last executing test programs: 8.386802488s ago: executing program 4 (id=403): openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e", 0xfffffee5}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = fsopen(&(0x7f0000000280)='ufs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x1, 0x20016}, @fda={0x66646185, 0x2, 0x1, 0x28}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000200)='ceph\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) 7.128043036s ago: executing program 4 (id=408): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100005800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) unshare(0xe000480) unshare(0xbffd1c29fe810807) unshare(0x2a020480) 7.03919632s ago: executing program 4 (id=410): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC=r1]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sync() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000280)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) listen(0xffffffffffffffff, 0x3) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000540)={0x3, 0x2, @stop_pts=0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2b) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="806c09ef8390dc04eb686d817c73bcac69eb92f2180aedd05f95d0d5fe8165261a1afa6f3ac83c17d610fc14523b8edd5d028de5424eeba26b6dd239"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) mq_open(&(0x7f0000000480)='.\\\x00\xd5\xf6\t\xcf\xc4Q\xdfx\x8e2\xd4\xe9\xb5\xf5w\x9bP\xbf\xe7\x87\xf0\xe5.\xe7\xa0\x8e\xcd\xe1\x8a3\xbbh5SA,\xd3\xec\",p\x81W\xa8\x83\xec\n\xce\x1c@\xa3!\x03\xbe%J\x92\xa7\xe9\xb2\x9c\xee\x9b\xb8+\xd88\xddw\x97\'\xc5\xads`^\xb7I\\\xcf\xe5\x98\xe4gY\xa9\xf1\x9f\xfe\xe2\x9a~\xd9\xa1\xe4P*U\x91\x1f\'\xa9OE\xb4F\xdfd\xac\\S\xb2\xc0\xc1\xc9M\xfc\x8c\x1d,\xdc\x03\x1d\xdb\xa2N\xd8\xd7\xed\x8b\\T\xe2\x87]\xcfp\x8d}\x17\xe4?\x96H\x8c\x0fA\xfc]?\xa0I\x82\x02\xe7\xaeG\xc2_j\fSy\xb41M}\xd9\xd6\xd4\xd8\x84l3#z\xb7<', 0x40, 0x0, 0x0) 7.01680884s ago: executing program 2 (id=411): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r1 = eventfd(0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000000000000000aacc0000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000006000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa000000000000002d000000000600000004"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x1c9102) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r5, 0x0, 0x0, 0x40804, &(0x7f0000000080)={0xa, 0xcaa4, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x9, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000100)='/dev/vmci\x00', 0x422202, &(0x7f0000000200)={@align=0x5, {0x0, 0x9, 0x6, 0x7fffffff8000}}, 0xa, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000300)=0xedd0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x2, 0x2ee, 0xec}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) write$cgroup_type(r12, &(0x7f00000000c0), 0x9) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r13 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) preadv(r13, &(0x7f0000000280)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1, 0x3, 0xffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(r13, 0xc058565d, &(0x7f00000001c0)=@mmap={0xe08, 0x1, 0x4, 0x8, 0x3, {0x77359400}, {0x4, 0xc, 0xc7, 0xff, 0xfe, 0x0, "87f2a14f"}, 0x8, 0x1, {}, 0x1}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, 0x0, 0x0) 6.819463607s ago: executing program 2 (id=414): openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e", 0xfffffee5}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = fsopen(&(0x7f0000000280)='ufs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x1, 0x20016}, @fda={0x66646185, 0x2, 0x1, 0x28}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000200)='ceph\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) 5.067751729s ago: executing program 2 (id=421): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) gettid() r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4e9}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmmsg$unix(r0, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r5, 0x1) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x100000500) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r7}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x6, 0x63, 0x25, {r8, r9/1000+10000}, {}, {0x1, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x15, 0x3, 0x0, 0x0, "41300ac40e373353fd51a3a788747619ebe652e06ea0ad008af3224dbf7e31b693e586210f44604e3f099ce4f2ae8525693e5c2d787e5f9699f12233b67db7e8"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x58, &(0x7f0000000000)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x1ff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, @in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x6}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000200)={r10, 0x8, 0x681}, 0x8) 4.561164555s ago: executing program 3 (id=422): r0 = socket(0x1e, 0x2, 0x0) unshare(0x20000400) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x0) readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/93, 0x5d) 4.29005475s ago: executing program 3 (id=424): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000003040), 0x8040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fanotify_init(0x200, 0x48801) fanotify_mark(r4, 0x1, 0x1001, 0xffffffffffffffff, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r6, 0x0, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x64, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x80) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x7c, 0x0, 0x30c, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5d}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000005}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000003080)) 3.972316147s ago: executing program 1 (id=425): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002180)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2404}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x403, 0x4, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0xfffffffffffffff5, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x0, 0x800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r4, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r1, 0x0, 0x20000) 3.718447442s ago: executing program 0 (id=426): unshare(0x22020400) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000490400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009550100626f6e64000000001400028008001200090000000500110001000000"], 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x400800, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000100)="c635d1a9b9736ed1f441ba91ef4bd4bf9a4eb3f430d739dce8f53c8cd28dd281c1cb37f0ea6b21cb2b7c9eddfd93853a74bbb5cd0fb6ad7e0dc3626e6f02dae47b4ab790ffea7722bcc82c1b45dac11f35e0534126290a9cb7cef560c4d04c4a6bb024b59d779d4b61e6638c7561468d797070d8acd886f87cc91fc405ad63c6c68626aab6b4fb19ae3027ac35d891624f028bc64928094c25d995", 0x9b}], 0x1) r6 = socket(0x2, 0x80805, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000001c0)={0x1, 0xe0, 0x7, &(0x7f0000000000)={0x98, "00001e5d00f305dfbd0d0000008000"}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0xf1e046afa248a5c1) 3.593718756s ago: executing program 0 (id=427): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0xfffffffffffffec3) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1, 0x0, 0x3}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r4, 0x11}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r4, 0x1}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x9, 0x0, 0x4, r4, 0x5}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.425381297s ago: executing program 0 (id=428): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup(r1) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$SNDCTL_TMR_METRONOME(r5, 0x40045407) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) r6 = socket$inet6(0xa, 0x3, 0x86) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200, 0x4, 0x21}, 0x18) file_setattr(r7, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x14031, 0x4ac3, 0xfffffff9, 0x8, 0x6}, 0x18, 0x1000) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) dup(r1) (async) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, 0x0) (async) socket$netlink(0x10, 0x3, 0x6) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80}, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) (async) ioctl$SNDCTL_TMR_METRONOME(r5, 0x40045407) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) socket$inet6(0xa, 0x3, 0x86) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200, 0x4, 0x21}, 0x18) (async) file_setattr(r7, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x14031, 0x4ac3, 0xfffffff9, 0x8, 0x6}, 0x18, 0x1000) (async) 3.277776938s ago: executing program 4 (id=429): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf250200000000008100"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r4 = getpgrp(0xffffffffffffffff) kcmp(r4, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_FREEZE(r3, 0x400c620e, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000c00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1000, 0x20}}, 0x0, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0xb, 0x2, '7K'}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @local}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @random="eff376ea4379"}, 0x0, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x3a34}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x40}, 0x0, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x6}}) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x0, 'rlimit'}, {0x2d, 'devices'}, {0x2d, 'pids'}, {0x2d, 'cpuset'}, {0x2b, 'perf_event'}, {0x2d, 'perf_event'}, {0x2b, 'net'}, {0x2d, 'cpuset'}]}, 0x44) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @broadcast}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, {0x2, 0x4e23, @private=0xa010102}, 'wg0\x00'}) 3.015115021s ago: executing program 1 (id=430): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20, 0x2000000}}], 0x1, 0xc0) 2.934131082s ago: executing program 1 (id=431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000102000000", @ANYRES32=r2, @ANYRES32=r2], 0x1c}}, 0x0) 2.828880331s ago: executing program 1 (id=432): openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e", 0xfffffee5}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = fsopen(&(0x7f0000000280)='ufs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x1, 0x20016}, @fda={0x66646185, 0x2, 0x1, 0x28}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000200)='ceph\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) 2.713202389s ago: executing program 3 (id=433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x4, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000004c0)={"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"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}, {&(0x7f0000000b80)}], 0x2}, 0x20004005) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x9}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.190867698s ago: executing program 0 (id=434): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000206051000000000000000000700000005000400000000000900020073797a300600000000000800134000000fff050005000000000005000100060000000d000300686173683a6d616300"/92], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000206051000000000000000000700000005000400000000000900020073797a300600000000000800134000000fff050005000000000005000100060000000d000300686173683a6d616300"/92], 0x5c}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x2, 0x3, 0x19, @dev={0xfe, 0x80, '\x00', 0x32}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x0, 0x3, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x2, 0x3, 0x19, @dev={0xfe, 0x80, '\x00', 0x32}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x0, 0x3, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="28b2000080100000400012800b00010065727370616e00003000028008001500e597050008000100", @ANYRES32=r1, @ANYBLOB="0400120006000200ff01000008000100", @ANYRES32=r2, @ANYBLOB="08000600e0000002"], 0x60}}, 0x48000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000066c0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x20000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x10}}], 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{0x0}], 0x1, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{0x0}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000340)={0x2, 0x8, 0x0, 0x1}, 0x10) socket(0xa, 0x5, 0x0) (async) r6 = socket(0xa, 0x5, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000540)=[@cpuid={0x64, 0x18, {0x8001, 0x4a78}}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x9bf}}, @in_dx={0x69, 0x20, {0xdd17, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000, 0x6, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x4, 0x6d83}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x6408, 0x10000, 0x7, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x609, 0x10001, 0x8, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0x9000, 0xf2d}}, @nested_load_code={0x12e, 0x69, {0x2, "0f35410f01c9360f01b40b00000000440f20c03502000000440f22c00f01d548b823228dfd5c0409b40f23c00f21f83502000a000f23f8660f388181b161000067450f01c2c4a198561503000000470f35"}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x2, 0xffffffff}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0xe000, 0x5b13}}, @nested_vmresume={0x130, 0x18, 0x1}, @code={0xa, 0x50, {"66baf80cb856167384ef66bafc0cb000ee0f070f350f01f8440f20c03504000000440f22c066baa100b01dee44c02109440f01f8660fc7b10b00000043d9df"}}, @nested_load_code={0x12e, 0x63, {0x2, "b805000000b93e3f6d240f01d9c4c17917670066bad004b8649d0000efc4c2e5a8580180a106000000e4c40191fa7b00b9db0a0000b8ec6f31c3bacc2d20680f30470f01cf460f35440f07"}}, @in_dx={0x69, 0x20, {0x7b, 0x1}}, @wr_crn={0x67, 0x20, {0xf, 0xffff}}, @nested_load_syzos={0x136, 0x50, {0x2, 0x9, [@nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x1}]}}, @set_irq_handler={0xc8, 0x20, {0xb8, 0x2}}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x64a, 0x7}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host32=0x4c00, 0x7, 0xdee, 0x8}}, @uexit={0x0, 0x18, 0xb39}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x4, 0x4}}, @nested_amd_vmload={0x182, 0x18, 0x3}], 0x4e4}) (async) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000540)=[@cpuid={0x64, 0x18, {0x8001, 0x4a78}}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x9bf}}, @in_dx={0x69, 0x20, {0xdd17, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000, 0x6, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x4, 0x6d83}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x6408, 0x10000, 0x7, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x609, 0x10001, 0x8, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0x9000, 0xf2d}}, @nested_load_code={0x12e, 0x69, {0x2, "0f35410f01c9360f01b40b00000000440f20c03502000000440f22c00f01d548b823228dfd5c0409b40f23c00f21f83502000a000f23f8660f388181b161000067450f01c2c4a198561503000000470f35"}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x2, 0xffffffff}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0xe000, 0x5b13}}, @nested_vmresume={0x130, 0x18, 0x1}, @code={0xa, 0x50, {"66baf80cb856167384ef66bafc0cb000ee0f070f350f01f8440f20c03504000000440f22c066baa100b01dee44c02109440f01f8660fc7b10b00000043d9df"}}, @nested_load_code={0x12e, 0x63, {0x2, "b805000000b93e3f6d240f01d9c4c17917670066bad004b8649d0000efc4c2e5a8580180a106000000e4c40191fa7b00b9db0a0000b8ec6f31c3bacc2d20680f30470f01cf460f35440f07"}}, @in_dx={0x69, 0x20, {0x7b, 0x1}}, @wr_crn={0x67, 0x20, {0xf, 0xffff}}, @nested_load_syzos={0x136, 0x50, {0x2, 0x9, [@nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x1}]}}, @set_irq_handler={0xc8, 0x20, {0xb8, 0x2}}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x64a, 0x7}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host32=0x4c00, 0x7, 0xdee, 0x8}}, @uexit={0x0, 0x18, 0xb39}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x4, 0x4}}, @nested_amd_vmload={0x182, 0x18, 0x3}], 0x4e4}) ioctl$KVM_TDX_INIT_VCPU(r7, 0xc008aeba, &(0x7f0000000a80)={0x2, 0x0, 0x3}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000200)={0x7, 'vlan0\x00', {0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000300)=[@in={0x2, 0x4e24, @local}], 0x10) 2.009399765s ago: executing program 0 (id=435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='0', 0x1}], 0x1, 0x8000, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100)) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x490, 0xec000000, 0x7fff}]}) syz_emit_ethernet(0x63e, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaff8100000086dd60f53a0400403a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900000000f83cfc010000000000000000000000000000fc0000000000000000000000000000013a00"/122], 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r6, 0x400, 0x1) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10103f, 0x140) r8 = open(&(0x7f0000000040)='./file0\x00', 0x109200, 0x25) r9 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x22) r10 = pidfd_getfd(r6, r7, 0x0) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r9) sendmsg$WG_CMD_GET_DEVICE(r10, &(0x7f0000000cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)=ANY=[@ANYBLOB="380b00001a22f138e8606875ecba48b6d787d0f59ea8303ce86c303979873642f01526", @ANYRES16=r11, @ANYBLOB="000228bd7000ffdbdf2500000000060006004e23000008000700000000000800050001000000cb0308807401008020010980dc000080060001000200000008000200ffffffff0500030003000000060001000200000008000200ac1414aa05000300fe000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000200000008000200640101020500030001000000060001000200000008000200ffffffff05000300000000000600010002000000080002007f00000105000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa050003000300000040000080060001000200000008000200000000000500030002000000060001000a00000014000200fe8000000000000000000000000000bb050003000100000008000a000100000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000200efcf0482d705c3cbd3ba509e26348353530b9183acd69696f185e3ba1425d1d830020080080003000400000008000a00010000000800030002000000fc000980d0000080060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000a00000014000200000000000000000000000000000000000500030001000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200fc0000000000000000000000000000010500030002000000060001000200000008000200ffffffff050003000200000028000080060001000a00000014000200fe8000000000000000000000000000aa05000300030000000800030000000000fc000980b8000080060001000200000008000200ac1e00010500030002000000060001000200000008000200640101020500030003000000060001000a00000014000200000000000000000000000000000000010500030002000000000001000200000000000200e000000100000300020000000600010002000000080002000a0101020500030000000000060001000a00000014000200000000000000000000000000000000010500030003000000400000800600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000aa05000300000000001400040002004e22ffffffff00000000000000000800050000000000"], 