last executing test programs: 6m1.441896606s ago: executing program 0 (id=1066): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x8, 0x5, 0x628, 0x208, 0x2f8, 0xffffffff, 0x0, 0x0, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x33, 0x4, 0x7, 0x42}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4=@remote, @ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@empty, @gre_key=0x6, @gre_key=0x40}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'pimreg1\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [{}, {}, {0x0, 0x0, 0x40}]}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @port=0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) unshare(0x64000600) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0xc0000, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010d2bbd70000200000007000080", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="010200007f"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m0.569281392s ago: executing program 0 (id=1074): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x40, 0x1, 0x2b4}) syz_open_dev$usbmon(&(0x7f00000000c0), 0x936, 0x4a200) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x1e0, 0x78, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9}, {0x350, 0x20002, 0xffffffff}, {0x10, 0x300}, {0x4, 0x4000000}, 0x1, 0x100, 0x2, 0xd614, 0x1, 0x0, 0x2, 0xfffffffe, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}) 5m57.086961205s ago: executing program 0 (id=1085): socket$can_bcm(0x1d, 0x2, 0x2) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f00000004c0)=0x1, 0x4) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80800) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) 5m56.993131727s ago: executing program 0 (id=1086): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="20170400000400000073"], 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x1d0, 0x0, 0xfffffffffffffff9, [{{0x3, 0x0, 0x0, 0x3, 0x6, 0xff, {0x0, 0x400000000005, 0x8000000000000000, 0x7, 0xd, 0x0, 0x404, 0x3, 0x3e, 0x4000, 0xa5, 0x0, 0x0, 0x80000000, 0xfffffffc}}, {0x2, 0x10001, 0x84, 0x7fffffff, '\\sev_\xa4d\xf1\x97\x86\x84\xc3\xb1\x9c\xd7]EC\x12\x91Ll\xfe\xddk\xaf\x1cB\xf6\xdf\xcd+\xa6\'\xd1\xdd\xd7\xdfQ\xd3\xa9\xachfr\xd7\x1dJ&\x01\xc6\"\x05\x0e%&\xd1\xf9\x03#\xa7\xb5z\xf7\x03Zr\xc1k\xc6\xf0*:cW\xe0>\x82\x04\xbeE\xd9\aQP\xf6|\xc5^\xc8\xd2\xe6\xc2\x1b,l\v\x11]\x13>T\x10\x18\x14\xb2\x9f\xe5s\xe8\xb3wr#a\x87\xa8@\xbf\xd0%\xe9c\xfe\xa2~\x02\xd8\x04\xd9z\x89'}}, {{0x3, 0x0, 0x10000, 0x3, 0x86, 0xb402, {0x3, 0x1, 0x20000000000000, 0x3, 0xb, 0x7ff, 0x1000, 0x3, 0x3, 0x4000, 0x3, 0xee00, 0x0, 0xc6, 0x2}}, {0x4, 0x81, 0x2, 0x0, 'fd'}}]}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2465, &(0x7f0000000340)={0x0, 0xc0fb, 0x80, 0x1, 0x1d6}, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x5, 0x400, 0x8}) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) 5m56.099569993s ago: executing program 0 (id=1090): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, 0x0, 0x0, 0x2}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x48890}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x500, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 5m54.871803678s ago: executing program 0 (id=1095): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x10, 0x8c, {0x8c, 0x21, "bdf93e82c5a78d9668cf47ed0a3beac572ce77f4a56315d7de9b7d9d8cecba2ef87e151dd6984e84c7037d0ce87b98a36ee4fc7345c400aa1cd2dce3658e1c49d976a731cf953cbc1b57be6d04a4052b0b2b3e6d77f8af1dfff7ba48cc864601c7920f3db0955b0e35843cae75c9f2073efa866c0c811ee7a98cbac0a680600d6cb98a3cbcb86ce4ab25"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0xd, 0xc, "ee90b0247addf9378e27f77c"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000240)={0x20, 0x81, 0x1, 'z'}, &(0x7f0000000280)={0x20, 0x82, 0x1, "16"}, &(0x7f00000002c0)={0x20, 0x83, 0x3, "d16e73"}, &(0x7f0000000300)={0x20, 0x84, 0x3, "0c2616"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "68d96d"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) 5m54.485347675s ago: executing program 32 (id=1095): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x10, 0x8c, {0x8c, 0x21, "bdf93e82c5a78d9668cf47ed0a3beac572ce77f4a56315d7de9b7d9d8cecba2ef87e151dd6984e84c7037d0ce87b98a36ee4fc7345c400aa1cd2dce3658e1c49d976a731cf953cbc1b57be6d04a4052b0b2b3e6d77f8af1dfff7ba48cc864601c7920f3db0955b0e35843cae75c9f2073efa866c0c811ee7a98cbac0a680600d6cb98a3cbcb86ce4ab25"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0xd, 0xc, "ee90b0247addf9378e27f77c"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000240)={0x20, 0x81, 0x1, 'z'}, &(0x7f0000000280)={0x20, 0x82, 0x1, "16"}, &(0x7f00000002c0)={0x20, 0x83, 0x3, "d16e73"}, &(0x7f0000000300)={0x20, 0x84, 0x3, "0c2616"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "68d96d"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) 13.437485309s ago: executing program 4 (id=2897): syz_usb_connect(0x2, 0x51, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0x2b, 0x56, 0xd3, 0x10, 0x1199, 0x6812, 0xde52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x0, 0x3, 0x90, 0x5, "", [{{0x9, 0x4, 0x65, 0xfb, 0x5, 0x42, 0x37, 0x9e, 0x1, [], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x5a, 0x97, 0x3}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xba, 0x5, 0x5}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x4, 0x9}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x3, 0x8, 0x8}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x7, 0x42, 0x7}}]}}]}}]}}, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x100) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={"34e17141", 0x200, 0x5, 0x8, 0x2, 0x6d, "8a86ccfd751b15dac5ddb6f309fe93", "2f2c30e1", '\x00', "f119ab00", ["fcffcd46ca70da7b00", "1400", "681218fcfcdc175ade9e1fc0", "cbeab43dbb74b96740431a04"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000002c0)={0x7, 0x9, 0x3, 0x0, 0x100004, 0x7, "2af8d9f7b163121cf016148eaa7c593f", 0xfb, 0x1, 0x3, 0x6, 0x3, 0x9a, 0x7c}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, r1, 0x0) renameat2(0xffffffffffffff9c, 0x0, r1, &(0x7f00000004c0)='./file0\x00', 0x2) syz_open_dev$video(0x0, 0xd6, 0x1400) ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06) 10.940772558s ago: executing program 4 (id=2904): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r1, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) fcntl$addseals(r0, 0x409, 0xa) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="ebe3a0e9796c219d205e81f4000000000000000000000000000000572521e05b094bbf0350550823789cc3d7135d14b9ba2850870b2d265f8ca3c27dbc5ff76ef7a1b440807bb6690f8d2a937669882909e27ee2f1afdad5b1e9bf997bc04d9215045dc2c8dbdb274dcfe25c56ea409d", 0x70}], 0x1, 0x0, 0x0, 0xc041}], 0x1, 0x40000) recvmmsg$unix(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)=""/7, 0x7}, {&(0x7f0000000600)=""/182, 0xb6}], 0x2}}], 0x1, 0x40002021, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="86", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}, {{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000540)="76738eafdcd648ca627d4ecffea7622914c71c00810e4e1724ff953a151bc8aa4c731615341fd7fc3afb51085d7cde145779167e19b1684fa9e574d34ecb0aadc64c8bc240b6d96d3ffb34f8d2c15c40aecf71729dbdd8ae21a8f86dabbca88b4d981e2ad51402358ebe24fe02fc9e665d", 0x71}], 0x1, &(0x7f00000007c0)=[@rights={{0x34, 0x1, 0x1, [r3, r6, r7, r6, r5, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x38, 0x20000084}}], 0x2, 0x8800) sendto$inet(r7, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r7) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0xf, 0xb}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x7, &(0x7f0000000400)=[{0x9, 0x80, 0x2f, 0x10000}, {0x215c, 0x7, 0x4, 0x6}, {0x1, 0x9, 0x5, 0x8001}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x6d, 0x6, 0x6}, {0x1, 0x81, 0x8, 0x7}, {0x8, 0xe, 0x8, 0xe2}]}, 0x10) bind$inet6(r9, &(0x7f0000000240)={0xa, 0x4e21, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 9.772076011s ago: executing program 4 (id=2909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (fail_nth: 3) 8.953854743s ago: executing program 4 (id=2911): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0, 0xb4, &(0x7f0000000280)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @private=0xa010102}, @in6={0xa, 0x4e23, 0x1ff, @mcast1, 0x526b}, @in6={0xa, 0x4e24, 0xfffffffa, @empty, 0x401}, @in6={0xa, 0x4e23, 0x4, @local, 0x1ff}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={r2, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0xc663, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001200)={r3, 0x9}, 0x8) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000007c0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000800)) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfde1, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0xfdef) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000540)={0x1, @pix={0x6, 0x4, 0x32314147, 0x9, 0xff, 0xfffffffd, 0x8, 0x6, 0x0, 0x4, 0x2, 0x6}}) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000040)={0x7fc3, "b9abecfe9100a72ead3b3be3b6795e80561559bf34037168c9eebad8f163d551", 0xffffffffffffffff}) ioctl$XFS_IOC_COMMIT_RANGE(r10, 0x40103e05, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x670, 0x5, 0x468, 0x228, 0x228, 0xfeffffff, 0x228, 0x2f8, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wlan0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @rand_addr=0x64010100, @multicast1, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0xffffff00, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x6, 0x7, 0x4, 0xe000, 0x1, {}, {0x1, 0x1, 0x81, 0x3, 0x7, 0xd, "9d6ea157"}, 0x5, 0x2, {0x0}, 0xc}) 6.748773399s ago: executing program 2 (id=2922): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00'}) r1 = syz_io_uring_setup(0x478e, &(0x7f0000000400)={0x0, 0xc593, 0x8, 0x1, 0x309}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000000540), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001c00010029bd7000fedb8c1f0700", @ANYRES32=r3, @ANYBLOB="8000ff0a0a000200aaaaaaaaaa0c"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) syz_open_dev$I2C(&(0x7f0000000000), 0x7f, 0x404002) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) r4 = socket(0x10, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406200c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0xc020, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x3}}]}, 0x24}}, 0x20004980) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs\x00') r7 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) read$char_usb(r6, &(0x7f00000002c0)=""/153, 0x99) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r7, 0xbc4cd000) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r8, 0xffffffffffffffff, 0x5a) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="712ca77686470512b644fff0722391a574a238596d3a99"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000735500000000000000000000feff000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000005b00"/144]}, 0x108) r10 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f0000000100)={0x9, {0xab, 0x829, 0xfc8, 0xb}}) 6.680261815s ago: executing program 1 (id=2924): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000007110089600000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c617665000000001400058005000500010000000500040001000000140003006272696467655f736c6176655f300000"], 0x60}}, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000007010100000000000000000200000a0900010073797a3100000140000069ff0800084000006dcb0800014000008001080001400000010008000240fffffffe0c000640000000000000f42a0c0002400000128c00000000"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20004020) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, &(0x7f0000000140)) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 6.57597106s ago: executing program 3 (id=2925): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000040)={0x5, 0x1, 0x2, 0x2000, 0x4}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) io_uring_setup(0x705e, &(0x7f00000004c0)={0x0, 0xe592, 0x10, 0x2, 0x1df}) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_script(r3, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 4.893547503s ago: executing program 2 (id=2927): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000a80)=""/188, 0xba) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 4.658220473s ago: executing program 3 (id=2928): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @local, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 4.581328485s ago: executing program 1 (id=2929): bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x6aed42, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000140)={0x7, 0xfff, {}, {0xee00}, 0x1, 0x1051}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b4}, 0x8, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getpgid(0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000600)) getgroups(0x3, &(0x7f0000000640)=[0x0, 0xee00, 0xffffffffffffffff]) 4.510042709s ago: executing program 3 (id=2930): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0xf, 0x3, 0x0, 0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x2, 0x60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x4, 0x0, 0x9, 0x0, 0xfffffe0200000001, 0xfa11, 0xffffffff}, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62a, 0x80000000000000, 0x305, 0x0, 0x2, 0x9f69, 0x0, 0x200000000002000, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000240)={0x0}) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) fchdir(r8) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000002080)='rw\x00', 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="000000952ba30000000000000000", 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) 4.353779585s ago: executing program 1 (id=2931): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000fc0)={{@hyper, 0x3}, @any, 0x0, 0x0, 0x20005e, 0x8, 0xd6, 0x4000, 0x2}) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) r5 = dup2(r3, r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x118) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) fcntl$setown(r3, 0x8, r2) r8 = getpid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r10, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r9, 0x0}]) tkill(r8, 0x13) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 3.173092409s ago: executing program 5 (id=2933): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) set_mempolicy(0x6005, &(0x7f0000000080)=0x1, 0x4) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) (async) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) (async) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) (async) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x6, 0xf, 0x400, 0x8, 0x1, 0x0, 0x81, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x6, 0x1bae2b84, 0x101, 0x527a, 0x9}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000340)={r10, 0xe}, &(0x7f0000000380)=0x8) (async) write$char_usb(r8, &(0x7f0000000480)='\x00', 0x1) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYRESHEX=r11, @ANYRESDEC=r9, @ANYRES32=r12], 0x128}, 0x20000884) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) r14 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r14, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=""/84, 0x54}, 0x4}], 0x1, 0x40, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) 3.158884116s ago: executing program 4 (id=2912): syz_usb_connect(0x3, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1201000202030109022400010507100a090458090203000003f80402030800ab000c09050a030002521c0f"], 0x0) 3.071127467s ago: executing program 5 (id=2934): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'geneve1\x00'}) syz_usb_connect(0x0, 0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006"], 0x0) 2.776960059s ago: executing program 3 (id=2935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$media(&(0x7f0000000000), 0x6, 0x2802) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x1, 0xeeee8000, 0xc, 0x2, 0x4, 0xa, 0x0, 0xa, 0x0, 0x1, 0xc, 0x3}, {0x4000, 0x10000, 0xe, 0x13, 0x1, 0x8, 0x3, 0xa, 0xff, 0x6, 0x2}, {0x5000, 0x54000, 0x4, 0xf, 0x5, 0x3, 0x26, 0x6, 0x3, 0x6, 0x5}, {0x3000, 0x0, 0x3, 0x4, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x22, 0x1, 0x6}, {0x26000, 0x30000, 0x0, 0xd, 0x5b, 0x2d, 0x5, 0xc, 0xfe, 0x0, 0xf8, 0x9}, {0x3000, 0x12000, 0x19, 0xbd, 0x6, 0x10, 0x10, 0x1, 0xbf, 0x18, 0x9, 0xf}, {0xa000, 0x8000000, 0xc, 0x1, 0x0, 0xf, 0x10, 0x3, 0x0, 0x0, 0x3, 0x8}, {0xdddd0000, 0xffff, 0xa, 0x4, 0x7, 0x6, 0x4, 0xf9, 0x1, 0x8, 0x89, 0xfa}, {0x50000, 0xedd8}, {0xffff1000, 0x17}, 0x5, 0x0, 0x1000, 0x0, 0x100400002, 0x18000, 0xdddd1000, [0x8, 0x5, 0x400000000800000d, 0x7]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x24a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xe7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7b, 0x3}}}}}]}}]}}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.393022171s ago: executing program 2 (id=2936): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) signalfd4(r4, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000008200000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff17000000000000000000000000000000000000000000004de800000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x804, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}, 0x1, 0x0, 0x0, 0x40040080}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@getneightbl={0x14, 0x42, 0x10, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x44890) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@getchain={0x34, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0xd, 0x9}, {0x8}}, [{0x8, 0xb, 0x3}, {0xfffffffffffffeed, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090) sendmsg$nl_generic(r0, 0x0, 0x840) 2.194113204s ago: executing program 2 (id=2937): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x40, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1}}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000085) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x4da0, &(0x7f0000000280)={0x0, 0x86e1, 