last executing test programs: 12.792218191s ago: executing program 4 (id=834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x47ca, 0x4) sendmsg$can_raw(r2, 0x0, 0x408d1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)='\n', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0xff0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 12.760133551s ago: executing program 1 (id=835): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x7, &(0x7f0000003480), &(0x7f0000000080)=0x80) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRESDEC=r3], 0x0) 12.597262429s ago: executing program 4 (id=836): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000200)={'\x00', 0x1, 0x5, 0xc, 0x9, 0x101, 0x0}) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x28, 0x0, 0x0, 0x80000000, 0x9, 0x6, 0x0, 0x7}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r6 = syz_open_procfs(0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r7, 0x4fffffffffff, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, 0x0) setsockopt$RDS_RECVERR(r6, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$sock_buf(r8, 0x1, 0x1f, 0x0, &(0x7f0000000240)=0xa00) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000620c8b6c5e406dc9e5ed6c28de327793f7c51c9cdd42e34c231afed8ecb8adfb33393c807ceed3ef9f0aaf13c2e04a3d55717b1b41152b1b854b4844e2f4aef965b6c812f1e61c1375a9a47e6044049c05764e53f4b6df4188c611492a9266e10350b5ca67b8cd5651d789e8486267d9dd583cfc3b87eb53ee8b495a12db237f185af75535530281ab999700be", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000008000000bf09000000000000a5090100ffffff80bf00200000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 12.004349669s ago: executing program 1 (id=840): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="10010000000000407d1ed43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "1d00"}, @local=@item_012={0x0, 0x2, 0x9}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000000c0)={0x20, 0xe, 0x2, '\nH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.141422089s ago: executing program 1 (id=845): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000040)=0xffffffff, 0x4) (async, rerun: 64) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0xffffffff}) (rerun: 64) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x6}) (async) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) (async) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca249435, &(0x7f0000000500)={0x2, 0x8, @status={[0x8, 0x9, 0x6, 0x2, 0x4]}, [0x8, 0x8, 0x3, 0x3, 0x0, 0x0, 0x400, 0x7, 0xdefd, 0x2, 0xbb8, 0x80000001, 0x4, 0x6, 0x9, 0x10, 0x9, 0x0, 0x5, 0x80000000, 0x5800000000, 0x5, 0x1, 0x8000, 0x1000, 0x2, 0xffffffffffffbb3a, 0xd709, 0x6, 0x4, 0x8, 0x7, 0x0, 0x8e, 0x8, 0x8000000000000001, 0x6, 0x9, 0x4957, 0x0, 0x1, 0x5, 0x3, 0xffffffffffffff8d, 0xffffffff, 0x80000001, 0x3, 0x4, 0x5b40c4fe, 0x8b0c, 0x56a, 0x1, 0x401, 0x5, 0xa, 0x1, 0xd, 0x4, 0x2, 0xfffffffffffffff8, 0x8, 0x100000001, 0x10001, 0x5d9]}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000300), 0xc, &(0x7f00000002c0)={&(0x7f0000001580)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x6011}, 0x80) (async) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x40010}], 0x1, 0x0) (async) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, &(0x7f00000004c0)={0x0}, 0x1) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100007b16b3406d04b408320e010203010902120001000000000904"], 0x0) 9.340220592s ago: executing program 4 (id=847): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a3000000000140007800800124000000000050015"], 0x5c}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672", 0x0, 0x12}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x7, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0xfd, 0x4, 0x0, 0x0, 0x0, 0x3f}, {0x100000, 0x0, 0x0, 0x78, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0x0, 0xeeee0000, 0xa, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.922011062s ago: executing program 2 (id=848): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x7c, 0x6, 0x4, 0x100000, 0xfffffffc, {}, {0x4, 0x2, 0x3, 0x5, 0xd9, 0x1, "de4ffbbd"}, 0x3, 0x1, {0x0}, 0x9a8f753}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xbd, 0x60, 0x6, 0x1, 0x0, 0xffff, 0xb530}}}, 0x0) r8 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r8, 0x48e9, 0x0, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20002000) sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a04000000120a98000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000051a00ab581bf5872bd5c0d5f6e81b16055f17fd5d2c091b9b43830d4538ee8474973c563a94fbfa4b628f39ab6ca264ddcaafe5b765b56f092fb4584316f7aaca5c9345843a15e94fcc1386e0eea25e0994f03eb261f48f64fef6dc521b4d29a6999b38a6554890404117f73a374293c8b66fcb8697b1094"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="20000000150a0102b48a9bf90000000000000002090001"], 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') 8.703823892s ago: executing program 1 (id=850): memfd_create(&(0x7f0000000880)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0q\xe0&\xb4\x80\x9f\xb1\xec\xf6\xea]\xdbSS\xd7\xe6k\xd1', 0x1) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02ff0300000009058202", @ANYRES8], 0x0) r0 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x9ee) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$FUSE(r4, &(0x7f0000000700)={0x2020}, 0x2020) r5 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x115000}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r0}, 0x14) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000e00)={0x2c0, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT={0x1ec, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x8006}, 0x20004005) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f0000000140)=0x28da, 0x0, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000400)={0x10000, 0x7000}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1f, 0x24, [{0xb}, {0x16}, {0x48, 0x1}, {0x1, 0x1}, {0x4}, {0x1b}, {0x3}, {0x6}, {0x1b}, {0x3, 0x1}, {0x48, 0x1}, {0x18, 0x1}, {0xc}, {0x16}, {0x1b}, {0x12, 0x1}, {0x12}, {0x0, 0x1}, {0x9, 0x1}, {0x3}, {0x1b}, {0x30, 0x1}, {0xc}, {}, {0x16}, {0x4}, {0x1b, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{0x18}, {0x2, 0x1}, {0x18, 0x1}, {0x2, 0x1}, {0x18, 0x1}, {0x16, 0x1}, {0x30}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc041}, 0x4040011) fstatfs(0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc04c5611, &(0x7f0000000140)=@mmap={0x7, 0x0, 0x4, 0x4000, 0xa3e, {}, {0x2, 0x8, 0xd, 0x0, 0x44, 0x5, "c28dc710"}, 0x400, 0x1, {}, 0xa09, 0x0, r5}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0xdddd7000, 0x6000}) ioctl$TCSBRK(r5, 0x5409, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)="f613d6abd1ad4df7d878316a205d5418aaa30cefe6adac8a27dda2dc1af74e96d63fbac37f3d3e4488882a51b2cc6b6c11a5b3185c0fbc43435a985e69f5fab02aa53c6f7f904d795d672ca8a1a7940c84b5ea7ef3efad36f6418e170cdc2683ce1ee730fde627b6de1d5290edc5dfacd177d46e3b6881177fab67a2616f98597cf318435213e9cd79896dbc0751f848ad65d48224589021f4616c3443f7173fd834d7", 0xa3) 8.569717421s ago: executing program 4 (id=852): syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={0x0, 0x0, 0x8, r0}, 0x14) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) socket$nl_route(0x10, 0x3, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) socket$nl_route(0x10, 0x3, 0x0) 8.41625589s ago: executing program 3 (id=853): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x2}, {0x7, 0xc1}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x280, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r4, &(0x7f0000000180)="01", 0x1) close(r4) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x6, 0xc8, 0x4}}}, 0x8) 8.384827336s ago: executing program 0 (id=854): capset(&(0x7f0000000100)={0x19980330}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x106, 0x1}}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x39e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r8, 0x0) listen(r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x0) 8.292212432s ago: executing program 0 (id=855): set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x27, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="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", 0x1ab}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r4, &(0x7f0000003780)=""/4096, 0x1000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r8, 0x0, 0x0, 0xf27b) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)={0x400482, 0xb1, 0x16}, 0x18) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000050000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6174001c00048008000140000000000800024000000000080002400eb489d814000000020a010800000027f00000000000000114000000110001000f000000000000"], 0xac}}, 0x0) socket(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') 6.929762278s ago: executing program 2 (id=856): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x84, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x0, 0x5, 0x1f}, 0x2c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) close(0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x2081, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x4000000) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4021, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 6.367245862s ago: executing program 3 (id=857): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'veth1_to_bond\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x1f0, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c0, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x2}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0xf}}, @TCA_FLOW_EMATCHES={0x1ac, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x4c, 0x1, 0x0, 0x0, {{0xcb39, 0x0, 0xa49}, "dfc54b659a944bf9d9a1841f4e0e8e2436260cd38bc10d974380df51383e8aed9655c8e30f14c59792d3f942b44bba5d3068536427f8c0f7dcd6e94c062d"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x148, 0x2, 0x0, 0x1, [@TCF_EM_META={0x8c, 0x2, 0x0, 0x0, {{0x7, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="e49e269171a7f9ae4d3e", @TCF_META_TYPE_VAR="fff659"]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="406fa42054cb", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="c5fb", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="82f51685d5991e5da41a", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffc}, {0xfff4, 0x5, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x0, 0x1}, {0x2, 0x40, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x6}, {0x9, 0xfff, 0x400, 0x0, 0x5, 0x2, 0x1}}}, @TCF_EM_META={0x5c, 0x3, 0x0, 0x0, {{0xd, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x2e, 0x1}, {0xd, 0x81, 0x1}}}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="25199c", @TCF_META_TYPE_VAR="abcb91ddf446d4c2f1", @TCF_META_TYPE_VAR="d64cf2d9064d", @TCF_META_TYPE_VAR="4bc916", @TCF_META_TYPE_VAR='I']}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xeb, 0x25, 0x1}, {0x5, 0xb, 0x2}}}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}]}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x6}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x21}, {0x3, 0xa, 0x0, "837f68f257fd8ab4df18"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x3}, {{0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, 0x0, 0x2000000}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000080)={0x40000010}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7b1, 0x8, 0x2, 0x6}, {0x5, 0x0, 0xb, 0xb}, {0x8, 0x6, 0x3, 0xfffffffe}, {0xb, 0x1, 0x0, 0x7}]}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1287430000000040b5071203000000000401090224000100000000090400000203200000092100000001220500090581030000060000"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022590001008966a4a08d5ab12c84bc60de"], 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000000203000000000000000000020000090a000600482e32343500000013000b0063486c6c666f7277617264696e670000080005400000008113000b0063616c6c666f7277617264696e6700000f00060073616e652d323030303000000600074000000000"], 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x48010) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)) 6.262178643s ago: executing program 1 (id=858): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) socket$inet(0x2, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x2000, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 5.384210309s ago: executing program 0 (id=859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x47ca, 0x4) sendmsg$can_raw(r2, 0x0, 0x408d1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)='\n', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="cce63b152f4f235135cd164df5cbec6929499dd14d101c2ebfea774d7fc9c6352470a4041e7eefa0af59e82c6cc79a432584707b31324753e034b9e62156ef937610325daa0c7a215ed52b9418c16d0ffd7be7f9e66e8b069e1c06085244d4444b42b6371837677a7caca2aeba263a67f228fb9be53428b7de8d165754f5fd2a4192a22ffd351f3336edbe0cf7dc299385e9593d5c7f0714378cf083f72e26a5bd1e8a8d08ee0bec243ceacf2582908a00cac0d83ce3062b1e0752126a1bd945ce2680f3c9519795d9876988f2a32943d1ab821b69b1cbcb2b9e0edb3a3368abaefd34103585f5a2ea10867a73354246e2d44a1c358c73b260d1f57f0cd5e4b0cc2e3de70e388c201cd23d0a59e44d031604895b81d25c9ca35c2837e83a0d89e7d8735029566a933ad82c49993843767ec4856d48c12df87ba099c9b7e77b211a277a8e8d3def4fe7e2b1c6e5fa7bdde283881faedbca089d0156cbcc70cd365547d1a917d73c145b6f3ab45ab5ed187a15b6b86e8d6d1f4a637f2aea028d46e4148e4c70803b367c0435fb5f3d450e3eb93e1c752ab28ce7baa89d309341ed1e3767b9bc082cbc8a024d16e5538a3612432a9864198d7a20e45c67460b3ea869cf667fc48614925104ce05bcc5260cd3e2fdb8ee9bbeb69db6aedb22b31cfb808e7147af7ac7e4c41918645ac9e0d3e9aa6ecdd957bef547e8d4fc1329e9494308b2739cf4d7926bfce3474de8795844a2d61ad43af119c0ae2b7e0dfd0077720f364cdd46d21722e87fecb5c2c0e0d93325d7d3e8f7dc8373ac493fd5119f3d0760951b0b2fa4ac7fa2e8f56af2cb20fc7cbe57c7166ca4c15aeae7ec8348c41d98b76fd12cffd5b34f4b97b9daf780f3191eba3306fcfed2bcba7e21ea12881f1ad4365d2e1c783290ecf18545b2ca5490bf7eb7d41c6b35ea56524fd1bb1e7116e828ef4b1062124ec15e9ea23f6905314d27480fcbd9900aa05aba98d679c97a43d0cb940927c292178e817330d0656b4cb4ed3df31f685b23fab9ef679f7512fbed0dcef4a35cc3a6b84c46a2e5dacccdc7b78ffe71b49c1093816f9df2743777bbe443e33132b7f97ea4b4ea1404e1ef56a220f699be0e4e63272e477ec4969f6c6cd0cba029361d223640d123f42b9ffda812feb630c3b91f1d6e6fdd0e435a5cc88ae2ed0aed207e811bf374872496218ebe8f76a1feafbdda1bbefa5ee48bf6e4e7323ee2cbb4ce35ef994c4e781a89cb6ed05cfeeb3885a443c1d0f344427524c640d42b1b56f2c19869d60d8c63956456aabd12fc47d46ca660d945e31dfd6e07bbfe1cfbd051ce2db33ea691c5c4f3f8e912b8de1b312bd5f7873aaf4924645c6a3b1445655548d212ec3081e8d13eebdf6da7ed7c191bc758455fb1dbccef24baf75564bb603fc72e21dd9187259f9ab6ae4cf9f439f93a65da4c9389d6f3731901beca82631eb781e01c0d9c91495f63c78e99fe05bc4c1eb97a84a5756b3572fa68c3cb148933012a7c7c853b2a226d814f0559d13f32c060943cda1ac58cd617cf951e83fff0581a4cdc1db11bbdd2cac106004968cb5ffc26fac08af9212a8c59e94c9736325f61d179b9c5e8fea7e06a61d8b1cfad62a9839a56615be390b9dceaa0fa46841df5f5cb172a6c014ab380745a2b0461d57137a2a86ec508022960faf2b2c638c75c56043be513daab7d5907e3bcd416f1d0d75e0096f1f3ce9c620375d40b2355eaa059697c2a615b3cf8cec387405a5a320605b846ff5b6311fd93df025ece92add51e3092a10b8ff0e1abb60b32fae6a037c6ba7771b0fdc8fd0d5792db39a36b0b99bbd1e5bf4caa0c5e253cfbf4314b5b60dd682653862659a5277f79ed1d8324c63893b35e55da568bbe8404f1d2763c776a930a1fc6c945f5bda517e1179a2c610392a9c4fe8bb3df289ff29de2cc52c49701f4feef0481bb84a5fd52df64dd165163aaefbae89ba84d73c57eb123f771e52596b49ed11687830ff1a1d056d42298fe73599ac07c950abe68b6622c394f27e0b54eee