0x3dc}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) fcntl$setlease(r6, 0x400, 0x2) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000080)=0x2) r12 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000400)={0x4, 0x2, 0x20, "ffffffffffffff000000000000000000364500", 0x43353039}) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d00000000000000000200000000000006000000000600150001000000180016"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r13, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet6_IPV6_RTHDR(r13, 0x29, 0x39, &(0x7f0000000d00)=ANY=[@ANYBLOB="110601040000000000000000000000001e00000000000000ff020000000000aeab00000000000001010000000000000000000000c8c4d5cf86568cf4465f0b2eb0ed33b6098bd18a7c7dfc91a1c4780b5ae6c980db022703d6d995b0351c"], 0x38) write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfce) 1.910630758s ago: executing program 3 (id=436): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bond_slave_1\x00', 0x10) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="280000000000000029000000020000006b210acfeda5a0d6c477d874f77fffff17"], 0x28}}], 0x1, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240080c0}, 0x20000080) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@allocspi={0xf8, 0x16, 0x1, 0x70bd26, 0x25dfdbfc, {{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e21, 0x6, 0x4e21, 0x4, 0xa, 0x20, 0x80, 0x3c}, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d3, 0x2b}, @in6=@mcast2, {0x1, 0x9, 0x793, 0x10001, 0x5, 0x8001, 0x7, 0x5}, {0x6, 0x8, 0x4, 0x9}, {0x5, 0x7, 0x6bf4}, 0xff, 0x3503, 0xa, 0x4, 0x2, 0xf0}}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x4008010) 1.686551309s ago: executing program 3 (id=437): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x2a0, 0x208, 0x0, 0x0, 0x98, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@loopback, @remote, 0xffffff00, 0xff000000, 'macvtap0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x2, @multicast2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xff, 0x3, 0x6846b0d72b1eca1a}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x7fff, 0x7, [0x29, 0x26, 0x35, 0xc, 0x15, 0x33, 0x21, 0xf, 0x38, 0x21, 0xa, 0x32, 0x3, 0x1f, 0x14, 0x1b], 0x2, 0xa, 0x85}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x8, 0x3}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0xf}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffdb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="757365722effffe7d365ac5e1b5eb0a5f855cb23ab6f36476d147094bee69cd443047b56be23f9243de99a54e782519b9a2014b5f6d8d86727614255aaad4fd96d196724dc3e2a53228c046f1ae9d74334ac0dd312386c8cb6de625c87294af7f8dfd4631818fa2661b5d7c58563a736dbc1f6dee85c010d50989e0a6cc52102bd2df054784bcf2991b7c276e0c9efe6f9bd73193147c8da2da126bb"], 0x0, 0x0, 0x1) 1.500333888s ago: executing program 3 (id=438): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @loopback, 0xb}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="90ba6e6e06", 0x5}], 0x1) read(r1, &(0x7f0000000f40)=""/4096, 0x1000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x1, 0x383203) close_range(r2, 0xffffffffffffffff, 0x0) 1.065667043s ago: executing program 0 (id=439): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC=r1]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sync() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000280)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) listen(0xffffffffffffffff, 0x3) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000540)={0x3, 0x2, @stop_pts=0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2b) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="806c09ef8390dc04eb686d817c73bcac69eb92f2180aedd05f95d0d5fe8165261a1afa6f3ac83c17d610fc14523b8edd5d028de5424eeba26b6dd239"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) mq_open(&(0x7f0000000480)='.\\\x00\xd5\xf6\t\xcf\xc4Q\xdfx\x8e2\xd4\xe9\xb5\xf5w\x9bP\xbf\xe7\x87\xf0\xe5.\xe7\xa0\x8e\xcd\xe1\x8a3\xbbh5SA,\xd3\xec\",p\x81W\xa8\x83\xec\n\xce\x1c@\xa3!\x03\xbe%J\x92\xa7\xe9\xb2\x9c\xee\x9b\xb8+\xd88\xddw\x97\'\xc5\xads`^\xb7I\\\xcf\xe5\x98\xe4gY\xa9\xf1\x9f\xfe\xe2\x9a~\xd9\xa1\xe4P*U\x91\x1f\'\xa9OE\xb4F\xdfd\xac\\S\xb2\xc0\xc1\xc9M\xfc\x8c\x1d,\xdc\x03\x1d\xdb\xa2N\xd8\xd7\xed\x8b\\T\xe2\x87]\xcfp\x8d}\x17\xe4?\x96H\x8c\x0fA\xfc]?\xa0I\x82\x02\xe7\xaeG\xc2_j\fSy\xb41M}\xd9\xd6\xd4\xd8\x84l3#z\xb7<', 0x40, 0x0, 0x0) 1.060850385s ago: executing program 1 (id=440): r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) fchdir(r1) chroot(&(0x7f0000000300)='.\x00') ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f00000000c0)={0x40, 0xa, &(0x7f0000000040)="391ea0b6056b28f55545e3e7be9fe85f98cc7b2ec55170787497ed73377b9a7f363d843e6c3a35eced26df4c8830ea7196022430a18a8857f265712ffdd9d228387bdc52dcc48ea386ce28ec1085ea8c516a9daffb6ff37fbb7c20344020e02c0edb596c198115909b3f16ba29f702c0c40ab6788d39d1e3f34555cb", {0x3, 0x7, 0x20385655, 0x2, 0xffffffff, 0x8, 0x8, 0xffff}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x24242, 0x4) 942.618081ms ago: executing program 2 (id=441): r0 = socket$inet6(0xa, 0x3, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00005a6000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000247000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000370000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffd30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x14cf, &(0x7f0000000300)={0x0, 0xc8a2, 0xc000, 0x3, 0xc0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0x7, 0x7ffc0401}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r3, &(0x7f0000000040)={0x100}, &(0x7f000009de80), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000007c0)='1', 0x1}], 0x1, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x40054}}], 0x1, 0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="840000000000000014000300697036746e6c30000000000000000000300012800b00010069635d281f6c00002000028008001400ffffffff14008200fe80000000000000e6000000000000aa"], 0x64}, 0x1, 0x0, 0x0, 0x400000c}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='+\x00'}]}, 0x1c}}, 0x0) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000002c0)=[0x0]}) 929.273027ms ago: executing program 1 (id=442): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000140)) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) r5 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0xffffffffffffffff}, {}, 0xfffffffffffffff9, 0xb5ad}) r5 = syz_open_procfs(r4, &(0x7f0000000000)='children\x00') read$hiddev(r5, &(0x7f0000000100)=""/100, 0x64) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000), 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x4b, 0x27, "437207e40200000079e73bfcff270000005cc7ef2eb2a949b826ec5a49e26bd214d991b5bc4efc"}}) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000010000000000", 0x58}], 0x1) 138.442037ms ago: executing program 4 (id=445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x2000000000000000}, 0x2) 0s ago: executing program 4 (id=446): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0xc}, {0x0, 0x24}], 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x5}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20080200015001002c00128008000100677470002000028008000100", @ANYRES32=r3, @ANYBLOB="14000800fe8000000000000000000000000000bb08000a0038"], 0x54}}, 0x24040088) syz_usb_connect(0x3, 0x4f, &(0x7f0000000040)=ANY=[@ANYRES16=r1], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1009}}, {0x9, &(0x7f00000000c0)=@string={0x9, 0x3, "afef01f8f6327d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc2e}}, {0x4e, &(0x7f0000000340)=@string={0x4e, 0x3, "24c4e8ae84ee15d1bd5488f4b968935a250b5142748ade77102116157d631ab5527bea77dab1b1598f553856e00d2c73d01db1cbee92be91796d4228836a93e856331297133f44f298dbaf08"}}, {0xe9, &(0x7f00000003c0)=@string={0xe9, 0x3, "0b5ab4e7abf6ee63ae8323648e9d99897a05ac5ecd2ac423637e60fbdad77604655085f6ac7c7a5ded1df84e9ca5eea2bd7e017e90043839bf49333795693386662bf92fd66ac9145f938857d641af5b3de83261a945703835e20ac863297c02fa8f7d25d92a12bd32390c0e175493e8924cb156c1ea96221f8b3e184dbb8a9a0ecb0bd14b86d6bee16d5191295908beec1bf50f90c74db47983fe0d298aa4be54413bc584217128b90873b32938567521581fc686da787565342434bb2f315387718ed42d8732e277ce0ef691ab64acf7df0856a9e759be864b9d5a9b42a581bc385ca58e4fbd"}}]}) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000540)={0x40c, 0x14, 0x100, 0x70bd2a, 0x25dfdbfe, {0x15, 0xf}, [@INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "824efd8ba6e698effc699113b04f2514a97da1997e927f3d7a0571c99295aceb4d2dcf754e8c2e7a085cb378f28490c429fab605da6015c2aec04c07a7a013e35a9644e73f96b561ca530412a0a2d09a25e42ecdfadf4d89494345de01d6aea248576697d3247ada02e5845448cd6f120217ecfb31e2a08424f05543ac36739d7b4d49158f2f31b94cfa9396e47d0ef8bafaaa60aab21011eb16c33265127d51971a9f75"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "f403b087f1aea74cf1f403741cf129f89e65624cab13d3a8dc3b6eca0cfda15bd485bf23b1508efc8010cd995d4521fbde01923faeda143cf5b259c1060cfcf629fabfd70711c46a44859ec6845f8b61ee16246046085211d3055c9e2c2870c64e6b4a2bc27e28ece1e6e2daf930033bad84ac8cfe2d9c902e1fde89ed332525fb5f2d4118d050dbcb"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "d686779c5603f1c003d22c0a3fb09bb95b3dc66595bd0b32f63b3389fc14b7df5a573c4c60eb03d2ba4e6153610b46b920ae0ef2616a36f91e9915f2100dac3bab2af58c7daf7ada654068fe2c721eaafe1a6701de6f80ac92a2ddfe217ce2100de529b803084c1007b535fab97e1ce2379d99f04780cfe2c073a733060752a85f5142b7290bf0bbd0d695b357b558b7ad19108e1c541ec6fce132b18f222cc328354dfa2458d584492cb164550beb194f8210e4090ebcd0a5e85a5f51a10f63a5dd83b94523a56c5facea065bffe0051ab0abadbeac676d"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "efca98b97d0fdddeabdbe095b75b797806f9321198a992e8d390f4c4e5d5a810597ea8d3b15029891ffa20271602e77a4217956a91854ec80798528f53a767c1e42b922cfb46bb3a3f5a2f81e11a22eb1120716e088b717494817354ccf4d29f854b2aea40a39f4cb764c993e7a1218b1509ef241d7a1c42d874916b1ac814ee21dff605c20714c2c916f17ae173b4824636142085cc899e2d313fd4b0144743c85f28159f709fe9c826485846ccaee109382db49910273c0d07a8cc087754dcd9480cf0c54701b9cf6c10127062e2496e2656be1aca091c12d02eaad7"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "81e823625aa5d7701b0245bcea709958a98e0baaf4caf25d54b05e234c28d9a47f13f759d17f1049a344ee0a857f4b9f1e78a0c02d6ca85bf06351b9be9a01d834a3d8586dfc1086a71da7dbb50d4fa7a39388583a4d8a3ea6c6dd864605a305ac8ff2cc561b186b57ecf1d39031aa79fd76270939622c3c1564bb1353ef4dcef51b958a9f1125af923255e206c5aa478a1782bc6f9d932f3292b033fb64eb8f66c1737e0e02dc47bd755a79afa87c1dbd6b58c520f4bf522404de886b61a18e516ce5b78d70e87fa028121f8efde80d360700dad5e3e7bf5e4b57d95a"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "bfa117734710ca34ea7286d76374f1a4b68266620eee10"}]}, 0x40c}}, 0x40004) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000540)={0x40c, 0x14, 0x100, 0x70bd2a, 0x25dfdbfe, {0x15, 0xf}, [@INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "824efd8ba6e698effc699113b04f2514a97da1997e927f3d7a0571c99295aceb4d2dcf754e8c2e7a085cb378f28490c429fab605da6015c2aec04c07a7a013e35a9644e73f96b561ca530412a0a2d09a25e42ecdfadf4d89494345de01d6aea248576697d3247ada02e5845448cd6f120217ecfb31e2a08424f05543ac36739d7b4d49158f2f31b94cfa9396e47d0ef8bafaaa60aab21011eb16c33265127d51971a9f75"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "f403b087f1aea74cf1f403741cf129f89e65624cab13d3a8dc3b6eca0cfda15bd485bf23b1508efc8010cd995d4521fbde01923faeda143cf5b259c1060cfcf629fabfd70711c46a44859ec6845f8b61ee16246046085211d3055c9e2c2870c64e6b4a2bc27e28ece1e6e2daf930033bad84ac8cfe2d9c902e1fde89ed332525fb5f2d4118d050dbcb"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "d686779c5603f1c003d22c0a3fb09bb95b3dc66595bd0b32f63b3389fc14b7df5a573c4c60eb03d2ba4e6153610b46b920ae0ef2616a36f91e9915f2100dac3bab2af58c7daf7ada654068fe2c721eaafe1a6701de6f80ac92a2ddfe217ce2100de529b803084c1007b535fab97e1ce2379d99f04780cfe2c073a733060752a85f5142b7290bf0bbd0d695b357b558b7ad19108e1c541ec6fce132b18f222cc328354dfa2458d584492cb164550beb194f8210e4090ebcd0a5e85a5f51a10f63a5dd83b94523a56c5facea065bffe0051ab0abadbeac676d"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "efca98b97d0fdddeabdbe095b75b797806f9321198a992e8d390f4c4e5d5a810597ea8d3b15029891ffa20271602e77a4217956a91854ec80798528f53a767c1e42b922cfb46bb3a3f5a2f81e11a22eb1120716e088b717494817354ccf4d29f854b2aea40a39f4cb764c993e7a1218b1509ef241d7a1c42d874916b1ac814ee21dff605c20714c2c916f17ae173b4824636142085cc899e2d313fd4b0144743c85f28159f709fe9c826485846ccaee109382db49910273c0d07a8cc087754dcd9480cf0c54701b9cf6c10127062e2496e2656be1aca091c12d02eaad7"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "81e823625aa5d7701b0245bcea709958a98e0baaf4caf25d54b05e234c28d9a47f13f759d17f1049a344ee0a857f4b9f1e78a0c02d6ca85bf06351b9be9a01d834a3d8586dfc1086a71da7dbb50d4fa7a39388583a4d8a3ea6c6dd864605a305ac8ff2cc561b186b57ecf1d39031aa79fd76270939622c3c1564bb1353ef4dcef51b958a9f1125af923255e206c5aa478a1782bc6f9d932f3292b033fb64eb8f66c1737e0e02dc47bd755a79afa87c1dbd6b58c520f4bf522404de886b61a18e516ce5b78d70e87fa028121f8efde80d360700dad5e3e7bf5e4b57d95a"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "bfa117734710ca34ea7286d76374f1a4b68266620eee10"}]}, 0x40c}}, 0x40004) kernel console output (not intermixed with test programs): [ 85.365930][ T5706] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 85.416162][ T5706] usb 3-1: USB disconnect, device number 3 [ 85.461719][ T5842] fuse: Invalid rootmode [ 85.503806][ T809] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.539029][ T5845] netlink: 'syz.1.34': attribute type 3 has an invalid length. [ 85.605825][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 85.618622][ T5843] binder: BINDER_SET_CONTEXT_MGR already set [ 85.625092][ T5843] binder: 5838:5843 ioctl 4018620d 2000000004c0 returned -16 [ 85.704416][ T809] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1927, setting to 1024 [ 85.723760][ T5849] netlink: 'syz.1.35': attribute type 1 has an invalid length. [ 85.731915][ T809] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 85.751905][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 85.763667][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.792742][ T809] usb 4-1: Product: 䪓崙⌄áŸä±£æ™Œá­žê¤±ì½¸ë¿‹ì€†î‚Ⱄ祖鴥秒綴䎱酅꽴繧癨Ⱇ죷î†è³±ïŸŠê«°å¾†ë‘”ᤧދ氇႔攺忣⾣떯渉ìŠå´±å°›à£«ä“๨м쵴휢猪士鼔ෳ⎛숲몌雭è»å•žáº„忇ꨲ캙í´æ¼­ä±éˆ—夊⥩í•í„‹ï¶¬Öšá¶¡ë‹‡á°™èš§èŽå½˜ì¢¬ä¦ˆíœ‰å•¤åœ€ê»íŸ£à¶Ÿíž–뚇뀤äé´çµ¸åš™é™“稲⦄栙议ੳ磡些龾塞佨ᙸ∿ᗸ곷' [ 85.875606][ T809] usb 4-1: Manufacturer: Т [ 85.889365][ T809] usb 4-1: SerialNumber: syz [ 86.121093][ T5834] xt_SECMARK: invalid mode: 2 [ 86.131873][ T809] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 86.270717][ T809] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 86.280974][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.443416][ T809] usb 4-1: USB disconnect, device number 4 [ 86.479563][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.516168][ T5862] fuse: Unknown parameter 'bd' [ 86.537688][ T10] usb 3-1: config 1 has an invalid descriptor of length 125, skipping remainder of the config [ 86.597000][ T5866] netlink: 64 bytes leftover after parsing attributes in process `syz.1.40'. [ 86.620626][ T5866] syzkaller1: entered promiscuous mode [ 86.627533][ T5866] syzkaller1: entered allmulticast mode [ 86.637547][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.655095][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.695492][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.722004][ T10] usb 3-1: SerialNumber: syz [ 86.994665][ T10] usb 3-1: 0:2 : does not exist [ 87.019674][ T10] usb 3-1: unit 5 not found! [ 87.063862][ T5872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 87.252628][ T10] usb 3-1: USB disconnect, device number 4 [ 87.397408][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.450067][ T5882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.45'. [ 87.476394][ T5869] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.614945][ T5888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.46'. [ 87.648297][ T5888] bond_slave_1: entered promiscuous mode [ 87.657460][ T5888] bond_slave_1: entered allmulticast mode [ 87.753262][ T5699] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.857267][ T5900] fuse: Invalid rootmode [ 87.881454][ T5899] kvm: pic: non byte write [ 87.915310][ T5899] netlink: 72 bytes leftover after parsing attributes in process `syz.2.48'. [ 87.927347][ T5699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.942078][ T5699] usb 1-1: config 3 has an invalid interface number: 4 but max is 0 [ 87.954528][ T5699] usb 1-1: config 3 has no interface number 0 [ 87.960794][ T5699] usb 1-1: config 3 interface 4 altsetting 184 endpoint 0x5 has invalid maxpacket 52204, setting to 64 [ 87.984805][ T5908] program syz.1.