0x400, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000500)={0x0, 0x2, [0x640, 0x7a5, 0x891, 0x1bb]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.140473302s ago: executing program 1 (id=2938): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8044) r0 = syz_open_dev$video4linux(&(0x7f0000000580), 0x5, 0x40000) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000640)={0x4, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x60}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d0a1bab2b03265112f97ec0025e4f19cf33731019f", 0x15}, {&(0x7f0000000040)="6c6005a3db82dc705db8bde61ac25eba72632552829b20cbb9a893223adc3af9cd7695494be61568c2a5a0fc4c7577147a6df4b20504f3b4f96cfa9e0b085c", 0x3f}], 0x2, &(0x7f0000000200)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r5}}}, @dstopts={{0x68, 0x29, 0x37, {0x62, 0x9, '\x00', [@generic={0x6, 0x48, "45506efb761731c120302f785521fd8f37245ee6a327a31351e4c716bc0d1dab9b12ee5af6e688959304e44521545291941a4070392531ee3cd811a00075b70eeed76f3658e7a074"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hopopts={{0xa8, 0x29, 0x36, {0x33, 0x12, '\x00', [@generic={0x6, 0x7c, "16cd77759539389e6e337e6370ff762af7a1d63e1b79f8f7c568404ac76fc0766ed5b0733794be1444eac555c3008254b7e8a9b21033912f9b48fa9ccc57a2ab1c760d48d592f829b4d9aace23a1c4b51a77f2a9e2bb450e6f639291cd107e81b40c6621cc1ad0099b1a049b19fd9165cb62ba5ac593aa329c27eee5"}, @hao={0xc9, 0x10, @loopback}]}}}], 0x150}}], 0x1, 0x4044) 1.97721756s ago: executing program 2 (id=2940): syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="201000000000040014000300"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x2, 0x76, "2622fe010064acddf3479a9d78fa72252ab904d914e0273b70d2f3dec4765a34634042e583800367445ae2fccae6e0b58b4ac89ae1840d399cb4a39352c8eb48027e0b6cc1076ff9daa988c5722add50161ca7859c36d5599517b3562e862358269e7ba49190e4ab1d6346a87bba7d325e090d4b5cae"}) r1 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x6) fallocate(r1, 0x0, 0x0, 0x400001) lseek(r1, 0x0, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f00000000c0)=ANY=[]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c000100706879736465760046000300"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file1'}, 0xb) r3 = fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x4b3, 0x3108, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x45, 0xfe}}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000007000000080000000c00000000000000", @ANYRES32, @ANYBLOB="000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.727397045s ago: executing program 5 (id=2941): r0 = socket$can_raw(0x1d, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="1a9e0000000000000000ffff02000fe5be8beb8d5d6db619324fdc5f2b33aaeaac3bedc21a50d7c88ad814ca3113b86f93f78e768474f4689b0db3f45412eb78c0b5aa00766d8c9fd70e68a65e7331afca3061905294275c65da679b3f68fe9a8dc18afa3ec3decac88abf2f1509f6e980577e11af90b62cc55814e8d0bbb2263cb7fe247f", 0x85}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x449c4}, 0x8005) 1.649788669s ago: executing program 5 (id=2942): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x3e8, 0x0) 1.530644775s ago: executing program 5 (id=2943): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = socket(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) ptrace(0x10, 0x1) socket$packet(0x11, 0x2, 0x300) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) 1.380900386s ago: executing program 3 (id=2944): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000000c0)) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x10000, 0x2000000000000000, r1}) fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x8810) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @multicast1}, {0x0, @multicast}, 0x4a, {0x2, 0x0, @loopback}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.256327389s ago: executing program 3 (id=2945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x10, 0x93, 0xe3, 0xcc1e}, {0x10, 0x63, 0x0, 0xd}, {0x53b, 0xe, 0x5, 0x1}, {0x1, 0x7, 0xb, 0x8}, {0x0, 0xff, 0x4, 0xe}, {0x7, 0x5, 0x29, 0xd}, {0x9, 0xb7, 0x5, 0x1}]}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2c, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) r1 = syz_usb_connect$uac2(0x5, 0xe5, &(0x7f0000000140)={{0x12, 0x1, 0x7d1, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4650, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x6, 0x8c91ab4b8048e5c4, 0x6, {0x8, 0xb, 0x0, 0x1, 0x1, 0x9, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x7, 0x15, 0x2}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x301, 0x5, 0x4, 0x2e, 0x1, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x0, 0xb, 0x0, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xb, 0x1, 0x76, 0x4, 'T0'}, @as_header={0x10, 0x24, 0x1, 0x1, 0x6, 0x2, 0x1001, 0x6, 0x67, 0x8}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xf000, 0x53, 0x6, "18f0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0xc, 0xd3, {0x8, 0x25, 0x1, 0x80, 0xc18e0063fc92de1b, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x9, 0x90, 0x2, 0x2, 0x9, 0x8, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x2, 0x7, 0x40, "536b871625f8fa"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x1, 0x9, 0x1, "ef937c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x99, 0x9, 0xaa, {0x8, 0x25, 0x1, 0x0, 0x3, 0x3, 0x9}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x5, 0xd2, 0x8c, 0x8, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1415}}]}) syz_usb_control_io$uac2(r1, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x20, 0xb, 0x4d, {0x4d, 0x4, "b18ffecb06ea7e4e3142848ec22ee422e6abfbec210d848692583200e80e7117b069aae7bd3bf25858c59ac1f0b01b8b4f4e96fdc9bae8c0c0d38bed1329c2834e10750248ce18e3f6d8fa"}}, &(0x7f00000003c0)={0x0, 0x3, 0x90, @string={0x90, 0x3, "c4560fb00229d837587a82ae55433b6c72213800e6e13b6a2f29f356d4bb2d199c32c715bbdb4bc094cc438593a77efdc14135157ba067c3bc1d44fde1604c6a695962c5806511eb1c76a6cbfe4dbde8bcd5beab087653d1a25255ad9977bb1bd45b42a5af481728cfdc6302c49792804965ebc3adb3752d7ef87fa1357323aadb6eae189dbb17b2dd2b7219882c"}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000540)={0x40, 0xe, 0x9d, "f080b4fc6d4674bc3f1eb730107b9b95b592dc324c6e9cee7b05708acf2a37c04aa6e69a92aba98d22104c9a40dd16446b1787aac2bd6fdd1bf425156d69f46ca73a616b2b078f819a9c5a85607dfc74806fc3c460aa6de4f0d650849c9a74bfb512df3a0a6256bdd9e30bd36cb4d45bfc95ca337a93dbc653480db40e67db4adc19e8fbb700d7214a3e7857f951db2755e0f15b4911441088b60fb0e2"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000680)={0x20, 0x81, 0x3, "72f26f"}, &(0x7f00000006c0)={0x20, 0x82, 0x3, "a5ac35"}, &(0x7f0000000700)={0x20, 0x83, 0x2, "ca78"}, &(0x7f0000000740)={0x20, 0x84, 0x4, "ffea43f4"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "11e422"}}) 528.951946ms ago: executing program 2 (id=2946): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000e00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\n\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="0000000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000fdb4135575df4f5ebac876302b33c02234bb4ba0f30d4a1b0000022000", @ANYRES32=r0, @ANYBLOB="0000000000000000010000000000000000000100", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000060000001000000", @ANYRES32=r0, @ANYBLOB="00000000000000000100000000f0ffff00000000", @ANYRES32, @ANYBLOB="00000000004000000000000000e0ffff00000000", @ANYRES32=r0, @ANYBLOB="00000000000000f0ffffffff0000000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRESHEX=r4, @ANYBLOB="00000000001000000000000000f0ffffffffffff"]) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299d000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000007010200000000000000000100000a0c00034000000000000000020912010073797a30000000000800054000"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) prctl$PR_SET_NAME(0x4, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000efffff94909c9366d57f9d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_pidfd_open(r6, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/64, 0x40}, {0x0}, {&(0x7f0000003c40)=""/183, 0xb7}, {&(0x7f0000000900)=""/239, 0xef}, {0x0}, {0x0}, {&(0x7f0000000bc0)=""/245, 0xa0}, {0x0}, {&(0x7f0000000a00)=""/101, 0x65}, {&(0x7f0000000a80)=""/102, 0x66}], 0x0, &(0x7f0000004100)=""/137, 0x89}, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) close(0xffffffffffffffff) 88.472553ms ago: executing program 5 (id=2947): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r0, &(0x7f00000002c0)="05031400d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 4 (id=2948): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7, 0x2) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x4}}}, &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0xb34}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r7 = syz_open_dev$audion(&(0x7f0000000040), 0x8, 0x202000) r8 = syz_open_dev$loop(&(0x7f0000000180), 0x200000002, 0x400) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x21, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) sendto$packet(r7, &(0x7f0000000080)="0f344931656f631f9ba441fd0581666b8c513aec199d33f8a4197ad42aec8aa187e8d827072f175176c6303b4c3a120f7dfd7a11bb04af91af0db34c", 0x3c, 0x4004011, 0x0, 0x0) pread64(r0, &(0x7f0000000180)=""/79, 0xfffffe69, 0x1) kernel console output (not intermixed with test programs): vice=61.47 [ 564.772558][ T1225] usb 3-1: USB disconnect, device number 46 [ 564.789124][ T5682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.818195][ T5682] usb 6-1: config 0 descriptor?? [ 564.857682][ T5682] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 564.882759][ T1225] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 564.909462][ T5754] udevd[5754]: setting mode of /dev/bus/usb/003/046 to 020664 failed: No such file or directory [ 564.940702][ T5690] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 564.951600][ T5754] udevd[5754]: setting owner of /dev/bus/usb/003/046 to uid=0, gid=0 failed: No such file or directory [ 565.010660][ T5689] gspca_ov534_9: Unknown sensor 0000 [ 565.010769][ T5689] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 565.130652][ T5690] usb 2-1: Using ep0 maxpacket: 32 [ 565.149867][ T5690] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 565.208465][ T5690] usb 2-1: config 0 has no interface number 0 [ 565.265744][ T5690] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 565.300674][ T5690] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid maxpacket 13056, setting to 1024 [ 565.329862][ T5690] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 565.370437][ T5690] usb 2-1: config 0 interface 196 has no altsetting 0 [ 565.412460][ T5690] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 565.446397][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.472052][T14401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2741'. [ 565.496857][ T5690] usb 2-1: Product: syz [ 565.515216][ T5690] usb 2-1: Manufacturer: syz [ 565.537217][ T5690] usb 2-1: SerialNumber: syz [ 565.565109][ T5690] usb 2-1: config 0 descriptor?? [ 565.590056][T14409] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 565.598906][T14409] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 565.713942][ T5682] gspca_stv06xx: I2C: Read error writing address: -71 [ 565.730110][ T5682] usb 6-1: USB disconnect, device number 85 [ 565.928628][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2745'. [ 566.165984][T14428] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.173386][T14428] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.213157][T14428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.285457][T14428] batman_adv: batadv0: Interface deactivated: gretap2 [ 566.296645][ T1043] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.315308][ T1043] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.329085][T14430] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2748'. [ 566.338604][ T1043] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.351429][ T1043] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.360678][ T5682] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 566.364450][ T1043] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.377613][ T1043] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.386781][ T1043] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.396224][ T1043] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.521380][ T5682] usb 3-1: Using ep0 maxpacket: 16 [ 566.529350][ T5682] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 566.540512][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.552696][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.563035][ T5682] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 566.576507][ T5682] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 566.585985][T12927] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 566.593758][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.604508][ T5682] usb 3-1: config 0 descriptor?? [ 566.750808][T12927] usb 6-1: Using ep0 maxpacket: 8 [ 566.757628][T12927] usb 6-1: config 0 has an invalid interface number: 170 but max is 0 [ 566.766317][T12927] usb 6-1: config 0 has no interface number 0 [ 566.772706][T12927] usb 6-1: too many endpoints for config 0 interface 170 altsetting 170: 170, using maximum allowed: 30 [ 566.784145][T12927] usb 6-1: config 0 interface 170 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 566.798186][T12927] usb 6-1: config 0 interface 170 has no altsetting 0 [ 566.807706][T12927] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 566.817472][T12927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.826026][T12927] usb 6-1: Product: syz [ 566.830316][T12927] usb 6-1: Manufacturer: syz [ 566.835005][T12927] usb 6-1: SerialNumber: syz [ 566.842610][T12927] usb 6-1: config 0 descriptor?? [ 566.853372][T12927] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 566.863180][T12927] dvb-usb: bulk message failed: -22 (2/0) [ 566.871533][T12927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 566.881609][T12927] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 566.890932][T12927] usb 6-1: media controller created [ 566.903923][T12927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 566.920135][T12927] cxusb: set interface failed [ 566.924975][T12927] dvb-usb: bulk message failed: -22 (1/0) [ 566.979686][T12927] DVB: Unable to find symbol mt352_attach() [ 566.986010][T12927] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 567.037648][ T5682] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.005D/input/input94 [ 567.060889][T14430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.086871][ T5682] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.005D/input/input95 [ 567.099479][T12927] rc_core: IR keymap rc-dvico-portable not found [ 567.105885][T12927] Registered IR keymap rc-empty [ 567.118291][T14430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.127308][T12927] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 567.148158][T12927] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input93 [ 567.165618][T14430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.192433][T14430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.218924][T12927] dvb-usb: schedule remote query interval to 100 msecs. [ 567.228127][T14427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.241338][T12927] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 567.267134][T14427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.279032][T14439] syzkaller1: entered promiscuous mode [ 567.288098][T14439] syzkaller1: entered allmulticast mode [ 567.291406][ T5682] kye 0003:0458:5013.005D: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 567.307455][T12927] usb 6-1: USB disconnect, device number 86 [ 567.334831][T14427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.375408][T14427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.395157][T14442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.423674][T12927] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 567.436287][T14442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.490427][ T5682] usb 3-1: USB disconnect, device number 47 [ 567.596636][ T5690] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 567.611090][ T5690] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 567.627528][ T5690] usb 2-1: USB disconnect, device number 41 [ 567.679635][T14446] syzkaller1: entered promiscuous mode [ 567.694563][T14446] syzkaller1: entered allmulticast mode [ 567.726917][T12927] usb 4-1: USB disconnect, device number 19 [ 567.850870][T14451] FAULT_INJECTION: forcing a failure. [ 567.850870][T14451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.866623][T14451] CPU: 0 UID: 0 PID: 14451 Comm: syz.3.2754 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.866659][T14451] Tainted: [L]=SOFTLOCKUP [ 567.866667][T14451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 567.866682][T14451] Call Trace: [ 567.866690][T14451] [ 567.866699][T14451] dump_stack_lvl+0xe8/0x150 [ 567.866728][T14451] should_fail_ex+0x40c/0x560 [ 567.866757][T14451] _copy_from_user+0x2d/0xb0 [ 567.866787][T14451] __ia32_sys_rt_sigreturn+0x362/0x8c0 [ 567.866820][T14451] ? trace_irq_enable+0x3b/0x140 [ 567.866851][T14451] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 567.866885][T14451] ? _raw_spin_unlock_irq+0x2e/0x50 [ 567.866920][T14451] ? lock_release+0x4b/0x3c0 [ 567.866938][T14451] ? rcu_is_watching+0x15/0xb0 [ 567.866962][T14451] ? rcu_is_watching+0x15/0xb0 [ 567.866984][T14451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.867014][T14451] do_syscall_64+0x174/0x580 [ 567.867042][T14451] ? trace_irq_disable+0x3b/0x140 [ 567.867070][T14451] ? clear_bhb_loop+0x40/0x90 [ 567.867091][T14451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.867111][T14451] RIP: 0033:0x7fda4f33e1d9 [ 567.867130][T14451] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 567.867148][T14451] RSP: 002b:00007fda5018ca80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 567.867171][T14451] RAX: ffffffffffffffda RBX: 00007fda4f615fa0 RCX: 