55a1a0f3dc47f8d55d95cdc4372d547ea3280fb7cccd85332541e1fb20cc45198e480ed518ac6e634049f2e7cb05c150cc889a891a18cdf3492fe2ce8d436b3586584ec0851faa3168be699b1c9caa18760e45674ca8bea7d891f31b9e995c0aacecb2fd8439e5398d31fc8aae6f5ac2b5a6183f8368d3c0de1a55be202e4ffa60ef71b46e0e0ee061cc43311c5305c02d14d6be4347d2327c35ff9328b76d55aa3f11ecfd4c3213b008c49d0a2dc0ce12c2392eb6df7cbc632db538f706c3c5bc5635434657747dffd9ee56e16058c67e9e80c141f11b0b5ae8838cbc981ce923ac66bcd6a6c7a92d9f7cad10480336edd67058c241b2016592af3c5e8b4a7069559b190aafc0d0af085601439e8819b05ba2ea5ba8a7f4fc585657bd5857e1d88d74a7eeff2ce6049efaa7e41e742583ef20c0a5c60e18e6da9f5342ae957a2cb62994cf9f35c3e914460d3b8e8e1fb6fbb37ac5e6f51b680a67d760259ed3797001f72e85701bfedcccd82e7945da63b3cf6ed19b2bb611eb31937ca13df724b81cec4ba6bdbe603783d1e9818a8cf22fb2f9f4c96940e667848a3177b617bec1f3d81d11da80079b65923434475e3756f51d1ef833d24a77c33b0eba2a89cb2019cc0af083e7c8fde8871db6536dd11b7c713f3a88c0d85fb7567d34e77e1f23c5ff3b2e0f9f302021163f1aeef73faf6bebc0c8783ee5a50a0fb72f0ecc7be3931570a4584c2ec79642e62289d524497e3a0ca7928d2273a057f6428d8c9b6ce047e8ad880bd212a9b902ac13407c80dae76d6db04fde7584203d98bd453c0b722fb2469665ed09739dc79c4856f7c2c1e7fd860161fc393b26c38a7de3c056ef8fc1bdbb53b136cf9e04b5a342fb8828cec4b3b8955cdfd8eda47492d4227289e81a40ff6bff03d3fc983df2097fbe413605189a06ed4305101555b611e541f037189ffad1ff5002a126db8f2d2504294081dbb9b211fbb6042c913ff34ae9537a560432c104470271aa687de030e3609c34ddb061011dbc08b66db1b45c43cfea804d1bea8c1c91d3a982f51593f5e209470d618cd430b44acead709936519b6937f3db2946a942153d78fe218eb4114af5ed60bc79e4ff8d48a9e8462b598cc4918124926711ca81b84e080b2a1b2d213904b9e2f3559f66521f9636ede23db18e3416ddef5a22956840ceab1bac6435716448fcf89d45d129120cb2ac92dbcb97be56b169523a7fc44ba32d3f62414b3868b1b8ab078d8cf65c967bcf702f16cdf099bd345787bc0b189a15c343322eae2958e6469f5715ab2eb81ec0a85311d53adb831a3350419ea4746c0d98bbb51d0eba63db662762c6c4af089d26fb57c5f1f7b78fded3e57d726ba3a61a57241681ba43ac35da7e13e860a1984cd0ab43f29b119885eea68941faa4e30f3cc4b3e98e015111a6c24a609ab4d686ceff1b218d68273ac3e87f150ca7ef2c6fba616bc626a009e551cf6801c942a8801c3a78d428ba626c1d449c17b962a7cbccff1a41fdf21e6847b6a0cd272ff01b685048a3ea03156bdf804016d6e558cdfd790772fc82f96adac5770d4a8eafc2d4d9cab076c38edf2cf4b3e830fb2acde872294b79250aaa30c152d83e991faa29f9c07483cb54c08f39099c12fca9579d847e3f7733b978c454c85ed6213673e475458e45f0b93d1eb1f484b0e181905097d79cd8bc565a14cb1c8835c3fc287d72d9616b99aa042c186a06aa91c5f4c00a7d86549767cb785a0f468d153003726516ecba477f3173bb05f2df60da83d5c4ddf889549e9504fb4052dfe5d3465563aeba8e5253b3cc9eda8dc0b8ffc74fdbd4d49e64de3eef79be08569042a7c5bf942cca6da27b90ba4c4832ada245b4f9ebdad645776b238af65073fd31924c1a1a04cd1a83f212caabb5601d11fa6375b1d4781ab75f398cf1d94d2881c105f15530b9a5c50fa852c3999cfea0f9b7c13a862a5bc21c28d6dcf9148a88ef5e6997bbb28aef8b637fc95e0359c741e32db2a267d96aba13aed03f89f5395ae5d19a5c2fd2564ee10523737a83856be448bd4186e2368b6631bea63142bc4d270fee89062bf7d61e5f6e49c798054760e624910c732737fb89aee6d51ac1dcc2b0a43bbbac1e23d691f42509d1475fb29cbdfd32599e95dda27424b288b3ec59109f6113bca5df34a870ad5f78a18864641e1196f47ab679914de32be7b4568c40d28c637c37c4bc61e561af71e867bd477ad8d8ff48208e781aeee17f7e4e89a795fc725b341df564859a33823af64535a81c56dfc0463d7264608be7eb101584031afcb2dd9fde4e9898c979973c2370b87cd0c28b16de10548ddc457fbc34309663418dc7df60c4ed965bbc5655ee79aa95aed1f33742034cf18df47530912cd19da57d44493b54c5a625e2c237d4ec4496df293d301359126d0129465a45aef9340515c2627f1919efa25c0fa5bf515a67ae10d527977138ade3e7422e41215aa75d6133b7710426c1e27f725e6040f01c6e7524e3789fefcb4640442cd4f72a03edec97bd47d12624053419048431ac781e6a17b9ab5030a5705ca11efb3dc58aaa41f9a6cfe397f774f0dc74610ac72624ca48af1ecba87376df745bccd434351f5831bcdc946bfa4ebb025412679f1e5011f1391935b6648007c98f5af3f0366eaa928de4180024188bae3aecea59a27edaf0cd199c57ef290c205dfbb89c82e9733d1bd12b59863a7f8a34b51f0a6da8b8f8ea6a571460938d4ea26f097e78af31c40501eeb8ad0f9feed8a6430149b85cdd7ed62c2e12cfa6a3c7292a1dfd3ca438e583d7f3af6ca123fe1c80352490c831ea385b132d792b4b6e0e570d0df29d9b39a761cf3b07ab29255cf4c3c281c71c47654144b0b61cda5830fa9d1feec4c305e89b12694fccab28759239b1e52377fdee05785867c281411372bab2a315403519199af83e75a402051fcfd2fdd179f4307ec96d1236cd9e24054582d242ed1e4113f1b244be3e26f78ad1668fbeee0e5e51b81d8302a85c64b2c8b3dbf6f126e289e216dd22902df37905872be8610c1e31fb2b0bcce23b7bbe76bc1eb69fac2ffffe06601273dda4769075823293cc94eb1a3a06b8cd13db4b1c7dc9ddd6ed4eeff148e3cd8494d81826d4586f780177664e4495fbb0045da95dfdfb96fcbbcd6ec5f78b66e2c738e1a6edc0c7bb17f5d764cff4eb5d572fb2e376b258a891ae25f16ee9d0803ae7b9ecbbdfe6d5de3cf4535d2f7cdbbb522d91693fc511589b2be769927954ae4574917c492bf4d75ffb0914939526f1d76fc73fc6a785f71707f41bb4766741926eda68c2783dd8a651c67edf80a4e5235fc72c343189eaf9563faced85942ddf1521b3f8f72565bd30de38f289ea131e228dbe53267b35e08575bd529c062c8d102ae61ef2af9c76132f53727e418c6bb903b0c8258f30f0b629701ce741434542e59a866766bd78d77274e6d56d40b2d8abb0cdb4ee7060ffe569f6080ddf7a7b696d8fba17ef2305547250ad5cde88c94f957febfd5c1a788b67d044369ceeb64bdcd8ec631658245eee03acc3de7fd4649060fde28c424f5e9f4f7f2013773a208c2faa4212e8c38685fc3773f04466329beca3ebd6ccf4a162fc1e5481fe537649c61c44e784c93db71036417dd96271cd21811178af52aa76b5b69342710c935707f792be532a346e47ffe576999f7ccd06", 0xff0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 4.862478331s ago: executing program 4 (id=860): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="3703e6166979c1418cdad00404f232bee80ba28c8b5ea7ef5880099d1ea4c094f6a06af7cc990aa37b8360c9c762c9818c29ad81ba0193b987eccfe2c23c318d932d80528f3f40dfb1679da7bbd57e50d131e4c496adb83f0e80efb1a516870729eb348180c86d513ca5c82c30bbf7661b88ea81bb3e88e79328feb257237ba17160d93da1589799b1d0684f320ffd922e0ece14dcd90b65881a7e220d0d8b97606df0bc0faf20a99320670bdc4fbfe2e2c628ae360947bfaf44b1925d3ce692bc308ca34eab5170fad58c6fac7daf6449d9189c0a0719c1e78a1239009d81380c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000900)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.525989037s ago: executing program 0 (id=861): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xec, 0x1a, 0x7, 0x70bd2c, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40, 0x2, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf9}, {0x0, 0x200001, 0x7, 0xfffffffffffffffd}, {0x40000, 0x3, 0x40ae8}, 0x0, 0x3504, 0xa, 0x2, 0x0, 0x70}}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000400)={0x0, 0x0, r5}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000900)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902120001000010000904140000a0242600beb1105d1b5c903a08c19ed9d5284430a408cb0dfec5ae2e3e106bab570e3059962a2ac415a1c2b0bafb127d6e74adabe170ecaa7f6a0cd117f839582827411eb13373250b79f3baaa0d08f14b9e7869696ca2e1392863cf9968d9c42446acec86b120cdabe76eec05ed9aa8cdba9fa06b6ada1de0bbc3635687df79e28007b3f3d1e533b9da95802a503c1dead545320289b5c240bb5381215de7c53a8d445d934c5f05bc34f77c6b9b50ab0f2a8d52be61c48b211094e6e7e736b6acb2cab9cdf9340034ef5cea324dec4ef2c35ce246"], 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r7, &(0x7f00000000c0), 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000002c0)={0x18, &(0x7f00000001c0)={0x20, 0xf, 0x39, {0x39, 0x3, "fe3587d3257a72878fde6071b57d1f1281bb426339639d188a7a50eb8fa308852a46d8b79859adc35cd6cb1150374092003eaf64a4857b"}}, 0xfffffffffffffffe, &(0x7f0000000200)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x7, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x10, 0x0, 0x7, 0xee0f, 0x40}, @wireless={0xb, 0x10, 0x1, 0x8, 0x42, 0x9, 0x6, 0x101, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xec, 0x7, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x7, 0x8}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x3, 0x2, "a4208911", "c179279d"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x9, 0x4, 0x5, 0x7, 0x8}}}, &(0x7f0000000880)={0x44, &(0x7f0000000400)={0x20, 0xe, 0xbe, "03c0d01555709ecfb5a4d3e5dcff54076629f5b0416b7a055fc09298592f7efcb686cfd87989adff4597a9b0afb08c55268024eb10fbd1c204b0528d12e3504945955e5bf3f1687d37880c67e091812b689550a2fcfa46fa9b1978481c1cef99bcd1b1b99d39b905c81d65616b25e82b2366ff172b8e596fe3e492fe0f2373565b38ed4c042184a7e3d4a21c80fa82f14120a6aaaf54572286d0338ede5e730ac31466ee160591ff0a326bea9b161e36ce6ed2a80e9638941ddcb610d6b3"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x200, 0x1}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x75}, &(0x7f0000000640)={0x40, 0xb, 0x2, "8fe3"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000006c0)={0x40, 0x13, 0x6}, &(0x7f0000000700)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "e1fb"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xac}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000800)={0x40, 0x1e, 0x1}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x9}}) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f046, 0xfffffffd}) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) 3.308357442s ago: executing program 2 (id=862): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x2}, {0x7, 0xc1}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x280, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000140), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r4, &(0x7f0000000180)="01", 0x1) close(r4) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x6, 0xc8, 0x4}}}, 0x8) 3.173150949s ago: executing program 1 (id=863): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x40, 0x8, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)={0x0, 0x9, 0x1, 'H'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x20, 0x10, 0x1, "97"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.073561601s ago: executing program 3 (id=864): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x10}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x12}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r7, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) 2.760328172s ago: executing program 3 (id=865): capset(&(0x7f0000000100)={0x19980330}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x106, 0x1}}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x39e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r8, 0x0) listen(r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x0) 2.713243994s ago: executing program 3 (id=866): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x4b564d04, 0x0, 0x8000000000000001}]}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) gettid() sched_getattr(0xffffffffffffffff, &(0x7f0000000840)={0x38}, 0x38, 0x0) prctl$PR_MCE_KILL_GET(0x22) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f00000001c0)={0x180000, 0x0, {[0xa7dc, 0x401, 0x7, 0x6, 0x7, 0x9c, 0x10001, 0xaf]}}) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.952246041s ago: executing program 2 (id=867): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x2}, {0x7, 0xc1}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x280, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r4, &(0x7f0000000180)="01", 0x1) close(r4) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x6, 0xc8, 0x4}}}, 0x8) 1.728730713s ago: executing program 4 (id=868): memfd_create(&(0x7f0000000880)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0q\xe0&\xb4\x80\x9f\xb1\xec\xf6\xea]\xdbSS\xd7\xe6k\xd1', 0x1) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02ff0300000009058202", @ANYRES8], 0x0) r0 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x9ee) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$FUSE(r4, &(0x7f0000000700)={0x2020}, 0x2020) r5 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x115000}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r0}, 0x14) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000e00)={0x2c0, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT={0x1ec, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x8006}, 0x20004005) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f0000000140)=0x28da, 0x0, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000400)={0x10000, 0x7000}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1f, 0x24, [{0xb}, {0x16}, {0x48, 0x1}, {0x1, 0x1}, {0x4}, {0x1b}, {0x3}, {0x6}, {0x1b}, {0x3, 0x1}, {0x48, 0x1}, {0x18, 0x1}, {0xc}, {0x16}, {0x1b}, {0x12, 0x1}, {0x12}, {0x0, 0x1}, {0x9, 0x1}, {0x3}, {0x1b}, {0x30, 0x1}, {0xc}, {}, {0x16}, {0x4}, {0x1b, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{0x18}, {0x2, 0x1}, {0x18, 0x1}, {0x2, 0x1}, {0x18, 0x1}, {0x16, 0x1}, {0x30}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc041}, 0x4040011) fstatfs(0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc04c5611, &(0x7f0000000140)=@mmap={0x7, 0x0, 0x4, 0x4000, 0xa3e, {}, {0x2, 0x8, 0xd, 0x0, 0x44, 0x5, "c28dc710"}, 0x400, 0x1, {}, 0xa09, 0x0, r5}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0xdddd7000, 0x6000}) ioctl$TCSBRK(r5, 0x5409, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)="f613d6abd1ad4df7d878316a205d5418aaa30cefe6adac8a27dda2dc1af74e96d63fbac37f3d3e4488882a51b2cc6b6c11a5b3185c0fbc43435a985e69f5fab02aa53c6f7f904d795d672ca8a1a7940c84b5ea7ef3efad36f6418e170cdc2683ce1ee730fde627b6de1d5290edc5dfacd177d46e3b6881177fab67a2616f98597cf318435213e9cd79896dbc0751f848ad65d48224589021f4616c3443f7173fd834d7", 0xa3) 1.382412757s ago: executing program 0 (id=869): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x2}, {0x7, 0xc1}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x280, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r4, &(0x7f0000000180)="01", 0x1) close(r4) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x6, 0xc8, 0x4}}}, 0x8) 1.298716634s ago: executing program 3 (id=870): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "6777ead5"}]}}, 0x0}, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xee, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4a, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0xa1, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xed, 0x48, 0xff}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x75, 0x1c, 0x0, 0xb}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x6, 0x5}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x410}}, {0x100, &(0x7f00000001c0)=@string={0x100, 0x3, "5d02d55dd6decd44937438e2a4cb1d07037a42c8568c5b68c5235474e721c0491b1b366b972b4c23735836c073e1b48369b53ae5974f24316f1384e2f1fe3db3fdaf41dbb001b1a8c20ac029fe02c771f70db86100536532fcc6dae31de8f426a7b68d06bac046df06f34ff7210a1eb739ae4893cd08e2266307580ea4a4df53941d96cccf6a240e25f0fa8aee422636324082395d8109543f677aad99338bd7b0aa0823073c3fb679bffc51f4244a0a1be5e6472eb4b8165fd98756ae0556fca4c3e767ed851a10a424e76109d1b79ceccfed280d2bf765c8fec18d56c0313e815ea1a122909c018a110340b8e983bbac97722608c620df155bd540c458"}}]}) 488.28613ms ago: executing program 2 (id=871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x47ca, 0x4) sendmsg$can_raw(r2, 0x0, 0x408d1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)='\n', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0xff8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 40.383604ms ago: executing program 0 (id=872): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_io_uring_setup(0x13f8, &(0x7f0000000280)={0x0, 0x8471, 0x80, 0x0, 0x2b9}, &(0x7f0000000300), &(0x7f00000003c0)) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0xfffffffffffffff5, 0xfffffffffffffffd, {0x0, 0xc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000180), 