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.999524][ T5699] usb 1-1: config 3 interface 4 has no altsetting 0 [ 88.015099][ T5699] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=7a.1f [ 88.034280][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.048766][ T5699] usb 1-1: Product: syz [ 88.055058][ T5699] usb 1-1: Manufacturer: syz [ 88.061196][ T5699] usb 1-1: SerialNumber: syz [ 88.194737][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'. [ 88.302738][ T5699] radio-si470x 1-1:3.4: could not find interrupt in endpoint [ 88.327524][ T5699] radio-si470x 1-1:3.4: probe with driver radio-si470x failed with error -5 [ 88.350084][ T5699] usbhid 1-1:3.4: couldn't find an input interrupt endpoint [ 88.387394][ T5699] usb 1-1: USB disconnect, device number 4 [ 88.644080][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.651607][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.710705][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 88.799371][ T5925] No such timeout policy "syz0" [ 88.950977][ T5921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.999011][ T5921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.267784][ T5932] netlink: 'syz.4.59': attribute type 1 has an invalid length. [ 89.449025][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.466582][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.474962][ T5936] binder: 5933:5936 ioctl 125e 2000000001c0 returned -22 [ 89.504718][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.524107][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.703242][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.719570][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.800049][ T5949] FAULT_INJECTION: forcing a failure. [ 89.800049][ T5949] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.814021][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: syz.3.63 Not tainted syzkaller #0 PREEMPT(full) [ 89.814045][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.814054][ T5949] Call Trace: [ 89.814061][ T5949] [ 89.814068][ T5949] dump_stack_lvl+0xe8/0x150 [ 89.814093][ T5949] should_fail_ex+0x412/0x560 [ 89.814118][ T5949] _copy_from_user+0x2d/0xb0 [ 89.814141][ T5949] ucma_bind_ip+0xb5/0x410 [ 89.814167][ T5949] ? __pfx_ucma_bind_ip+0x10/0x10 [ 89.814203][ T5949] ucma_write+0x24e/0x2f0 [ 89.814224][ T5949] ? __pfx_ucma_write+0x10/0x10 [ 89.814243][ T5949] ? security_file_permission+0x75/0x260 [ 89.814261][ T5949] ? rw_verify_area+0x255/0x4d0 [ 89.814295][ T5949] vfs_writev+0x4bd/0x990 [ 89.814315][ T5949] ? __pfx_ucma_write+0x10/0x10 [ 89.814339][ T5949] ? __pfx_vfs_writev+0x10/0x10 [ 89.814369][ T5949] ? __fget_files+0x2a/0x420 [ 89.814392][ T5949] ? __fget_files+0x3a0/0x420 [ 89.814410][ T5949] ? __fget_files+0x2a/0x420 [ 89.814438][ T5949] do_writev+0x154/0x2e0 [ 89.814458][ T5949] ? __pfx_do_writev+0x10/0x10 [ 89.814484][ T5949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.814502][ T5949] do_syscall_64+0x15f/0xf80 [ 89.814525][ T5949] ? trace_irq_disable+0x3b/0x140 [ 89.814547][ T5949] ? clear_bhb_loop+0x40/0x90 [ 89.814566][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.814581][ T5949] RIP: 0033:0x7ff59ef9ce59 [ 89.814595][ T5949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.814606][ T5949] RSP: 002b:00007ff59fefb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 89.814622][ T5949] RAX: ffffffffffffffda RBX: 00007ff59f215fa0 RCX: 00007ff59ef9ce59 [ 89.814632][ T5949] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 89.814642][ T5949] RBP: 00007ff59fefb090 R08: 0000000000000000 R09: 0000000000000000 [ 89.814651][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.814660][ T5949] R13: 00007ff59f216038 R14: 00007ff59f215fa0 R15: 00007ff59f33fa48 [ 89.814686][ T5949] [ 90.132165][ T5951] syzkaller1: entered promiscuous mode [ 90.157148][ T5951] syzkaller1: entered allmulticast mode [ 90.261893][ T5958] fuse: Invalid rootmode [ 90.288329][ T5956] team0: left promiscuous mode [ 90.294208][ T5956] team_slave_0: left promiscuous mode [ 90.303971][ T5956] team_slave_1: left promiscuous mode [ 90.326983][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.381643][ T5956] bond_slave_1: left promiscuous mode [ 90.963226][ T5699] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 91.116042][ T5699] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 91.131197][ T5699] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.150056][ T5978] capability: warning: `syz.3.71' uses deprecated v2 capabilities in a way that may be insecure [ 91.164984][ T5699] usb 2-1: config 0 has no interface number 0 [ 91.183804][ T5699] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 91.214566][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.228165][ T5699] usb 2-1: Product: syz [ 91.239431][ T5699] usb 2-1: Manufacturer: syz [ 91.256507][ T5699] usb 2-1: SerialNumber: syz [ 91.290475][ T5699] usb 2-1: config 0 descriptor?? [ 91.308442][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 91.312322][ T5699] cx231xx 2-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 91.327098][ T5699] cx231xx 2-1:0.1: Not found matching IAD interface [ 91.327161][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.73'. [ 91.363462][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73'. [ 91.460079][ T3312] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.488454][ T3312] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.508168][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.72'. [ 91.520838][ T3312] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.536940][ T5699] usb 2-1: USB disconnect, device number 3 [ 91.547448][ T3312] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.715109][ T5985] fuse: Bad value for 'fd' [ 91.793174][ T29] cfg80211: failed to load regulatory.db [ 91.873262][ T5714] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.893223][ T809] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.045681][ T5714] usb 4-1: Using ep0 maxpacket: 8 [ 92.054602][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 92.063991][ T5714] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.079496][ T5714] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.084938][ T809] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 92.110048][ T809] usb 3-1: config 2 has no interface number 0 [ 92.120993][ T5714] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 92.143599][ T809] usb 3-1: config 2 interface 88 has no altsetting 0 [ 92.164217][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.175196][ T809] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 92.203052][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.211437][ T5714] usb 4-1: Product: syz [ 92.230380][ T5714] usb 4-1: Manufacturer: syz [ 92.236579][ T809] usb 3-1: Product: syz [ 92.246596][ T5714] usb 4-1: SerialNumber: syz [ 92.259101][ T809] usb 3-1: Manufacturer: syz [ 92.292927][ T809] usb 3-1: SerialNumber: syz [ 92.514756][ T809] asix 3-1:2.88: probe with driver asix failed with error -71 [ 92.584382][ T809] usb 3-1: USB disconnect, device number 5 [ 92.642365][ T5714] usb 4-1: USB disconnect, device number 5 [ 92.778079][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.944896][ T6008] FAULT_INJECTION: forcing a failure. [ 92.944896][ T6008] name failslab, interval 1, probability 0, space 0, times 1 [ 92.960937][ T6008] CPU: 0 UID: 0 PID: 6008 Comm: syz.4.80 Not tainted syzkaller #0 PREEMPT(full) [ 92.960961][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.960971][ T6008] Call Trace: [ 92.960977][ T6008] [ 92.960984][ T6008] dump_stack_lvl+0xe8/0x150 [ 92.961010][ T6008] should_fail_ex+0x412/0x560 [ 92.961039][ T6008] should_failslab+0xa8/0x100 [ 92.961067][ T6008] __kmalloc_cache_noprof+0x88/0x660 [ 92.961090][ T6008] ? __asan_memset+0x22/0x50 [ 92.961109][ T6008] ? alloc_netdev_mqs+0xc51/0x1210 [ 92.961126][ T6008] ? __kmalloc_cache_noprof+0x15b/0x660 [ 92.961153][ T6008] alloc_netdev_mqs+0xc51/0x1210 [ 92.961179][ T6008] rtnl_create_link+0x31f/0xd70 [ 92.961204][ T6008] rtnl_newlink_create+0x277/0xb70 [ 92.961229][ T6008] ? __pfx___nla_validate_parse+0x10/0x10 [ 92.961267][ T6008] ? __mutex_lock+0x608/0x1550 [ 92.961285][ T6008] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 92.961313][ T6008] ? __pfx___mutex_lock+0x10/0x10 [ 92.961340][ T6008] ? ns_capable+0x89/0xe0 [ 92.961362][ T6008] rtnl_newlink+0x166a/0x1bb0 [ 92.961400][ T6008] ? __pfx_rtnl_newlink+0x10/0x10 [ 92.961420][ T6008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.961474][ T6008] ? kasan_quarantine_put+0xbb/0x1f0 [ 92.961496][ T6008] ? lockdep_hardirqs_on+0x7a/0x110 [ 92.961524][ T6008] ? nlmon_xmit+0xb0/0x100 [ 92.961544][ T6008] ? kmem_cache_free+0x182/0x650 [ 92.961577][ T6008] ? __lock_acquire+0x6b5/0x2cf0 [ 92.961601][ T6008] ? __dev_queue_xmit+0x2b6/0x3950 [ 92.961621][ T6008] ? __local_bh_enable_ip+0xd0/0x130 [ 92.961639][ T6008] ? lockdep_hardirqs_on+0x7a/0x110 [ 92.961662][ T6008] ? __dev_queue_xmit+0x2b6/0x3950 [ 92.961677][ T6008] ? __local_bh_enable_ip+0xd0/0x130 [ 92.961693][ T6008] ? __dev_queue_xmit+0x2b6/0x3950 [ 92.961716][ T6008] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 92.961754][ T6008] ? __pfx_rtnl_newlink+0x10/0x10 [ 92.961775][ T6008] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 92.961801][ T6008] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 92.961822][ T6008] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.961841][ T6008] ? ref_tracker_free+0x693/0x840 [ 92.961867][ T6008] ? __pfx_ref_tracker_free+0x10/0x10 [ 92.961900][ T6008] netlink_rcv_skb+0x232/0x4b0 [ 92.961926][ T6008] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.961950][ T6008] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.961987][ T6008] ? netlink_deliver_tap+0x2e/0x1b0 [ 92.962009][ T6008] ? netlink_deliver_tap+0x2e/0x1b0 [ 92.962038][ T6008] netlink_unicast+0x75c/0x8e0 [ 92.962072][ T6008] netlink_sendmsg+0x813/0xb40 [ 92.962105][ T6008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.962132][ T6008] ? aa_sock_msg_perm+0xf1/0x1b0 [ 92.962156][ T6008] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 92.962180][ T6008] ____sys_sendmsg+0x972/0x9f0 [ 92.962205][ T6008] ? __might_fault+0xaf/0x130 [ 92.962233][ T6008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.962272][ T6008] ? import_iovec+0x73/0xa0 [ 92.962300][ T6008] ___sys_sendmsg+0x2a5/0x360 [ 92.962323][ T6008] ? __lock_acquire+0x6b5/0x2cf0 [ 92.962346][ T6008] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.962404][ T6008] ? __fget_files+0x2a/0x420 [ 92.962422][ T6008] ? __fget_files+0x3a0/0x420 [ 92.962443][ T6008] __x64_sys_sendmsg+0x1bd/0x2a0 [ 92.962459][ T6008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 92.962477][ T6008] ? __pfx_ksys_write+0x10/0x10 [ 92.962495][ T6008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.962505][ T6008] do_syscall_64+0x15f/0xf80 [ 92.962519][ T6008] ? trace_irq_disable+0x3b/0x140 [ 92.962533][ T6008] ? clear_bhb_loop+0x40/0x90 [ 92.962545][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.962554][ T6008] RIP: 0033:0x7f796299ce59 [ 92.962565][ T6008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.962572][ T6008] RSP: 002b:00007f79638a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.962583][ T6008] RAX: ffffffffffffffda RBX: 00007f7962c15fa0 RCX: 00007f796299ce59 [ 92.962590][ T6008] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 92.962595][ T6008] RBP: 00007f79638a3090 R08: 0000000000000000 R09: 0000000000000000 [ 92.962601][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.962606][ T6008] R13: 00007f7962c16038 R14: 00007f7962c15fa0 R15: 00007f7962d3fa48 [ 92.962621][ T6008] [ 93.532020][ T6010] fuse: Bad value for 'rootmode' [ 93.923705][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 94.067110][ T6032] program syz.3.87 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.084748][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 94.102982][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 94.123977][ T6032] mmap: syz.3.87 (6032) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.139716][ T5714] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.154675][ T24] usb 3-1: config 0 has no interface number 0 [ 94.166167][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 94.180165][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.191123][ T24] usb 3-1: Product: syz [ 94.224915][ T24] usb 3-1: Manufacturer: syz [ 94.239945][ T24] usb 3-1: SerialNumber: syz [ 94.262047][ T24] usb 3-1: config 0 descriptor?? [ 94.285296][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 94.313269][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 94.321062][ T5714] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 94.330460][ T5714] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 94.355954][ T5714] usb 2-1: config 0 has no interface number 0 [ 94.362550][ T5714] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 94.386814][ T5714] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 94.400542][ T5714] usb 2-1: config 0 interface 255 has no altsetting 0 [ 94.445052][ T5714] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 94.454729][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.467844][ T5714] usb 2-1: Product: syz [ 94.478267][ T5714] usb 2-1: Manufacturer: syz [ 94.486810][ T5714] usb 2-1: SerialNumber: syz [ 94.501953][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 94.520994][ T5714] usb 2-1: config 0 descriptor?? [ 94.567775][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 94.726625][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 41 [ 94.783283][ T5714] usb 2-1: USB disconnect, device number 4 [ 95.135368][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 95.135923][ T10] usb 3-1: USB disconnect, device number 6 [ 95.193226][ T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 95.197208][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 95.248101][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 95.304993][ T10] quatech2 3-1:0.51: device disconnected [ 95.353198][ T24] usb 5-1: device descriptor read/64, error -71 [ 95.603297][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 95.773293][ T24] usb 5-1: device descriptor read/64, error -71 [ 95.793244][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.893477][ T24] usb usb5-port1: attempt power cycle [ 95.923343][ T5714] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 95.963288][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 95.976675][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.005335][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.018774][ T5699] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 96.041503][ T10] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 96.066390][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.083252][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 96.096190][ T10] usb 2-1: Product: syz [ 96.097398][ T5714] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.121684][ T10] usb 2-1: Manufacturer: syz [ 96.122034][ T5714] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.139864][ T5714] usb 4-1: config 0 interface 0 has no altsetting 0 [ 96.140831][ T10] usb 2-1: SerialNumber: syz [ 96.163229][ T5714] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 96.175453][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.200172][ T5699] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 96.221089][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.246048][ T5714] usb 4-1: config 0 descriptor?? [ 96.254072][ T24] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 96.268054][ T5699] usb 3-1: Product: syz [ 96.285681][ T5699] usb 3-1: Manufacturer: syz [ 96.297980][ T5699] usb 3-1: SerialNumber: syz [ 96.311770][ T24] usb 5-1: device descriptor read/8, error -71 [ 96.553576][ T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 96.586055][ T10] usb 2-1: USB disconnect, device number 5 [ 96.615493][ T30] audit: type=1326 audit(1779165796.671:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.3.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ef9ce59 code=0x7ffc0000 [ 96.657908][ T24] usb 5-1: device descriptor read/8, error -71 [ 96.664862][ T30] audit: type=1326 audit(1779165796.671:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.3.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ef9ce59 code=0x7ffc0000 [ 96.689915][ T30] audit: type=1326 audit(1779165796.671:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.3.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ef9ce59 code=0x7ffc0000 [ 96.736251][ T5699] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 96.771263][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.790765][ T24] usb usb5-port1: unable to enumerate USB device [ 96.794537][ T5699] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 96.809222][ T30] audit: type=1326 audit(1779165796.671:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.3.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff59ef9ce59 code=0x7ffc0000 [ 96.923380][ T30] audit: type=1326 audit(1779165796.671:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.3.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ef9ce59 code=0x7ffc0000 [ 96.941796][ T6071] syzkaller1: entered promiscuous mode [ 96.991242][ T6071] syzkaller1: entered allmulticast mode [ 97.064638][ T30] audit: type=1326 audit(1779165796.811:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.3.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ef9ce59 code=0x7ffc0000 [ 97.161779][ T30] audit: type=1326 audit(1779165796.811:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.3.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ef9ce59 code=0x7ffc0000 [ 97.217520][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 97.241092][ T30] audit: type=1326 audit(1779165796.811:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.3.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff59ef9ce59 code=0x7ffc0000 [ 97.332226][ T30] audit: type=1326 audit(1779165796.811:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.3.