00007fda4f33e1d9 [ 567.867187][T14451] RDX: 00007fda5018ca80 RSI: 00007fda5018cbb0 RDI: 0000000000000021 [ 567.867201][T14451] RBP: 00007fda5018d090 R08: 0000000000000000 R09: 0000000000000000 [ 567.867214][T14451] R10: 0000000000010002 R11: 0000000000000202 R12: 0000000000000001 [ 567.867227][T14451] R13: 00007fda4f616038 R14: 00007fda4f615fa0 R15: 00007fda4f73fa48 [ 567.867253][T14451] [ 567.991659][ T5690] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 568.135437][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2756'. [ 568.192064][T12927] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 568.212884][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 568.224920][ T5690] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 568.234175][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.250188][ T5690] usb 2-1: config 0 descriptor?? [ 568.257168][T14448] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 568.321724][T14459] netlink: 'syz.3.2758': attribute type 4 has an invalid length. [ 568.340875][T12927] usb 3-1: Using ep0 maxpacket: 32 [ 568.348290][T12927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 568.356244][ T5682] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 568.366419][T12927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.376704][T12927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.388629][T12927] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 568.398385][T12927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.406552][T12927] usb 3-1: Product: syz [ 568.411110][T12927] usb 3-1: Manufacturer: syz [ 568.415835][T12927] usb 3-1: SerialNumber: syz [ 568.510933][ T5682] usb 6-1: Using ep0 maxpacket: 8 [ 568.519426][ T5682] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 568.528638][ T5682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.536919][ T5682] usb 6-1: Product: syz [ 568.541501][ T5682] usb 6-1: Manufacturer: syz [ 568.546149][ T5682] usb 6-1: SerialNumber: syz [ 568.552819][ T5682] usb 6-1: config 0 descriptor?? [ 568.560735][ T5682] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 568.569215][ T5682] dvb-usb: bulk message failed: -22 (2/0) [ 568.577573][ T5682] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 568.587521][ T5682] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 568.596833][ T5682] usb 6-1: media controller created [ 568.608733][ T5682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 568.635971][T12927] usb 3-1: unit 255 not found! [ 568.664342][T12927] usb 3-1: USB disconnect, device number 48 [ 568.675963][T14448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.686302][T11829] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 568.697640][T14448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.716512][ T5690] hid (null): global environment stack underflow [ 568.733685][ T5742] udevd[5742]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.753700][ T5690] hid_parser_main: 45 callbacks suppressed [ 568.753749][ T5690] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 568.771356][ T5690] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 568.783292][ T5690] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 568.794119][T14453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.803578][ T5690] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 568.812981][T14453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.820826][ T5690] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 568.844847][T14453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.847846][ T5690] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 568.858877][T14453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.872891][ T5690] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 568.882724][ T5690] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 568.889763][T11829] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 568.891681][ T5690] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 568.908784][T11829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.915106][ T5682] cxusb: set interface failed [ 568.922355][T11829] usb 4-1: Product: syz [ 568.926591][T11829] usb 4-1: Manufacturer: syz [ 568.928990][ T5682] dvb-usb: bulk message failed: -22 (1/0) [ 568.937626][T11829] usb 4-1: SerialNumber: syz [ 568.942980][ T5690] logitech-djreceiver 0003:046D:C71F.005E: unknown main item tag 0x0 [ 568.952810][T11829] usb 4-1: config 0 descriptor?? [ 568.954288][ T5690] logitech-djreceiver 0003:046D:C71F.005E: collection stack underflow [ 568.971490][ T5690] logitech-djreceiver 0003:046D:C71F.005E: item 0 0 0 12 parsing failed [ 568.984510][ T5690] logitech-djreceiver 0003:046D:C71F.005E: logi_dj_probe: parse failed [ 568.993363][ T5690] logitech-djreceiver 0003:046D:C71F.005E: probe with driver logitech-djreceiver failed with error -22 [ 569.007442][ T5690] usb 2-1: USB disconnect, device number 42 [ 569.026363][ T5682] DVB: Unable to find symbol mt352_attach() [ 569.032404][ T5682] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 569.100697][ T5689] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 569.108365][ T5682] rc_core: IR keymap rc-dvico-portable not found [ 569.115328][ T5682] Registered IR keymap rc-empty [ 569.121698][ T5682] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 569.133389][ T5682] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input96 [ 569.146178][ T5682] dvb-usb: schedule remote query interval to 100 msecs. [ 569.153373][ T5682] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 569.165443][ T5682] usb 6-1: USB disconnect, device number 87 [ 569.175645][T11829] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 569.209602][ T5682] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 569.270662][ T5689] usb 5-1: Using ep0 maxpacket: 16 [ 569.277270][ T5689] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 569.286022][ T5689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.296657][ T5689] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 569.309627][ T5689] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89 [ 569.318846][ T5689] usb 5-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3 [ 569.327437][ T5689] usb 5-1: Manufacturer: syz [ 569.332595][ T5689] usb 5-1: SerialNumber: syz [ 569.340804][ T5689] usb 5-1: config 0 descriptor?? [ 569.351910][ T5689] usb 5-1: 0:2 : does not exist [ 569.379638][T14461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.390429][T14461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.533141][T14471] netlink: 'syz.5.2763': attribute type 4 has an invalid length. [ 569.557710][T14463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.575330][T14463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.636326][ T30] audit: type=1800 audit(1782148561.666:751): pid=14475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2765" name="nullb0" dev="devtmpfs" ino=4957 res=0 errno=0 [ 569.681694][T14476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.705605][T14476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.730692][ T5682] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 569.763997][T14478] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2766'. [ 569.811933][ T5690] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 569.891450][ T5682] usb 3-1: Using ep0 maxpacket: 32 [ 569.898490][ T5682] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 569.908771][ T5682] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 569.918854][ T5682] usb 3-1: config 0 interface 0 has no altsetting 0 [ 569.928372][ T5682] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 569.937560][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.945651][ T5682] usb 3-1: Product: syz [ 569.949870][ T5682] usb 3-1: Manufacturer: syz [ 569.955739][ T5682] usb 3-1: SerialNumber: syz [ 569.963040][ T5682] usb 3-1: config 0 descriptor?? [ 569.975401][ T5690] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 569.984886][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.993154][ T5690] usb 2-1: Product: syz [ 569.997419][ T5690] usb 2-1: Manufacturer: syz [ 570.002149][ T5690] usb 2-1: SerialNumber: syz [ 570.009344][ T5690] usb 2-1: config 0 descriptor?? [ 570.016994][T12927] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 570.027189][T11829] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 570.034781][ T5690] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 570.048017][T11829] usb 4-1: USB disconnect, device number 20 [ 570.180777][T12927] usb 6-1: Using ep0 maxpacket: 8 [ 570.188548][T12927] usb 6-1: config 0 has an invalid interface number: 170 but max is 0 [ 570.197525][T12927] usb 6-1: config 0 has no interface number 0 [ 570.204149][T12927] usb 6-1: too many endpoints for config 0 interface 170 altsetting 170: 170, using maximum allowed: 30 [ 570.216055][T12927] usb 6-1: config 0 interface 170 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 570.230013][T12927] usb 6-1: config 0 interface 170 has no altsetting 0 [ 570.241997][T12927] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 570.251629][T12927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.259726][T12927] usb 6-1: Product: syz [ 570.264796][T12927] usb 6-1: Manufacturer: syz [ 570.269459][T12927] usb 6-1: SerialNumber: syz [ 570.276439][T12927] usb 6-1: config 0 descriptor?? [ 570.285978][T12927] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 570.295634][T12927] dvb-usb: bulk message failed: -22 (2/0) [ 570.303954][T12927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 570.313958][T12927] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 570.323087][T12927] usb 6-1: media controller created [ 570.337928][T12927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.358957][T12927] cxusb: set interface failed [ 570.363793][T12927] dvb-usb: bulk message failed: -22 (1/0) [ 570.393786][T12927] DVB: Unable to find symbol mt352_attach() [ 570.399919][T12927] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 570.459665][T14469] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 570.461838][T12927] rc_core: IR keymap rc-dvico-portable not found [ 570.482939][T12927] Registered IR keymap rc-empty [ 570.489935][T12927] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 570.502386][T14481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2762'. [ 570.505531][T12927] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input97 [ 570.525656][T14478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.535517][ T5682] gs_usb 3-1:0.0: Configuring for 154 interfaces [ 570.542836][T14478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.553108][T12927] dvb-usb: schedule remote query interval to 100 msecs. [ 570.561629][T12927] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 570.576913][T14478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.606652][T14478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.635806][T11829] usb 6-1: USB disconnect, device number 88 [ 570.671996][T11829] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 570.766058][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2767'. [ 570.940737][ T5682] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EREMOTEIO) [ 571.100965][T12927] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 571.142944][ T5682] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 571.199205][T14487] netlink: 'syz.5.2769': attribute type 4 has an invalid length. [ 571.209219][ T5682] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 571.233423][ T5682] usb 3-1: USB disconnect, device number 49 [ 571.280074][T14489] syzkaller1: entered promiscuous mode [ 571.292206][T14489] syzkaller1: entered allmulticast mode [ 571.301591][T12927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.321974][T12927] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 571.333976][T12927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 571.345549][T12927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 571.356138][T12927] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 571.373518][T12927] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 571.382779][T12927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 571.390985][T12927] usb 4-1: Product: syz [ 571.395250][T12927] usb 4-1: Manufacturer: syz [ 571.399936][T12927] usb 4-1: SerialNumber: syz [ 571.411006][T12927] usb 4-1: config 0 descriptor?? [ 571.550998][ T5690] gspca_ov534_9: reg_w failed -110 [ 571.654309][T12927] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 571.661373][T12927] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 571.840819][ T5690] gspca_ov534_9: Unknown sensor 0000 [ 571.840909][ T5690] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 571.877037][T12927] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 571.896360][ T5689] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 571.905594][T12927] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 571.918990][T12927] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 571.949844][T12927] usb 4-1: USB disconnect, device number 21 [ 571.966137][ T5689] usb 5-1: USB disconnect, device number 19 [ 572.000246][T13117] udevd[13117]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.015100][T14504] netlink: 'syz.4.2775': attribute type 4 has an invalid length. [ 572.064086][ T30] audit: type=1800 audit(1782148564.096:752): pid=14506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2776" name="nullb0" dev="devtmpfs" ino=4957 res=0 errno=0 [ 572.312316][T14515] netlink: 'syz.5.2780': attribute type 4 has an invalid length. [ 572.431073][ T5689] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 572.458985][T14521] FAULT_INJECTION: forcing a failure. [ 572.458985][T14521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.472959][T14521] CPU: 0 UID: 0 PID: 14521 Comm: syz.5.2783 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.472994][T14521] Tainted: [L]=SOFTLOCKUP [ 572.473003][T14521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 572.473017][T14521] Call Trace: [ 572.473025][T14521] [ 572.473034][T14521] dump_stack_lvl+0xe8/0x150 [ 572.473063][T14521] should_fail_ex+0x40c/0x560 [ 572.473098][T14521] _copy_from_user+0x2d/0xb0 [ 572.473131][T14521] input_event_from_user+0xb1/0x290 [ 572.473254][T14521] ? __pfx_input_event_from_user+0x10/0x10 [ 572.473292][T14521] ? rcu_is_watching+0x15/0xb0 [ 572.473319][T14521] evdev_write+0x2c7/0x4c0 [ 572.473370][T14521] ? get_pid_task+0x20/0x1f0 [ 572.473387][T14521] ? __pfx_evdev_write+0x10/0x10 [ 572.473408][T14521] ? bpf_lsm_file_permission+0x9/0x20 [ 572.473429][T14521] ? security_file_permission+0x75/0x260 [ 572.473451][T14521] ? rw_verify_area+0x203/0x4c0 [ 572.473468][T14521] ? __pfx_evdev_write+0x10/0x10 [ 572.473488][T14521] vfs_write+0x296/0xba0 [ 572.473505][T14521] ? __pfx_vfs_write+0x10/0x10 [ 572.473520][T14521] ? lock_release+0x4b/0x3c0 [ 572.473563][T14521] ? __fget_files+0x2a/0x420 [ 572.473600][T14521] ? __fget_files+0x3a2/0x420 [ 572.473621][T14521] ? __fget_files+0x2a/0x420 [ 572.473645][T14521] ksys_write+0x150/0x270 [ 572.473661][T14521] ? __pfx_ksys_write+0x10/0x10 [ 572.473678][T14521] ? rcu_is_watching+0x15/0xb0 [ 572.473695][T14521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.473710][T14521] do_syscall_64+0x174/0x580 [ 572.473747][T14521] ? trace_irq_disable+0x3b/0x140 [ 572.473769][T14521] ? clear_bhb_loop+0x40/0x90 [ 572.473786][T14521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.473801][T14521] RIP: 0033:0x7f8d9f39ce59 [ 572.473814][T14521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.473828][T14521] RSP: 002b:00007f8da028f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 572.473844][T14521] RAX: ffffffffffffffda RBX: 00007f8d9f615fa0 RCX: 00007f8d9f39ce59 [ 572.473856][T14521] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 572.473866][T14521] RBP: 00007f8da028f090 R08: 0000000000000000 R09: 0000000000000000 [ 572.473875][T14521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 572.473885][T14521] R13: 00007f8d9f616038 R14: 00007f8d9f615fa0 R15: 00007f8d9f73fa48 [ 572.473901][T14521] [ 572.726282][ T5689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 572.737770][ T5689] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.750969][ T5689] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 572.760049][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.788032][ T5689] usb 5-1: config 0 descriptor?? [ 572.815230][ T5724] usb 2-1: USB disconnect, device number 43 [ 572.860763][T11829] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 572.882129][T14523] sctp: [Deprecated]: syz.5.2784 (pid 14523) Use of int in max_burst socket option deprecated. [ 572.882129][T14523] Use struct sctp_assoc_value instead [ 572.886733][T14528] netlink: 'syz.3.2786': attribute type 4 has an invalid length. [ 572.968685][ T30] audit: type=1800 audit(1782148564.996:753): pid=14532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2787" name="nullb0" dev="devtmpfs" ino=4957 res=0 errno=0 [ 573.021263][T11829] usb 3-1: Using ep0 maxpacket: 32 [ 573.027827][T11829] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.050757][T11829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 573.080655][T11829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 573.100649][T11829] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 573.112398][T11829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.133480][T11829] usb 3-1: config 0 descriptor?? [ 573.152448][T11829] hub 3-1:0.0: USB hub found [ 573.260861][ T5724] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 573.272960][ T5689] kovaplus 0003:1E7D:2D50.005F: invalid report_size 25705 [ 573.286850][ T5689] kovaplus 0003:1E7D:2D50.005F: item 0 2 1 7 parsing failed [ 573.295655][ T5689] kovaplus 0003:1E7D:2D50.005F: parse failed [ 573.301800][ T5689] kovaplus 0003:1E7D:2D50.005F: probe with driver kovaplus failed with error -22 [ 573.364935][T11829] hub 3-1:0.0: 1 port detected [ 573.420666][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 573.420666][ T5682] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 573.435321][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 573.444684][ T5724] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 573.454509][ T5724] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 573.466218][ T5724] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.475367][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.483453][ T5724] usb 2-1: Product: syz [ 573.487783][ T5724] usb 2-1: Manufacturer: syz [ 573.492479][ T5724] usb 2-1: SerialNumber: syz [ 573.565924][T11829] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 573.572429][T11829] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 573.583893][ T5682] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 573.584150][T11829] usbhid 3-1:0.0: can't add hid device: -71 [ 573.594491][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.599471][T11829] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 573.616728][ T5682] usb 4-1: config 0 descriptor?? [ 573.629692][ T5682] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 573.641663][T11829] usb 3-1: USB disconnect, device number 50 [ 573.702474][T14527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.711380][T14527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.725730][ T5724] cdc_ncm 2-1:1.0: bind() failure [ 573.734782][ T5724] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 573.741897][ T5724] cdc_ncm 2-1:1.1: bind() failure [ 573.750888][ T5724] usb 2-1: USB disconnect, device number 44 [ 573.835118][ T5682] gp8psk: usb in 128 operation failed. [ 574.048005][T14535] : entered promiscuous mode [ 574.127540][T14543] netlink: 'syz.2.2792': attribute type 4 has an invalid length. [ 574.150667][ T5689] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 574.220702][ T5724] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 574.257309][ T5682] gp8psk: usb in 146 operation failed. [ 574.264061][ T5682] gp8psk: failed to get FW version [ 574.269543][ T5682] gp8psk: usb in 149 operation failed. [ 574.275476][ T5682] gp8psk: failed to get FPGA version [ 574.281531][ T5682] gp8psk: usb in 138 operation failed. [ 574.287127][ T5682] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 574.298343][ T5682] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 574.307317][ T5689] usb 6-1: Using ep0 maxpacket: 32 [ 574.314604][ T5682] usb 4-1: USB disconnect, device number 22 [ 574.321895][ T5689] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 574.333848][ T5689] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 574.344184][ T5689] usb 6-1: config 0 interface 0 has no altsetting 0 [ 574.353078][ T5689] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 574.362948][ T5689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.372299][ T5689] usb 6-1: Product: syz [ 574.376560][ T5689] usb 6-1: Manufacturer: syz [ 574.381364][ T5689] usb 6-1: SerialNumber: syz [ 574.387821][ T5689] usb 6-1: config 0 descriptor?? [ 574.393945][ T5724] usb 2-1: config index 0 descriptor too short (expected 122, got 92) [ 574.403604][ T5724] usb 2-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 574.414379][ T5724] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 574.420902][T12927] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 574.425235][ T5724] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 3330, setting to 64 [ 574.444034][ T5724] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 574.453229][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.461333][ T5724] usb 2-1: Product: syz [ 574.465933][ T5724] usb 2-1: Manufacturer: syz [ 574.470667][ T5724] usb 2-1: SerialNumber: syz [ 574.477802][T14527] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 574.580930][T12927] usb 3-1: Using ep0 maxpacket: 32 [ 574.588153][T12927] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 574.598092][T12927] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 574.608383][T12927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 574.619667][T12927] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 574.629274][T12927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.639455][T12927] usb 3-1: Product: syz [ 574.644732][T12927] usb 3-1: Manufacturer: syz [ 574.650218][T12927] usb 3-1: SerialNumber: syz [ 574.658750][T14541] tipc: Cannot configure node identity twice [ 574.666658][T12927] usb 3-1: config 0 descriptor?? [ 574.891361][ T5724] usb 2-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 574.934882][ T5689] gs_usb 6-1:0.0: Couldn't get device config: (err=-71) [ 574.947950][ T5689] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 574.961996][ T5689] usb 6-1: USB disconnect, device number 89 [ 575.103001][T14527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.111533][T11829] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 575.119544][T14527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.128883][ T5724] usb 2-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 575.162946][ T5733] usb 5-1: USB disconnect, device number 20 [ 575.201857][T14545] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 575.357544][T14551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2793'. [ 575.369514][T12927] gs_usb 3-1:0.0: Configuring for 154 interfaces [ 575.410842][ T5724] usb 2-1: USB disconnect, device number 45 [ 575.464754][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 575.501068][T11829] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 575.540042][ T5753] udevd[5753]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.573423][T11829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.606758][T14564] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2798'. [ 575.617873][T14564] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2798'. [ 575.620097][T11829] usb 4-1: Product: syz [ 575.666565][T11829] usb 4-1: Manufacturer: syz [ 575.679557][T11829] usb 4-1: SerialNumber: syz [ 575.689079][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2798'. [ 575.708274][T11829] usb 4-1: config 0 descriptor?? [ 575.731381][T11829] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 575.784291][T12927] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EREMOTEIO) [ 576.140702][ T5724] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 576.252922][T11829] gspca_ov534_9: reg_w failed -110 [ 576.322589][T14570] netlink: 'syz.1.2801': attribute type 1 has an invalid length. [ 576.338273][ T5724] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.381358][ T5724] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 576.395868][T14570] 8021q: adding VLAN 0 to HW filter on device bond4 [ 576.414629][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.467959][ T5724] usb 6-1: config 0 descriptor?? [ 576.474304][T14572] bond4: (slave geneve2): making interface the new active one [ 576.496650][T14570] sg_write: data in/out 65500/120 bytes for SCSI command 0x0-- guessing data in; [ 576.496650][T14570] program syz.1.2801 not setting count and/or reply_len properly [ 576.524056][T14572] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 576.537757][ T5724] pwc: Askey VC010 type 2 USB webcam detected. [ 576.691031][T11829] gspca_ov534_9: Unknown sensor 0000 [ 576.691124][T11829] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 576.830922][T12927] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-ETIMEDOUT) [ 576.903970][T14578] netlink: 'syz.1.2802': attribute type 1 has an invalid length. [ 576.912764][T14578] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2802'. [ 576.934855][ T5724] pwc: recv_control_msg error -32 req 02 val 2b00 [ 576.946622][T12927] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 576.986755][ T5724] pwc: recv_control_msg error -32 req 02 val 2700 [ 577.014140][ T5724] pwc: recv_control_msg error -32 req 02 val 2c00 [ 577.045389][ T5724] pwc: recv_control_msg error -32 req 04 val 1000 [ 577.070423][ T5724] pwc: recv_control_msg error -32 req 04 val 1300 [ 577.092474][T14566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.102061][ T5724] pwc: recv_control_msg error -32 req 04 val 1400 [ 577.131609][T14566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.184054][ T5724] pwc: recv_control_msg error -32 req 02 val 2000 [ 577.214202][ T5724] pwc: recv_control_msg error -32 req 02 val 2100 [ 577.252171][ T5724] pwc: recv_control_msg error -32 req 04 val 1500 [ 577.293565][ T5724] pwc: recv_control_msg error -32 req 02 val 2500 [ 577.323547][ T5724] pwc: recv_control_msg error -32 req 02 val 2400 [ 577.362115][ T5724] pwc: recv_control_msg error -32 req 02 val 2600 [ 577.381338][T11829] usb 3-1: USB disconnect, device number 51 [ 578.050661][T11829] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 578.240705][T11829] usb 5-1: Using ep0 maxpacket: 16 [ 578.253611][T11829] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 578.272612][T11829] usb 5-1: config 0 has no interface number 0 [ 578.288199][T11829] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 578.304259][T11829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.322926][T11829] usb 5-1: Product: syz [ 578.333203][T11829] usb 5-1: Manufacturer: syz [ 578.343437][T11829] usb 5-1: SerialNumber: syz [ 578.358206][T11829] usb 5-1: config 0 descriptor?? [ 578.360918][ T5682] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 578.383440][T11829] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 578.450785][ T5733] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 578.507100][ T5724] pwc: recv_control_msg error -71 req 02 val 2800 [ 578.529070][ T5724] pwc: recv_control_msg error -71 req 04 val 1100 [ 578.543400][ T5682] usb 3-1: config index 0 descriptor too short (expected 38, got 36) [ 578.557679][ T5724] pwc: recv_control_msg error -71 req 04 val 1200 [ 578.569905][ T5682] usb 3-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 578.589180][ T5724] pwc: Registered as video103. [ 578.602674][ T5724] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input98 [ 578.613036][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 578.635722][ T5733] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 578.655644][ T5724] usb 6-1: USB disconnect, device number 90 [ 578.655768][ T5682] usb 3-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 578.688652][ T5733] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 578.731458][ T5733] usb 2-1: config 0 interface 0 has no altsetting 0 [ 578.749388][ T5682] usb 3-1: config 0 interface 0 has no altsetting 0 [ 578.770198][ T5733] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 578.793212][ T5682] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 578.797523][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.827341][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.852773][ T5733] usb 2-1: Product: syz [ 578.864559][ T5733] usb 2-1: Manufacturer: syz [ 578.872219][ T5682] usb 3-1: config 0 descriptor?? [ 578.885530][ T5733] usb 2-1: SerialNumber: syz [ 578.898588][ T5682] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 578.915274][ T5733] usb 2-1: config 0 descriptor?? [ 579.199102][T11829] gspca_spca1528: reg_w err -71 [ 579.242542][T11829] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 579.303220][T11829] usb 5-1: USB disconnect, device number 21 [ 579.461375][ T5733] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 579.473021][ T5733] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 579.507527][ T5733] usb 2-1: USB disconnect, device number 46 [ 579.536011][T12927] usb 4-1: USB disconnect, device number 23 [ 579.852789][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2811'. [ 580.070638][T11829] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 580.231451][T11829] usb 5-1: Using ep0 maxpacket: 16 [ 580.244282][T11829] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 580.260194][T11829] usb 5-1: config 0 has no interface number 0 [ 580.282296][T11829] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 580.302006][T11829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.319146][T11829] usb 5-1: Product: syz [ 580.328746][T11829] usb 5-1: Manufacturer: syz [ 580.338702][T11829] usb 5-1: SerialNumber: syz [ 580.352855][T11829] usb 5-1: config 0 descriptor?? [ 580.360664][T12927] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 580.379208][T11829] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 580.501586][T12927] usb 2-1: device descriptor read/64, error -71 [ 580.741099][T12927] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 580.828105][T14632] netlink: 'syz.3.2819': attribute type 4 has an invalid length. [ 580.870653][T12927] usb 2-1: device descriptor read/64, error -71 [ 580.886768][T14634] FAULT_INJECTION: forcing a failure. [ 580.886768][T14634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.901771][T14634] CPU: 0 UID: 0 PID: 14634 Comm: syz.3.2820 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.901797][T14634] Tainted: [L]=SOFTLOCKUP [ 580.901804][T14634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 580.901814][T14634] Call Trace: [ 580.901820][T14634] [ 580.901826][T14634] dump_stack_lvl+0xe8/0x150 [ 580.901849][T14634] should_fail_ex+0x40c/0x560 [ 580.901869][T14634] _copy_to_user+0x31/0xb0 [ 580.901892][T14634] simple_read_from_buffer+0xe1/0x170 [ 580.901918][T14634] proc_fail_nth_read+0x1bb/0x230 [ 580.901943][T14634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.901967][T14634] ? rw_verify_area+0x24a/0x4c0 [ 580.901983][T14634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.902005][T14634] vfs_read+0x213/0xa80 [ 580.902022][T14634] ? __pfx___mutex_lock+0x10/0x10 [ 580.902044][T14634] ? __pfx_vfs_read+0x10/0x10 [ 580.902061][T14634] ? __fget_files+0x3a2/0x420 [ 580.902083][T14634] ? __fget_files+0x2a/0x420 [ 580.902107][T14634] ksys_read+0x150/0x270 [ 580.902123][T14634] ? __pfx_ksys_read+0x10/0x10 [ 580.902139][T14634] ? rcu_is_watching+0x15/0xb0 [ 580.902157][T14634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.902197][T14634] do_syscall_64+0x174/0x580 [ 580.902226][T14634] ? trace_irq_disable+0x3b/0x140 [ 580.902250][T14634] ? clear_bhb_loop+0x40/0x90 [ 580.902267][T14634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.902282][T14634] RIP: 0033:0x7fda4f35d68e [ 580.902296][T14634] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 580.902310][T14634] RSP: 002b:00007fda5018cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 580.902327][T14634] RAX: ffffffffffffffda RBX: 00007fda5018d6c0 RCX: 00007fda4f35d68e [ 580.902345][T14634] RDX: 000000000000000f RSI: 00007fda5018d0a0 RDI: 0000000000000004 [ 580.902355][T14634] RBP: 00007fda5018d090 R08: 0000000000000000 R09: 0000000000000000 [ 580.902365][T14634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 580.902375][T14634] R13: 00007fda4f616038 R14: 00007fda4f615fa0 R15: 00007fda4f73fa48 [ 580.902392][T14634] [ 580.983235][T12927] usb usb2-port1: attempt power cycle [ 581.335389][T11829] gspca_spca1528: reg_w err -71 [ 581.360764][T11829] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 581.373577][T11829] usb 5-1: USB disconnect, device number 22 [ 581.450693][ T5733] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 581.470680][T12927] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 581.501552][T12927] usb 2-1: device descriptor read/8, error -71 [ 581.515348][ T5682] usb 3-1: USB disconnect, device number 52 [ 581.641880][ T5733] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 581.652397][ T5733] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 581.662847][ T5733] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 581.672480][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.685115][ T5733] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 581.708708][ T5733] usb 4-1: no configuration chosen from 1 choice [ 581.761026][T12927] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 581.781173][T12927] usb 2-1: device descriptor read/8, error -71 [ 581.891004][T12927] usb usb2-port1: unable to enumerate USB device [ 581.980663][ T5682] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 582.132405][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 582.143788][ T5682] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.157047][ T5682] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 582.166189][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.174519][T12927] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 582.183451][ T5682] usb 3-1: config 0 descriptor?? [ 582.330976][T12927] usb 5-1: Using ep0 maxpacket: 32 [ 582.337745][T12927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 582.349855][T12927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 582.363611][T12927] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 582.372864][T12927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.381165][T12927] usb 5-1: Product: syz [ 582.385703][T12927] usb 5-1: Manufacturer: syz [ 582.392582][T12927] usb 5-1: SerialNumber: syz [ 582.400129][T12927] usb 5-1: config 0 descriptor?? [ 582.411450][T12927] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input99 [ 582.423861][T12927] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 582.437890][T12927] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 582.604999][ T30] audit: type=1326 audit(1782148574.636:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.5.2828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d9f39ce59 code=0x0 [ 582.630161][ T5682] hid_parser_main: 103 callbacks suppressed [ 582.630190][ T5682] kovaplus 0003:1E7D:2D50.0060: unknown main item tag 0x0 [ 582.643866][ T5682] kovaplus 0003:1E7D:2D50.0060: unknown main item tag 0x0 [ 582.651351][ T5682] kovaplus 0003:1E7D:2D50.0060: unknown main item tag 0x0 [ 582.658634][ T5682] kovaplus 0003:1E7D:2D50.0060: unknown main item tag 0x0 [ 582.665931][ T5682] kovaplus 0003:1E7D:2D50.0060: unknown main item tag 0x0 [ 582.673823][ T5682] kovaplus 0003:1E7D:2D50.0060: unknown main item tag 0x0 [ 582.682871][ T5682] kovaplus 0003:1E7D:2D50.0060: unknown main item tag 0x0 [ 582.690113][ T5682] kovaplus 