0x0, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x1400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r10}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r10], &(0x7f0000000200), &(0x7f0000000300)=[r11], &(0x7f0000000340)}) fsync(r7) fsync(r7) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000400)=r4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000002000ff0f00000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/108], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) 0s ago: executing program 2 (id=873): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) socket$inet(0x2, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x2000, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 5907] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 247.849655][ T983] usb 1-1: config 8 has no interface number 0 [ 247.872974][ T983] usb 1-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 247.914708][ T983] usb 1-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 247.926452][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.934787][ T983] usb 1-1: Product: syz [ 247.939207][ T983] usb 1-1: Manufacturer: syz [ 247.943820][ T983] usb 1-1: SerialNumber: syz [ 248.016877][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 248.136850][ T5907] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 248.178793][ T983] sierra 1-1:8.158: Sierra USB modem converter detected [ 248.191033][ T983] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 248.198746][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 248.217835][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.249786][ T983] usb 1-1: USB disconnect, device number 56 [ 248.269287][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.281536][ T983] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 248.293636][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 248.307528][ T983] sierra 1-1:8.158: device disconnected [ 248.314956][ T5907] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 248.315874][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 248.343892][ T5907] usb 5-1: config 2 has no interface number 0 [ 248.353967][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.364201][ T5907] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 248.377619][ T9] usb 4-1: config 0 descriptor?? [ 248.378167][ T5907] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 248.395868][ T5907] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 248.418523][ T5907] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 248.427721][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.435774][ T5907] usb 5-1: Product: syz [ 248.440475][ T5907] usb 5-1: Manufacturer: syz [ 248.445115][ T5907] usb 5-1: SerialNumber: syz [ 248.453455][ T8442] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 248.460988][ T8442] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 248.719693][ T5907] usb 5-1: probing VID:PID(0424:012C) [ 248.730269][ T5907] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 248.744118][ T5907] usb 5-1: vub300 testing BULK IN EndPoint(1) 82 [ 248.755280][ T5907] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 248.763785][ T5907] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 248.779995][ T5907] usb 5-1: USB disconnect, device number 64 [ 248.813145][ T9] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 248.822465][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 248.834213][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 248.842095][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 248.850361][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 248.857859][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 248.865100][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 248.878357][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 249.068555][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 249.076236][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 249.083671][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 249.209546][ T9] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 249.222652][ T9] microsoft 0003:045E:07DA.0006: no inputs found [ 249.229644][ T9] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 249.247471][ T9] usb 4-1: USB disconnect, device number 57 [ 249.262034][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 249.262049][ T30] audit: type=1326 audit(1760943243.527:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.589" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x0 [ 249.455244][ T983] usb 3-1: USB disconnect, device number 36 [ 249.606209][ T8452] fido_id[8452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 249.636253][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.591'. [ 250.393115][ T24] usb 2-1: USB disconnect, device number 59 [ 250.577318][ T8472] fuse: Bad value for 'fd' [ 251.000126][ T5878] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 251.076896][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 251.206901][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 251.279286][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.293924][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 251.313448][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.379286][ T5878] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 251.407013][ T24] usb 2-1: config 0 descriptor?? [ 251.419816][ T5878] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.441164][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 251.456911][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.514629][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.536135][ T5878] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.560184][ T5878] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 251.629539][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.870626][ T5878] usb 3-1: usb_control_msg returned -32 [ 251.876213][ T5878] usbtmc 3-1:16.0: can't read capabilities [ 252.016893][ T983] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 252.026885][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 252.166891][ T983] usb 5-1: Using ep0 maxpacket: 8 [ 252.174138][ T983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 252.182472][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 252.188905][ T983] usb 5-1: config 8 has an invalid interface number: 158 but max is 0 [ 252.197408][ T983] usb 5-1: config 8 has an invalid interface number: 158 but max is 0 [ 252.205682][ T983] usb 5-1: config 8 has no interface number 0 [ 252.211972][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 252.222240][ T983] usb 5-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 252.235295][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.252626][ T983] usb 5-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 252.261929][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 252.271665][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.279744][ T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 252.288309][ T983] usb 5-1: Product: syz [ 252.292485][ T983] usb 5-1: Manufacturer: syz [ 252.298643][ T9] usb 4-1: Product: syz [ 252.302821][ T9] usb 4-1: Manufacturer: syz [ 252.307533][ T983] usb 5-1: SerialNumber: syz [ 252.323185][ T9] hub 4-1:4.0: bad descriptor, ignoring hub [ 252.330272][ T9] hub 4-1:4.0: probe with driver hub failed with error -5 [ 252.338779][ T9] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 252.529897][ T983] sierra 5-1:8.158: Sierra USB modem converter detected [ 252.539372][ T983] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 252.550480][ T983] usb 5-1: USB disconnect, device number 65 [ 252.565590][ T983] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 252.584868][ T8470] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 252.587259][ T983] sierra 5-1:8.158: device disconnected [ 253.326904][ T983] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 253.488911][ T983] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 253.499307][ T983] usb 5-1: config 2 has no interface number 0 [ 253.505547][ T983] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 253.517722][ T983] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 253.528136][ T983] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 253.540695][ T983] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 253.550032][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.558418][ T983] usb 5-1: Product: syz [ 253.562785][ T983] usb 5-1: Manufacturer: syz [ 253.567643][ T983] usb 5-1: SerialNumber: syz [ 253.575504][ T8495] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 253.583028][ T8495] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 253.646635][ T24] usb 3-1: USB disconnect, device number 37 [ 253.715579][ T5907] usb 2-1: USB disconnect, device number 60 [ 253.847819][ T983] usb 5-1: probing VID:PID(0424:012C) [ 253.859370][ T983] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 253.869312][ T983] usb 5-1: vub300 testing BULK IN EndPoint(1) 82 [ 253.881162][ T983] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 253.895456][ T983] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 253.924285][ T983] usb 5-1: USB disconnect, device number 66 [ 254.156963][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 254.318132][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 254.325923][ T24] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.346899][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 254.353653][ T24] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 254.366152][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.407861][ T24] usb 3-1: config 0 descriptor?? [ 254.871961][ T8512] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 254.908992][ T24] hid-rmi 0003:0461:4E72.0007: hidraw0: USB HID v0.02 Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 254.917553][ T983] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 254.930813][ T5908] usb 4-1: USB disconnect, device number 58 [ 255.107284][ T983] usb 5-1: Using ep0 maxpacket: 8 [ 255.119135][ T983] usb 5-1: config 0 has an invalid interface number: 51 but max is 3 [ 255.132126][ T983] usb 5-1: config 0 has an invalid interface number: 4 but max is 3 [ 255.143395][ T983] usb 5-1: config 0 has an invalid interface number: 127 but max is 3 [ 255.152377][ T983] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 255.162923][ T983] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 255.180894][ T983] usb 5-1: config 0 has an invalid interface number: 158 but max is 3 [ 255.196475][ T983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.216189][ T983] usb 5-1: config 0 has no interface number 0 [ 255.226446][ T983] usb 5-1: config 0 has no interface number 1 [ 255.234965][ T983] usb 5-1: config 0 has no interface number 2 [ 255.242488][ T983] usb 5-1: config 0 has no interface number 3 [ 255.249958][ T983] usb 5-1: config 0 interface 51 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 255.261164][ T983] usb 5-1: config 0 interface 4 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 255.272289][ T983] usb 5-1: config 0 interface 127 altsetting 180 has an invalid descriptor for endpoint zero, skipping [ 255.276862][ T24] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 255.283676][ T983] usb 5-1: config 0 interface 127 altsetting 180 endpoint 0x3 has invalid maxpacket 1128, setting to 1024 [ 255.366689][ T8521] binder: 8520:8521 ioctl c0306201 800002c0 returned -14 [ 255.421594][ T983] usb 5-1: config 0 interface 127 altsetting 180 has a duplicate endpoint with address 0x9, skipping [ 255.454146][ T983] usb 5-1: config 0 interface 127 altsetting 180 has a duplicate endpoint with address 0x9, skipping [ 255.482198][ T983] usb 5-1: config 0 interface 127 altsetting 180 has an invalid descriptor for endpoint zero, skipping [ 255.517012][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 255.524391][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.537397][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.541828][ T983] usb 5-1: config 0 interface 127 altsetting 180 has a duplicate endpoint with address 0x6, skipping [ 255.556819][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.566352][ T983] usb 5-1: config 0 interface 127 altsetting 180 endpoint 0xD has invalid maxpacket 415, setting to 64 [ 255.615316][ T983] usb 5-1: config 0 interface 127 altsetting 180 has a duplicate endpoint with address 0x2, skipping [ 255.629967][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 255.632495][ T983] usb 5-1: config 0 interface 127 altsetting 180 has a duplicate endpoint with address 0x9, skipping [ 255.639463][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.683691][ T24] usb 1-1: config 0 descriptor?? [ 255.686325][ T983] usb 5-1: config 0 interface 127 altsetting 180 has an invalid descriptor for endpoint zero, skipping [ 255.725014][ T983] usb 5-1: config 0 interface 127 altsetting 180 has a duplicate endpoint with address 0xF, skipping [ 255.760823][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.767340][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.811226][ T983] usb 5-1: config 0 interface 127 altsetting 180 has a duplicate endpoint with address 0x9, skipping [ 255.833482][ T983] usb 5-1: config 0 interface 158 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 255.860008][ T983] usb 5-1: config 0 interface 51 has no altsetting 0 [ 255.869604][ T983] usb 5-1: config 0 interface 4 has no altsetting 0 [ 255.879475][ T983] usb 5-1: config 0 interface 127 has no altsetting 0 [ 255.890552][ T983] usb 5-1: config 0 interface 158 has no altsetting 0 [ 255.903944][ T983] usb 5-1: New USB device found, idVendor=0bed, idProduct=1101, bcdDevice=44.bd [ 255.909553][ T8530] syzkaller0: entered promiscuous mode [ 255.913270][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.919880][ T8530] syzkaller0: entered allmulticast mode [ 255.926998][ T983] usb 5-1: Product: ᣸᲻锨⼩㬖⽝샨湱孓ጠ燋૑떰鋞൘옰蠎尬ᤈؼ刚㝉칖ࡕ픑蠡⵱潆᳉媔똺籯ਤ涆恴ꋮꯈ雛ဌ㺱秫撂䳰쟃ﲘ市䥶 [ 255.994456][ T983] usb 5-1: Manufacturer: 뤱琠䠱큺팭컽槪緤晕棲栈禐蠋㺣묧䜰뵲꫒漌覴챊旺佂ꃛ䆮〩肌饤獖第⿬䔷覐戹ﱜ蘲 [ 256.034079][ T983] usb 5-1: SerialNumber: 㐸섚낐溱▁蹊쯀첄⽛褃⮜ﳵⷫ౱蚓ﹾ⳶텚櫀⅕㏵脃틖樱퉢꩕嫴䠢鴽!