alloc_hook+0x1f9/0x250 [ 382.236499][T18146] ? rcu_read_lock_held+0xa/0x50 [ 382.241463][T18146] ? unwind_next_frame+0x8f/0x2550 [ 382.246597][T18146] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 382.252069][T18146] ? unwind_next_frame+0x8f/0x2550 [ 382.257197][T18146] ? rcu_is_watching+0x15/0xb0 [ 382.262004][T18146] ? unwind_next_frame+0x8f/0x2550 [ 382.267356][T18146] ? rcu_is_watching+0x15/0xb0 [ 382.272163][T18146] ? is_bpf_text_address+0x26/0x2b0 [ 382.277398][T18146] ? rcu_is_watching+0x15/0xb0 [ 382.282194][T18146] ? ktime_get+0x45/0x220 [ 382.286545][T18146] ? rcu_is_watching+0x15/0xb0 [ 382.291325][T18146] ? rcu_is_watching+0x15/0xb0 [ 382.296103][T18146] ? lock_release+0x4b/0x3c0 [ 382.300725][T18146] ? ktime_get+0x45/0x220 [ 382.305071][T18146] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 382.311239][T18146] ? ktime_get+0x1f5/0x220 [ 382.315675][T18146] ? lapic_next_event+0x11/0x20 [ 382.320626][T18146] ? clockevents_program_event+0x491/0x630 [ 382.326452][T18146] ? __pfx_clockevents_program_event+0x10/0x10 [ 382.332623][T18146] ? rcu_is_watching+0x15/0xb0 [ 382.337414][T18146] ? rcu_is_watching+0x15/0xb0 [ 382.342190][T18146] ? trace_irq_enable+0x3b/0x140 [ 382.347149][T18146] ? irqentry_exit+0x218/0x8f0 [ 382.351928][T18146] ? trace_irq_disable+0x3b/0x140 [ 382.356973][T18146] __i2c_transfer+0x7be/0x1fe0 [ 382.361755][T18146] __i2c_smbus_xfer+0x1584/0x27d0 [ 382.366803][T18146] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 382.372195][T18146] ? 0xffffffff81000000 [ 382.376357][T18146] ? rcu_is_watching+0x15/0xb0 [ 382.381222][T18146] ? rt_mutex_lock_nested+0x156/0x1c0 [ 382.386614][T18146] i2c_smbus_xfer+0x1f4/0x310 [ 382.391316][T18146] i2cdev_ioctl_smbus+0x407/0x700 [ 382.396369][T18146] ? rcu_is_watching+0x15/0xb0 [ 382.401149][T18146] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 382.406726][T18146] ? lock_release+0x4b/0x3c0 [ 382.411325][T18146] ? __might_fault+0xaf/0x130 [ 382.416015][T18146] ? __might_fault+0xcb/0x130 [ 382.420706][T18146] compat_i2cdev_ioctl+0x29d/0x5c0 [ 382.425831][T18146] ? lock_release+0x4b/0x3c0 [ 382.430430][T18146] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 382.436074][T18146] ? __fget_files+0x3a2/0x420 [ 382.440816][T18146] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 382.446401][T18146] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 382.451880][T18146] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 382.457874][T18146] ? kmem_cache_free+0x182/0x650 [ 382.462825][T18146] ? __se_sys_futex_time32+0x3ab/0x440 [ 382.468296][T18146] ? __pfx_do_sys_openat2+0x10/0x10 [ 382.473683][T18146] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 382.479499][T18146] ? rcu_is_watching+0x15/0xb0 [ 382.484280][T18146] ? rcu_is_watching+0x15/0xb0 [ 382.489057][T18146] __do_fast_syscall_32+0x23e/0x6f0 [ 382.494271][T18146] ? do_fast_syscall_32+0x33/0x70 [ 382.499314][T18146] ? asm_int80_emulation+0x1a/0x20 [ 382.504437][T18146] ? do_int80_emulation+0x29f/0x550 [ 382.509653][T18146] ? trace_irq_disable+0x3b/0x140 [ 382.514699][T18146] do_fast_syscall_32+0x33/0x70 [ 382.519669][T18146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 382.526030][T18146] RIP: 0023:0xf704f0ec [ 382.530135][T18146] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 382.549762][T18146] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 382.558194][T18146] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000720 [ 382.566181][T18146] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.574160][T18146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.582139][T18146] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 382.590119][T18146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.598110][T18146] [ 382.601147][T18146] Modules linked in: [ 382.605471][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 382.612793][T18146] ---[ end trace 0000000000000000 ]--- [ 382.663561][ T807] usb 4-1: selecting invalid altsetting 1 [ 382.674035][ T807] set interface failed [ 382.678430][T18146] RIP: 0010:__mutex_lock+0x149/0x1550 [ 382.689883][T18146] Code: c0 80 85 4a 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 35 12 00 00 83 3d f5 86 96 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 fc c3 7f f6 4d 39 64 24 58 0f 85 48 11 00 00 [ 382.711269][T18146] RSP: 0018:ffffc9001033efc0 EFLAGS: 00010206 [ 382.719545][T18146] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a4a8503 [ 382.730121][T18146] RDX: 0000000000000000 RSI: 000000000000026f RDI: 00000000000000c0 [ 382.736379][ T24] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 382.738644][T18146] RBP: ffffc9001033f158 R08: ffffc9001033f0c7 R09: 0000000000000000 [ 382.754624][T18146] R10: ffffc9001033f0a0 R11: fffff52002067e19 R12: 0000000000000068 [ 382.762988][T18079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1724'. [ 382.774171][T18146] R13: 0000000000000000 R14: 1ffff92002067e0c R15: 0000000000000000 [ 382.782242][T18146] FS: 0000000000000000(0000) GS:ffff88812522d000(0063) knlGS:00000000f543db40 [ 382.792281][T18146] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 382.798111][T18004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.798964][T18146] CR2: 0000000080001ac0 CR3: 0000000038d0c000 CR4: 00000000003526f0 [ 382.818290][T18146] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000002 [ 382.826633][T18146] DR3: ffffffffafffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 382.835301][T18146] Kernel panic - not syncing: Fatal exception [ 382.841553][T18146] Kernel Offset: disabled [ 382.845880][T18146] Rebooting in 86400 seconds..