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ef9ce59 code=0x7ffc0000 [ 97.397189][ T30] audit: type=1326 audit(1779165796.811:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.3.94" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ef9ce59 code=0x7ffc0000 [ 97.533023][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.559727][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.668657][ T5714] usbhid 4-1:0.0: can't add hid device: -71 [ 97.689314][ T5714] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 97.765944][ T5714] usb 4-1: USB disconnect, device number 6 [ 97.898491][ T6081] fuse: Bad value for 'rootmode' [ 98.506613][ T6061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.533712][ T6061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.829809][ T6094] netlink: 32 bytes leftover after parsing attributes in process `syz.4.105'. [ 98.889189][ T6096] warning: `syz.3.103' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.243974][ T5699] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 99.259232][ T5699] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 99.269645][ T5699] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 99.280771][ T5699] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 99.295644][ T5699] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 99.314340][ T5699] usb 3-1: USB disconnect, device number 7 [ 99.320311][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 99.409587][ T6114] FAULT_INJECTION: forcing a failure. [ 99.409587][ T6114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.424040][ T6114] CPU: 0 UID: 0 PID: 6114 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT(full) [ 99.424064][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.424074][ T6114] Call Trace: [ 99.424081][ T6114] [ 99.424088][ T6114] dump_stack_lvl+0xe8/0x150 [ 99.424113][ T6114] should_fail_ex+0x412/0x560 [ 99.424139][ T6114] _copy_from_user+0x2d/0xb0 [ 99.424165][ T6114] ___sys_sendmsg+0x1c6/0x360 [ 99.424188][ T6114] ? __lock_acquire+0x6b5/0x2cf0 [ 99.424209][ T6114] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.424233][ T6114] ? kstrtouint+0x6e/0xe0 [ 99.424270][ T6114] ? __fget_files+0x2a/0x420 [ 99.424288][ T6114] ? __fget_files+0x3a0/0x420 [ 99.424315][ T6114] __sys_sendmmsg+0x27c/0x4e0 [ 99.424343][ T6114] ? __pfx___sys_sendmmsg+0x10/0x10 [ 99.424364][ T6114] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 99.424403][ T6114] ? ksys_write+0x242/0x270 [ 99.424433][ T6114] ? __pfx_ksys_write+0x10/0x10 [ 99.424461][ T6114] __x64_sys_sendmmsg+0xa0/0xc0 [ 99.424485][ T6114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.424503][ T6114] do_syscall_64+0x15f/0xf80 [ 99.424526][ T6114] ? trace_irq_disable+0x3b/0x140 [ 99.424549][ T6114] ? clear_bhb_loop+0x40/0x90 [ 99.424570][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.424586][ T6114] RIP: 0033:0x7ff59ef9ce59 [ 99.424603][ T6114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.424622][ T6114] RSP: 002b:00007ff59fefb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 99.424641][ T6114] RAX: ffffffffffffffda RBX: 00007ff59f215fa0 RCX: 00007ff59ef9ce59 [ 99.424653][ T6114] RDX: 0000000000000001 RSI: 00002000000020c0 RDI: 0000000000000003 [ 99.424663][ T6114] RBP: 00007ff59fefb090 R08: 0000000000000000 R09: 0000000000000000 [ 99.424673][ T6114] R10: 00000000040080e5 R11: 0000000000000246 R12: 0000000000000001 [ 99.424683][ T6114] R13: 00007ff59f216038 R14: 00007ff59f215fa0 R15: 00007ff59f33fa48 [ 99.424711][ T6114] [ 99.631581][ T5714] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.693373][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 99.700022][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.727823][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.739234][ T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 99.748199][ T6120] fuse: Bad value for 'rootmode' [ 99.749947][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.763191][ T9] usb 2-1: Product: syz [ 99.767375][ T9] usb 2-1: Manufacturer: syz [ 99.772487][ T9] usb 2-1: SerialNumber: syz [ 99.772677][ T6118] ip6gre2: entered promiscuous mode [ 99.788296][ T6118] ip6gre2: entered allmulticast mode [ 99.793776][ T5714] usb 5-1: Using ep0 maxpacket: 32 [ 99.807372][ T5714] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 99.815641][ T5714] usb 5-1: config 0 has no interface number 0 [ 99.824300][ T5714] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 99.833672][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.844302][ T5714] usb 5-1: Product: syz [ 99.849514][ T5714] usb 5-1: Manufacturer: syz [ 99.876933][ T5714] usb 5-1: SerialNumber: syz [ 99.890558][ T5714] usb 5-1: config 0 descriptor?? [ 99.900535][ T5714] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 100.116818][ T9] usb 2-1: USB disconnect, device number 6 [ 100.126145][ T5714] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 100.162198][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.231346][ T5714] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 100.311665][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 41 [ 100.449161][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.461045][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.743393][ T5714] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 100.775450][ T29] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 100.820136][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 100.830406][ T5706] usb 5-1: USB disconnect, device number 7 [ 100.859819][ T5706] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 100.925592][ T5706] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 100.936974][ T29] usb 4-1: device descriptor read/64, error -71 [ 100.958696][ T5706] quatech2 5-1:0.51: device disconnected [ 100.988984][ T5714] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.003536][ T5714] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.031683][ T5714] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.031739][ T5714] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 101.040943][ T5714] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.040969][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.040980][ T5714] usb 3-1: Product: syz [ 101.040988][ T5714] usb 3-1: Manufacturer: syz [ 101.062564][ T5714] cdc_wdm 3-1:1.0: skipping garbage [ 101.062579][ T5714] cdc_wdm 3-1:1.0: skipping garbage [ 101.062591][ T5714] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 101.207191][ T29] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 101.262899][ T5699] usb 3-1: USB disconnect, device number 8 [ 101.338785][ T29] usb 4-1: device descriptor read/64, error -71 [ 101.447652][ T29] usb usb4-port1: attempt power cycle [ 101.844210][ T29] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 101.880664][ T6159] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 101.924567][ T29] usb 4-1: device descriptor read/8, error -71 [ 102.204055][ T29] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 102.255115][ T29] usb 4-1: device descriptor read/8, error -71 [ 102.397421][ T29] usb usb4-port1: unable to enumerate USB device [ 102.683420][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.853373][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 102.867368][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.888428][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.930044][ T9] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 102.950472][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.976515][ T9] usb 5-1: Product: syz [ 102.989287][ T9] usb 5-1: Manufacturer: syz [ 103.004292][ T9] usb 5-1: SerialNumber: syz [ 103.057797][ T6177] fuse: Unknown parameter 'use00000000000000000000' [ 103.389650][ T9] usb 5-1: USB disconnect, device number 8 [ 103.544475][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.665361][ T29] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 103.813217][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 103.824889][ T29] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 103.834264][ T29] usb 4-1: config 0 has no interface number 0 [ 103.852146][ T29] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 103.867228][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.893237][ T29] usb 4-1: Product: syz [ 103.909318][ T29] usb 4-1: Manufacturer: syz [ 103.928387][ T29] usb 4-1: SerialNumber: syz [ 103.981317][ T29] usb 4-1: config 0 descriptor?? [ 104.023884][ T29] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 104.056709][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 104.210208][ T29] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 104.227746][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.235326][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.256584][ T29] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 104.410205][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 41 [ 104.508093][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.521686][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.685697][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.702368][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.778451][ T6201] tipc: Started in network mode [ 104.786422][ T6201] tipc: Node identity ae43e9083bc7, cluster identity 4711 [ 104.802823][ T6201] tipc: Enabled bearer , priority 0 [ 104.817868][ T6204] syzkaller0: entered promiscuous mode [ 104.832250][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 104.832837][ T5699] usb 4-1: USB disconnect, device number 11 [ 104.854439][ T6204] syzkaller0: entered allmulticast mode [ 104.875662][ T5699] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 104.899339][ T6209] tipc: Resetting bearer [ 104.913071][ T5699] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 104.933247][ T150] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.934655][ T5699] quatech2 4-1:0.51: device disconnected [ 104.969885][ T150] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.009722][ T6198] tipc: Resetting bearer [ 105.036018][ T6198] tipc: Disabling bearer [ 105.059826][ T150] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.079033][ T150] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.166547][ T6214] netlink: 88 bytes leftover after parsing attributes in process `syz.2.140'. [ 105.219839][ T6214] input: syz1 as /devices/virtual/input/input6 [ 105.365520][ T6219] xt_connbytes: Forcing CT accounting to be enabled [ 105.473934][ T6219] xt_CT: No such helper "snmp" [ 105.596396][ T6232] fuse: Unknown parameter 'use00000000000000000000' [ 105.723270][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 105.755438][ T6233] sctp: [Deprecated]: syz.1.146 (pid 6233) Use of int in max_burst socket option. [ 105.755438][ T6233] Use struct sctp_assoc_value instead [ 105.879475][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.898143][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.914450][ T9] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 105.924086][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.932182][ T9] usb 4-1: Product: syz [ 105.937553][ T9] usb 4-1: Manufacturer: syz [ 105.942234][ T9] usb 4-1: SerialNumber: syz [ 105.959014][ T9] usb 4-1: config 0 descriptor?? [ 105.993327][ T6240] FAULT_INJECTION: forcing a failure. [ 105.993327][ T6240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.006802][ T6240] CPU: 1 UID: 0 PID: 6240 Comm: syz.0.148 Not tainted syzkaller #0 PREEMPT(full) [ 106.006823][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.006833][ T6240] Call Trace: [ 106.006840][ T6240] [ 106.006847][ T6240] dump_stack_lvl+0xe8/0x150 [ 106.006872][ T6240] should_fail_ex+0x412/0x560 [ 106.006899][ T6240] _copy_to_user+0x31/0xb0 [ 106.006925][ T6240] copy_siginfo_to_user+0x22/0xc0 [ 106.006944][ T6240] x64_setup_rt_frame+0x77b/0xcb0 [ 106.006987][ T6240] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 106.007020][ T6240] arch_do_signal_or_restart+0x442/0x840 [ 106.007048][ T6240] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 106.007087][ T6240] exit_to_user_mode_loop+0x8c/0x4d0 [ 106.007103][ T6240] ? rcu_is_watching+0x15/0xb0 [ 106.007124][ T6240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.007142][ T6240] do_syscall_64+0x33e/0xf80 [ 106.007165][ T6240] ? trace_irq_disable+0x3b/0x140 [ 106.007187][ T6240] ? clear_bhb_loop+0x40/0x90 [ 106.007207][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.007223][ T6240] RIP: 0033:0x7f9ad159ce57 [ 106.007238][ T6240] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 106.007250][ T6240] RSP: 002b:00007f9ad23ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 106.007267][ T6240] RAX: 000000000000002f RBX: 00007f9ad1815fa0 RCX: 00007f9ad159ce59 [ 106.007278][ T6240] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000007 [ 106.007287][ T6240] RBP: 00007f9ad23ab090 R08: 0000000000000000 R09: 0000000000000000 [ 106.007295][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.007304][ T6240] R13: 00007f9ad1816038 R14: 00007f9ad1815fa0 R15: 00007f9ad193fa48 [ 106.007331][ T6240] [ 106.215602][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.230286][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.279261][ T1223] usb 4-1: USB disconnect, device number 12 [ 106.386946][ T6251] syzkaller1: entered promiscuous mode [ 106.389251][ T5714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.420296][ T5714] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.457913][ T6254] FAULT_INJECTION: forcing a failure. [ 106.457913][ T6254] name failslab, interval 1, probability 0, space 0, times 0 [ 106.489598][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz.0.152 Not tainted syzkaller #0 PREEMPT(full) [ 106.489622][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.489632][ T6254] Call Trace: [ 106.489654][ T6254] [ 106.489662][ T6254] dump_stack_lvl+0xe8/0x150 [ 106.489687][ T6254] should_fail_ex+0x412/0x560 [ 106.489715][ T6254] should_failslab+0xa8/0x100 [ 106.489742][ T6254] __kmalloc_noprof+0xe8/0x760 [ 106.489764][ T6254] ? usb_hcd_submit_urb+0x790/0x1b70 [ 106.489788][ T6254] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.489814][ T6254] usb_hcd_submit_urb+0x790/0x1b70 [ 106.489846][ T6254] usbfs_start_wait_urb+0x166/0x470 [ 106.489868][ T6254] ? __pfx_usbfs_start_wait_urb+0x10/0x10 [ 106.489895][ T6254] ? snoop_urb+0x32/0x200 [ 106.489921][ T6254] do_proc_control+0x7d6/0xe40 [ 106.489952][ T6254] proc_control+0xd6/0x130 [ 106.489975][ T6254] ? __pfx_proc_control+0x10/0x10 [ 106.490011][ T6254] usbdev_ioctl+0xc3d/0x2120 [ 106.490042][ T6254] ? __pfx_usbdev_ioctl+0x10/0x10 [ 106.490063][ T6254] ? __fget_files+0x2a/0x420 [ 106.490082][ T6254] ? __fget_files+0x3a0/0x420 [ 106.490101][ T6254] ? __fget_files+0x2a/0x420 [ 106.490122][ T6254] ? bpf_lsm_file_ioctl+0x9/0x20 [ 106.490146][ T6254] ? __pfx_usbdev_ioctl+0x10/0x10 [ 106.490170][ T6254] __se_sys_ioctl+0xfc/0x170 [ 106.490194][ T6254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.490212][ T6254] do_syscall_64+0x15f/0xf80 [ 106.490235][ T6254] ? trace_irq_disable+0x3b/0x140 [ 106.490260][ T6254] ? clear_bhb_loop+0x40/0x90 [ 106.490280][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.490296][ T6254] RIP: 0033:0x7f9ad159ce59 [ 106.490313][ T6254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.490326][ T6254] RSP: 002b:00007f9ad23ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.490347][ T6254] RAX: ffffffffffffffda RBX: 00007f9ad1815fa0 RCX: 00007f9ad159ce59 [ 106.490359][ T6254] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000004 [ 106.490370][ T6254] RBP: 00007f9ad23ab090 R08: 0000000000000000 R09: 0000000000000000 [ 106.490379][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.490389][ T6254] R13: 00007f9ad1816038 R14: 00007f9ad1815fa0 R15: 00007f9ad193fa48 [ 106.490417][ T6254] [ 106.973434][ T1223] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 107.033662][ T6269] netlink: 'syz.0.159': attribute type 10 has an invalid length. [ 107.077545][ T6269] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 107.150446][ T1223] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 107.159229][ T6269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.180724][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.229547][ T6269] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.238996][ T1223] usb 4-1: config 0 descriptor?? [ 107.260421][ T1223] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 107.276940][ T6269] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 107.318421][ T6269] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 107.347986][ T6269] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 107.367291][ T6280] netlink: 56 bytes leftover after parsing attributes in process `syz.2.160'. [ 107.379659][ T5714] bond_slave_0: entered promiscuous mode [ 107.386172][ T5714] bond_slave_1: entered promiscuous mode [ 107.391864][ T5714] syz_tun: entered promiscuous mode [ 107.473776][ T6283] netlink: 104 bytes leftover after parsing attributes in process `syz.1.162'. [ 107.674851][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.151'. [ 107.701816][ T1223] gp8psk: usb in 128 operation failed. [ 107.726588][ T1223] gp8psk: usb in 137 operation failed. [ 107.742213][ T1223] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 107.760072][ T1223] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 107.796738][ T1223] usb 4-1: USB disconnect, device number 13 [ 108.504985][ T6304] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.168'. [ 109.152178][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 109.458073][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.465539][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.590977][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.615066][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.738763][ T6285] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.753805][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.766724][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.819171][ T3312] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.838478][ T3312] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.865289][ T3312] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.914292][ T3312] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.948597][ T3312] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.985383][ T3312] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.011144][ T3312] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.032129][ T3312] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.555673][ T809] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.726725][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 110.738726][ T809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.749187][ T809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.770835][ T809] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.780506][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.789331][ T809] usb 1-1: Product: syz [ 110.793647][ T809] usb 1-1: Manufacturer: syz [ 110.798323][ T809] usb 1-1: SerialNumber: syz [ 110.832980][ T809] usb 1-1: 0:2 : does not exist [ 111.048147][ T809] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 111.131562][ T809] usb 1-1: USB disconnect, device number 5 [ 111.429863][ T6347] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 111.515522][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.181'. [ 111.602954][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 111.704999][ T6349] FAULT_INJECTION: forcing a failure. [ 111.704999][ T6349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.736688][ T6349] CPU: 1 UID: 0 PID: 6349 Comm: syz.4.181 Not tainted syzkaller #0 PREEMPT(full) [ 111.736704][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.736710][ T6349] Call Trace: [ 111.736716][ T6349] [ 111.736721][ T6349] dump_stack_lvl+0xe8/0x150 [ 111.736742][ T6349] should_fail_ex+0x412/0x560 [ 111.736759][ T6349] _copy_to_user+0x31/0xb0 [ 111.736775][ T6349] simple_read_from_buffer+0xe1/0x170 [ 111.736791][ T6349] proc_fail_nth_read+0x1bb/0x230 [ 111.736805][ T6349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.736819][ T6349] ? rw_verify_area+0x2a6/0x4d0 [ 111.736832][ T6349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.736844][ T6349] vfs_read+0x20c/0xa70 [ 111.736859][ T6349] ? __pfx___mutex_lock+0x10/0x10 [ 111.736870][ T6349] ? __pfx_vfs_read+0x10/0x10 [ 111.736884][ T6349] ? __fget_files+0x2a/0x420 [ 111.736897][ T6349] ? __fget_files+0x3a0/0x420 [ 111.736907][ T6349] ? __fget_files+0x2a/0x420 [ 111.736922][ T6349] ksys_read+0x150/0x270 [ 111.736936][ T6349] ? __pfx_ksys_read+0x10/0x10 [ 111.736953][ T6349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.736963][ T6349] do_syscall_64+0x15f/0xf80 [ 111.736978][ T6349] ? clear_bhb_loop+0x40/0x90 [ 111.736990][ T6349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.736999][ T6349] RIP: 0033:0x7f796295d68e [ 111.737014][ T6349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.737025][ T6349] RSP: 002b:00007f79638a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.737038][ T6349] RAX: ffffffffffffffda RBX: 00007f79638a36c0 RCX: 00007f796295d68e [ 111.737045][ T6349] RDX: 000000000000000f RSI: 00007f79638a30a0 RDI: 0000000000000005 [ 111.737050][ T6349] RBP: 00007f79638a3090 R08: 0000000000000000 R09: 0000000000000000 [ 111.737056][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.737061][ T6349] R13: 00007f7962c16038 R14: 00007f7962c15fa0 R15: 00007f7962d3fa48 [ 111.737076][ T6349] [ 111.953311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 112.244047][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.509283][ T6361] input: syz0 as /devices/virtual/input/input7 [ 112.598092][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.613247][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 112.775245][ T9] usb 5-1: config 0 has no interfaces? [ 112.783461][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 112.793063][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.807675][ T6368] FAULT_INJECTION: forcing a failure. [ 112.807675][ T6368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.833962][ T9] usb 5-1: Product: syz [ 112.846613][ T6368] CPU: 1 UID: 0 PID: 6368 Comm: syz.1.187 Not tainted syzkaller #0 PREEMPT(full) [ 112.846628][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.846634][ T6368] Call Trace: [ 112.846639][ T6368] [ 112.846643][ T6368] dump_stack_lvl+0xe8/0x150 [ 112.846659][ T6368] should_fail_ex+0x412/0x560 [ 112.846676][ T6368] _copy_to_iter+0x1e4/0x17d0 [ 112.846692][ T6368] ? do_raw_spin_unlock+0xf5/0x210 [ 112.846709][ T6368] ? __free_frozen_pages+0x749/0xd30 [ 112.846723][ T6368] ? __pfx__copy_to_iter+0x10/0x10 [ 112.846737][ T6368] ? __folio_put+0x4a2/0x580 [ 112.846752][ T6368] ? __pfx___folio_put+0x10/0x10 [ 112.846763][ T6368] ? aa_file_perm+0x192/0x15e0 [ 112.846778][ T6368] copy_page_to_iter+0x247/0x340 [ 112.846793][ T6368] anon_pipe_read+0x4e8/0x10a0 [ 112.846816][ T6368] ? __pfx_anon_pipe_read+0x10/0x10 [ 112.846827][ T6368] ? apparmor_file_permission+0x1f4/0x300 [ 112.846839][ T6368] ? bpf_lsm_file_permission+0x9/0x20 [ 112.846853][ T6368] ? security_file_permission+0x75/0x260 [ 112.846865][ T6368] ? rw_verify_area+0x2a6/0x4d0 [ 112.846878][ T6368] ? __pfx_anon_pipe_read+0x10/0x10 [ 112.846887][ T6368] __io_read+0x724/0x14f0 [ 112.846911][ T6368] ? __pfx___io_read+0x10/0x10 [ 112.846929][ T6368] io_read+0x4a/0x1c0 [ 112.846946][ T6368] __io_issue_sqe+0x180/0x4b0 [ 112.846972][ T6368] io_issue_sqe+0x165/0xf60 [ 112.847002][ T6368] io_req_task_submit+0xe6/0x180 [ 112.847025][ T6368] io_poll_task_func+0x99f/0xc30 [ 112.847047][ T6368] ? __pfx_io_poll_task_func+0x10/0x10 [ 112.847061][ T6368] ? percpu_ref_get+0x1c/0x1d0 [ 112.847070][ T6368] ? percpu_ref_get+0x1c/0x1d0 [ 112.847081][ T6368] ? __pfx_io_poll_task_func+0x10/0x10 [ 112.847095][ T6368] io_handle_tw_list+0x258/0x540 [ 112.847108][ T6368] tctx_task_work_run+0x55/0x300 [ 112.847121][ T6368] tctx_task_work+0x3f/0x90 [ 112.847131][ T6368] task_work_run+0x1d9/0x270 [ 112.847147][ T6368] ? __pfx_task_work_run+0x10/0x10 [ 112.847165][ T6368] get_signal+0x11eb/0x1330 [ 112.847176][ T6368] ? __pfx_do_io_getevents+0x10/0x10 [ 112.847190][ T6368] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 112.847208][ T6368] arch_do_signal_or_restart+0xbc/0x840 [ 112.847223][ T6368] ? __fget_files+0x3a0/0x420 [ 112.847235][ T6368] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.847259][ T6368] exit_to_user_mode_loop+0x8c/0x4d0 [ 112.847269][ T6368] ? rcu_is_watching+0x15/0xb0 [ 112.847281][ T6368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.847291][ T6368] do_syscall_64+0x33e/0xf80 [ 112.847306][ T6368] ? trace_irq_disable+0x3b/0x140 [ 112.847320][ T6368] ? clear_bhb_loop+0x40/0x90 [ 112.847332][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.847341][ T6368] RIP: 0033:0x7f1f24b9ce59 [ 112.847351][ T6368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.847359][ T6368] RSP: 002b:00007f1f259b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 112.847375][ T6368] RAX: fffffffffffffdfe RBX: 00007f1f24e15fa0 RCX: 00007f1f24b9ce59 [ 112.847382][ T6368] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00007f1f25984000 [ 112.847388][ T6368] RBP: 00007f1f259b4090 R08: 0000000000000000 R09: 0000000000000000 [ 112.847393][ T6368] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 112.847399][ T6368] R13: 00007f1f24e16038 R14: 00007f1f24e15fa0 R15: 00007f1f24f3fa48 [ 112.847418][ T6368] [ 112.852960][ T9] usb 5-1: Manufacturer: syz [ 113.229027][ T9] usb 5-1: SerialNumber: syz [ 113.246411][ T9] usb 5-1: config 0 descriptor?? [ 113.475536][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.185'. [ 113.503055][ T6359] netlink: 'syz.4.185': attribute type 7 has an invalid length. [ 113.535896][ T6359] netlink: 'syz.4.185': attribute type 8 has an invalid length. [ 113.553937][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 113.590630][ T9] usb 5-1: USB disconnect, device number 9 [ 114.278301][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 114.313276][ T6394] FAULT_INJECTION: forcing a failure. [ 114.313276][ T6394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.359208][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.4.195 Not tainted syzkaller #0 PREEMPT(full) [ 114.359232][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.359242][ T6394] Call Trace: [ 114.359248][ T6394] [ 114.359255][ T6394] dump_stack_lvl+0xe8/0x150 [ 114.359278][ T6394] should_fail_ex+0x412/0x560 [ 114.359305][ T6394] _copy_to_user+0x31/0xb0 [ 114.359329][ T6394] simple_read_from_buffer+0xe1/0x170 [ 114.359353][ T6394] proc_fail_nth_read+0x1bb/0x230 [ 114.359377][ T6394] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.359399][ T6394] ? rw_verify_area+0x2a6/0x4d0 [ 114.359420][ T6394] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.359443][ T6394] vfs_read+0x20c/0xa70 [ 114.359469][ T6394] ? __pfx___mutex_lock+0x10/0x10 [ 114.359487][ T6394] ? __pfx_vfs_read+0x10/0x10 [ 114.359511][ T6394] ? __fget_files+0x2a/0x420 [ 114.359535][ T6394] ? __fget_files+0x3a0/0x420 [ 114.359552][ T6394] ? __fget_files+0x2a/0x420 [ 114.359579][ T6394] ksys_read+0x150/0x270 [ 114.359602][ T6394] ? __pfx_ksys_read+0x10/0x10 [ 114.359632][ T6394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.359651][ T6394] do_syscall_64+0x15f/0xf80 [ 114.359674][ T6394] ? trace_irq_disable+0x3b/0x140 [ 114.359699][ T6394] ? clear_bhb_loop+0x40/0x90 [ 114.359725][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.359742][ T6394] RIP: 0033:0x7f796295d68e [ 114.359764][ T6394] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.359776][ T6394] RSP: 002b:00007f79638a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.359794][ T6394] RAX: ffffffffffffffda RBX: 00007f79638a36c0 RCX: 00007f796295d68e [ 114.359806][ T6394] RDX: 000000000000000f RSI: 00007f79638a30a0 RDI: 0000000000000005 [ 114.359816][ T6394] RBP: 00007f79638a3090 R08: 0000000000000000 R09: 0000000000000000 [ 114.359826][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.359835][ T6394] R13: 00007f7962c16038 R14: 00007f7962c15fa0 R15: 00007f7962d3fa48 [ 114.359863][ T6394] [ 114.791585][ T6397] lo: entered allmulticast mode [ 114.831773][ T6397] tunl0: entered allmulticast mode [ 114.870341][ T6397] gre0: entered allmulticast mode [ 114.892077][ T6405] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.198'. [ 114.935701][ T6397] gretap0: entered allmulticast mode [ 114.972589][ T6397] erspan0: entered allmulticast mode [ 115.041805][ T6397] ip_vti0: entered allmulticast mode [ 115.105525][ T6397] ip6_vti0: entered allmulticast mode [ 115.117733][ T6397] sit0: entered allmulticast mode [ 115.135078][ T6397] ip6tnl0: entered allmulticast mode [ 115.158075][ T6397] ip6gre0: entered allmulticast mode [ 115.174967][ T6397] syz_tun: entered allmulticast mode [ 115.184735][ T6397] ip6gretap0: entered allmulticast mode [ 115.198194][ T6397] bridge0: entered allmulticast mode [ 115.202874][ T6425] FAULT_INJECTION: forcing a failure. [ 115.202874][ T6425] name fail_futex, interval 1, probability 0, space 0, times 0 [ 115.224530][ T6397] vcan0: entered allmulticast mode [ 115.244117][ T6397] bond0: entered allmulticast mode [ 115.245658][ T6425] CPU: 1 UID: 0 PID: 6425 Comm: syz.4.202 Not tainted syzkaller #0 PREEMPT(full) [ 115.245680][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.245690][ T6425] Call Trace: [ 115.245697][ T6425] [ 115.245704][ T6425] dump_stack_lvl+0xe8/0x150 [ 115.245728][ T6425] should_fail_ex+0x412/0x560 [ 115.245755][ T6425] get_futex_key+0xefd/0x1590 [ 115.245773][ T6425] ? _parse_integer_limit+0x1ae/0x1f0 [ 115.245801][ T6425] ? __pfx_get_futex_key+0x10/0x10 [ 115.245817][ T6425] ? kstrtouint+0x6e/0xe0 [ 115.245845][ T6425] futex_wake_op+0x204/0xdc0 [ 115.245878][ T6425] ? __pfx_futex_wake_op+0x10/0x10 [ 115.245912][ T6425] ? ksys_write+0x1e6/0x270 [ 115.245939][ T6425] do_futex+0x3bd/0x420 [ 115.245957][ T6425] ? __pfx_vfs_write+0x10/0x10 [ 115.245981][ T6425] ? __pfx_do_futex+0x10/0x10 [ 115.246008][ T6425] __se_sys_futex+0x3a8/0x450 [ 115.246032][ T6425] ? ksys_write+0x242/0x270 [ 115.246062][ T6425] ? __pfx___se_sys_futex+0x10/0x10 [ 115.246082][ T6425] ? __pfx_ksys_write+0x10/0x10 [ 115.246107][ T6425] ? __x64_sys_futex+0x21/0xf0 [ 115.246127][ T6425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.246145][ T6425] do_syscall_64+0x15f/0xf80 [ 115.246169][ T6425] ? trace_irq_disable+0x3b/0x140 [ 115.246192][ T6425] ? clear_bhb_loop+0x40/0x90 [ 115.246212][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.246228][ T6425] RIP: 0033:0x7f796299ce59 [ 115.246244][ T6425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.246256][ T6425] RSP: 002b:00007f79638a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.246273][ T6425] RAX: ffffffffffffffda RBX: 00007f7962c15fa0 RCX: 00007f796299ce59 [ 115.246285][ T6425] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 000020000000cffc [ 115.246294][ T6425] RBP: 00007f79638a3090 R08: 0000200000000000 R09: 0000000003000000 [ 115.246305][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.246314][ T6425] R13: 00007f7962c16038 R14: 00007f7962c15fa0 R15: 00007f7962d3fa48 [ 115.246341][ T6425] [ 115.472606][ T6397] bond_slave_0: entered allmulticast mode [ 115.478475][ T6397] bond_slave_1: entered allmulticast mode [ 115.485147][ T6397] team0: entered allmulticast mode [ 115.490328][ T6397] team_slave_0: entered allmulticast mode [ 115.497097][ T6397] team_slave_1: entered allmulticast mode [ 115.511417][ T6397] dummy0: entered allmulticast mode [ 115.517306][ T6397] nlmon0: entered allmulticast mode [ 115.522722][ T6397] vxcan0: entered allmulticast mode [ 115.531690][ T6397] vxcan1: entered allmulticast mode [ 115.556117][ T6397] veth0: entered allmulticast mode [ 115.567987][ T6397] veth1: entered allmulticast mode [ 115.577890][ T6397] wg0: entered allmulticast mode [ 115.587810][ T6397] wg1: entered allmulticast mode [ 115.612758][ T6397] wg2: entered allmulticast mode [ 115.626705][ T6397] veth0_to_bridge: entered allmulticast mode [ 115.637960][ T6397] veth1_to_bridge: entered allmulticast mode [ 115.656826][ T6397] veth0_to_bond: entered allmulticast mode [ 115.710479][ T6397] veth1_to_bond: entered allmulticast mode [ 115.734235][ T6397] veth0_to_team: entered allmulticast mode [ 115.750394][ T6397] veth1_to_team: entered allmulticast mode [ 115.769826][ T6397] veth0_to_batadv: entered allmulticast mode [ 115.796408][ T6397] batadv_slave_0: entered allmulticast mode [ 115.807104][ T6397] veth1_to_batadv: entered allmulticast mode [ 115.821095][ T6397] batadv_slave_1: entered allmulticast mode [ 115.833476][ T6397] xfrm0: entered allmulticast mode [ 115.851867][ T6397] veth0_to_hsr: entered allmulticast mode [ 115.860561][ T6397] hsr_slave_0: entered allmulticast mode [ 115.871549][ T6397] veth1_to_hsr: entered allmulticast mode [ 115.895865][ T6397] hsr_slave_1: entered allmulticast mode [ 115.908638][ T6397] hsr0: entered allmulticast mode [ 115.922149][ T6397] veth1_virt_wifi: entered allmulticast mode [ 115.947105][ T6397] veth0_virt_wifi: entered allmulticast mode [ 115.954054][ T6397] virt_wifi0: entered allmulticast mode [ 115.968976][ T6397] veth1_vlan: entered allmulticast mode [ 115.982264][ T6397] veth0_vlan: entered allmulticast mode [ 115.989648][ T6397] vlan0: entered allmulticast mode [ 115.996144][ T6397] vlan1: entered allmulticast mode [ 116.004541][ T6397] macvlan0: entered allmulticast mode [ 116.016912][ T6397] macvlan1: entered allmulticast mode [ 116.023900][ T6397] ipvlan0: entered allmulticast mode [ 116.033439][ T6397] ipvlan1: entered allmulticast mode [ 116.044568][ T6397] veth1_macvtap: entered allmulticast mode [ 116.069896][ T6397] veth0_macvtap: entered allmulticast mode [ 116.089471][ T6397] macvtap0: entered allmulticast mode [ 116.103299][ T6397] macsec0: entered allmulticast mode [ 116.108833][ T6397] geneve0: entered allmulticast mode [ 116.139060][ T6397] geneve1: entered allmulticast mode [ 116.167195][ T6397] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 116.190405][ T6397] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 116.203936][ T6397] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 116.220679][ T6397] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 116.246298][ T6397] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 116.260543][ T6397] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 116.272903][ T6397] gtp0: entered allmulticast mode [ 116.278991][ T6397] bridge1: entered allmulticast mode [ 116.881217][ T6479] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 116.912974][ T6475] program syz.1.209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.123192][ T5699] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 117.283210][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 117.302099][ T5699] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.327704][ T5699] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.346067][ T5699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.355010][ T5699] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 117.364457][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.388708][ T5699] usb 3-1: config 0 descriptor?? [ 117.444549][ T6493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.213'. [ 117.787142][ T6506] kAFS: unable to lookup cell 'ÿ' [ 118.127717][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057332800: rx timeout, send abort [ 118.637991][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057332800: abort rx timeout. Force session deactivation [ 118.754403][ T5691] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 118.853571][ T5699] usbhid 3-1:0.0: can't add hid device: -71 [ 118.864804][ T5699] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 118.899983][ T5699] usb 3-1: USB disconnect, device number 9 [ 118.936459][ T5691] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 118.962557][ T5691] usb 5-1: config 0 has no interface number 0 [ 118.969209][ T5691] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.984054][ T5691] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 118.997366][ T5691] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 119.010012][ T5691] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 119.022454][ T5691] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 119.034833][ T5691] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.048280][ T5691] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 119.070135][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.099631][ T5691] usb 5-1: config 0 descriptor?? [ 119.114378][ T6545] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.127988][ T6545] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.168362][ T6514] netlink: 100 bytes leftover after parsing attributes in process `syz.3.217'. [ 119.221689][ T5691] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 119.619521][ T1223] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 119.816874][ T1223] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.850190][ T1223] usb 2-1: not running at top speed; connect to a high speed hub [ 119.865736][ T5691] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 119.889713][ T1223] usb 2-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 119.928871][ T1223] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 119.974831][ T1223] usb 2-1: string descriptor 0 read error: -22 [ 119.989803][ T1223] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 120.025052][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.057023][ T5691] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.089871][ T5691] usb 3-1: config 3 has an invalid interface number: 19 but max is 0 [ 120.115065][ T5691] usb 3-1: config 3 has an invalid interface number: 4 but max is 0 [ 120.124223][ T5699] usb 5-1: USB disconnect, device number 10 [ 120.142464][ T5691] usb 3-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 120.165323][ T5699] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 120.178174][ T5691] usb 3-1: config 3 has no interface number 0 [ 120.205037][ T5691] usb 3-1: config 3 has no interface number 1 [ 120.227217][ T5691] usb 