䆈꣤慃⛶ꇤ᫓겾➈⏻勮昿呰蚣됺ᆑ뮚⋆蟲轍㳋浫恽퉈径㥿噗髧ব頒肜 [ 256.097247][ T983] usb 5-1: config 0 descriptor?? [ 256.120306][ T24] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 256.130623][ T24] microsoft 0003:045E:07DA.0008: item 0 4 0 11 parsing failed [ 256.140883][ T24] microsoft 0003:045E:07DA.0008: parse failed [ 256.147678][ T24] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 256.333717][ T5878] usb 1-1: USB disconnect, device number 57 [ 256.371644][ T983] cp210x 5-1:0.51: cp210x converter detected [ 256.411248][ T983] cp210x 5-1:0.51: failed to get vendor val 0x370b size 1: -71 [ 256.443149][ T983] cp210x 5-1:0.51: querying part number failed [ 256.470627][ T983] usb 5-1: cp210x converter now attached to ttyUSB0 [ 256.559587][ T983] usb 5-1: bad CDC descriptors [ 256.565432][ T983] cp210x 5-1:0.4: cp210x converter detected [ 256.575469][ T983] cp210x 5-1:0.4: failed to get vendor val 0x370b size 1: -71 [ 256.651413][ T983] cp210x 5-1:0.4: querying part number failed [ 256.686704][ T983] usb 5-1: cp210x converter now attached to ttyUSB1 [ 256.787438][ T89] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 256.880073][ T983] cp210x 5-1:0.127: cp210x converter detected [ 256.907589][ T10] usb 3-1: USB disconnect, device number 38 [ 256.913658][ T983] cp210x 5-1:0.127: failed to get vendor val 0x370b size 1: -71 [ 256.945522][ T983] cp210x 5-1:0.127: querying part number failed [ 256.986831][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 256.997351][ T983] usb 5-1: cp210x converter now attached to ttyUSB2 [ 257.057975][ T983] cp210x 5-1:0.158: cp210x converter detected [ 257.087282][ T983] cp210x 5-1:0.158: failed to get vendor val 0x370b size 1: -71 [ 257.095040][ T983] cp210x 5-1:0.158: querying part number failed [ 257.108753][ T89] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 257.127274][ T89] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 257.149446][ T89] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.158925][ T983] usb 5-1: cp210x converter now attached to ttyUSB3 [ 257.168040][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 257.169083][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.201127][ T983] usb 5-1: USB disconnect, device number 67 [ 257.210370][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 257.246950][ T5907] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 257.270135][ T983] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 257.287282][ T8540] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 257.313555][ T983] cp210x 5-1:0.51: device disconnected [ 257.319328][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 257.327837][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.345457][ T89] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 257.378783][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.406146][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 257.426551][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 257.444891][ T983] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 257.504105][ T983] cp210x 5-1:0.4: device disconnected [ 257.527600][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.540622][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.609367][ T5907] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 257.619248][ T5907] usb 1-1: config 0 has no interface number 0 [ 257.628289][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 257.632375][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 257.689059][ T5907] usb 1-1: config 0 interface 12 has no altsetting 0 [ 257.700575][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.711946][ T5907] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 257.716159][ T983] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 257.721229][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.721278][ T5907] usb 1-1: Product: syz [ 257.721292][ T5907] usb 1-1: Manufacturer: syz [ 257.721306][ T5907] usb 1-1: SerialNumber: syz [ 257.724371][ T5907] usb 1-1: config 0 descriptor?? [ 257.791786][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.815105][ T8533] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 257.826158][ T983] cp210x 5-1:0.127: device disconnected [ 257.856542][ T10] usb 3-1: config 0 descriptor?? [ 257.912687][ T983] cp210x ttyUSB3: cp210x converter now disconnected from ttyUSB3 [ 257.923653][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 257.932891][ T983] cp210x 5-1:0.158: device disconnected [ 258.022554][ T24] usb 4-1: usb_control_msg returned -32 [ 258.028476][ T24] usbtmc 4-1:16.0: can't read capabilities [ 258.266893][ T983] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 258.416821][ T983] usb 5-1: Using ep0 maxpacket: 32 [ 258.424143][ T983] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.440283][ T983] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 258.449572][ T983] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 258.458011][ T983] usb 5-1: Product: syz [ 258.464566][ T983] usb 5-1: Manufacturer: syz [ 258.477271][ T983] hub 5-1:4.0: bad descriptor, ignoring hub [ 258.483231][ T983] hub 5-1:4.0: probe with driver hub failed with error -5 [ 258.492026][ T983] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 258.744663][ T8542] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 259.282198][ T983] usb 2-1: USB disconnect, device number 61 [ 259.412812][ T8554] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 259.801623][ T89] usb 4-1: USB disconnect, device number 59 [ 259.837000][ T983] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 259.971775][ T5878] usb 3-1: USB disconnect, device number 39 [ 260.038366][ T983] usb 2-1: Using ep0 maxpacket: 32 [ 260.047225][ T983] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 260.058725][ T983] usb 2-1: config 0 has no interface number 0 [ 260.064942][ T983] usb 2-1: config 0 interface 12 has no altsetting 0 [ 260.080649][ T983] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 260.097547][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.106010][ T983] usb 2-1: Product: syz [ 260.111307][ T983] usb 2-1: Manufacturer: syz [ 260.117060][ T983] usb 2-1: SerialNumber: syz [ 260.128876][ T983] usb 2-1: config 0 descriptor?? [ 260.957180][ T10] usb 5-1: USB disconnect, device number 68 [ 261.316862][ T5878] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 261.352220][ T5907] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 261.361101][ T5907] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 261.375245][ T5907] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 261.402350][ T5907] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 261.422044][ T5907] usb 1-1: USB disconnect, device number 58 [ 261.517161][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 261.523911][ T5878] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 261.537227][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.547924][ T5878] usb 4-1: config 0 has no interface number 0 [ 261.554124][ T5878] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.596244][ T5878] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 261.634682][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 261.646450][ T5878] usb 4-1: Product: syz [ 261.654018][ T5878] usb 4-1: SerialNumber: syz [ 261.668172][ T5878] usb 4-1: config 0 descriptor?? [ 261.680968][ T5878] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 261.726935][ T89] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 261.889587][ T89] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 261.901092][ T89] usb 3-1: config 0 has no interface number 0 [ 261.925476][ T89] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 261.935886][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.946713][ T89] usb 3-1: Product: syz [ 261.951681][ T89] usb 3-1: Manufacturer: syz [ 261.956501][ T89] usb 3-1: SerialNumber: syz [ 261.992642][ T89] usb 3-1: config 0 descriptor?? [ 262.017689][ T89] usb-storage 3-1:0.20: USB Mass Storage device detected [ 262.048818][ T89] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 262.757152][ T5907] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 262.926866][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 262.939323][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.950681][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.961683][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.975958][ T5907] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.992117][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.012047][ T5907] usb 1-1: config 0 descriptor?? [ 263.030169][ T5908] usb 4-1: USB disconnect, device number 60 [ 263.069196][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.079453][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.097060][ T5878] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 263.470515][ T5907] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 263.498490][ T5907] hid_parser_main: 19 callbacks suppressed [ 263.498513][ T5907] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 263.518710][ T5907] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 263.544920][ T5907] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 263.556830][ T5907] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 263.566858][ T5907] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 263.574104][ T5907] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 263.581402][ T5907] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 263.589137][ T5907] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 263.596372][ T5907] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 263.603801][ T5907] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 263.627445][ T5907] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 263.663037][ T983] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 263.680384][ T983] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 263.681588][ T5907] microsoft 0003:045E:07DA.0009: no inputs found [ 263.716209][ T983] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 263.726132][ T5907] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 263.772448][ T5907] usb 1-1: USB disconnect, device number 59 [ 263.772769][ T983] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 263.806872][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 263.834868][ T8605] fido_id[8605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 263.863543][ T983] usb 2-1: USB disconnect, device number 62 [ 263.971311][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 263.989487][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 264.007074][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.017980][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.030788][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.041169][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.058426][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 264.067960][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.326604][ T24] usb 4-1: usb_control_msg returned -32 [ 264.339090][ T24] usbtmc 4-1:16.0: can't read capabilities [ 264.393897][ T8617] fuse: Unknown parameter '0x0000000000000008' [ 264.407394][ T5908] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 264.620263][ T5908] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 264.620269][ T24] usb 3-1: USB disconnect, device number 40 [ 264.620288][ T5908] usb 5-1: config 2 has no interface number 0 [ 265.197266][ T8604] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 265.296840][ T5908] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 265.349319][ T5908] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 265.360254][ T5908] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 265.411160][ T5908] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 265.430531][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.466687][ T5908] usb 5-1: Product: syz [ 265.472750][ T5908] usb 5-1: Manufacturer: syz [ 265.485288][ T5908] usb 5-1: SerialNumber: syz [ 265.519731][ T8611] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 265.539745][ T8611] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 265.987886][ T5908] usb 5-1: probing VID:PID(0424:012C) [ 266.101492][ T5908] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 266.185793][ T5908] usb 5-1: vub300 testing BULK IN EndPoint(1) 82 [ 266.236438][ T5908] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 266.293811][ T24] usb 4-1: USB disconnect, device number 61 [ 266.336843][ T5908] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 266.436909][ T5908] usb 5-1: USB disconnect, device number 70 [ 267.097104][ T983] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 267.246992][ T5908] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 267.279149][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.306813][ T983] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 267.343021][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.359343][ T983] usb 2-1: config 0 descriptor?? [ 267.448223][ T5908] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 267.456481][ T5908] usb 5-1: config 0 has no interface number 0 [ 267.465549][ T5908] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 267.476756][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.485038][ T5908] usb 5-1: Product: syz [ 267.489890][ T5908] usb 5-1: Manufacturer: syz [ 267.494536][ T5908] usb 5-1: SerialNumber: syz [ 267.503417][ T5908] usb 5-1: config 0 descriptor?? [ 267.510353][ T5908] usb-storage 5-1:0.20: USB Mass Storage device detected [ 267.520943][ T5908] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 267.557026][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 267.720348][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 267.992269][ T8678] fuse: Unknown parameter '0x0000000000000008' [ 268.068781][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.080428][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.142659][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.156683][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 268.179910][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.195466][ T24] usb 4-1: config 0 descriptor?? [ 268.577395][ T5908] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 268.618149][ T24] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 268.626683][ T24] hid_parser_main: 16 callbacks suppressed [ 268.626704][ T24] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 268.630331][ T8685] FAULT_INJECTION: forcing a failure. [ 268.630331][ T8685] name failslab, interval 1, probability 0, space 0, times 0 [ 268.632704][ T24] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 268.662996][ T8685] CPU: 0 UID: 0 PID: 8685 Comm: syz.2.649 Not tainted syzkaller #0 PREEMPT(full) [ 268.663024][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.663053][ T8685] Call Trace: [ 268.663060][ T8685] [ 268.663069][ T8685] dump_stack_lvl+0x189/0x250 [ 268.663092][ T8685] ? __pfx____ratelimit+0x10/0x10 [ 268.663118][ T8685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.663136][ T8685] ? __pfx__printk+0x10/0x10 [ 268.663160][ T8685] ? __pfx___might_resched+0x10/0x10 [ 268.663180][ T8685] ? fs_reclaim_acquire+0x7d/0x100 [ 268.663206][ T8685] should_fail_ex+0x414/0x560 [ 268.663235][ T8685] should_failslab+0xa8/0x100 [ 268.663259][ T8685] __kmalloc_noprof+0xcb/0x7f0 [ 268.663277][ T8685] ? sock_kmalloc+0xd6/0x160 [ 268.663298][ T8685] sock_kmalloc+0xd6/0x160 [ 268.663318][ T8685] af_alg_alloc_areq+0x8d/0x260 [ 268.663344][ T8685] aead_recvmsg+0x48c/0x13b0 [ 268.663366][ T8685] ? aa_sk_perm+0x81e/0x950 [ 268.663390][ T8685] ? __pfx_aead_recvmsg+0x10/0x10 [ 268.663410][ T8685] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 268.663431][ T8685] ? security_socket_recvmsg+0x7e/0x2e0 [ 268.663452][ T8685] ? __pfx_aead_recvmsg+0x10/0x10 [ 268.663470][ T8685] sock_recvmsg+0x22c/0x270 [ 268.663493][ T8685] ____sys_recvmsg+0x1c9/0x460 [ 268.663519][ T8685] ? __pfx_____sys_recvmsg+0x10/0x10 [ 268.663534][ T8685] ? get_compat_msghdr+0x37e/0x4a0 [ 268.663567][ T8685] ? get_pid_task+0x20/0x1f0 [ 268.663592][ T8685] ___sys_recvmsg+0x1b5/0x510 [ 268.663615][ T8685] ? __pfx____sys_recvmsg+0x10/0x10 [ 268.663655][ T8685] ? __fget_files+0x3a0/0x420 [ 268.663686][ T8685] __sys_recvmsg+0x161/0x220 [ 268.663705][ T8685] ? __pfx___sys_recvmsg+0x10/0x10 [ 268.663731][ T8685] ? __pfx_ksys_write+0x10/0x10 [ 268.663751][ T8685] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 268.663793][ T8685] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.663813][ T8685] __do_fast_syscall_32+0xb6/0x2b0 [ 268.663832][ T8685] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.663853][ T8685] do_fast_syscall_32+0x34/0x80 [ 268.663870][ T8685] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.663890][ T8685] RIP: 0023:0xf7fd2539 [ 268.663905][ T8685] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 268.663919][ T8685] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 268.663937][ T8685] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000680 [ 268.663949][ T8685] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.663959][ T8685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.663968][ T8685] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 268.663978][ T8685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.664005][ T8685] [ 268.664403][ T8685] trusted_key: syz.2.649 sent an empty control message without MSG_MORE. [ 268.673151][ T24] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 268.696364][ T983] usbhid 2-1:0.0: can't add hid device: -71 [ 268.717519][ T24] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 268.756832][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 268.980726][ T983] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 268.992302][ T983] usb 2-1: USB disconnect, device number 63 [ 269.001042][ T24] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 269.006445][ T5908] usb 1-1: unable to get BOS descriptor or descriptor too short [ 269.019771][ T5908] usb 1-1: config 8 has an invalid interface number: 158 but max is 0 [ 269.027162][ T24] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 269.029621][ T5908] usb 1-1: config 8 has an invalid interface number: 158 but max is 0 [ 269.044283][ T5908] usb 1-1: config 8 has no interface number 0 [ 269.047159][ T24] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 269.051082][ T5908] usb 1-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 269.074483][ T24] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 269.075676][ T5908] usb 1-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 269.082245][ T24] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 269.099111][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.107523][ T5908] usb 1-1: Product: syz [ 269.111777][ T5908] usb 1-1: Manufacturer: syz [ 269.117390][ T5908] usb 1-1: SerialNumber: syz [ 269.126338][ T24] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 269.144907][ T24] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 269.175591][ T24] microsoft 0003:045E:07DA.000A: no inputs found [ 269.192376][ T24] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 269.218576][ T24] usb 4-1: USB disconnect, device number 62 [ 269.253910][ T8691] fido_id[8691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 269.307088][ T983] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 269.343415][ T5908] sierra 1-1:8.158: Sierra USB modem converter detected [ 269.352786][ T5908] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 269.364320][ T5908] usb 1-1: USB disconnect, device number 60 [ 269.383642][ T5908] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 269.394520][ T5908] sierra 1-1:8.158: device disconnected [ 269.468395][ T983] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 269.483182][ T983] usb 2-1: config 2 has no interface number 0 [ 269.517495][ T983] usb 2-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 269.533422][ T983] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 269.546351][ T983] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 269.559835][ T983] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 269.583124][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.593321][ T983] usb 2-1: Product: syz [ 269.598782][ T983] usb 2-1: Manufacturer: syz [ 269.603878][ T983] usb 2-1: SerialNumber: syz [ 269.612320][ T8688] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 269.620409][ T8688] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 269.742671][ T30] audit: type=1326 audit(1760943264.007:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.3.655" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4539 code=0x0 [ 269.864632][ T983] usb 2-1: probing VID:PID(0424:012C) [ 269.873613][ T983] usb 2-1: vub300 testing BULK IN EndPoint(0) 8E [ 269.882752][ T983] usb 2-1: vub300 testing BULK IN EndPoint(1) 82 [ 269.889210][ T983] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 269.907810][ T983] vub300 2-1:2.174: probe with driver vub300 failed with error -22 [ 269.940984][ T983] usb 2-1: USB disconnect, device number 64 [ 270.007754][ T24] usb 5-1: USB disconnect, device number 71 [ 270.174917][ T8712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 270.277404][ T89] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 270.450532][ T89] usb 1-1: Using ep0 maxpacket: 32 [ 270.457970][ T89] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.482304][ T89] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 270.491820][ T89] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 270.504203][ T89] usb 1-1: Product: syz [ 270.508532][ T89] usb 1-1: Manufacturer: syz [ 270.514134][ T8720] cifs: Unknown parameter 'fd' [ 270.514134][ T8719] cifs: Unknown parameter 'fd' [ 270.519670][ T89] hub 1-1:4.0: bad descriptor, ignoring hub [ 270.530232][ T89] hub 1-1:4.0: probe with driver hub failed with error -5 [ 270.543313][ T89] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 270.609408][ T8723] fuse: Unknown parameter '0x0000000000000008' [ 271.105702][ T89] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 271.280268][ T89] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 271.289960][ T89] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 271.301155][ T89] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 271.369033][ T89] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 271.401622][ T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 271.426810][ T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 271.454353][ T89] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 271.645137][ T89] usb 3-1: string descriptor 0 read error: -22 [ 271.651658][ T89] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 271.660994][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.681391][ T89] usb 3-1: config 0 descriptor?? [ 271.709986][ T89] hub 3-1:0.0: bad descriptor, ignoring hub [ 271.737198][ T89] hub 3-1:0.0: probe with driver hub failed with error -5 [ 271.789870][ T89] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 271.966867][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 272.204549][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 272.233125][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 272.243770][ T24] usb 4-1: config 8 has an invalid interface number: 158 but max is 0 [ 272.252477][ T24] usb 4-1: config 8 has an invalid interface number: 158 but max is 0 [ 272.260862][ T24] usb 4-1: config 8 has no interface number 0 [ 272.268571][ T24] usb 4-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 272.287702][ T89] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 272.323797][ T24] usb 4-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 272.341828][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.350303][ T24] usb 4-1: Product: syz [ 272.354495][ T24] usb 4-1: Manufacturer: syz [ 272.363376][ T24] usb 4-1: SerialNumber: syz [ 272.461525][ T89] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 272.470448][ T89] usb 5-1: config 0 has no interface number 0 [ 272.484348][ T89] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 272.493740][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.501985][ T89] usb 5-1: Product: syz [ 272.506595][ T89] usb 5-1: Manufacturer: syz [ 272.512071][ T89] usb 5-1: SerialNumber: syz [ 272.523818][ T89] usb 5-1: config 0 descriptor?? [ 272.537136][ T89] usb-storage 5-1:0.20: USB Mass Storage device detected [ 272.620736][ T89] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 272.624978][ T24] sierra 4-1:8.158: Sierra USB modem converter detected [ 272.817730][ T24] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 272.839730][ T24] usb 4-1: USB disconnect, device number 63 [ 272.911827][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 272.923190][ T24] sierra 4-1:8.158: device disconnected [ 273.272231][ T8765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.338492][ T89] usb 1-1: reset high-speed USB device number 61 using dummy_hcd [ 273.466880][ T5907] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 273.527479][ T89] usb 1-1: device firmware changed [ 273.536878][ T89] usb 1-1: USB disconnect, device number 61 [ 273.629546][ T5907] usb 4-1: config 2 has an invalid interface number: 174 but max is 0 [ 273.638262][ T5907] usb 4-1: config 2 has no interface number 0 [ 273.645103][ T5907] usb 4-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 273.657308][ T5907] usb 4-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 273.671597][ T5907] usb 4-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 273.686037][ T5907] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 273.696144][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.705688][ T5907] usb 4-1: Product: syz [ 273.714064][ T5907] usb 4-1: Manufacturer: syz [ 273.721444][ T5907] usb 4-1: SerialNumber: syz [ 273.737024][ T8764] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 273.753314][ T8764] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 273.887002][ T89] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 273.995289][ T5907] usb 4-1: probing VID:PID(0424:012C) [ 274.004709][ T5907] usb 4-1: vub300 testing BULK IN EndPoint(0) 8E [ 274.012247][ T5907] usb 4-1: vub300 testing BULK IN EndPoint(1) 82 [ 274.018745][ T5907] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 274.026528][ T5907] vub300 4-1:2.174: probe with driver vub300 failed with error -22 [ 274.039878][ T89] usb 1-1: Using ep0 maxpacket: 32 [ 274.043145][ T5907] usb 4-1: USB disconnect, device number 64 [ 274.052703][ T89] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 274.061489][ T89] usb 1-1: config 0 has no interface number 0 [ 274.068029][ T89] usb 1-1: config 0 interface 12 has no altsetting 0 [ 274.082971][ T89] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 274.092994][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.101748][ T89] usb 1-1: Product: syz [ 274.106334][ T89] usb 1-1: Manufacturer: syz [ 274.111340][ T89] usb 1-1: SerialNumber: syz [ 274.119770][ T89] usb 1-1: config 0 descriptor?? [ 274.606953][ T983] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 274.753006][ T8780] fuse: Unknown parameter '0x0000000000000008' [ 274.780978][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.793934][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.805554][ T983] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 274.815203][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.858072][ T983] usb 2-1: config 0 descriptor?? [ 274.880467][ T5907] usb 3-1: USB disconnect, device number 41 [ 275.031366][ T5908] usb 5-1: USB disconnect, device number 72 [ 275.277307][ T983] usbhid 2-1:0.0: can't add hid device: -71 [ 275.289832][ T983] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 275.381538][ T8782] block device autoloading is deprecated and will be removed. [ 275.472154][ T983] usb 2-1: USB disconnect, device number 65 [ 276.655036][ T5906] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 276.716904][ T5907] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 276.817116][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 276.824816][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.840294][ T5906] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 276.850802][ T5906] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 276.877564][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 276.882908][ T5906] usb 2-1: config 8 has no interface number 0 [ 276.889903][ T5906] usb 2-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 276.908254][ T5907] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.947860][ T5907] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 276.957400][ T5907] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 276.966007][ T5907] usb 4-1: Product: syz [ 276.970812][ T5907] usb 4-1: Manufacturer: syz [ 276.978824][ T5906] usb 2-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 276.989665][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.005759][ T5906] usb 2-1: Product: syz [ 277.015031][ T5907] hub 4-1:4.0: bad descriptor, ignoring hub [ 277.021759][ T5906] usb 2-1: Manufacturer: syz [ 277.026428][ T5907] hub 4-1:4.0: probe with driver hub failed with error -5 [ 277.037944][ T5906] usb 2-1: SerialNumber: syz [ 277.045479][ T5907] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 277.204762][ T89] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 277.213122][ T89] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 277.422214][ T5906] sierra 2-1:8.158: Sierra USB modem converter detected [ 277.455878][ T5906] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 277.464642][ T89] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 277.464736][ T89] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 277.470446][ T89] usb 1-1: USB disconnect, device number 62 [ 277.524264][ T5906] usb 2-1: USB disconnect, device number 66 [ 277.530377][ T5907] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 277.552316][ T5906] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 277.568829][ T5906] sierra 2-1:8.158: device disconnected [ 277.688460][ T5907] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 277.696785][ T5907] usb 3-1: config 2 has no interface number 0 [ 277.702911][ T5907] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 277.714652][ T5907] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 277.725461][ T5907] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 277.738549][ T5907] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 277.747653][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.755647][ T5907] usb 3-1: Product: syz [ 277.759950][ T5907] usb 3-1: Manufacturer: syz [ 277.764559][ T5907] usb 3-1: SerialNumber: syz [ 277.774954][ T8815] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 277.782479][ T8815] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 278.023230][ T5907] usb 3-1: probing VID:PID(0424:012C) [ 278.033021][ T5907] usb 3-1: vub300 testing BULK IN EndPoint(0) 8E [ 278.039438][ T5907] usb 3-1: vub300 testing BULK IN EndPoint(1) 82 [ 278.045892][ T5907] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 278.053777][ T5907] vub300 3-1:2.174: probe with driver vub300 failed with error -22 [ 278.068430][ T5907] usb 3-1: USB disconnect, device number 42 [ 278.126903][ T5878] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 278.196879][ T89] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 278.282038][ T5878] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 278.290369][ T5878] usb 1-1: config 0 has no interface number 0 [ 278.299127][ T5878] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 278.308354][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.316354][ T5878] usb 1-1: Product: syz [ 278.320577][ T5878] usb 1-1: Manufacturer: syz [ 278.325242][ T5878] usb 1-1: SerialNumber: syz [ 278.332746][ T5878] usb 1-1: config 0 descriptor?? [ 278.339961][ T5878] usb-storage 1-1:0.20: USB Mass Storage device detected [ 278.349772][ T89] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.352384][ T5878] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 278.367697][ T89] usb 2-1: config 0 has no interfaces? [ 278.375310][ T89] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 278.385564][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.393747][ T89] usb 2-1: Product: syz [ 278.398245][ T89] usb 2-1: Manufacturer: syz [ 278.403185][ T89] usb 2-1: SerialNumber: syz [ 278.419825][ T89] usb 