0003:1E7D:2D50.0060: unknown main item tag 0x0 [ 582.697789][ T5682] kovaplus 0003:1E7D:2D50.0060: unknown main item tag 0x0 [ 582.705360][ T5682] kovaplus 0003:1E7D:2D50.0060: unknown main item tag 0x0 [ 582.715758][ T5682] kovaplus 0003:1E7D:2D50.0060: item fetching failed at offset 231/235 [ 582.719658][T11829] usb 5-1: USB disconnect, device number 23 [ 582.731928][ T5682] kovaplus 0003:1E7D:2D50.0060: parse failed [ 582.740444][ T5682] kovaplus 0003:1E7D:2D50.0060: probe with driver kovaplus failed with error -22 [ 582.804323][ T5682] usb 3-1: USB disconnect, device number 53 [ 583.215156][ T30] audit: type=1800 audit(1782148575.246:755): pid=14658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2831" name="nullb0" dev="devtmpfs" ino=4957 res=0 errno=0 [ 583.235854][T14658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2831'. [ 583.481500][ T30] audit: type=1400 audit(1782148575.516:756): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 583.733187][T14672] netlink: 'syz.5.2836': attribute type 4 has an invalid length. [ 583.795318][ T5724] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 583.832390][T11829] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 583.841924][T11829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.861728][T11829] usb 2-1: config 0 descriptor?? [ 583.869731][T11829] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 583.930773][ T5724] usb 3-1: device descriptor read/64, error -71 [ 584.041402][ T5733] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 584.170670][ T5724] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 584.191809][ T5733] usb 6-1: not running at top speed; connect to a high speed hub [ 584.201486][ T5733] usb 6-1: config 0 has an invalid interface number: 101 but max is 0 [ 584.210331][ T5733] usb 6-1: config 0 has no interface number 0 [ 584.220667][ T5733] usb 6-1: config 0 interface 101 altsetting 251 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 584.233504][ T5733] usb 6-1: config 0 interface 101 altsetting 251 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 584.248663][ T5733] usb 6-1: config 0 interface 101 altsetting 251 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 584.260994][ T5733] usb 6-1: config 0 interface 101 has no altsetting 0 [ 584.273825][ T5733] usb 6-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=de.52 [ 584.286576][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.300660][ T5724] usb 3-1: device descriptor read/64, error -71 [ 584.307381][ T5733] usb 6-1: Product: syz [ 584.311735][ T5733] usb 6-1: Manufacturer: syz [ 584.316608][ T5733] usb 6-1: SerialNumber: syz [ 584.323067][ T5733] usb 6-1: config 0 descriptor?? [ 584.362764][ T1225] usb 4-1: USB disconnect, device number 24 [ 584.410998][ T5724] usb usb3-port1: attempt power cycle [ 584.664252][ T5733] sierra 6-1:0.101: Sierra USB modem converter detected [ 584.676080][ T5733] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 584.685895][T11829] gspca_stv06xx: I2C: Read error writing address: -71 [ 584.693025][ T5733] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 584.704000][T11829] usb 2-1: USB disconnect, device number 51 [ 584.716682][ T5733] usb 6-1: USB disconnect, device number 91 [ 584.741596][ T5733] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 584.757136][ T5733] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 584.767904][ T5724] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 584.777699][ T5733] sierra 6-1:0.101: device disconnected [ 584.790649][ T1225] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 584.800638][ T5724] usb 3-1: device descriptor read/8, error -71 [ 584.950757][ T1225] usb 4-1: device descriptor read/64, error -71 [ 585.040679][ T5724] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 585.061406][ T5724] usb 3-1: device descriptor read/8, error -71 [ 585.170831][ T5724] usb usb3-port1: unable to enumerate USB device [ 585.190620][ T1225] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 585.321110][ T1225] usb 4-1: device descriptor read/64, error -71 [ 585.440883][ T1225] usb usb4-port1: attempt power cycle [ 585.700784][T12927] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 585.740656][ T5733] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 585.791438][ T1225] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 585.821087][ T1225] usb 4-1: device descriptor read/8, error -71 [ 585.852000][T12927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 585.863605][T12927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.876558][T12927] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 585.885698][T12927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.895691][T12927] usb 2-1: config 0 descriptor?? [ 585.905739][ T5733] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 585.917543][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.925723][ T5733] usb 6-1: Product: syz [ 585.930131][ T5733] usb 6-1: Manufacturer: syz [ 585.935313][ T5733] usb 6-1: SerialNumber: syz [ 585.941956][ T5733] usb 6-1: config 0 descriptor?? [ 586.070645][ T1225] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 586.091281][ T1225] usb 4-1: device descriptor read/8, error -71 [ 586.200875][ T1225] usb usb4-port1: unable to enumerate USB device [ 586.315744][T12927] kovaplus 0003:1E7D:2D50.0061: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 586.355396][T14692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.366907][T14692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.507707][T12927] kovaplus 0003:1E7D:2D50.0061: couldn't init struct kovaplus_device [ 586.518435][T12927] kovaplus 0003:1E7D:2D50.0061: couldn't install mouse [ 586.526652][T12927] kovaplus 0003:1E7D:2D50.0061: probe with driver kovaplus failed with error -71 [ 586.538621][T12927] usb 2-1: USB disconnect, device number 52 [ 586.577477][ T5733] usb 6-1: f81604_read: reg: 105 failed: -EPIPE [ 586.584073][ T5733] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 586.592108][ T5733] f81604 6-1:0.0: probe with driver f81604 failed with error -32 [ 586.820654][ T5689] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 586.974114][ T5689] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 586.983380][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.991758][ T5689] usb 3-1: Product: syz [ 586.995950][ T5689] usb 3-1: Manufacturer: syz [ 587.000666][ T5689] usb 3-1: SerialNumber: syz [ 587.291024][T12927] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 587.298982][ T5689] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 587.311798][ T5689] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 587.322656][ T5689] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 587.333480][ T5689] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 587.345003][ T5689] usb 3-1: USB disconnect, device number 58 [ 587.485001][T12927] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 587.494194][T12927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.502803][T12927] usb 2-1: Product: syz [ 587.507025][T12927] usb 2-1: Manufacturer: syz [ 587.511829][T12927] usb 2-1: SerialNumber: syz [ 587.524571][T12927] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 587.553789][ T5689] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 587.977642][ T5733] usb 2-1: USB disconnect, device number 53 [ 588.110665][T12927] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 588.262063][T12927] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 588.270288][T12927] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 588.281241][T12927] usb 3-1: config 0 has no interface number 0 [ 588.287388][T12927] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 588.298998][T12927] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 588.310085][T12927] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 588.323349][T12927] usb 3-1: config 0 interface 52 has no altsetting 0 [ 588.331481][T12927] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 588.340666][T12927] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 588.348933][T12927] usb 3-1: Product: syz [ 588.353671][T12927] usb 3-1: SerialNumber: syz [ 588.359464][T12927] usb 3-1: config 0 descriptor?? [ 588.422480][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2850'. [ 588.521286][ T5682] usb 6-1: USB disconnect, device number 92 [ 588.587929][T12927] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input100 [ 588.600192][ T5689] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 588.612839][ T5689] ath9k_htc: Failed to initialize the device [ 588.626314][ T5733] usb 2-1: ath9k_htc: USB layer deinitialized [ 588.798068][ T5682] usb 3-1: USB disconnect, device number 59 [ 588.822795][T14727] netlink: 'syz.3.2856': attribute type 4 has an invalid length. [ 588.970871][ T5733] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 588.983599][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2859'. [ 589.048445][T14735] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2859'. [ 589.131601][ T5733] usb 2-1: not running at top speed; connect to a high speed hub [ 589.140978][ T5733] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 589.149189][ T5733] usb 2-1: config 0 has no interface number 0 [ 589.155346][ T5733] usb 2-1: config 0 interface 101 altsetting 251 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 589.166500][ T5733] usb 2-1: config 0 interface 101 altsetting 251 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 589.177729][ T5733] usb 2-1: config 0 interface 101 altsetting 251 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 589.188947][ T5733] usb 2-1: config 0 interface 101 has no altsetting 0 [ 589.198711][ T5733] usb 2-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=de.52 [ 589.201587][T12927] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 589.207829][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.223560][ T5733] usb 2-1: Product: syz [ 589.227782][ T5733] usb 2-1: Manufacturer: syz [ 589.233076][ T5733] usb 2-1: SerialNumber: syz [ 589.239544][ T5733] usb 2-1: config 0 descriptor?? [ 589.391203][T12927] usb 5-1: Using ep0 maxpacket: 32 [ 589.410339][T12927] usb 5-1: config 123 interface 0 has no altsetting 0 [ 589.425937][T12927] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 589.436013][T12927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.456099][T12927] usb 5-1: Product: syz [ 589.462420][T12927] usb 5-1: Manufacturer: syz [ 589.478023][T12927] usb 5-1: SerialNumber: syz [ 589.529381][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2864'. [ 589.729808][ T5733] sierra 2-1:0.101: Sierra USB modem converter detected [ 589.736521][ T5733] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 589.752692][ T5733] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 589.761661][ T5733] usb 2-1: USB disconnect, device number 54 [ 589.780156][ T5733] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 589.786874][ T5733] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 589.787259][ T5733] sierra 2-1:0.101: device disconnected [ 590.110731][ T5689] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 590.165481][T14757] binder: 14756:14757 ioctl c0306201 200000000100 returned -22 [ 590.300957][ T5689] usb 6-1: Using ep0 maxpacket: 16 [ 590.302772][ T5689] usb 6-1: unable to get BOS descriptor or descriptor too short [ 590.303669][ T5689] usb 6-1: config 6 has an invalid interface number: 105 but max is 0 [ 590.303687][ T5689] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 590.303701][ T5689] usb 6-1: config 6 has no interface number 0 [ 590.303726][ T5689] usb 6-1: config 6 interface 105 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 590.303745][ T5689] usb 6-1: config 6 interface 105 has no altsetting 0 [ 590.305347][ T5689] usb 6-1: New USB device found, idVendor=1410, idProduct=7006, bcdDevice=f0.c8 [ 590.305367][ T5689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.305384][ T5689] usb 6-1: Product: syz [ 590.305395][ T5689] usb 6-1: Manufacturer: syz [ 590.305406][ T5689] usb 6-1: SerialNumber: syz [ 590.542618][ T5689] option 6-1:6.105: GSM modem (1-port) converter detected [ 590.568513][ T5689] usb 6-1: USB disconnect, device number 93 [ 590.577535][ T5689] option 6-1:6.105: device disconnected [ 590.630635][ T5733] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 590.690072][T14769] netlink: 'syz.1.2872': attribute type 2 has an invalid length. [ 590.746047][T14771] tipc: Enabled bearer , priority 0 [ 590.748202][T14771] syzkaller0: entered promiscuous mode [ 590.761635][T14771] syzkaller0: entered allmulticast mode [ 590.768967][T14771] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 590.780839][ T5733] usb 3-1: Using ep0 maxpacket: 32 [ 590.785468][ T5733] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.800427][T14771] tipc: Resetting bearer [ 590.813755][ T5733] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 590.814838][T14770] tipc: Resetting bearer [ 590.816384][T14770] tipc: Disabling bearer [ 590.818531][ T5733] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 590.818553][ T5733] usb 3-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 590.818569][ T5733] usb 3-1: Product: syz [ 590.818596][ T5733] usb 3-1: Manufacturer: syz [ 590.818633][ T5733] usb 3-1: SerialNumber: syz [ 590.966381][T14775] tipc: Enabled bearer , priority 0 [ 590.966859][T14775] syzkaller0: entered promiscuous mode [ 590.980493][T14775] syzkaller0: entered allmulticast mode [ 590.987846][T14775] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 591.000990][T14775] FAULT_INJECTION: forcing a failure. [ 591.000990][T14775] name failslab, interval 1, probability 0, space 0, times 0 [ 591.001025][T14775] CPU: 0 UID: 0 PID: 14775 Comm: syz.1.2875 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.001054][T14775] Tainted: [L]=SOFTLOCKUP [ 591.001062][T14775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.001075][T14775] Call Trace: [ 591.001083][T14775] [ 591.001091][T14775] dump_stack_lvl+0xe8/0x150 [ 591.001119][T14775] should_fail_ex+0x40c/0x560 [ 591.001145][T14775] should_failslab+0xa8/0x100 [ 591.001167][T14775] __kmalloc_noprof+0xe8/0x750 [ 591.001197][T14775] ? __pfx_dynamic_dname+0x10/0x10 [ 591.001223][T14775] ? tomoyo_encode+0x2ad/0x570 [ 591.001258][T14775] tomoyo_encode+0x2ad/0x570 [ 591.001283][T14775] tomoyo_realpath_from_path+0x5fa/0x640 [ 591.001309][T14775] ? tomoyo_path_number_perm+0x219/0x5f0 [ 591.001339][T14775] tomoyo_path_number_perm+0x246/0x5f0 [ 591.001369][T14775] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 591.001402][T14775] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 591.001434][T14775] ? preempt_count_add+0x91/0x190 [ 591.001486][T14775] ? rcu_is_watching+0x15/0xb0 [ 591.001514][T14775] ? hook_file_ioctl+0x1f0/0x5f0 [ 591.001542][T14775] ? lock_release+0x4b/0x3c0 [ 591.001565][T14775] ? __fget_files+0x2a/0x420 [ 591.001597][T14775] ? __fget_files+0x3a2/0x420 [ 591.001628][T14775] ? __fget_files+0x2a/0x420 [ 591.001660][T14775] security_file_ioctl+0xc3/0x2a0 [ 591.001690][T14775] __se_sys_ioctl+0x47/0x170 [ 591.001714][T14775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.001735][T14775] do_syscall_64+0x174/0x580 [ 591.001764][T14775] ? trace_irq_disable+0x3b/0x140 [ 591.001795][T14775] ? clear_bhb_loop+0x40/0x90 [ 591.001818][T14775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.001839][T14775] RIP: 0033:0x7f2200d9ce59 [ 591.001857][T14775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.001875][T14775] RSP: 002b:00007f2201b92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.001905][T14775] RAX: ffffffffffffffda RBX: 00007f2201015fa0 RCX: 00007f2200d9ce59 [ 591.001921][T14775] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000004 [ 591.001935][T14775] RBP: 00007f2201b92090 R08: 0000000000000000 R09: 0000000000000000 [ 591.001948][T14775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.001960][T14775] R13: 00007f2201016038 R14: 00007f2201015fa0 R15: 00007f220113fa48 [ 591.001984][T14775] [ 591.002000][T14775] ERROR: Out of memory at tomoyo_realpath_from_path. [ 591.003220][T14775] tipc: Resetting bearer [ 591.010036][T14774] tipc: Resetting bearer [ 591.039368][T14774] tipc: Disabling bearer [ 591.041871][ T5682] usb 3-1: USB disconnect, device number 60 [ 591.197443][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2876'. [ 591.520681][ T1225] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 591.650705][ T1225] usb 2-1: device descriptor read/64, error -71 [ 591.731949][T14789] netlink: 'syz.2.2881': attribute type 4 has an invalid length. [ 591.740698][ T5682] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 591.891012][ T1225] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 591.906075][ T5682] usb 6-1: not running at top speed; connect to a high speed hub [ 591.918290][ T5682] usb 6-1: config 0 has an invalid interface number: 101 but max is 0 [ 591.918323][ T5682] usb 6-1: config 0 has no interface number 0 [ 591.918358][ T5682] usb 6-1: config 0 interface 101 altsetting 251 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 591.979024][ T5682] usb 6-1: config 0 interface 101 altsetting 251 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 591.992504][ T5682] usb 6-1: config 0 interface 101 altsetting 251 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 592.006245][T12927] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 592.018205][ T5682] usb 6-1: config 0 interface 101 has no altsetting 0 [ 592.023468][ T1225] usb 2-1: device descriptor read/64, error -71 [ 592.030774][T12927] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 592.043872][T12927] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 592.051483][T12927] usb 5-1: media controller created [ 592.056885][ T5682] usb 6-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=de.52 [ 592.066208][ T5682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.080970][ T5682] usb 6-1: Product: syz [ 592.087328][T12927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.095941][ T5682] usb 6-1: Manufacturer: syz [ 592.101141][ T5682] usb 6-1: SerialNumber: syz [ 592.112879][ T5682] usb 6-1: config 0 descriptor?? [ 592.125191][T12927] set interface failed [ 592.125213][T12927] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 592.138186][T12927] error writing reg: 0xff, val: 0x00 [ 592.152265][ T1225] usb usb2-port1: attempt power cycle [ 592.170031][T12927] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 592.183054][T12927] usb 5-1: USB disconnect, device number 24 [ 592.434044][ T5682] sierra 6-1:0.101: Sierra USB modem converter detected [ 592.445677][ T5682] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 592.455002][ T5682] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 592.471149][ T5682] usb 6-1: USB disconnect, device number 94 [ 592.487502][ T5682] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 592.499810][ T5682] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 592.500856][ T1225] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 592.510515][ T5682] sierra 6-1:0.101: device disconnected [ 592.541292][ T1225] usb 2-1: device descriptor read/8, error -71 [ 592.600681][T12927] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 592.732412][T12927] usb 5-1: device descriptor read/64, error -71 [ 592.762620][T14801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 592.769878][T14801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 592.777270][T14801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 592.785049][T14801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 592.794265][T14801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 592.800883][ T1225] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 592.841155][ T1225] usb 2-1: device descriptor read/8, error -71 [ 592.971352][T12927] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 592.971357][ T1225] usb usb2-port1: unable to enumerate USB device [ 593.100645][T12927] usb 5-1: device descriptor read/64, error -71 [ 593.220921][T12927] usb usb5-port1: attempt power cycle [ 593.228664][T14803] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.236056][T14803] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.244786][T14803] bridge_slave_0: entered allmulticast mode [ 593.251877][T14803] bridge_slave_0: entered promiscuous mode [ 593.259725][T14803] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.266974][T14803] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.274247][T14803] bridge_slave_1: entered allmulticast mode [ 593.282139][T14803] bridge_slave_1: entered promiscuous mode [ 593.304288][T14803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.316077][T14803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.352939][T14803] team0: Port device team_slave_0 added [ 593.372227][T14803] team0: Port device team_slave_1 added [ 593.381130][ T5682] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 593.433079][T14803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.443003][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.484834][T14803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.494768][T14822] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2890'. [ 593.501644][T14803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.511488][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.537705][T14803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.549923][ T8445] veth0_to_bond: left allmulticast mode [ 593.556616][ T8445] veth0_to_bond: left promiscuous mode [ 593.563231][ T5682] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.573153][T14823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2890'. [ 593.575365][T12927] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 593.582875][ T8445] bridge1: port 2(veth0_to_bond) entered disabled state [ 593.599182][ T5682] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 593.608494][ T5682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.616991][ T8445] veth3: left allmulticast mode [ 593.622398][ T8445] veth3: left promiscuous mode [ 593.628189][ T8445] bridge1: port 1(veth3) entered disabled state [ 593.629663][ T5682] usb 6-1: config 0 descriptor?? [ 593.641475][T12927] usb 5-1: device descriptor read/8, error -71 [ 593.649166][ T5682] rndis_host 6-1:0.0: skipping garbage [ 593.654888][ T5682] rndis_host 6-1:0.0: rndis: master #0/ffff888029ad8000 slave #1/0000000000000000 [ 593.719266][ T8445] bond0 (unregistering): Released all slaves [ 593.730075][ T8445] bond1 (unregistering): Released all slaves [ 593.741446][ T8445] bond2 (unregistering): Released all slaves [ 593.752495][ T8445] bond3 (unregistering): Released all slaves [ 593.763071][ T8445] bond4 (unregistering): Released all slaves [ 593.852469][T14803] hsr_slave_0: entered promiscuous mode [ 593.859018][T14803] hsr_slave_1: entered promiscuous mode [ 593.867029][T14803] debugfs: 'hsr0' already exists in 'hsr' [ 593.874251][T14803] Cannot create hsr debugfs directory [ 593.879866][ T8445] : left promiscuous mode [ 593.884896][T12927] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 593.892401][ T1225] usb 6-1: USB disconnect, device number 95 [ 593.921361][T12927] usb 5-1: device descriptor read/8, error -71 [ 593.934230][ T30] audit: type=1326 audit(1782148585.966:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.2891" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba39ce59 code=0x7ffc0000 [ 593.964157][T14828] xt_hashlimit: max too large, truncated to 1048576 [ 593.974876][ T8445] tipc: Left network mode [ 593.988685][ T30] audit: type=1326 audit(1782148585.966:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.2891" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba39ce59 code=0x7ffc0000 [ 594.039799][ T30] audit: type=1326 audit(1782148585.966:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.2891" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba39ce59 code=0x7ffc0000 [ 594.062016][T12927] usb usb5-port1: unable to enumerate USB device [ 594.104418][ T30] audit: type=1326 audit(1782148585.986:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.2891" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f61ba39ce59 code=0x7ffc0000 [ 594.152042][ T30] audit: type=1326 audit(1782148585.986:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.2891" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba39ce59 code=0x7ffc0000 [ 594.177314][ T30] audit: type=1326 audit(1782148585.986:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.2891" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba39ce59 code=0x7ffc0000 [ 594.207954][ T30] audit: type=1326 audit(1782148585.996:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.2891" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba39ce59 code=0x7ffc0000 [ 594.338053][ T30] audit: type=1326 audit(1782148585.996:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.2891" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba39ce59 code=0x7ffc0000 [ 594.388981][ T30] audit: type=1326 audit(1782148585.996:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.2891" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f61ba39ce59 code=0x7ffc0000 [ 594.510496][ T8445] hsr_slave_0: left promiscuous mode [ 594.551280][ T8445] hsr_slave_1: left promiscuous mode [ 594.559296][ T30] audit: type=1326 audit(1782148585.996:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.2.2891" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba39ce59 code=0x7ffc0000 [ 594.830659][T14801] Bluetooth: hci5: command tx timeout [ 595.075823][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 595.243118][T14803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 595.265175][T14803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 595.276021][T14803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 595.301765][T14803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.327334][T14803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 595.373500][T14803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 595.397591][T14803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 595.434870][T14803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.470784][ T5690] usb 6-1: new low-speed USB device number 96 using dummy_hcd [ 595.484032][ T8445] IPVS: stop unused estimator thread 0... [ 595.589091][T14803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.610912][T14874] netlink: 'syz.1.2899': attribute type 4 has an invalid length. [ 595.621236][ T5690] usb 6-1: device descriptor read/64, error -71 [ 595.691301][T14803] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.701095][T12927] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 595.782654][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.789800][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.856985][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.864140][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.882171][ T5690] usb 6-1: new low-speed USB device number 97 using dummy_hcd [ 595.895398][T12927] usb 5-1: not running at top speed; connect to a high speed hub [ 595.943004][T12927] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 595.988220][T12927] usb 5-1: config 0 has no interface number 0 [ 596.030727][T12927] usb 5-1: config 0 interface 101 altsetting 251 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 596.089236][T12927] usb 5-1: config 0 interface 101 altsetting 251 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 596.197200][T12927] usb 5-1: config 0 interface 101 altsetting 251 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 596.224833][T14803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.255636][T12927] usb 5-1: config 0 interface 101 has no altsetting 0 [ 596.263116][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2901'. [ 596.299333][T12927] usb 5-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=de.52 [ 596.348783][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2901'. [ 596.360645][T12927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.373938][ T8445] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.406003][T12927] usb 5-1: Product: syz [ 596.413960][ T8445] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.458939][ T8445] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.486818][T12927] usb 5-1: Manufacturer: syz [ 596.495643][ T8445] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.552431][T12927] usb 5-1: SerialNumber: syz [ 596.606310][T12927] usb 5-1: config 0 descriptor?? [ 596.652594][T14803] veth0_vlan: entered promiscuous mode [ 596.728793][T14803] veth1_vlan: entered promiscuous mode [ 596.741750][ T5690] usb 6-1: device descriptor read/64, error -71 [ 596.799594][T14803] veth0_macvtap: entered promiscuous mode [ 596.810795][T14898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'. [ 596.829869][T14803] veth1_macvtap: entered promiscuous mode [ 596.844845][ T5682] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 596.878359][T14803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.903715][T14803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.917437][T14801] Bluetooth: hci5: command tx timeout [ 596.924597][ T5690] usb usb6-port1: attempt power cycle [ 597.046718][ T5682] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 597.069119][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.154915][ T5682] usb 2-1: Product: syz [ 597.177346][T12927] sierra 5-1:0.101: Sierra USB modem converter detected [ 597.188954][ T5682] usb 2-1: Manufacturer: syz [ 597.219275][ T5682] usb 2-1: SerialNumber: syz [ 597.233886][T12927] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 597.268634][ T5682] usb 2-1: config 0 descriptor?? [ 597.310729][ T5690] usb 6-1: new low-speed USB device number 98 using dummy_hcd [ 597.343159][T12927] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 597.352224][ T5682] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 597.380643][ T5690] usb 6-1: device descriptor read/8, error -71 [ 597.423562][T12927] usb 5-1: USB disconnect, device number 29 [ 597.530887][T12927] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 597.558912][T12927] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 597.571402][T12927] sierra 5-1:0.101: device disconnected [ 597.597376][ T5742] udevd[5742]: setting mode of /dev/bus/usb/005/029 to 020664 failed: No such file or directory [ 597.621383][ T5742] udevd[5742]: setting owner of /dev/bus/usb/005/029 to uid=0, gid=0 failed: No such file or directory [ 597.670786][ T5690] usb 6-1: new low-speed USB device number 99 using dummy_hcd [ 597.692237][ T8445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.728002][ T8445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.761575][ T8445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.802079][ T8445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.941470][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.966148][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.039353][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2904'. [ 598.069641][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.079861][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.098005][ T5690] usb 6-1: device descriptor read/8, error -71 [ 598.213708][ T5690] usb usb6-port1: unable to enumerate USB device [ 598.394645][T14911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2906'. [ 598.599622][T14914] syzkaller0: entered promiscuous mode [ 598.605856][T14914] syzkaller0: entered allmulticast mode [ 598.641029][ T5690] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 598.811648][ T5690] usb 4-1: Using ep0 maxpacket: 8 [ 598.830172][ T5690] usb 4-1: config 0 has an invalid interface number: 170 but max is 0 [ 598.859565][ T5690] usb 4-1: config 0 has no interface number 0 [ 598.876057][ T5690] usb 4-1: too many endpoints for config 0 interface 170 altsetting 170: 170, using maximum allowed: 30 [ 598.890834][ T5682] gspca_ov534_9: reg_w failed -110 [ 598.905408][ T5690] usb 4-1: config 0 interface 170 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 598.933617][ T5690] usb 4-1: config 0 interface 170 has no altsetting 0 [ 598.952372][ T5690] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 598.967827][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.976739][ T5690] usb 4-1: Product: syz [ 598.981778][ T5690] usb 4-1: Manufacturer: syz [ 598.986537][ T5690] usb 4-1: SerialNumber: syz [ 598.991273][T14801] Bluetooth: hci5: command tx timeout [ 599.000981][ T5690] usb 4-1: config 0 descriptor?? [ 599.010178][ T5690] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 599.019024][ T5690] dvb-usb: bulk message failed: -22 (2/0) [ 599.027620][ T5690] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 599.038140][ T5690] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 599.047416][ T5690] usb 4-1: media controller created [ 599.061141][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 599.077880][ T5690] cxusb: set interface failed [ 599.082888][ T5690] dvb-usb: bulk message failed: -22 (1/0) [ 599.144997][ T5690] DVB: Unable to find symbol mt352_attach() [ 599.151924][T14921] syzkaller0: entered promiscuous mode [ 599.157662][T14921] syzkaller0: entered allmulticast mode [ 599.159737][T14922] FAULT_INJECTION: forcing a failure. [ 599.159737][T14922] name failslab, interval 1, probability 0, space 0, times 0 [ 599.167168][ T5690] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 599.190624][ T5682] gspca_ov534_9: Unknown sensor 0000 [ 599.190690][ T5682] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 599.220539][T14922] CPU: 0 UID: 0 PID: 14922 Comm: syz.4.2909 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.220576][T14922] Tainted: [L]=SOFTLOCKUP [ 599.220585][T14922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.220597][T14922] Call Trace: [ 599.220604][T14922] [ 599.220613][T14922] dump_stack_lvl+0xe8/0x150 [ 599.220640][T14922] should_fail_ex+0x40c/0x560 [ 599.220667][T14922] should_failslab+0xa8/0x100 [ 599.220690][T14922] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 599.220719][T14922] ? rcu_is_watching+0x15/0xb0 [ 599.220742][T14922] ? __alloc_skb+0x1d7/0x7a0 [ 599.220771][T14922] ? trace_irq_enable+0x3b/0x140 [ 599.220804][T14922] __alloc_skb+0x1d7/0x7a0 [ 599.220835][T14922] alloc_skb_with_frags+0xc6/0x760 [ 599.220866][T14922] ? __pfx_process_measurement+0x10/0x10 [ 599.220907][T14922] ? rcu_is_watching+0x15/0xb0 [ 599.220929][T14922] sock_alloc_send_pskb+0x878/0x990 [ 599.220954][T14922] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 599.220982][T14922] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 599.221002][T14922] ? rcu_is_watching+0x15/0xb0 [ 599.221022][T14922] ? dev_get_by_index+0x22/0x2d0 [ 599.221045][T14922] ? lock_release+0x4b/0x3c0 [ 599.221063][T14922] ? lock_release+0x4b/0x3c0 [ 599.221080][T14922] ? dev_get_by_index+0x22/0x2d0 [ 599.221112][T14922] packet_sendmsg+0x3258/0x5040 [ 599.221224][T14922] ? rcu_is_watching+0x15/0xb0 [ 599.221248][T14922] ? arch_stack_walk+0xfb/0x150 [ 599.221274][T14922] ? __might_fault+0xaf/0x130 [ 599.221299][T14922] ? rcu_is_watching+0x15/0xb0 [ 599.221320][T14922] ? lock_acquire+0x5f/0x350 [ 599.221337][T14922] ? aa_file_perm+0x18b/0x15f0 [ 599.221359][T14922] ? _parse_integer_limit+0x192/0x1e0 [ 599.221385][T14922] ? kstrtoull+0x12f/0x1d0 [ 599.221408][T14922] ? kstrtouint+0x6e/0xe0 [ 599.221429][T14922] ? get_pid_task+0x20/0x1f0 [ 599.221446][T14922] ? rcu_is_watching+0x15/0xb0 [ 599.221468][T14922] ? __pfx_packet_sendmsg+0x10/0x10 [ 599.221489][T14922] ? aa_sk_perm+0x6d5/0x900 [ 599.221508][T14922] ? lock_acquire+0x5f/0x350 [ 599.221526][T14922] ? __pfx_aa_sk_perm+0x10/0x10 [ 599.221542][T14922] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 599.221566][T14922] ? lock_release+0x4b/0x3c0 [ 599.221582][T14922] ? __might_fault+0xaf/0x130 [ 599.221608][T14922] ? __pfx_packet_sendmsg+0x10/0x10 [ 599.221628][T14922] sock_sendmsg_nosec+0x13a/0x180 [ 599.221654][T14922] __sys_sendto+0x408/0x5a0 [ 599.221684][T14922] ? __pfx___sys_sendto+0x10/0x10 [ 