3-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 120.266881][ T5691] usb 3-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 120.322345][ T5691] usb 3-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 120.341932][ T6587] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.224'. [ 120.348719][ T5691] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 120.422926][ T5691] usb 3-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 120.441082][ T5699] usb 2-1: USB disconnect, device number 7 [ 120.474553][ T5691] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 120.494407][ T5691] usb 3-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 120.593038][ T5691] usb 3-1: config 3 interface 19 has no altsetting 0 [ 120.609267][ T5691] usb 3-1: config 3 interface 4 has no altsetting 0 [ 120.629469][ T5691] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 120.660208][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.678747][ T5691] usb 3-1: Product: syz [ 120.700136][ T5691] usb 3-1: Manufacturer: syz [ 120.707396][ T5691] usb 3-1: SerialNumber: syz [ 120.923187][ T5699] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 121.061798][ T6647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.094230][ T5699] usb 4-1: Using ep0 maxpacket: 8 [ 121.106707][ T6647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.127382][ T5699] usb 4-1: config 64 has an invalid interface number: 19 but max is 0 [ 121.147776][ T5699] usb 4-1: config 64 has no interface number 0 [ 121.167530][ T5699] usb 4-1: config 64 interface 19 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 121.199463][ T5699] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 121.210503][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.242601][ T5699] usb 4-1: probing VID:PID(2201:012C) [ 121.269365][ T5699] usb 4-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 121.278048][ T5699] usb 4-1: vub300 ignoring EndPoint(0) 02 [ 121.284959][ T5699] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 121.326123][ T5691] pl2303 3-1:3.19: required endpoints missing [ 121.334407][ T5699] vub300 4-1:64.19: probe with driver vub300 failed with error -22 [ 121.358568][ T5691] pl2303 3-1:3.4: required interrupt-in endpoint missing [ 121.385461][ T5691] usb 3-1: USB disconnect, device number 10 [ 121.541609][ T6685] netlink: 'syz.0.231': attribute type 5 has an invalid length. [ 121.550411][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 121.573372][ T1223] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.671871][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.233'. [ 121.734633][ T1223] usb 2-1: Using ep0 maxpacket: 32 [ 121.744323][ T1223] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.756191][ T1223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 121.777127][ T1223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.791398][ T1223] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 121.800939][ T1223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.818890][ T1223] usb 2-1: config 0 descriptor?? [ 121.824487][ T6660] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 121.837702][ T1223] hub 2-1:0.0: USB hub found [ 121.933264][ T5714] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 122.013990][ T5691] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 122.049661][ T1223] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 122.067192][ T1223] usbhid 2-1:0.0: can't add hid device: -71 [ 122.088156][ T1223] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 122.124822][ T5714] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 122.139045][ T1223] usb 2-1: USB disconnect, device number 8 [ 122.149611][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.170859][ T5714] usb 5-1: Product: syz [ 122.178733][ T5714] usb 5-1: Manufacturer: syz [ 122.187373][ T5714] usb 5-1: SerialNumber: syz [ 122.205060][ T5714] usb 5-1: config 0 descriptor?? [ 122.420355][ T5699] usb 5-1: USB disconnect, device number 11 [ 122.879967][ T6757] netlink: 'syz.2.239': attribute type 12 has an invalid length. [ 122.888435][ T6757] netlink: 'syz.2.239': attribute type 29 has an invalid length. [ 122.896663][ T6757] netlink: 148 bytes leftover after parsing attributes in process `syz.2.239'. [ 122.906124][ T6757] netlink: 'syz.2.239': attribute type 3 has an invalid length. [ 122.914502][ T6757] netlink: 'syz.2.239': attribute type 2 has an invalid length. [ 122.922264][ T6757] netlink: 35 bytes leftover after parsing attributes in process `syz.2.239'. [ 123.489497][ T5714] usb 4-1: USB disconnect, device number 14 [ 123.738366][ T6782] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 123.925689][ T6785] bond1: (slave geneve2): making interface the new active one [ 124.024644][ T6785] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 124.110365][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.127816][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.144999][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.154126][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.513845][ T1223] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 124.650386][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 124.697328][ T1223] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 124.727606][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.746398][ T1223] usb 4-1: Product: syz [ 124.756358][ T1223] usb 4-1: Manufacturer: syz [ 124.766935][ T1223] usb 4-1: SerialNumber: syz [ 124.788822][ T1223] usb 4-1: config 0 descriptor?? [ 124.819533][ T1223] hub 4-1:0.0: bad descriptor, ignoring hub [ 124.851150][ T1223] hub 4-1:0.0: probe with driver hub failed with error -5 [ 124.866894][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 124.921263][ T5691] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.930584][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 124.944119][ T5691] usb 1-1: no configurations [ 124.955751][ T5691] usb 1-1: can't read configurations, error -22 [ 124.996087][ T6852] netlink: 64 bytes leftover after parsing attributes in process `syz.2.249'. [ 125.043237][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 125.088912][ T1223] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 125.132911][ T1223] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.171940][ T1223] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 125.214828][ T1223] usb 4-1: media controller created [ 125.241510][ T9] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 125.268502][ T1223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.280971][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.281014][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 125.330051][ T9] usb 5-1: Product: syz [ 125.342708][ T9] usb 5-1: Manufacturer: syz [ 125.357809][ T9] usb 5-1: SerialNumber: syz [ 125.390307][ T9] usb 5-1: config 0 descriptor?? [ 125.417292][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 125.465662][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 125.493762][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 125.513917][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.555773][ T1223] DVB: Unable to find symbol dib7000p_attach() [ 125.562067][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.590349][ T1223] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 125.623976][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 125.643933][ T24] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 125.675892][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 125.679096][ T24] usb 3-1: Product: syz [ 125.726109][ T24] usb 3-1: Manufacturer: syz [ 125.746313][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.782858][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 125.793194][ T1223] rc_core: IR keymap rc-dib0700-rc5 not found [ 125.806233][ T9] usb 5-1: media controller created [ 125.813881][ T24] hub 3-1:4.0: USB hub found [ 125.819011][ T1223] Registered IR keymap rc-empty [ 125.841953][ T1223] dvb-usb: could not initialize remote control. [ 125.857854][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.873198][ T1223] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 125.982702][ T24] hub 3-1:4.0: 2 ports detected [ 126.004021][ T5706] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 126.038868][ T9] DVB: Unable to find symbol dib7000p_attach() [ 126.057719][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 126.203204][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 126.203484][ T5706] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.239907][ T9] Registered IR keymap rc-empty [ 126.252865][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.267899][ T9] dvb-usb: could not initialize remote control. [ 126.276641][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.295392][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 126.318756][ T5706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.365821][ T5706] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.420516][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.475550][ T5706] usb 2-1: config 0 descriptor?? [ 126.901042][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.947042][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.209375][ T5706] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 127.240761][ T24] hub 3-1:4.0: activate --> -90 [ 127.304402][ T5706] usb 2-1: USB disconnect, device number 9 [ 127.457980][ T6925] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 127.554640][ T6917] fido_id[6917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 127.884452][ T1223] usb 3-1: USB disconnect, device number 11 [ 128.300365][ T24] usb 4-1: USB disconnect, device number 15 [ 128.603917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 128.737351][ T5691] usb 5-1: USB disconnect, device number 12 [ 128.812430][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 129.004848][ T5691] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 129.120649][ T7037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.261'. [ 129.313426][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 129.347215][ T1223] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 129.439806][ T7046] syzkaller1: entered promiscuous mode [ 129.447514][ T7046] syzkaller1: entered allmulticast mode [ 129.483328][ T24] usb 4-1: device descriptor read/64, error -71 [ 129.553195][ T1223] usb 2-1: Using ep0 maxpacket: 8 [ 129.567312][ T1223] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.592426][ T1223] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 129.612413][ T1223] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 129.630313][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.656457][ T1223] usb 2-1: Product: syz [ 129.670273][ T1223] usb 2-1: Manufacturer: syz [ 129.683588][ T1223] usb 2-1: SerialNumber: syz [ 129.700353][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 129.733177][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 129.747997][ T7069] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 129.755684][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 129.784296][ T7064] netlink: 64 bytes leftover after parsing attributes in process `syz.0.267'. [ 129.883752][ T24] usb 4-1: device descriptor read/64, error -71 [ 129.937361][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 129.937378][ T30] audit: type=1800 audit(1779165829.991:142): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.269" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 130.004971][ T24] usb usb4-port1: attempt power cycle [ 130.053178][ T5691] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 130.071352][ T7005] kvm: apic: phys broadcast and lowest prio [ 130.173766][ T1223] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 130.203731][ T5691] usb 1-1: Using ep0 maxpacket: 32 [ 130.210401][ T5691] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.225697][ T5691] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.239323][ T5691] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 130.250067][ T7089] binder: 7070:7089 ioctl c0306201 0 returned -14 [ 130.257018][ T5691] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 130.267491][ T5691] usb 1-1: Product: syz [ 130.275140][ T5691] usb 1-1: Manufacturer: syz [ 130.301386][ T5691] hub 1-1:4.0: USB hub found [ 130.323459][ T1223] usb 5-1: device descriptor read/64, error -71 [ 130.363553][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 130.393846][ T24] usb 4-1: device descriptor read/8, error -71 [ 130.498427][ T5691] hub 1-1:4.0: 2 ports detected [ 130.584368][ T1223] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 130.653842][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 130.674271][ T24] usb 4-1: device descriptor read/8, error -71 [ 130.723188][ T1223] usb 5-1: device descriptor read/64, error -71 [ 130.783574][ T24] usb usb4-port1: unable to enumerate USB device [ 130.835035][ T1223] usb usb5-port1: attempt power cycle [ 131.183317][ T1223] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 131.223828][ T1223] usb 5-1: device descriptor read/8, error -71 [ 131.483375][ T1223] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 131.504127][ T1223] usb 5-1: device descriptor read/8, error -71 [ 131.613538][ T1223] usb usb5-port1: unable to enumerate USB device [ 131.715200][ T5691] hub 1-1:4.0: activate --> -90 [ 131.740385][ T5699] usb 2-1: USB disconnect, device number 10 [ 132.051066][ T7119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.061904][ T7119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.079746][ T30] audit: type=1326 audit(1779165832.131:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.3.273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff59ef9ce59 code=0x0 [ 132.125387][ T809] usb 1-1: USB disconnect, device number 8 [ 132.233352][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 132.339859][ T7141] kAFS: unable to lookup cell '(,' [ 132.363254][ T9] usb 2-1: device descriptor read/64, error -71 [ 132.603338][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 132.741600][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.749722][ T7152] FAULT_INJECTION: forcing a failure. [ 132.749722][ T7152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.749729][ T9] usb 2-1: device descriptor read/64, error -71 [ 132.769761][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.776298][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: syz.2.277 Not tainted syzkaller #0 PREEMPT(full) [ 132.776327][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.776337][ T7152] Call Trace: [ 132.776343][ T7152] [ 132.776350][ T7152] dump_stack_lvl+0xe8/0x150 [ 132.776374][ T7152] should_fail_ex+0x412/0x560 [ 132.776401][ T7152] _copy_to_user+0x31/0xb0 [ 132.776426][ T7152] simple_read_from_buffer+0xe1/0x170 [ 132.776451][ T7152] proc_fail_nth_read+0x1bb/0x230 [ 132.776475][ T7152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.776500][ T7152] ? rw_verify_area+0x2a6/0x4d0 [ 132.776520][ T7152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.776542][ T7152] vfs_read+0x20c/0xa70 [ 132.776569][ T7152] ? __pfx___mutex_lock+0x10/0x10 [ 132.776588][ T7152] ? __pfx_vfs_read+0x10/0x10 [ 132.776612][ T7152] ? __fget_files+0x2a/0x420 [ 132.776636][ T7152] ? __fget_files+0x3a0/0x420 [ 132.776655][ T7152] ? __fget_files+0x2a/0x420 [ 132.776683][ T7152] ksys_read+0x150/0x270 [ 132.776708][ T7152] ? __pfx_ksys_read+0x10/0x10 [ 132.776738][ T7152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.776757][ T7152] do_syscall_64+0x15f/0xf80 [ 132.776780][ T7152] ? trace_irq_disable+0x3b/0x140 [ 132.776805][ T7152] ? clear_bhb_loop+0x40/0x90 [ 132.776825][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.776842][ T7152] RIP: 0033:0x7f1fa0f5d68e [ 132.776858][ T7152] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.776871][ T7152] RSP: 002b:00007f1fa1d89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.776889][ T7152] RAX: ffffffffffffffda RBX: 00007f1fa1d8a6c0 RCX: 00007f1fa0f5d68e [ 132.776901][ T7152] RDX: 000000000000000f RSI: 00007f1fa1d8a0a0 RDI: 0000000000000004 [ 132.776911][ T7152] RBP: 00007f1fa1d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 132.776921][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.776930][ T7152] R13: 00007f1fa1216038 R14: 00007f1fa1215fa0 R15: 00007f1fa133fa48 [ 132.776958][ T7152] [ 133.008085][ T9] usb usb2-port1: attempt power cycle [ 133.309317][ T7189] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 133.353393][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 133.375124][ T9] usb 2-1: device descriptor read/8, error -71 [ 133.613304][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 133.625350][ T7210] bond_slave_0: mtu greater than device maximum [ 133.656038][ T9] usb 2-1: device descriptor read/8, error -71 [ 133.784362][ T9] usb usb2-port1: unable to enumerate USB device [ 133.914621][ T809] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 133.973177][ T5699] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 134.074567][ T809] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 134.083165][ T809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.103348][ T809] usb 3-1: config 0 has no interfaces? [ 134.109050][ T809] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 134.123150][ T5699] usb 5-1: Using ep0 maxpacket: 16 [ 134.133155][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.145033][ T5699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 134.161126][ T5699] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.171823][ T809] usb 3-1: config 0 descriptor?? [ 134.200306][ T5699] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 134.218588][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.237311][ T5699] usb 5-1: Product: syz [ 134.246005][ T5699] usb 5-1: Manufacturer: syz [ 134.255879][ T5699] usb 5-1: SerialNumber: syz [ 134.473428][ T24] usb 3-1: USB disconnect, device number 12 [ 134.509628][ T5699] snd-ua101 5-1:1.1: sample format descriptor not found [ 134.516783][ T5699] snd-ua101 5-1:1.0: invalid num_altsetting [ 134.546478][ T5699] usb 5-1: USB disconnect, device number 17 [ 135.097740][ T7269] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 135.181700][ T7269] bond2: entered promiscuous mode [ 135.188630][ T7269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.230327][ T7276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.249174][ T7276] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 135.271359][ T7276] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 135.281691][ T7289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.290385][ T7276] bond2: (slave ip6gre1): making interface the new active one [ 135.290409][ T7276] ip6gre1: entered promiscuous mode [ 135.305712][ T7276] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 135.314635][ T7287] netlink: 'syz.1.298': attribute type 12 has an invalid length. [ 135.327140][ T7287] netlink: 'syz.1.298': attribute type 29 has an invalid length. [ 135.335621][ T7287] netlink: 148 bytes leftover after parsing attributes in process `syz.1.298'. [ 135.347059][ T7287] netlink: 51 bytes leftover after parsing attributes in process `syz.1.298'. [ 135.693239][ T809] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 135.865497][ T809] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 135.878568][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 135.940405][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.998130][ T809] usb 4-1: config 0 descriptor?? [ 136.022242][ T809] cp210x 4-1:0.0: cp210x converter detected [ 136.103178][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 136.116423][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.137135][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 136.164208][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.193193][ T5706] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 136.193386][ T9] usb 5-1: config 0 descriptor?? [ 136.276859][ T809] usb 4-1: cp210x converter now attached to ttyUSB0 [ 136.376395][ T5706] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.391712][ T5706] usb 3-1: not running at top speed; connect to a high speed hub [ 136.405272][ T5706] usb 3-1: config 2 has an invalid interface number: 222 but max is 0 [ 136.421253][ T5706] usb 3-1: config 2 has no interface number 0 [ 136.435613][ T5706] usb 3-1: config 2 interface 222 has no altsetting 0 [ 136.454110][ T5706] usb 3-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.d9 [ 136.464742][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.477577][ T5706] usb 3-1: Product: syz [ 136.481791][ T5706] usb 3-1: Manufacturer: syz [ 136.490718][ T5706] usb 3-1: SerialNumber: syz [ 136.493230][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.645802][ T9] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 136.672952][ T10] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 136.690616][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.705517][ T10] usb 1-1: Product: syz [ 136.719339][ T10] usb 1-1: Manufacturer: syz [ 136.731288][ T10] usb 1-1: SerialNumber: syz [ 136.751287][ T10] usb 1-1: config 0 descriptor?? [ 136.807051][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 136.830209][ T7363] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.848201][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 137.039298][ T5706] usb-storage 3-1:2.222: USB Mass Storage device detected [ 137.058696][ T7347] netlink: 68 bytes leftover after parsing attributes in process `syz.4.303'. [ 137.112132][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 137.129553][ T9] usb 5-1: USB disconnect, device number 18 [ 137.130666][ T5706] usb-storage 3-1:2.222: Quirks match for vid 04e6 pid 0007: 1 [ 137.146068][ T5706] usb-storage 3-1:2.222: This device (04e6,0007,01d9 S 87 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 137.146068][ T5706] Please send a copy of this message to and [ 137.207437][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.240077][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 137.304868][ T5706] usb 3-1: USB disconnect, device number 13 [ 137.306000][ T10] usb 1-1: media controller created [ 137.375580][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.464834][ T10] DVB: Unable to find symbol dib7000p_attach() [ 137.479380][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 137.563227][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 137.589821][ T10] Registered IR keymap rc-empty [ 137.611662][ T10] dvb-usb: could not initialize remote control. [ 137.636644][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 137.694631][ T7445] netlink: 44 bytes leftover after parsing attributes in process `syz.2.308'. [ 137.846027][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 138.236498][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.313'. [ 138.253337][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 138.304596][ T9] usb 4-1: USB disconnect, device number 20 [ 138.358733][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 138.398830][ T9] cp210x 4-1:0.0: device disconnected [ 138.423622][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 138.456468][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.489909][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.536747][ T24] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 138.586338][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.605562][ T24] usb 5-1: Product: syz [ 138.617555][ T24] usb 5-1: Manufacturer: syz [ 138.629483][ T24] usb 5-1: SerialNumber: syz [ 138.999089][ T24] usb 5-1: USB disconnect, device number 19 [ 139.008106][ T7501] syzkaller1: entered promiscuous mode [ 139.021405][ T7501] syzkaller1: entered allmulticast mode [ 139.126586][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.326282][ T9] usb 1-1: USB disconnect, device number 9 [ 139.415583][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 139.652424][ T7544] xt_connbytes: Forcing CT accounting to be enabled [ 139.671256][ T7544] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 139.715388][ T7547] blktrace: Concurrent blktraces are not allowed on loop1 [ 139.726079][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 139.779726][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 139.872525][ T7550] netlink: 207224 bytes leftover after parsing attributes in process `syz.0.322'. [ 139.894507][ T7552] ni: entered allmulticast mode [ 139.920889][ T7550] netlink: ct family unspecified [ 140.049208][ T7552] gtp0: entered allmulticast mode [ 140.337935][ T7592] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 140.363424][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 140.503182][ T9] usb 5-1: device descriptor read/64, error -71 [ 140.693311][ T1223] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 140.763320][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 140.853193][ T1223] usb 4-1: Using ep0 maxpacket: 8 [ 140.865258][ T1223] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.886958][ T1223] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.898815][ T1223] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 140.913328][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.923366][ T9] usb 5-1: device descriptor read/64, error -71 [ 140.923608][ T1223] usb 4-1: Product: syz [ 140.936023][ T1223] usb 4-1: Manufacturer: syz [ 140.941856][ T1223] usb 4-1: SerialNumber: syz [ 141.064932][ T9] usb usb5-port1: attempt power cycle [ 141.110879][ T7611] netlink: 'syz.1.332': attribute type 10 has an invalid length. [ 141.120799][ T7611] syz_tun: left allmulticast mode [ 141.130160][ T7611] syz_tun: entered allmulticast mode [ 141.136372][ T7611] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 141.306702][ T7611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.326817][ T1223] usb 4-1: USB disconnect, device number 21 [ 141.341339][ T7636] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.352333][ T7636] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 141.435402][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 141.463962][ T9] usb 5-1: device descriptor read/8, error -71 [ 141.534580][ T809] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 141.683287][ T809] usb 1-1: device descriptor read/64, error -71 [ 141.713252][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 141.765173][ T9] usb 5-1: device descriptor read/8, error -71 [ 141.875141][ T9] usb usb5-port1: unable to enumerate USB device [ 141.953291][ T809] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 142.083197][ T809] usb 1-1: device descriptor read/64, error -71 [ 142.183991][ T7703] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 142.203914][ T809] usb usb1-port1: attempt power cycle [ 142.553223][ T809] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 142.583887][ T809] usb 1-1: device descriptor read/8, error -71 [ 142.823695][ T809] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 142.851845][ T7736] syzkaller0: entered promiscuous mode [ 142.859306][ T809] usb 1-1: device descriptor read/8, error -71 [ 142.867593][ T7736] syzkaller0: entered allmulticast mode [ 142.987022][ T809] usb usb1-port1: unable to enumerate USB device [ 143.805300][ T809] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 143.983285][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 143.991594][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 144.008158][ T809] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 144.018599][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.029187][ T809] usb 2-1: Product: syz [ 144.035734][ T809] usb 2-1: Manufacturer: syz [ 144.041437][ T809] usb 2-1: SerialNumber: syz [ 144.053996][ T809] usb 2-1: config 0 descriptor?? [ 144.065866][ T809] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 144.075975][ T809] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 144.667976][ T809] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 144.730103][ T7801] binder: BINDER_SET_CONTEXT_MGR already set [ 144.757397][ T7801] binder: 7795:7801 ioctl 4018620d 2000000004c0 returned -16 [ 145.112377][ T809] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 145.140781][ T809] em28xx 2-1:0.0: board has no eeprom [ 145.225312][ T7768] em28xx 2-1:0.0: write to i2c device at 0x0 failed with unknown error (status=1) [ 145.395841][ T7768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.357'. [ 146.324806][ T809] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 146.351110][ T809] em28xx 2-1:0.0: dvb set to bulk mode. [ 146.369422][ T10] em28xx 2-1:0.0: Binding DVB extension [ 146.643281][ T7871] nvme_fabrics: missing parameter 'transport=%s' [ 146.732687][ T7871] nvme_fabrics: missing parameter 'nqn=%s' [ 147.086027][ T5691] usb 2-1: USB disconnect, device number 15 [ 147.107730][ T10] em28xx 2-1:0.0: Registering input extension [ 147.128601][ T5691] em28xx 2-1:0.0: Disconnecting em28xx [ 147.168214][ T5691] em28xx 2-1:0.0: Closing input extension [ 147.259210][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 147.722466][ T5691] em28xx 2-1:0.0: Freeing device [ 147.997538][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'. [ 148.104092][ T5691] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 148.288033][ T5691] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 148.320602][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.358990][ T5691] usb 2-1: Product: syz [ 148.379730][ T5691] usb 2-1: Manufacturer: syz [ 148.410733][ T5691] usb 2-1: SerialNumber: syz [ 148.455671][ T5691] usb 2-1: config 0 descriptor?? [ 148.490332][ T5691] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 148.845412][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 149.013162][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 149.030600][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 149.061615][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.085144][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.110681][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 149.142939][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 149.167478][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 149.188850][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.215819][ T10] usb 4-1: config 0 descriptor?? [ 149.231264][ T7993] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 149.458902][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 149.466456][ T5643] Bluetooth: hci5: unexpected event 0x10 length: 71 > 1 [ 150.286291][ T5706] usb 2-1: USB disconnect, device number 16 [ 150.483102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 150.543125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 150.638359][ T10] usb 4-1: USB disconnect, device number 22 [ 150.639242][ T5639] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 150.651694][ T5639] Bluetooth: hci5: hardware error 0x51 [ 150.972858][ T8077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.388'. [ 151.104413][ T8089] loop2: detected capacity change from 0 to 7 [ 151.123539][ T8089] loop2: p1 [ 151.128677][ T8089] loop2: partition table partially beyond EOD, truncated [ 151.140837][ T8089] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 151.153333][ T8092] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.390'. [ 151.174318][ T809] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 151.238812][ T8089] ip6erspan0: entered allmulticast mode [ 151.243556][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 151.333822][ T809] usb 5-1: Using ep0 maxpacket: 8 [ 151.345437][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.361041][ T809] usb 5-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 151.370522][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.391661][ T809] usb 5-1: config 0 descriptor?? [ 151.415177][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.427049][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.440513][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.454658][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.474280][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.494132][ T10] usb 2-1: config 0 descriptor?? [ 151.610230][ T8013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.624132][ T8013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.732257][ T8122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.394'. [ 151.744262][ T1223] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 151.842217][ T809] appleir 0003:05AC:8240.0004: unknown main item tag 0x0 [ 151.856816][ T8129] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 151.861069][ T809] appleir 0003:05AC:8240.0004: unknown main item tag 0x0 [ 151.873014][ T809] appleir 0003:05AC:8240.0004: unknown main item tag 0x0 [ 151.880341][ T809] appleir 0003:05AC:8240.0004: unknown main item tag 0x0 [ 151.889797][ T809] appleir 0003:05AC:8240.0004: unknown main item tag 0x0 [ 151.897561][ T809] appleir 0003:05AC:8240.0004: unknown main item tag 0x0 [ 151.905473][ T809] appleir 0003:05AC:8240.0004: unknown main item tag 0x2 [ 151.913055][ T809] appleir 0003:05AC:8240.0004: unexpected long global item [ 151.914434][ T1223] usb 1-1: Using ep0 maxpacket: 32 [ 151.922049][ T809] appleir 0003:05AC:8240.0004: parse failed [ 151.932985][ T809] appleir 0003:05AC:8240.0004: probe with driver appleir failed with error -22 [ 151.960455][ T1223] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 151.976185][ T8129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.981735][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.396'. [ 151.992436][ T1223] usb 1-1: config 0 has no interface number 0 [ 152.007375][ T1223] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 152.018977][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.028136][ T1223] usb 1-1: Product: syz [ 152.030397][ T8154] bond1: entered promiscuous mode [ 152.033881][ T1223] usb 1-1: Manufacturer: syz [ 152.045663][ T8154] bond1: entered allmulticast mode [ 152.054270][ T1223] usb 1-1: SerialNumber: syz [ 152.059946][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 152.068108][ T1223] usb 1-1: config 0 descriptor?? [ 152.107173][ T1223] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 152.124455][ T8129] bond1: (slave dummy0): making interface the new active one [ 152.132257][ T8129] dummy0: entered promiscuous mode [ 152.139373][ T8129] dummy0: entered allmulticast mode [ 152.147024][ T8129] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 152.304007][ T24] usb 2-1: USB disconnect, device number 17 [ 152.316182][ T1223] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 152.387229][ T1223] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 152.512357][ T8109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.524352][ T8109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.533088][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 29 [ 153.224856][ T24] usb 5-1: USB disconnect, device number 24 [ 153.663680][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.686580][ T8243] binder: BINDER_SET_CONTEXT_MGR already set [ 153.692928][ T8243] binder: 8239:8243 ioctl 4018620d 2000000004c0 returned -16 [ 153.833203][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 153.843766][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.858428][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 153.879070][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 153.895489][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.922645][ T9] usb 3-1: config 0 descriptor?? [ 154.320067][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 154.346016][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 154.383391][ T9] usb 3-1: USB disconnect, device number 14 [ 154.451933][ T8267] fuse: Unknown parameter 'fd0x0000000000000003' [ 154.512136][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 154.521679][ T5706] usb 1-1: USB disconnect, device number 14 [ 154.568384][ T5706] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 154.611387][ T5706] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 154.635034][ T5706] quatech2 1-1:0.51: device disconnected [ 154.733283][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 154.883216][ T10] usb 2-1: device descriptor read/64, error -71 [ 155.123648][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 155.239062][ T8323] binder: 8316:8323 ioctl c0306201 0 returned -14 [ 155.259813][ T8323] binder: BINDER_SET_CONTEXT_MGR already set [ 155.264784][ T10] usb 2-1: device descriptor read/64, error -71 [ 155.274589][ T8323] binder: 8316:8323 ioctl 4018620d 2000000004c0 returned -16 [ 155.293273][ T5706] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 155.393455][ T10] usb usb2-port1: attempt power cycle [ 155.424104][ T5691] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 155.443797][ T5706] usb 1-1: Using ep0 maxpacket: 8 [ 155.452747][ T5706] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 155.465655][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.477956][ T5706] usb 1-1: Product: syz [ 155.482423][ T5706] usb 1-1: Manufacturer: syz [ 155.490308][ T5706] usb 1-1: SerialNumber: syz [ 155.512986][ T5706] usb 1-1: config 0 descriptor?? [ 155.620117][ T5691] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 155.631582][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.650947][ T8335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.417'. [ 155.660930][ T5691] usb 5-1: Product: syz [ 155.667985][ T5691] usb 5-1: Manufacturer: syz [ 155.673703][ T8335] sit1: entered promiscuous mode [ 155.684931][ T5691] usb 5-1: SerialNumber: syz [ 155.691341][ T8335] sit1: entered allmulticast mode [ 155.710573][ T5691] usb 5-1: config 0 descriptor?? [ 155.733437][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.734831][ T5691] hub 5-1:0.0: bad descriptor, ignoring hub [ 155.775505][ T5691] hub 5-1:0.0: probe with driver hub failed with error -5 [ 155.793667][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 155.810490][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.830911][ T10] usb 2-1: device descriptor read/8, error -71 [ 155.899127][ T5706] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 155.937903][ T5706] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 155.970478][ T5706] usb 1-1: USB disconnect, device number 15 [ 156.017447][ T5691] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 156.046757][ T5691] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.069340][ T5691] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 156.083455][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 156.095543][ T5691] usb 5-1: media controller created [ 156.106637][ T8357] binder: BINDER_SET_CONTEXT_MGR already set [ 156.117796][ T8357] binder: 8348:8357 ioctl 4018620d 2000000004c0 returned -16 [ 156.143316][ T10] usb 2-1: device descriptor read/8, error -71 [ 156.154036][ T5691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.272671][ T5691] DVB: Unable to find symbol dib7000p_attach() [ 156.281737][ T10] usb usb2-port1: unable to enumerate USB device [ 156.301708][ T5691] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 156.406850][ T5691] rc_core: IR keymap rc-dib0700-rc5 not found [ 156.430384][ T5691] Registered IR keymap rc-empty [ 156.463767][ T5691] dvb-usb: could not initialize remote control. [ 156.489195][ T5691] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 156.904732][ T5691] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 157.084858][ T5691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.095974][ T5691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.109670][ T5691] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 157.121805][ T5691] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 157.151176][ T5691] usb 1-1: Manufacturer: syz [ 157.173857][ T5691] usb 1-1: config 0 descriptor?? [ 157.432674][ T8391] netlink: 'syz.3.422': attribute type 1 has an invalid length. [ 157.513903][ T8391] bond2: entered promiscuous mode [ 157.530596][ T8391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.628126][ T5691] usbhid 1-1:0.0: can't add hid device: -32 [ 157.646195][ T5691] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 157.740444][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.423'. [ 157.768929][ T8427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.423'. [ 158.004405][ T8446] fuse: Unknown parameter 'fd0x0000000000000003' [ 158.105056][ T5691] usb 1-1: USB disconnect, device number 16 [ 158.232389][ T8459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.426'. [ 158.594316][ T5691] usb 5-1: USB disconnect, device number 25 [ 158.689721][ T5691] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 158.689860][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 158.747052][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 158.766981][ T8479] netlink: 64 bytes leftover after parsing attributes in process `syz.4.429'. [ 158.782147][ T1223] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 158.897397][ T8491] ip6gre1: entered promiscuous mode [ 158.903273][ T8491] ip6gre1: entered allmulticast mode [ 158.975158][ T1223] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.993139][ T1223] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.019684][ T1223] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.049936][ T1223] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 159.071046][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 159.095044][ T5691] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 159.107063][ T1223] usb 1-1: Product: syz [ 159.119232][ T1223] usb 1-1: Manufacturer: syz [ 159.130712][ T1223] usb 1-1: SerialNumber: syz [ 159.264720][ T5691] usb 5-1: Using ep0 maxpacket: 32 [ 159.273388][ T5691] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.285790][ T5691] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.297724][ T8504] binder: BINDER_SET_CONTEXT_MGR already set [ 159.307468][ T5691] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 159.319024][ T5691] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 159.329172][ T8504] binder: 8498:8504 ioctl 4018620d 2000000004c0 returned -16 [ 159.337802][ T5691] usb 5-1: Product: syz [ 159.343257][ T5691] usb 5-1: Manufacturer: syz [ 159.356716][ T5691] hub 5-1:4.0: USB hub found [ 159.372168][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 159.390030][ T1223] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 159.562087][ T5691] hub 5-1:4.0: 2 ports detected [ 159.575614][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.604892][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.641566][ T10] usb 1-1: USB disconnect, device number 17 [ 159.669915][ T10] usblp0: removed [ 160.442839][ T8537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.435'. [ 160.509625][ T8541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.435'. [ 160.772026][ T5691] hub 5-1:4.0: activate --> -90 [ 160.803203][ T1223] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 160.975136][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.014584][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.035152][ T1223] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.036597][ T30] audit: type=1326 audit(1779165861.091:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa0f9ce59 code=0x7ffc0000 [ 161.064389][ T1223] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.099110][ T30] audit: type=1326 audit(1779165861.131:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa0f9ce59 code=0x7ffc0000 [ 161.100776][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.137641][ T30] audit: type=1326 audit(1779165861.131:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa0f9ce59 code=0x7ffc0000 [ 161.162738][ T1223] usb 4-1: config 0 descriptor?? [ 161.185428][ T5691] usb 5-1: USB disconnect, device number 26 [ 161.222403][ T30] audit: type=1326 audit(1779165861.131:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fa0f9ce59 code=0x7ffc0000 [ 161.275035][ T30] audit: type=1326 audit(1779165861.131:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa0f9ce59 code=0x7ffc0000 [ 161.304009][ T30] audit: type=1326 audit(1779165861.131:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa0f9ce59 code=0x7ffc0000 [ 161.328584][ T30] audit: type=1326 audit(1779165861.131:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa0f9ce59 code=0x7ffc0000 [ 161.353229][ T30] audit: type=1326 audit(1779165861.131:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f1fa0f9ce59 code=0x7ffc0000 [ 161.381498][ T30] audit: type=1326 audit(1779165861.131:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa0f9ce59 code=0x7ffc0000 [ 161.428316][ T30] audit: type=1326 audit(1779165861.131:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa0f9ce59 code=0x7ffc0000 [ 161.453277][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 161.615489][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.627704][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.644517][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 161.653897][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.662220][ T9] usb 2-1: Manufacturer: syz [ 161.663962][ T1223] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 161.724801][ T9] usb 2-1: config 0 descriptor?? [ 161.813964][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 161.912965][ T1223] usb 4-1: USB disconnect, device number 23 [ 161.943487][ T5714] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 161.995385][ T24] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 162.021512][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.023711][ T8618] dlm: non-version read from control device 36 [ 162.043727][ T24] usb 1-1: Product: syz [ 162.048707][ T24] usb 1-1: Manufacturer: syz [ 162.054680][ T24] usb 1-1: SerialNumber: syz [ 162.068984][ T24] usb 1-1: config 0 descriptor?? [ 162.078360][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 162.084519][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 162.114079][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 162.132488][ T5714] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.146396][ T5714] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 162.150441][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 162.155689][ T5714] usb 3-1: config 4 has no interface number 0 [ 162.168132][ T5714] usb 3-1: config 4 interface 127 has no altsetting 0 [ 162.168311][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 162.182958][ T5714] usb 3-1: language id specifier not provided by device, defaulting to English [ 162.204998][ T5714] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 162.225846][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.236292][ T5714] usb 3-1: Product: syz [ 162.240517][ T5714] usb 3-1: SerialNumber: syz [ 162.295467][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 162.316540][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 162.338740][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 162.347958][ T24] usb 1-1: media controller created [ 162.361448][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.370151][ T5706] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 162.462657][ T24] DVB: Unable to find symbol dib7000p_attach() [ 162.468502][ T8601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.485368][ T8601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.503263][ T5706] usb 5-1: device descriptor read/64, error -71 [ 162.510399][ T8601] ------------[ cut here ]------------ [ 162.516224][ T8601] usb 1-1: BOGUS control dir, pipe 80001280 doesn't match bRequestType c0 [ 162.525024][ T8601] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.2.444/8601 [ 162.535317][ T8601] Modules linked in: [ 162.539614][ T8601] CPU: 0 UID: 0 PID: 8601 Comm: syz.2.444 Not tainted syzkaller #0 PREEMPT(full) [ 162.549066][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.560395][ T8601] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 162.566153][ T8601] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 162.585856][ T8601] RSP: 0018:ffffc90004477948 EFLAGS: 00010246 [ 162.591972][ T8601] RAX: 0000000000000000 RBX: ffff88803476d600 RCX: 0000000080001280 [ 162.600190][ T8601] RDX: ffff88801b779880 RSI: ffffffff8c809820 RDI: ffffffff903e3630 [ 162.608236][ T8601] RBP: 1ffff1100e999fa4 R08: 00000000000000c0 R09: 0000000000000000 [ 162.616332][ T8601] R10: ffffc90004477a40 R11: fffff5200088ef54 R12: ffff88807a538100 [ 162.624464][ T8601] R13: ffff888074ccfd20 R14: 0000000080001280 R15: ffff88801b779880 [ 162.632471][ T8601] FS: 00007f1fa1d8a6c0(0000) GS:ffff888125289000(0000) knlGS:0000000000000000 [ 162.641666][ T8601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.648545][ T8601] CR2: 00007f1fa1341000 CR3: 000000007adec000 CR4: 00000000003526f0 [ 162.656656][ T8601] Call Trace: [ 162.659959][ T8601] [ 162.662906][ T8601] ? __init_swait_queue_head+0xa9/0x150 [ 162.668503][ T8601] usb_start_wait_urb+0x13f/0x5b0 [ 162.673592][ T8601] ? rcu_is_watching+0x15/0xb0 [ 162.678376][ T8601] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 162.683997][ T8601] ? trace_kmalloc+0x2a/0xf0 [ 162.688621][ T8601] usb_control_msg+0x234/0x3e0 [ 162.690906][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 162.693447][ T8601] dib0700_i2c_xfer+0xbb2/0xf80 [ 162.693518][ T8601] __i2c_transfer+0x79a/0x1f70 [ 162.711575][ T8601] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 162.717434][ T8601] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 162.723298][ T8601] ? i2c_transfer+0xc8/0x2d0 [ 162.727895][ T8601] i2c_transfer+0x1cc/0x2d0 [ 162.732403][ T8601] i2cdev_ioctl_rdwr+0x460/0x740 [ 162.737405][ T8601] i2cdev_ioctl+0x6a5/0x880 [ 162.741922][ T8601] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 162.747135][ T8601] ? __fget_files+0x3a0/0x420 [ 162.751817][ T8601] ? __fget_files+0x2a/0x420 [ 162.756593][ T8601] ? bpf_lsm_file_ioctl+0x9/0x20 [ 162.761527][ T8601] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 162.766582][ T8601] __se_sys_ioctl+0xfc/0x170 [ 162.771222][ T8601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.777337][ T8601] do_syscall_64+0x15f/0xf80 [ 162.781939][ T8601] ? trace_irq_disable+0x3b/0x140 [ 162.787025][ T8601] ? clear_bhb_loop+0x40/0x90 [ 162.791719][ T8601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.797637][ T8601] RIP: 0033:0x7f1fa0f9ce59 [ 162.802060][ T8601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.821826][ T8601] RSP: 002b:00007f1fa1d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.830302][ T8601] RAX: ffffffffffffffda RBX: 00007f1fa1215fa0 RCX: 00007f1fa0f9ce59 [ 162.838329][ T8601] RDX: 0000200000000380 RSI: 0000000000000707 RDI: 0000000000000007 [ 162.846561][ T8601] RBP: 00007f1fa1032d6f R08: 0000000000000000 R09: 0000000000000000 [ 162.854755][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.862734][ T8601] R13: 00007f1fa1216038 R14: 00007f1fa1215fa0 R15: 00007f1fa133fa48 [ 162.870796][ T8601] [ 162.873918][ T8601] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 162.881187][ T8601] CPU: 0 UID: 0 PID: 8601 Comm: syz.2.444 Not tainted syzkaller #0 PREEMPT(full) [ 162.890366][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.900407][ T8601] Call Trace: [ 162.903669][ T8601] [ 162.906592][ T8601] vpanic+0x56c/0xa60 [ 162.910582][ T8601] ? __pfx__printk+0x10/0x10 [ 162.915178][ T8601] ? __pfx_vpanic+0x10/0x10 [ 162.919679][ T8601] ? is_bpf_text_address+0x292/0x2b0 [ 162.924971][ T8601] ? is_bpf_text_address+0x26/0x2b0 [ 162.930194][ T8601] panic+0xc5/0xd0 [ 162.933928][ T8601] ? __pfx_panic+0x10/0x10 [ 162.938361][ T8601] __warn+0x315/0x4c0 [ 162.942347][ T8601] ? usb_submit_urb+0x1053/0x18b0 [ 162.947377][ T8601] ? usb_submit_urb+0x1053/0x18b0 [ 162.952392][ T8601] __report_bug+0x29a/0x540 [ 162.956926][ T8601] ? usb_submit_urb+0x1053/0x18b0 [ 162.961957][ T8601] ? __pfx___report_bug+0x10/0x10 [ 162.966997][ T8601] ? lockdep_hardirqs_on+0x7a/0x110 [ 162.972207][ T8601] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 162.978034][ T8601] report_bug_entry+0x19a/0x290 [ 162.982877][ T8601] ? usb_submit_urb+0x1115/0x18b0 [ 162.987904][ T8601] ? usb_submit_urb+0x111a/0x18b0 [ 162.992923][ T8601] handle_bug+0xce/0x200 [ 162.997175][ T8601] exc_invalid_op+0x1a/0x50 [ 163.001666][ T8601] asm_exc_invalid_op+0x1a/0x20 [ 163.006497][ T8601] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 163.012128][ T8601] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 163.031717][ T8601] RSP: 0018:ffffc90004477948 EFLAGS: 00010246 [ 163.037785][ T8601] RAX: 0000000000000000 RBX: ffff88803476d600 RCX: 0000000080001280 [ 163.045754][ T8601] RDX: ffff88801b779880 RSI: ffffffff8c809820 RDI: ffffffff903e3630 [ 163.053717][ T8601] RBP: 1ffff1100e999fa4 R08: 00000000000000c0 R09: 0000000000000000 [ 163.061697][ T8601] R10: ffffc90004477a40 R11: fffff5200088ef54 R12: ffff88807a538100 [ 163.069651][ T8601] R13: ffff888074ccfd20 R14: 0000000080001280 R15: ffff88801b779880 [ 163.077638][ T8601] ? usb_submit_urb+0x10a4/0x18b0 [ 163.082665][ T8601] ? __init_swait_queue_head+0xa9/0x150 [ 163.088224][ T8601] usb_start_wait_urb+0x13f/0x5b0 [ 163.093268][ T8601] ? rcu_is_watching+0x15/0xb0 [ 163.098037][ T8601] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 163.103585][ T8601] ? trace_kmalloc+0x2a/0xf0 [ 163.108211][ T8601] usb_control_msg+0x234/0x3e0 [ 163.112996][ T8601] dib0700_i2c_xfer+0xbb2/0xf80 [ 163.117858][ T8601] __i2c_transfer+0x79a/0x1f70 [ 163.122619][ T8601] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 163.128443][ T8601] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 163.134270][ T8601] ? i2c_transfer+0xc8/0x2d0 [ 163.138853][ T8601] i2c_transfer+0x1cc/0x2d0 [ 163.143349][ T8601] i2cdev_ioctl_rdwr+0x460/0x740 [ 163.148275][ T8601] i2cdev_ioctl+0x6a5/0x880 [ 163.152757][ T8601] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 163.157768][ T8601] ? __fget_files+0x3a0/0x420 [ 163.162430][ T8601] ? __fget_files+0x2a/0x420 [ 163.167003][ T8601] ? bpf_lsm_file_ioctl+0x9/0x20 [ 163.171943][ T8601] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 163.176975][ T8601] __se_sys_ioctl+0xfc/0x170 [ 163.181676][ T8601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.187747][ T8601] do_syscall_64+0x15f/0xf80 [ 163.192359][ T8601] ? trace_irq_disable+0x3b/0x140 [ 163.197388][ T8601] ? clear_bhb_loop+0x40/0x90 [ 163.202086][ T8601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.207965][ T8601] RIP: 0033:0x7f1fa0f9ce59 [ 163.212372][ T8601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.231981][ T8601] RSP: 002b:00007f1fa1d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.240390][ T8601] RAX: ffffffffffffffda RBX: 00007f1fa1215fa0 RCX: 00007f1fa0f9ce59 [ 163.248352][ T8601] RDX: 0000200000000380 RSI: 0000000000000707 RDI: 0000000000000007 [ 163.256334][ T8601] RBP: 00007f1fa1032d6f R08: 0000000000000000 R09: 0000000000000000 [ 163.264403][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.272380][ T8601] R13: 00007f1fa1216038 R14: 00007f1fa1215fa0 R15: 00007f1fa133fa48 [ 163.280365][ T8601] [ 163.283905][ T8601] Kernel Offset: disabled [ 163.288237][ T8601] Rebooting in 86400 seconds..