2-1: config 0 descriptor?? [ 278.730382][ T8829] fuse: Unknown parameter '0x0000000000000008' [ 279.487232][ T89] usb 4-1: USB disconnect, device number 65 [ 279.603468][ T8839] FAULT_INJECTION: forcing a failure. [ 279.603468][ T8839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.656294][ T8839] CPU: 0 UID: 0 PID: 8839 Comm: syz.3.694 Not tainted syzkaller #0 PREEMPT(full) [ 279.656318][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.656328][ T8839] Call Trace: [ 279.656336][ T8839] [ 279.656344][ T8839] dump_stack_lvl+0x189/0x250 [ 279.656367][ T8839] ? __pfx____ratelimit+0x10/0x10 [ 279.656393][ T8839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.656411][ T8839] ? __pfx__printk+0x10/0x10 [ 279.656429][ T8839] ? __might_fault+0xb0/0x130 [ 279.656459][ T8839] should_fail_ex+0x414/0x560 [ 279.656490][ T8839] _copy_from_user+0x2d/0xb0 [ 279.656513][ T8839] ucma_query_route+0xf1/0x920 [ 279.656541][ T8839] ? __pfx_ucma_query_route+0x10/0x10 [ 279.656560][ T8839] ? __lock_acquire+0xab9/0xd20 [ 279.656612][ T8839] ucma_write+0x249/0x2e0 [ 279.656635][ T8839] ? __pfx_ucma_write+0x10/0x10 [ 279.656653][ T8839] ? security_file_permission+0x75/0x290 [ 279.656679][ T8839] ? rw_verify_area+0x255/0x4d0 [ 279.656700][ T8839] vfs_writev+0x4b6/0x960 [ 279.656727][ T8839] ? __pfx_ucma_write+0x10/0x10 [ 279.656746][ T8839] ? __pfx_vfs_writev+0x10/0x10 [ 279.656778][ T8839] ? __fget_files+0x2a/0x420 [ 279.656801][ T8839] ? __fget_files+0x3a0/0x420 [ 279.656817][ T8839] ? __fget_files+0x2a/0x420 [ 279.656840][ T8839] do_writev+0x14d/0x2d0 [ 279.656862][ T8839] ? __pfx_do_writev+0x10/0x10 [ 279.656886][ T8839] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 279.656906][ T8839] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.656926][ T8839] __do_fast_syscall_32+0xb6/0x2b0 [ 279.656944][ T8839] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.656972][ T8839] do_fast_syscall_32+0x34/0x80 [ 279.656990][ T8839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.657010][ T8839] RIP: 0023:0xf7fb4539 [ 279.657025][ T8839] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 279.657040][ T8839] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 279.657059][ T8839] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 279.657071][ T8839] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.657080][ T8839] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.657090][ T8839] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 279.657101][ T8839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.657127][ T8839] [ 280.416967][ T983] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 280.566853][ T983] usb 5-1: Using ep0 maxpacket: 32 [ 280.572074][ T89] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 280.581700][ T983] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 280.589944][ T983] usb 5-1: config 0 has no interface number 0 [ 280.596054][ T983] usb 5-1: config 0 interface 12 has no altsetting 0 [ 280.604934][ T983] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 280.614330][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.622721][ T983] usb 5-1: Product: syz [ 280.627705][ T983] usb 5-1: Manufacturer: syz [ 280.633278][ T983] usb 5-1: SerialNumber: syz [ 280.640279][ T983] usb 5-1: config 0 descriptor?? [ 280.726849][ T89] usb 3-1: Using ep0 maxpacket: 32 [ 280.733879][ T89] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.747132][ T89] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 280.756422][ T89] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 280.764983][ T89] usb 3-1: Product: syz [ 280.769310][ T89] usb 3-1: Manufacturer: syz [ 280.781411][ T89] hub 3-1:4.0: bad descriptor, ignoring hub [ 280.787918][ T89] hub 3-1:4.0: probe with driver hub failed with error -5 [ 280.796350][ T89] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 280.894016][ T89] usb 1-1: USB disconnect, device number 63 [ 280.983425][ T9] usb 2-1: USB disconnect, device number 67 [ 281.060705][ T8872] binder: 8871:8872 unknown command 1074291478 [ 281.068215][ T8872] binder: 8871:8872 ioctl c0306201 80000540 returned -22 [ 281.130633][ T8874] fuse: Unknown parameter 'fd0x0000000000000008' [ 281.273494][ T8876] random: crng reseeded on system resumption [ 281.786889][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 281.946955][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 281.955020][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 281.973177][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.008609][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.042384][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.056961][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.073369][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.088443][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.335073][ T9] usb 2-1: usb_control_msg returned -32 [ 282.341030][ T9] usbtmc 2-1:16.0: can't read capabilities [ 282.771075][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.779331][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.863187][ T8895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.879010][ T8895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.997900][ T6007] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.009075][ T6007] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.018868][ T6007] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.028102][ T6007] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.044018][ T8883] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 283.155834][ T8900] xt_hashlimit: size too large, truncated to 1048576 [ 283.165650][ T8900] xt_hashlimit: Unknown mode mask FFFFFFE, kernel too old? [ 283.181704][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.714'. [ 283.597816][ T5906] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 283.609088][ T5906] usb 3-1: device reset changed ep0 maxpacket size! [ 283.616355][ T5906] usb 3-1: USB disconnect, device number 43 [ 283.637637][ T5907] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 283.685662][ T983] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 283.693512][ T983] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 283.701202][ T983] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 283.709798][ T983] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 283.725430][ T983] usb 5-1: USB disconnect, device number 73 [ 283.809669][ T5907] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 283.817913][ T5907] usb 1-1: config 0 has no interface number 0 [ 283.826099][ T5907] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 283.836254][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.844525][ T5907] usb 1-1: Product: syz [ 283.848821][ T5907] usb 1-1: Manufacturer: syz [ 283.853475][ T5907] usb 1-1: SerialNumber: syz [ 283.860655][ T5907] usb 1-1: config 0 descriptor?? [ 283.867721][ T5907] usb-storage 1-1:0.20: USB Mass Storage device detected [ 283.877406][ T5907] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 283.946883][ T5906] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 284.098755][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.110127][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.123938][ T5906] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 284.133821][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.144642][ T5906] usb 3-1: config 0 descriptor?? [ 284.284042][ T983] usb 2-1: USB disconnect, device number 68 [ 284.492648][ T8919] fuse: Unknown parameter 'fd0x0000000000000008' [ 284.506961][ T5907] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 284.559523][ C1] raw-gadget.3 gadget.2: ignoring, device is not running [ 284.567082][ C1] raw-gadget.3 gadget.2: ignoring, device is not running [ 284.574547][ T5906] usbhid 3-1:0.0: can't add hid device: -32 [ 284.580728][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 284.609693][ T5906] usb 3-1: USB disconnect, device number 44 [ 284.668836][ T5907] usb 4-1: config 2 has an invalid interface number: 174 but max is 0 [ 284.681349][ T5907] usb 4-1: config 2 has no interface number 0 [ 284.694860][ T5907] usb 4-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 284.707201][ T5907] usb 4-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 284.717996][ T5907] usb 4-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 284.733603][ T5907] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 284.749097][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.762360][ T5907] usb 4-1: Product: syz [ 284.769597][ T5907] usb 4-1: Manufacturer: syz [ 284.776947][ T5907] usb 4-1: SerialNumber: syz [ 284.791354][ T8912] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 284.799561][ T8912] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 285.059884][ T5907] usb 4-1: probing VID:PID(0424:012C) [ 285.076412][ T5907] usb 4-1: vub300 testing BULK IN EndPoint(0) 8E [ 285.087716][ T5907] usb 4-1: vub300 testing BULK IN EndPoint(1) 82 [ 285.193586][ T5907] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 285.252907][ T5907] vub300 4-1:2.174: probe with driver vub300 failed with error -22 [ 285.292469][ T5907] usb 4-1: USB disconnect, device number 66 [ 285.597040][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 285.760041][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 285.776617][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 285.788973][ T24] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 285.798901][ T24] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 285.807142][ T24] usb 3-1: Product: syz [ 285.826812][ T24] usb 3-1: Manufacturer: syz [ 285.826861][ T5908] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 285.840927][ T24] usb 3-1: SerialNumber: syz [ 286.038928][ T5908] usb 2-1: not running at top speed; connect to a high speed hub [ 286.056027][ T5908] usb 2-1: config 7 has an invalid interface number: 74 but max is 2 [ 286.065704][ T5908] usb 2-1: config 7 has an invalid interface number: 238 but max is 2 [ 286.070274][ T24] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 286.074478][ T5908] usb 2-1: config 7 has an invalid interface number: 17 but max is 2 [ 286.092105][ T5908] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 286.101457][ T5908] usb 2-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 286.101976][ T24] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 286.112774][ T5908] usb 2-1: config 7 has no interface number 0 [ 286.127940][ T5908] usb 2-1: config 7 has no interface number 1 [ 286.134268][ T5908] usb 2-1: config 7 has no interface number 2 [ 286.140961][ T5908] usb 2-1: config 7 interface 74 altsetting 206 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 286.161436][ T5908] usb 2-1: config 7 interface 74 altsetting 206 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 286.238313][ T5908] usb 2-1: config 7 interface 74 altsetting 206 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 286.239704][ T24] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 286.287784][ T24] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 286.299882][ T5908] usb 2-1: config 7 interface 74 altsetting 206 has an invalid descriptor for endpoint zero, skipping [ 286.363012][ T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 286.395342][ T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 286.407502][ T5908] usb 2-1: config 7 interface 74 altsetting 206 has an invalid descriptor for endpoint zero, skipping [ 286.446076][ T5908] usb 2-1: config 7 interface 74 altsetting 206 has a duplicate endpoint with address 0x4, skipping [ 286.474154][ T24] usb 1-1: USB disconnect, device number 64 [ 286.512183][ T5906] usb 3-1: USB disconnect, device number 45 [ 286.519365][ T5908] usb 2-1: config 7 interface 74 altsetting 206 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 286.641827][ T5908] usb 2-1: config 7 interface 74 altsetting 206 has a duplicate endpoint with address 0xC, skipping [ 286.659099][ T5908] usb 2-1: config 7 interface 74 altsetting 206 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 286.672013][ T5908] usb 2-1: config 7 interface 238 altsetting 225 has a duplicate endpoint with address 0xE, skipping [ 286.684803][ T5908] usb 2-1: config 7 interface 238 altsetting 225 has a duplicate endpoint with address 0x6, skipping [ 286.727433][ T5906] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 286.741767][ T5908] usb 2-1: config 7 interface 238 altsetting 225 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 286.768907][ T5908] usb 2-1: config 7 interface 238 altsetting 225 has a duplicate endpoint with address 0x5, skipping [ 286.791790][ T5906] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 286.811538][ T5908] usb 2-1: config 7 interface 238 altsetting 225 has a duplicate endpoint with address 0x82, skipping [ 286.827942][ T5906] visor 3-1:1.0: device disconnected [ 286.832917][ T5908] usb 2-1: config 7 interface 238 altsetting 225 has a duplicate endpoint with address 0x5, skipping [ 286.858518][ T5908] usb 2-1: config 7 interface 17 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 286.897819][ T5908] usb 2-1: config 7 interface 74 has no altsetting 0 [ 287.158056][ T5908] usb 2-1: config 7 interface 238 has no altsetting 0 [ 287.174793][ T5908] usb 2-1: config 7 interface 17 has no altsetting 0 [ 287.222018][ T5908] usb 2-1: Dual-Role OTG device on HNP port [ 287.228361][ T5908] usb 2-1: New USB device found, idVendor=045e, idProduct=0442, bcdDevice=fc.9d [ 287.237917][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.267215][ T5908] usb 2-1: Manufacturer: Щ [ 287.276308][ T8934] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 287.320428][ T8952] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 287.340078][ T8952] warning: `syz.2.729' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 287.376802][ T24] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 287.426819][ T5907] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 287.606879][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 287.637578][ T5908] usb 2-1: USB disconnect, device number 69 [ 287.764532][ T5907] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 287.814718][ T24] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 287.828771][ T5907] usb 5-1: config 0 has no interface number 0 [ 287.843128][ T24] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 287.855206][ T5907] usb 5-1: config 0 interface 12 has no altsetting 0 [ 287.881580][ T24] usb 1-1: Product: syz [ 287.892775][ T5907] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 287.930443][ T24] usb 1-1: Manufacturer: syz [ 287.958100][ T24] usb 1-1: SerialNumber: syz [ 287.965053][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.982969][ T5907] usb 5-1: Product: syz [ 287.993396][ T5907] usb 5-1: Manufacturer: syz [ 288.008927][ T24] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 288.020087][ T5907] usb 5-1: SerialNumber: syz [ 288.036597][ T5907] usb 5-1: config 0 descriptor?? [ 289.041269][ T8973] fuse: Unknown parameter 'fd0x0000000000000008' [ 290.079018][ T24] vp7045: USB control message 'out' went wrong. [ 290.125633][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 290.175651][ T24] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 290.774046][ T24] usb 1-1: USB disconnect, device number 65 [ 291.085212][ T5907] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 291.103101][ T5907] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 291.117034][ T5907] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 291.132415][ T5907] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 291.150311][ T5907] usb 5-1: USB disconnect, device number 74 [ 291.296880][ T5908] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 291.406878][ T5906] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 291.508281][ T5908] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 291.516379][ T5908] usb 1-1: config 0 has no interface number 0 [ 291.526379][ T5908] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 291.536291][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.545906][ T5908] usb 1-1: Product: syz [ 291.601771][ T5906] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 291.606961][ T5908] usb 1-1: Manufacturer: syz [ 291.638973][ T5906] usb 3-1: config 2 has no interface number 0 [ 291.645114][ T5906] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 291.658670][ T5908] usb 1-1: SerialNumber: syz [ 291.695828][ T5906] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 291.716295][ T5908] usb 1-1: config 0 descriptor?? [ 291.735330][ T5908] usb-storage 1-1:0.20: USB Mass Storage device detected [ 291.749024][ T5908] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 291.810620][ T8995] FAULT_INJECTION: forcing a failure. [ 291.810620][ T8995] name failslab, interval 1, probability 0, space 0, times 0 [ 291.947006][ T8995] CPU: 0 UID: 0 PID: 8995 Comm: syz.4.740 Not tainted syzkaller #0 PREEMPT(full) [ 291.947030][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.947040][ T8995] Call Trace: [ 291.947048][ T8995] [ 291.947055][ T8995] dump_stack_lvl+0x189/0x250 [ 291.947077][ T8995] ? __pfx____ratelimit+0x10/0x10 [ 291.947101][ T8995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.947117][ T8995] ? __pfx__printk+0x10/0x10 [ 291.947139][ T8995] ? __pfx___might_resched+0x10/0x10 [ 291.947159][ T8995] ? fs_reclaim_acquire+0x7d/0x100 [ 291.947182][ T8995] should_fail_ex+0x414/0x560 [ 291.947211][ T8995] should_failslab+0xa8/0x100 [ 291.947233][ T8995] __kmalloc_cache_noprof+0x6f/0x6f0 [ 291.947251][ T8995] ? ovs_flow_tbl_init+0xf8/0x7f0 [ 291.947277][ T8995] ovs_flow_tbl_init+0xf8/0x7f0 [ 291.947298][ T8995] ? ovs_dp_cmd_new+0x1ac/0xaf0 [ 291.947312][ T8995] ? __alloc_skb+0x1bc/0x2d0 [ 291.947337][ T8995] ovs_dp_cmd_new+0x24b/0xaf0 [ 291.947364][ T8995] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 291.947386][ T8995] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 291.947413][ T8995] genl_family_rcv_msg_doit+0x215/0x300 [ 291.947446][ T8995] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 291.947476][ T8995] ? bpf_lsm_capable+0x9/0x20 [ 291.947490][ T8995] ? security_capable+0x7e/0x2e0 [ 291.947513][ T8995] genl_rcv_msg+0x60e/0x790 [ 291.947537][ T8995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.947554][ T8995] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 291.947571][ T8995] ? __asan_memcpy+0x40/0x70 [ 291.947586][ T8995] ? __pfx_ref_tracker_free+0x10/0x10 [ 291.947610][ T8995] netlink_rcv_skb+0x208/0x470 [ 291.947630][ T8995] ? __lock_acquire+0xab9/0xd20 [ 291.947650][ T8995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.947668][ T8995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.947703][ T8995] ? down_read+0x1ad/0x2e0 [ 291.947722][ T8995] genl_rcv+0x28/0x40 [ 291.947735][ T8995] netlink_unicast+0x82f/0x9e0 [ 291.947763][ T8995] ? __pfx_netlink_unicast+0x10/0x10 [ 291.947782][ T8995] ? netlink_sendmsg+0x642/0xb30 [ 291.947802][ T8995] ? skb_put+0x11b/0x210 [ 291.947827][ T8995] netlink_sendmsg+0x805/0xb30 [ 291.947857][ T8995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.947883][ T8995] ? __import_iovec+0x5d4/0x7f0 [ 291.947901][ T8995] ? aa_sock_msg_perm+0xf1/0x1d0 [ 291.947921][ T8995] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.947940][ T8995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.947961][ T8995] __sock_sendmsg+0x21c/0x270 [ 291.947984][ T8995] ____sys_sendmsg+0x505/0x830 [ 291.948007][ T8995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.948036][ T8995] ___sys_sendmsg+0x21f/0x2a0 [ 291.948053][ T8995] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.948107][ T8995] ? __fget_files+0x2a/0x420 [ 291.948126][ T8995] ? __fget_files+0x3a0/0x420 [ 291.948156][ T8995] __sys_sendmsg+0x164/0x220 [ 291.948176][ T8995] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.948202][ T8995] ? __pfx_ksys_write+0x10/0x10 [ 291.948224][ T8995] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 291.948244][ T8995] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.948265][ T8995] __do_fast_syscall_32+0xb6/0x2b0 [ 291.948284][ T8995] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.948306][ T8995] do_fast_syscall_32+0x34/0x80 [ 291.948323][ T8995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.948343][ T8995] RIP: 0023:0xf7f91539 [ 291.948359][ T8995] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 291.948373][ T8995] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 291.948392][ T8995] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 291.948404][ T8995] RDX: 0000000004040044 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.948415][ T8995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.948425][ T8995] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 291.948442][ T8995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.948470][ T8995] [ 291.949809][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 291.957103][ T5906] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 292.594717][ T5906] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 292.604046][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.612186][ T5906] usb 3-1: Product: syz [ 292.617715][ T5906] usb 3-1: Manufacturer: syz [ 292.622485][ T5906] usb 3-1: SerialNumber: syz [ 292.627321][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.741'. [ 292.646967][ T8985] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 292.654318][ T8985] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 292.918347][ T5906] usb 3-1: probing VID:PID(0424:012C) [ 292.932848][ T5906] usb 3-1: vub300 testing BULK IN EndPoint(0) 8E [ 292.946001][ T5906] usb 3-1: vub300 testing BULK IN EndPoint(1) 82 [ 292.954099][ T5906] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 292.963551][ T5906] vub300 3-1:2.174: probe with driver vub300 failed with error -22 [ 292.983244][ T5906] usb 3-1: USB disconnect, device number 46 [ 293.050314][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 293.397552][ T983] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 293.494389][ T9021] tipc: Started in network mode [ 293.496823][ T5906] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 293.500200][ T9021] tipc: Node identity 2a2e21d9f096, cluster identity 4711 [ 293.514853][ T9021] tipc: Enabled bearer , priority 0 [ 293.528944][ T9021] syzkaller0: entered promiscuous mode [ 293.535604][ T9021] syzkaller0: entered allmulticast mode [ 293.556866][ T983] usb 2-1: Using ep0 maxpacket: 8 [ 293.563192][ T9021] tipc: Resetting bearer [ 293.572739][ T983] usb 2-1: unable to get BOS descriptor or descriptor too short [ 293.581067][ T9019] tipc: Resetting bearer [ 293.588060][ T983] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 293.596447][ T983] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 293.612332][ T9019] tipc: Disabling bearer [ 293.612722][ T983] usb 2-1: config 8 has no interface number 0 [ 293.624643][ T983] usb 2-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 293.641901][ T983] usb 2-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 293.651219][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.659300][ T983] usb 2-1: Product: syz [ 293.663576][ T983] usb 2-1: Manufacturer: syz [ 293.668262][ T983] usb 2-1: SerialNumber: syz [ 293.669791][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.704545][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.716002][ T5906] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 293.725408][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.757347][ T5906] usb 4-1: config 0 descriptor?? [ 293.807179][ T5878] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 293.898528][ T983] sierra 2-1:8.158: Sierra USB modem converter detected [ 293.920835][ T983] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 294.093940][ T983] usb 2-1: USB disconnect, device number 70 [ 294.116220][ T24] usb 1-1: USB disconnect, device number 66 [ 294.134683][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.154956][ T983] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 294.212466][ T983] sierra 2-1:8.158: device disconnected [ 294.219071][ T5878] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 294.236705][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.288634][ T5878] usb 3-1: config 0 descriptor?? [ 294.320251][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 294.707467][ T5906] usbhid 4-1:0.0: can't add hid device: -71 [ 294.713702][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 294.776577][ T5906] usb 4-1: USB disconnect, device number 67 [ 294.995928][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 295.007286][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 295.395023][ T5878] pwc: recv_control_msg error -71 req 04 val 1000 [ 295.411985][ T5878] pwc: recv_control_msg error -71 req 04 val 1300 [ 295.424716][ T5878] pwc: recv_control_msg error -71 req 04 val 1400 [ 295.482937][ T5878] pwc: recv_control_msg error -71 req 02 val 2000 [ 295.509937][ T5878] pwc: recv_control_msg error -71 req 02 val 2100 [ 295.517266][ T5878] pwc: recv_control_msg error -71 req 04 val 1500 [ 295.529316][ T5878] pwc: recv_control_msg error -71 req 02 val 2500 [ 295.549017][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 295.570300][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 295.577476][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 295.586521][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 295.602322][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 295.613265][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 295.626794][ T5878] pwc: Registered as video103. [ 295.634959][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 295.728596][ T5878] usb 3-1: USB disconnect, device number 47 [ 296.376973][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 296.513897][ T9057] netlink: 44 bytes leftover after parsing attributes in process `syz.4.757'. [ 296.528984][ T24] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 296.537853][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.568655][ T24] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 296.578264][ T24] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 296.590277][ T24] usb 3-1: Manufacturer: syz [ 296.603858][ T24] usb 3-1: config 0 descriptor?? [ 296.679607][ T24] rc_core: IR keymap rc-hauppauge not found [ 296.685592][ T24] Registered IR keymap rc-empty [ 296.693478][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 296.709790][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 296.758535][ T5906] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 296.840885][ T9051] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000005' [ 296.847396][ T983] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 296.909809][ T24] usb 3-1: USB disconnect, device number 48 [ 296.918492][ T5906] usb 5-1: config 0 has an invalid interface number: 248 but max is 0 [ 296.929625][ T5906] usb 5-1: config 0 has no interface number 0 [ 296.940546][ T5906] usb 5-1: New USB device found, idVendor=0af0, idProduct=7501, bcdDevice= 0.00 [ 296.954473][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.964120][ T5906] usb 5-1: Product: syz [ 296.970677][ T5906] usb 5-1: Manufacturer: syz [ 296.975411][ T5906] usb 5-1: SerialNumber: syz [ 296.984112][ T5906] usb 5-1: config 0 descriptor?? [ 296.990939][ T5906] hso 5-1:0.248: Not our interface [ 296.996336][ T5906] usb-storage 5-1:0.248: USB Mass Storage device detected [ 296.997237][ T983] usb 2-1: device descriptor read/64, error -71 [ 297.026860][ T5878] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 297.178521][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.188915][ T5878] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 297.203305][ T5878] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 297.216168][ T9] usb 5-1: USB disconnect, device number 75 [ 297.231374][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.239704][ T5878] usb 4-1: Product: syz [ 297.243884][ T5878] usb 4-1: Manufacturer: syz [ 297.248661][ T5878] usb 4-1: SerialNumber: syz [ 297.257000][ T983] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 297.257622][ T5878] usb 4-1: config 0 descriptor?? [ 297.406961][ T983] usb 2-1: device descriptor read/64, error -71 [ 297.518326][ T983] usb usb2-port1: attempt power cycle [ 297.636905][ T5878] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 297.789607][ T5878] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 297.797855][ T5878] usb 1-1: config 0 has no interface number 0 [ 297.806164][ T5878] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 297.815538][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.823913][ T5878] usb 1-1: Product: syz [ 297.828345][ T5878] usb 1-1: Manufacturer: syz [ 297.832975][ T5878] usb 1-1: SerialNumber: syz [ 297.844597][ T5878] usb 1-1: config 0 descriptor?? [ 297.856239][ T5878] usb-storage 1-1:0.20: USB Mass Storage device detected [ 297.867035][ T983] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 297.868997][ T5878] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 297.897376][ T983] usb 2-1: device descriptor read/8, error -71 [ 298.006875][ T24] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 298.136963][ T983] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 298.157583][ T983] usb 2-1: device descriptor read/8, error -71 [ 298.164666][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 298.172929][ T24] usb 5-1: config 0 has no interface number 0 [ 298.179406][ T24] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.190402][ T24] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.200207][ T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 298.209426][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.221273][ T24] usb 5-1: config 0 descriptor?? [ 298.267139][ T983] usb usb2-port1: unable to enumerate USB device [ 298.634356][ T24] uclogic 0003:28BD:0905.000B: Interface probing failed: -22 [ 298.642048][ T24] uclogic 0003:28BD:0905.000B: interface is invalid, ignoring [ 298.850186][ T983] usb 5-1: USB disconnect, device number 76 [ 299.943741][ T24] usb 4-1: USB disconnect, device number 68 [ 300.655730][ T24] usb 1-1: USB disconnect, device number 67 [ 301.807108][ T24] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 301.896893][ T5878] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 301.999553][ T24] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 302.007916][ T24] usb 1-1: config 0 has no interface number 0 [ 302.017452][ T24] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 302.028069][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.081570][ T24] usb 1-1: Product: syz [ 302.090262][ T24] usb 1-1: Manufacturer: syz [ 302.101657][ T24] usb 1-1: SerialNumber: syz [ 302.123740][ T5878] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 302.134826][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 302.158383][ T5878] usb 3-1: Product: syz [ 302.162645][ T5878] usb 