599.221711][T14922] ? __mutex_unlock_slowpath+0x731/0x900 [ 599.221751][T14922] ? __pfx_ksys_write+0x10/0x10 [ 599.221773][T14922] __x64_sys_sendto+0xde/0x100 [ 599.221801][T14922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.221821][T14922] do_syscall_64+0x174/0x580 [ 599.221848][T14922] ? trace_irq_disable+0x3b/0x140 [ 599.221876][T14922] ? clear_bhb_loop+0x40/0x90 [ 599.221898][T14922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.221918][T14922] RIP: 0033:0x7f6b71b9ce59 [ 599.221936][T14922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.221954][T14922] RSP: 002b:00007f6b6fdd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 599.221976][T14922] RAX: ffffffffffffffda RBX: 00007f6b71e16090 RCX: 00007f6b71b9ce59 [ 599.221991][T14922] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 599.222005][T14922] RBP: 00007f6b6fdd5090 R08: 0000200000000140 R09: 0000000000000014 [ 599.222019][T14922] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 599.222032][T14922] R13: 00007f6b71e16128 R14: 00007f6b71e16090 R15: 00007f6b71f3fa48 [ 599.222055][T14922] [ 599.625230][ T5690] rc_core: IR keymap rc-dvico-portable not found [ 599.633118][ T5690] Registered IR keymap rc-empty [ 599.638634][ T5690] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 599.650304][T14927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.661085][T14927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.670327][ T5690] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input101 [ 599.708107][ T5690] dvb-usb: schedule remote query interval to 100 msecs. [ 599.719937][ T5690] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 599.773565][ T5733] usb 4-1: USB disconnect, device number 29 [ 599.823975][T14930] usb usb7: usbfs: process 14930 (syz.4.2911) did not claim interface 0 before use [ 599.849682][ T5733] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 599.924445][ T5682] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 600.073870][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 600.081524][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 600.088827][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 600.096737][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 600.105843][ T5682] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 600.117259][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 600.140668][ T5682] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 600.155120][ T5682] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 600.164810][ T5682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.176305][ T5682] usb 6-1: config 0 descriptor?? [ 600.200621][ T5724] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 600.362797][ T5724] usb 3-1: not running at top speed; connect to a high speed hub [ 600.387254][ T5724] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 600.407776][ T5724] usb 3-1: config 0 has no interface number 0 [ 600.417922][ T5724] usb 3-1: config 0 interface 101 altsetting 251 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 600.443174][ T5724] usb 3-1: config 0 interface 101 altsetting 251 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 600.469531][ T5724] usb 3-1: config 0 interface 101 altsetting 251 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 600.493263][ T5724] usb 3-1: config 0 interface 101 has no altsetting 0 [ 600.513055][ T5724] usb 3-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=de.52 [ 600.530788][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.550467][ T5724] usb 3-1: Product: syz [ 600.558069][ T5724] usb 3-1: Manufacturer: syz [ 600.558094][ T5724] usb 3-1: SerialNumber: syz [ 600.559897][ T5724] usb 3-1: config 0 descriptor?? [ 600.624204][T14935] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.631833][T14935] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.639200][T14935] bridge_slave_0: entered allmulticast mode [ 600.647242][T14935] bridge_slave_0: entered promiscuous mode [ 600.656581][T14935] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.667028][T14935] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.679625][T14935] bridge_slave_1: entered allmulticast mode [ 600.683977][ T5682] hid_parser_main: 442 callbacks suppressed [ 600.684055][ T5682] kovaplus 0003:1E7D:2D50.0062: unknown main item tag 0x0 [ 600.703747][T14935] bridge_slave_1: entered promiscuous mode [ 600.711946][ T5682] kovaplus 0003:1E7D:2D50.0062: unknown main item tag 0x0 [ 600.719194][ T5682] kovaplus 0003:1E7D:2D50.0062: unknown main item tag 0x0 [ 600.726778][ T5682] kovaplus 0003:1E7D:2D50.0062: unknown main item tag 0x0 [ 600.740786][ T5682] kovaplus 0003:1E7D:2D50.0062: unknown main item tag 0x0 [ 600.757525][ T5682] kovaplus 0003:1E7D:2D50.0062: unknown main item tag 0x0 [ 600.775149][ T5682] kovaplus 0003:1E7D:2D50.0062: unknown main item tag 0x0 [ 600.791288][ T5682] kovaplus 0003:1E7D:2D50.0062: unknown main item tag 0x0 [ 600.808119][ T5682] kovaplus 0003:1E7D:2D50.0062: unknown main item tag 0x0 [ 600.821532][ T5682] kovaplus 0003:1E7D:2D50.0062: unknown main item tag 0x0 [ 600.829855][T12927] usb 2-1: USB disconnect, device number 59 [ 600.845306][T14935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.854654][ T5674] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 600.857084][ T5682] kovaplus 0003:1E7D:2D50.0062: invalid report_size 25705 [ 600.893669][T14935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.906519][ T5682] kovaplus 0003:1E7D:2D50.0062: item 0 2 1 7 parsing failed [ 600.936649][ T5682] kovaplus 0003:1E7D:2D50.0062: parse failed [ 600.948957][ T5682] kovaplus 0003:1E7D:2D50.0062: probe with driver kovaplus failed with error -22 [ 600.969526][ T5682] usb 6-1: USB disconnect, device number 100 [ 601.037599][T14935] team0: Port device team_slave_0 added [ 601.056496][ T5674] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 601.066472][T14935] team0: Port device team_slave_1 added [ 601.073745][ T5630] Bluetooth: hci5: command tx timeout [ 601.098983][ T5674] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 601.128735][ T3286] bridge_slave_1: left allmulticast mode [ 601.136793][ T5674] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 601.146360][ T3286] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.163076][ T5724] sierra 3-1:0.101: Sierra USB modem converter detected [ 601.172504][ T3286] bridge_slave_0: left allmulticast mode [ 601.178221][ T5674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.186539][ T3286] bridge_slave_0: left promiscuous mode [ 601.193766][ T5674] usb 4-1: Product: syz [ 601.198338][ T5724] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 601.206102][ T3286] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.214127][ T5674] usb 4-1: Manufacturer: syz [ 601.220301][ T5674] usb 4-1: SerialNumber: syz [ 601.225406][ T5724] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 601.256677][ T5724] usb 3-1: USB disconnect, device number 61 [ 601.292415][ T5724] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 601.307536][ T3286] bond2 (unregistering): (slave ip6gre2): Releasing backup interface [ 601.322878][ T5724] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 601.325461][ T3286] ip6gre2 (unregistering): left promiscuous mode [ 601.339551][ T5724] sierra 3-1:0.101: device disconnected [ 601.395800][ T3286] batman_adv: batadv0: Removing interface: gretap2 [ 601.463333][ T5674] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 601.477274][ T3286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.487590][ T5674] usb 4-1: unit 4 not found! [ 601.499143][ T3286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.520464][ T3286] bond0 (unregistering): Released all slaves [ 601.539806][ T5674] usb 4-1: USB disconnect, device number 30 [ 601.547241][ T3286] bond1 (unregistering): Released all slaves [ 601.573954][ T3286] bond2 (unregistering): Released all slaves [ 601.581552][T13117] udevd[13117]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.605904][ T3286] bond3 (unregistering): (slave veth3): Releasing backup interface [ 601.621042][ T3286] veth3: left promiscuous mode [ 601.639747][ T3286] bond3 (unregistering): Released all slaves [ 601.651717][ T3286] bond4 (unregistering): Released all slaves [ 601.663835][T14935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.670928][T14935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.719754][T14935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.796587][T14935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.813481][T14935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.841779][T14935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.875580][ T3286] tipc: Left network mode [ 601.877723][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 601.928238][T14972] syzkaller1: entered promiscuous mode [ 601.939034][T14972] syzkaller1: entered allmulticast mode [ 602.037702][T14978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 602.095541][T14935] hsr_slave_0: entered promiscuous mode [ 602.122182][T14935] hsr_slave_1: entered promiscuous mode [ 602.142805][T14935] debugfs: 'hsr0' already exists in 'hsr' [ 602.148757][T14935] Cannot create hsr debugfs directory [ 602.190818][ T5630] Bluetooth: hci1: command tx timeout [ 602.224682][ T3286] hsr_slave_0: left promiscuous mode [ 602.233858][ T3286] hsr_slave_1: left promiscuous mode [ 602.240798][ T5682] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 602.244397][ T3286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.303708][ T5674] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 602.329170][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2924'. [ 602.405304][ T5682] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.425880][T14998] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2924'. [ 602.435176][ T5682] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 602.461607][ T3286] team0 (unregistering): Port device team_slave_1 removed [ 602.482364][ T5682] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 602.492465][ T5682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.501330][ T5674] usb 3-1: Using ep0 maxpacket: 8 [ 602.501832][ T5682] usb 6-1: Product: syz [ 602.515693][ T3286] team0 (unregistering): Port device team_slave_0 removed [ 602.529016][ T5674] usb 3-1: too many endpoints for config 0 interface 0 altsetting 170: 170, using maximum allowed: 30 [ 602.542527][ T5674] usb 3-1: config 0 interface 0 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 602.543696][ T5682] usb 6-1: Manufacturer: syz [ 602.598366][ T5674] usb 3-1: config 0 interface 0 has no altsetting 0 [ 602.619500][ T5674] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 602.634134][ T5674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.635003][ T5682] usb 6-1: SerialNumber: syz [ 602.667300][ T5674] usb 3-1: Product: syz [ 602.677341][ T5674] usb 3-1: Manufacturer: syz [ 602.690926][ T5674] usb 3-1: SerialNumber: syz [ 602.710514][ T5674] usb 3-1: config 0 descriptor?? [ 602.753886][ T5682] snd-ua101 6-1:1.1: invalid num_altsetting [ 602.785834][ T5682] snd-ua101 6-1:1.0: invalid format type [ 602.977844][T14978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.993773][T14978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.090969][T14978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.148759][T14978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.175176][T12927] usb 6-1: USB disconnect, device number 101 [ 603.228751][ T5674] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 603.285515][ T5674] dvb-usb: bulk message failed: -22 (2/0) [ 603.323108][ T5674] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 603.378761][ T5674] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 603.442841][ T5674] usb 3-1: media controller created [ 603.534236][ T5674] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 603.598175][ T5674] usb 3-1: selecting invalid altsetting 0 [ 603.620280][ T5674] cxusb: set interface failed [ 603.636896][ T5674] dvb-usb: bulk message failed: -22 (1/0) [ 603.775828][ T5674] DVB: Unable to find symbol mt352_attach() [ 603.816720][ T5674] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 603.830390][T14935] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 603.887703][T14935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 603.922132][T14935] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 603.985886][T14935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 604.011984][T14935] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 604.020946][ T5674] rc_core: IR keymap rc-dvico-portable not found [ 604.046075][ T5674] Registered IR keymap rc-empty [ 604.063569][T14935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 604.075423][ T5674] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 604.110762][ T5674] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input102 [ 604.128922][T14935] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 604.140723][ T1225] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 604.163769][ T5674] dvb-usb: schedule remote query interval to 100 msecs. [ 604.187585][T14935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.196296][ T5674] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 604.216347][ T5674] usb 3-1: USB disconnect, device number 62 [ 604.270797][ T5630] Bluetooth: hci1: command tx timeout [ 604.321015][ T1225] usb 6-1: Using ep0 maxpacket: 32 [ 604.341219][ T1225] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 604.372977][ T5674] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 604.395066][ T1225] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 604.427506][ T1225] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 604.455185][T14935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.464453][ T1225] usb 6-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 604.488131][ T1225] usb 6-1: Product: syz [ 604.510398][ T1225] usb 6-1: Manufacturer: syz [ 604.517769][T14935] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.525545][ T1225] usb 6-1: SerialNumber: syz [ 604.542321][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.543615][ T1225] appletouch 6-1:1.0: Could not find int-in endpoint [ 604.549563][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.556481][ T1225] appletouch 6-1:1.0: probe with driver appletouch failed with error -5 [ 604.575938][ T1225] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 604.634706][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.641986][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.731766][ T5724] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 604.740653][ T5674] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 604.757805][ T1225] usb 6-1: USB disconnect, device number 102 [ 604.846484][T14935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.904648][T14935] veth0_vlan: entered promiscuous mode [ 604.911284][ T5674] usb 3-1: Using ep0 maxpacket: 8 [ 604.924927][ T5674] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 604.933049][T14935] veth1_vlan: entered promiscuous mode [ 604.944120][ T5674] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 604.959285][ T5724] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 604.977337][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.989943][ T5674] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 605.004971][ T5724] usb 2-1: Product: syz [ 605.009676][ T5724] usb 2-1: Manufacturer: syz [ 605.015447][ T5674] usb 3-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 605.026939][ T5724] usb 2-1: SerialNumber: syz [ 605.032629][ T5674] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 605.046588][ T5724] usb 2-1: config 0 descriptor?? [ 605.053621][T14935] veth0_macvtap: entered promiscuous mode [ 605.063179][ T5724] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 605.074345][T14935] veth1_macvtap: entered promiscuous mode [ 605.080422][ T5674] usb 3-1: config 168 interface 0 has no altsetting 0 [ 605.093321][ T5674] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 605.109722][T14935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.117492][ T5674] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 605.132143][ T5674] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 605.150087][ T5674] usb 3-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 605.164599][T14935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.174666][ T5674] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 605.188589][ T5674] usb 3-1: config 168 interface 0 has no altsetting 0 [ 605.214141][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.247602][ T5674] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 605.256866][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.266160][ T5674] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 605.279219][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.317148][ T5674] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 605.332982][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.381299][ T5674] usb 3-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 605.407908][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.419402][ T5674] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 605.439077][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.467326][ T5674] usb 3-1: config 168 interface 0 has no altsetting 0 [ 605.482468][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.493412][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.503634][ T5674] usb 3-1: string descriptor 0 read error: -22 [ 605.511547][ T5674] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 605.538659][ T5674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.561438][ T5674] adutux 3-1:168.0: interrupt endpoints not found [ 605.701356][T15057] syzkaller1: entered promiscuous mode [ 605.728587][T15057] syzkaller1: entered allmulticast mode [ 605.760268][T15057] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 605.861485][ T5724] gspca_sunplus: reg_w_riv err -110 [ 605.868716][ T5724] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 605.901025][ T5674] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 606.010640][ T5725] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 606.022129][T12927] usb 3-1: USB disconnect, device number 63 [ 606.061943][ T1225] usb 2-1: USB disconnect, device number 60 [ 606.071051][ T5674] usb 5-1: Invalid ep0 maxpacket: 9 [ 606.170743][ T5725] usb 6-1: Using ep0 maxpacket: 8 [ 606.178937][ T5725] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 606.189822][ T5725] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.202701][ T5674] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 606.210378][ T5725] usb 6-1: config 0 has no interface number 0 [ 606.217674][ T5725] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 606.234580][ T5725] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 606.245442][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.253830][ T5725] usb 6-1: Product: syz [ 606.258326][ T5725] usb 6-1: Manufacturer: syz [ 606.263613][ T5725] usb 6-1: SerialNumber: syz [ 606.270498][ T5725] usb 6-1: config 0 descriptor?? [ 606.282968][ T5725] iowarrior 6-1:0.186: no interrupt-in endpoint found [ 606.290631][ T5724] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 606.350723][ T5630] Bluetooth: hci1: command tx timeout [ 606.380632][ T5674] usb 5-1: Invalid ep0 maxpacket: 9 [ 606.393994][ T5674] usb usb5-port1: attempt power cycle [ 606.426083][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2936'. [ 606.442989][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 606.456987][ T5724] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.470048][ T5724] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.481367][ T5724] usb 4-1: config 0 interface 0 has no altsetting 0 [ 606.489644][ T5724] usb 4-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.00 [ 606.502834][T11829] usb 6-1: USB disconnect, device number 103 [ 606.515906][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.533314][ T5724] usb 4-1: config 0 descriptor?? [ 606.555182][ T5724] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input103 [ 606.750875][ T5674] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 606.762028][T15068] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 606.786634][ T4977] bcm5974 4-1:0.0: could not read from device [ 606.794316][ T5674] usb 5-1: Invalid ep0 maxpacket: 9 [ 606.817850][ T4977] bcm5974 4-1:0.0: could not read from device [ 606.826459][ T5724] usb 4-1: USB disconnect, device number 31 [ 606.841768][T13117] bcm5974 4-1:0.0: could not read from device [ 606.858420][ T4977] bcm5974 4-1:0.0: could not read from device [ 606.896800][T14801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 606.904513][T14801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 606.915589][T14801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 606.928229][T14801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 606.936308][T14801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 606.940928][ T5674] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 606.981040][ T5674] usb 5-1: Invalid ep0 maxpacket: 9 [ 606.994860][ T5674] usb usb5-port1: unable to enumerate USB device [ 607.050704][T11829] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 607.223066][T11829] usb 3-1: unable to get BOS descriptor or descriptor too short [ 607.234944][ T8445] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.235459][T11829] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 607.248929][ T8445] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.284702][T11829] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 607.296349][T11829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.304589][T11829] usb 3-1: Product: syz [ 607.308826][T11829] usb 3-1: Manufacturer: syz [ 607.316509][T11829] usb 3-1: SerialNumber: syz [ 607.358208][ T8445] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.388806][ T8445] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.418718][T15113] netlink: 'syz.3.2944': attribute type 4 has an invalid length. [ 607.441745][T15099] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.448985][T15099] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.456296][T15099] bridge_slave_0: entered allmulticast mode [ 607.461140][ T5724] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 607.464768][T15099] bridge_slave_0: entered promiscuous mode [ 607.483275][ T8445] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.494602][ T8445] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.512745][T15099] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.529464][T15097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2940'. [ 607.529773][T15099] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.547778][T15099] bridge_slave_1: entered allmulticast mode [ 607.555386][T15099] bridge_slave_1: entered promiscuous mode [ 607.565741][T15097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2940'. [ 607.577265][T15097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.587210][T15097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.605934][ T8445] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.616508][ T8445] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.626926][ T5724] usb 6-1: Using ep0 maxpacket: 32 [ 607.634244][ T5724] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 607.638414][T15099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.642849][ T5724] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 607.660780][T15099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.665466][ T5724] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 607.679869][ T5724] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 607.690296][ T5724] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 607.700164][ T5724] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 607.715038][ T5724] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 607.724181][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.734358][T15099] team0: Port device team_slave_0 added [ 607.736705][ T5724] usb 6-1: config 0 descriptor?? [ 607.747729][T15099] team0: Port device team_slave_1 added [ 607.771466][T15099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.778509][T15099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.805252][T12927] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 607.806753][T15099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.832611][T15099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.840128][T15099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.866529][T15099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.934794][T15099] hsr_slave_0: entered promiscuous mode [ 607.942069][T15099] hsr_slave_1: entered promiscuous mode [ 607.948245][T15099] debugfs: 'hsr0' already exists in 'hsr' [ 607.954661][T15099] Cannot create hsr debugfs directory [ 607.965588][T15108] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[9258] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ   ðl@ \x09$rQ \x09 \x07 \x09 \x09‚  ./file1 ./file0  "[15108] [ 607.976690][T12927] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 153, changing to 7 [ 608.038458][T12927] usb 4-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 608.055162][ T5724] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 104 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 608.069199][T12927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.083365][T12927] usb 4-1: Product: syz [ 608.088098][T12927] usb 4-1: Manufacturer: syz [ 608.088435][ T8445] bridge_slave_1: left allmulticast mode [ 608.100005][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.107437][T12927] usb 4-1: SerialNumber: syz [ 608.109743][ T5724] usb 6-1: USB disconnect, device number 104 [ 608.122360][ T8445] bridge_slave_0: left allmulticast mode [ 608.131296][ T8445] bridge_slave_0: left promiscuous mode [ 608.137652][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.148919][ T5724] usblp0: removed [ 608.158682][ T8445] dvmrp0: left allmulticast mode [ 608.279106][ T8445] bond4 (unregistering): (slave geneve2): Releasing active interface [ 608.330160][T12927] usb 4-1: unit 4 not found! [ 608.335718][ T8445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.350164][ T8445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.353882][T12927] usb 4-1: unit 46 not found! [ 608.373978][T11829] usb 3-1: USB disconnect, device number 64 [ 608.409157][ T8445] bond0 (unregistering): Released all slaves [ 608.426093][ T8445] bond1 (unregistering): Released all slaves [ 608.436448][T14801] Bluetooth: hci1: command tx timeout [ 608.460013][T12927] snd_usb_variax 4-1:1.1: Line 6 PODxt Live found [ 608.478831][ T8445] bond2 (unregistering): Released all slaves [ 608.513016][ T8445] bond3 (unregistering): (slave veth3): Releasing backup interface [ 608.528583][T12927] snd_usb_variax 4-1:1.1: set_interface failed [ 608.536122][T15132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2946'. [ 608.545412][T12927] snd_usb_variax 4-1:1.1: Line 6 PODxt Live now disconnected [ 608.563517][ T8445] bond3 (unregistering): Released all slaves [ 608.582598][T12927] snd_usb_variax 4-1:1.1: probe with driver snd_usb_variax failed with error -71 [ 608.607519][ T8445] bond4 (unregistering): Released all slaves [ 608.643027][T12927] usb 4-1: USB disconnect, device number 32 [ 608.883880][T15138] syzkaller0: entered promiscuous mode [ 608.901509][T15143] ================================================================== [ 608.909594][T15143] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 608.918239][T15143] Write of size 360 at addr ffffc90008f35ef1 by task vivid-000-vid-c/15143 [ 608.926824][T15143] [ 608.929238][T15143] CPU: 1 UID: 0 PID: 15143 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 608.929259][T15143] Tainted: [L]=SOFTLOCKUP [ 608.929264][T15143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 608.929274][T15143] Call Trace: [ 608.929281][T15143] [ 608.929287][T15143] dump_stack_lvl+0xe8/0x150 [ 608.929306][T15143] print_address_description+0x55/0x1e0 [ 608.929321][T15143] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 608.929336][T15143] print_report+0x58/0x70 [ 608.929349][T15143] kasan_report+0x117/0x150 [ 608.929364][T15143] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 608.929400][T15143] kasan_check_range+0x264/0x2c0 [ 608.929416][T15143] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 608.929433][T15143] __asan_memcpy+0x40/0x70 [ 608.929453][T15143] tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 608.929495][T15143] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 608.929588][T15143] ? cpuacct_charge+0x112/0x320 [ 608.929610][T15143] ? rcu_is_watching+0x15/0xb0 [ 608.929628][T15143] ? rcu_is_watching+0x15/0xb0 [ 608.929644][T15143] ? trace_irq_enable+0x3b/0x140 [ 608.929668][T15143] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 608.929696][T15143] ? ktime_get+0x45/0x220 [ 608.929720][T15143] vivid_thread_vid_cap+0x927/0x11e0 [ 608.929752][T15143] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 608.929773][T15143] ? do_raw_spin_lock+0x12b/0x2f0 [ 608.929798][T15143] ? rcu_is_watching+0x15/0xb0 [ 608.929815][T15143] ? rcu_is_watching+0x15/0xb0 [ 608.929831][T15143] ? trace_irq_enable+0x3b/0x140 [ 608.929853][T15143] ? __kthread_parkme+0x71/0x1f0 [ 608.929875][T15143] ? __kthread_parkme+0x196/0x1f0 [ 608.929898][T15143] kthread+0x388/0x470 [ 608.929913][T15143] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 608.929934][T15143] ? __pfx_kthread+0x10/0x10 [ 608.929949][T15143] ret_from_fork+0x514/0xb70 [ 608.929965][T15143] ? __pfx_ret_from_fork+0x10/0x10 [ 608.929980][T15143] ? __switch_to+0xc89/0x1420 [ 608.930003][T15143] ? __pfx_kthread+0x10/0x10 [ 608.930018][T15143] ret_from_fork_asm+0x1a/0x30 [ 608.930041][T15143] [ 608.930047][T15143] [ 609.131555][T15143] The buggy address belongs to a 1-page vmalloc region starting at 0xffffc90008f35000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 609.144833][T15143] The buggy address belongs to the physical page: [ 609.151245][T15143] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880669a6000 pfn:0x669a6 [ 609.161313][T15143] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 609.168449][T15143] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 609.177042][T15143] raw: ffff8880669a6000 0000000000000000 00000001ffffffff 0000000000000000 [ 609.185619][T15143] page dumped because: kasan: bad access detected [ 609.192033][T15143] page_owner tracks the page as allocated [ 609.197742][T15143] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 15142, tgid 15140 (syz.4.2948), ts 608894173874, free_ts 608894151353 [ 609.217212][T15143] post_alloc_hook+0x1f9/0x250 [ 609.221987][T15143] get_page_from_freelist+0x21fa/0x2270 [ 609.227531][T15143] __alloc_frozen_pages_noprof+0x18d/0x380 [ 609.233338][T15143] __alloc_pages_noprof+0x10/0x100 [ 609.238449][T15143] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 609.243918][T15143] alloc_pages_bulk_mempolicy_noprof+0x34b/0x1690 [ 609.250336][T15143] __vmalloc_node_range_noprof+0xb1d/0x1730 [ 609.256231][T15143] vmalloc_user_noprof+0xad/0xe0 [ 609.261175][T15143] vb2_vmalloc_alloc+0xef/0x360 [ 609.266029][T15143] __vb2_queue_alloc+0xa0b/0x1660 [ 609.271055][T15143] vb2_core_reqbufs+0xc3f/0x1470 [ 609.275991][T15143] __vb2_init_fileio+0x310/0x1040 [ 609.281024][T15143] __vb2_perform_fileio+0x287/0x1660 [ 609.286315][T15143] vb2_fop_read+0x282/0x360 [ 609.290818][T15143] v4l2_read+0x19c/0x2c0 [ 609.295080][T15143] vfs_read+0x213/0xa80 [ 609.299247][T15143] page last free pid 15142 tgid 15140 stack trace: [ 609.305766][T15143] __free_frozen_pages+0xc1f/0xd10 [ 609.310888][T15143] __kasan_populate_vmalloc+0x1a8/0x1c0 [ 609.316438][T15143] alloc_vmap_area+0xd1a/0x1420 [ 609.321289][T15143] __get_vm_area_node+0x1f2/0x300 [ 609.326344][T15143] __vmalloc_node_range_noprof+0x358/0x1730 [ 609.332275][T15143] vmalloc_user_noprof+0xad/0xe0 [ 609.337214][T15143] vb2_vmalloc_alloc+0xef/0x360 [ 609.342064][T15143] __vb2_queue_alloc+0xa0b/0x1660 [ 609.347088][T15143] vb2_core_reqbufs+0xc3f/0x1470 [ 609.352028][T15143] __vb2_init_fileio+0x310/0x1040 [ 609.357063][T15143] __vb2_perform_fileio+0x287/0x1660 [ 609.362382][T15143] vb2_fop_read+0x282/0x360 [ 609.366886][T15143] v4l2_read+0x19c/0x2c0 [ 609.371129][T15143] vfs_read+0x213/0xa80 [ 609.375367][T15143] __x64_sys_pread64+0x196/0x220 [ 609.380322][T15143] do_syscall_64+0x174/0x580 [ 609.384943][T15143] [ 609.387273][T15143] Memory state around the buggy address: [ 609.392936][T15143] ffffc90008f35f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 609.401022][T15143] ffffc90008f35f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 609.409103][T15143] >ffffc90008f36000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 609.417159][T15143] ^ [ 609.421222][T15143] ffffc90008f36080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 609.429293][T15143] ffffc90008f36100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 609.437380][T15143] ================================================================== [ 609.470900][T14801] Bluetooth: hci3: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 609.622459][T15138] syzkaller0: entered allmulticast mode [ 609.640770][ T8445] tipc: Left network mode [ 609.649727][T15143] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 609.656999][T15143] CPU: 1 UID: 0 PID: 15143 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 609.668408][T15143] Tainted: [L]=SOFTLOCKUP [ 609.672775][T15143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 609.682947][T15143] Call Trace: [ 609.686269][T15143] [ 609.689220][T15143] vpanic+0x56c/0xa60 [ 609.693219][T15143] ? __pfx_vpanic+0x10/0x10 [ 609.697733][T15143] ? __pfx___schedule+0x10/0x10 [ 609.702636][T15143] panic+0xc5/0xd0 [ 609.706400][T15143] ? __pfx_panic+0x10/0x10 [ 609.710871][T15143] ? preempt_schedule_common+0x82/0xd0 [ 609.716368][T15143] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 609.722010][T15143] check_panic_on_warn+0x89/0xb0 [ 609.726972][T15143] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 609.732615][T15143] end_report+0x73/0x170 [ 609.736866][T15143] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 609.742508][T15143] kasan_report+0x128/0x150 [ 609.747019][T15143] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 609.752677][T15143] kasan_check_range+0x264/0x2c0 [ 609.757657][T15143] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 609.763322][T15143] __asan_memcpy+0x40/0x70 [ 609.767772][T15143] tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 609.773287][T15143] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 609.779145][T15143] ? cpuacct_charge+0x112/0x320 [ 609.784029][T15143] ? rcu_is_watching+0x15/0xb0 [ 609.788904][T15143] ? rcu_is_watching+0x15/0xb0 [ 609.793691][T15143] ? trace_irq_enable+0x3b/0x140 [ 609.798664][T15143] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 609.804856][T15143] ? ktime_get+0x45/0x220 [ 609.809219][T15143] vivid_thread_vid_cap+0x927/0x11e0 [ 609.814544][T15143] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 609.820294][T15143] ? do_raw_spin_lock+0x12b/0x2f0 [ 609.825352][T15143] ? rcu_is_watching+0x15/0xb0 [ 609.830140][T15143] ? rcu_is_watching+0x15/0xb0 [ 609.834924][T15143] ? trace_irq_enable+0x3b/0x140 [ 609.839883][T15143] ? __kthread_parkme+0x71/0x1f0 [ 609.844867][T15143] ? __kthread_parkme+0x196/0x1f0 [ 609.849920][T15143] kthread+0x388/0x470 [ 609.854008][T15143] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 609.859753][T15143] ? __pfx_kthread+0x10/0x10 [ 609.864357][T15143] ret_from_fork+0x514/0xb70 [ 609.868963][T15143] ? __pfx_ret_from_fork+0x10/0x10 [ 609.874138][T15143] ? __switch_to+0xc89/0x1420 [ 609.878841][T15143] ? __pfx_kthread+0x10/0x10 [ 609.883449][T15143] ret_from_fork_asm+0x1a/0x30 [ 609.888239][T15143] [ 609.891879][T15143] Kernel Offset: disabled [ 609.896210][T15143] Rebooting in 86400 seconds..