3-1: Manufacturer: syz [ 302.168851][ T5878] usb 3-1: SerialNumber: syz [ 302.201304][ T5878] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 302.215223][ T24] usb 1-1: config 0 descriptor?? [ 302.228847][ T24] usb-storage 1-1:0.20: USB Mass Storage device detected [ 302.241331][ T24] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 303.636841][ T24] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 303.787657][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 303.796449][ T24] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 303.805898][ T24] usb 2-1: config 0 has no interface number 0 [ 303.819327][ T24] usb 2-1: config 0 interface 12 has no altsetting 0 [ 303.829211][ T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 303.848716][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.857410][ T24] usb 2-1: Product: syz [ 303.861635][ T24] usb 2-1: Manufacturer: syz [ 303.866271][ T24] usb 2-1: SerialNumber: syz [ 303.874995][ T24] usb 2-1: config 0 descriptor?? [ 304.043720][ T5878] vp7045: USB control message 'out' went wrong. [ 304.069921][ T5878] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 304.106121][ T983] usb 1-1: USB disconnect, device number 68 [ 304.113308][ T5878] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 304.176661][ T5878] usb 3-1: USB disconnect, device number 49 [ 304.386940][ T5908] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 304.536871][ T983] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 304.559469][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.569832][ T5908] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 304.580941][ T5908] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 304.590054][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.599017][ T5908] usb 4-1: Product: syz [ 304.603199][ T5908] usb 4-1: Manufacturer: syz [ 304.609149][ T5908] usb 4-1: SerialNumber: syz [ 304.616306][ T5908] usb 4-1: config 0 descriptor?? [ 304.626954][ T5878] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 304.686816][ T983] usb 1-1: Using ep0 maxpacket: 8 [ 304.694012][ T983] usb 1-1: unable to get BOS descriptor or descriptor too short [ 304.705642][ T983] usb 1-1: config 8 has an invalid interface number: 158 but max is 0 [ 304.714005][ T983] usb 1-1: config 8 has an invalid interface number: 158 but max is 0 [ 304.722777][ T983] usb 1-1: config 8 has no interface number 0 [ 304.728947][ T983] usb 1-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 304.745360][ T983] usb 1-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 304.754593][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.762653][ T983] usb 1-1: Product: syz [ 304.766868][ T983] usb 1-1: Manufacturer: syz [ 304.771454][ T983] usb 1-1: SerialNumber: syz [ 304.800305][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 304.811981][ T5878] usb 3-1: unable to get BOS descriptor or descriptor too short [ 304.821277][ T5878] usb 3-1: config 8 has an invalid interface number: 158 but max is 0 [ 304.829549][ T5878] usb 3-1: config 8 has an invalid interface number: 158 but max is 0 [ 304.837923][ T5878] usb 3-1: config 8 has no interface number 0 [ 304.844493][ T5878] usb 3-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 304.860098][ T5878] usb 3-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 304.869190][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.877360][ T5878] usb 3-1: Product: syz [ 304.881543][ T5878] usb 3-1: Manufacturer: syz [ 304.886171][ T5878] usb 3-1: SerialNumber: syz [ 304.986307][ T983] sierra 1-1:8.158: Sierra USB modem converter detected [ 304.996481][ T983] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 305.013654][ T983] usb 1-1: USB disconnect, device number 69 [ 305.031405][ T983] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 305.042858][ T983] sierra 1-1:8.158: device disconnected [ 305.111406][ T5878] sierra 3-1:8.158: Sierra USB modem converter detected [ 305.121039][ T5878] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 305.131904][ T5878] usb 3-1: USB disconnect, device number 50 [ 305.142562][ T5878] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 305.152197][ T5878] sierra 3-1:8.158: device disconnected [ 305.598552][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'. [ 306.346986][ T983] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 306.536886][ T983] usb 3-1: Using ep0 maxpacket: 32 [ 306.559280][ T983] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.571397][ T983] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.593836][ T983] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 306.603338][ T983] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 306.616852][ T983] usb 3-1: Product: syz [ 306.625088][ T983] usb 3-1: Manufacturer: syz [ 306.665977][ T983] hub 3-1:4.0: USB hub found [ 306.899965][ T983] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 306.997680][ T983] usb 3-1: USB disconnect, device number 51 [ 307.005851][ T24] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 307.014288][ T24] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 307.053093][ T24] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 307.081916][ T24] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 307.360059][ T9] usb 4-1: USB disconnect, device number 69 [ 307.487658][ T24] usb 2-1: USB disconnect, device number 75 [ 307.547001][ T5908] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 307.959310][ T5908] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 307.980986][ T5908] usb 5-1: config 0 has no interface number 0 [ 308.003117][ T5908] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 308.012591][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.021228][ T5908] usb 5-1: Product: syz [ 308.028998][ T5908] usb 5-1: Manufacturer: syz [ 308.033893][ T5908] usb 5-1: SerialNumber: syz [ 308.086110][ T5908] usb 5-1: config 0 descriptor?? [ 308.095019][ T5908] usb-storage 5-1:0.20: USB Mass Storage device detected [ 308.126870][ T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 308.157534][ T5908] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 308.288421][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 308.295702][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 308.310388][ T24] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 308.341244][ T24] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 308.696488][ T24] usb 2-1: config 8 has no interface number 0 [ 308.787280][ T24] usb 2-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 308.812660][ T24] usb 2-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 308.816853][ T5908] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 308.837753][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.877015][ T24] usb 2-1: Product: syz [ 308.888017][ T24] usb 2-1: Manufacturer: syz [ 308.900299][ T24] usb 2-1: SerialNumber: syz [ 309.000572][ T5908] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 309.009214][ T5908] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 309.022077][ T5908] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 309.034140][ T5908] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 309.047210][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 309.064743][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 309.076831][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 309.094246][ T5908] usb 3-1: string descriptor 0 read error: -22 [ 309.103266][ T5908] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 309.112557][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.133937][ T5908] usb 3-1: config 0 descriptor?? [ 309.142105][ T5908] hub 3-1:0.0: bad descriptor, ignoring hub [ 309.148305][ T5908] hub 3-1:0.0: probe with driver hub failed with error -5 [ 309.155334][ T24] sierra 2-1:8.158: Sierra USB modem converter detected [ 309.172776][ T5908] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 309.172866][ T24] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 309.207211][ T24] usb 2-1: USB disconnect, device number 76 [ 309.230922][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 309.242092][ T24] sierra 2-1:8.158: device disconnected [ 310.097860][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 310.127770][ T24] usb 5-1: USB disconnect, device number 77 [ 310.138522][ T9242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.804'. [ 310.696849][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 310.848166][ T24] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 310.868195][ T24] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 310.880944][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.895794][ T9259] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 310.914915][ T24] usb 5-1: Product: syz [ 310.965839][ T24] usb 5-1: Manufacturer: syz [ 310.975535][ T24] usb 5-1: SerialNumber: syz [ 310.980320][ T5878] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 310.997707][ T24] usb 5-1: config 0 descriptor?? [ 311.014479][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 311.039701][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 311.054172][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 311.065471][ T24] usb 5-1: media controller created [ 311.107937][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.137196][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 311.144277][ T5878] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 311.154951][ T5878] usb 4-1: config 0 has no interface number 0 [ 311.170958][ T5878] usb 4-1: config 0 interface 12 has no altsetting 0 [ 311.182291][ T5878] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 311.191615][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.199982][ T5878] usb 4-1: Product: syz [ 311.204199][ T5878] usb 4-1: Manufacturer: syz [ 311.210846][ T5878] usb 4-1: SerialNumber: syz [ 311.221799][ T5878] usb 4-1: config 0 descriptor?? [ 311.227034][ T24] DVB: Unable to find symbol mt352_attach() [ 311.284092][ T24] DVB: Unable to find symbol nxt6000_attach() [ 311.291863][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 311.319321][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 311.350210][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 311.361522][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 311.373214][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 311.380084][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 311.686867][ T24] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 311.848745][ T24] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 311.857264][ T24] usb 2-1: config 2 has no interface number 0 [ 311.863637][ T24] usb 2-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 311.877569][ T24] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 311.888586][ T24] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 311.901185][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 311.910328][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.918764][ T24] usb 2-1: Product: syz [ 311.922968][ T24] usb 2-1: Manufacturer: syz [ 311.927664][ T24] usb 2-1: SerialNumber: syz [ 311.935977][ T9270] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 311.943452][ T9270] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 312.172472][ T43] usb 3-1: USB disconnect, device number 52 [ 312.475088][ T5907] dvb-usb: bulk message failed: -22 (7/0) [ 312.495188][ T24] usb 2-1: probing VID:PID(0424:012C) [ 312.504414][ T24] usb 2-1: vub300 testing BULK IN EndPoint(0) 8E [ 312.515512][ T5907] dvb-usb: error while querying for an remote control event. [ 312.530540][ T24] usb 2-1: vub300 testing BULK IN EndPoint(1) 82 [ 312.565824][ T24] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 312.589332][ T24] vub300 2-1:2.174: probe with driver vub300 failed with error -22 [ 312.624936][ T24] usb 2-1: USB disconnect, device number 77 [ 312.918389][ T43] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 313.078414][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 313.094511][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 313.112237][ T43] usb 3-1: config 8 has an invalid interface number: 158 but max is 0 [ 313.122356][ T43] usb 3-1: config 8 has an invalid interface number: 158 but max is 0 [ 313.130624][ T43] usb 3-1: config 8 has no interface number 0 [ 313.137272][ T43] usb 3-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 313.152685][ T43] usb 3-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 313.161874][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.170229][ T43] usb 3-1: Product: syz [ 313.174393][ T43] usb 3-1: Manufacturer: syz [ 313.179131][ T43] usb 3-1: SerialNumber: syz [ 313.249785][ T24] usb 5-1: USB disconnect, device number 78 [ 313.298415][ T5908] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 313.341179][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 313.347120][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 313.399417][ T43] sierra 3-1:8.158: Sierra USB modem converter detected [ 313.414433][ T43] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 313.440887][ T43] usb 3-1: USB disconnect, device number 53 [ 313.459335][ T5908] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 313.463263][ T43] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 313.477284][ T43] sierra 3-1:8.158: device disconnected [ 313.485741][ T5908] usb 1-1: config 0 has no interface number 0 [ 313.503491][ T5908] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 313.514252][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 313.520924][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.530351][ T5908] usb 1-1: Product: syz [ 313.534602][ T5908] usb 1-1: Manufacturer: syz [ 313.540748][ T5908] usb 1-1: SerialNumber: syz [ 313.545885][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 313.557053][ T5908] usb 1-1: config 0 descriptor?? [ 313.565835][ T5908] usb-storage 1-1:0.20: USB Mass Storage device detected [ 313.574512][ T9] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 313.582924][ T9] usb 2-1: config 8 has an invalid interface number: 158 but max is 0 [ 313.591521][ T9] usb 2-1: config 8 has no interface number 0 [ 313.622336][ T9] usb 2-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 313.654408][ T5908] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 313.675971][ T9] usb 2-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 313.685823][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.736001][ T9] usb 2-1: Product: syz [ 313.741460][ T9] usb 2-1: Manufacturer: syz [ 313.746150][ T9] usb 2-1: SerialNumber: syz [ 313.987708][ T9] sierra 2-1:8.158: Sierra USB modem converter detected [ 314.025283][ T9] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 314.042821][ T9] usb 2-1: USB disconnect, device number 78 [ 314.069822][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 314.081868][ T9] sierra 2-1:8.158: device disconnected [ 314.264419][ T9302] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 314.336481][ T5878] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 314.344373][ T5878] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 314.407701][ T5878] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 314.431781][ T5878] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 314.527053][ T5878] usb 4-1: USB disconnect, device number 70 [ 314.773306][ T9305] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 314.943965][ T9312] FAULT_INJECTION: forcing a failure. [ 314.943965][ T9312] name failslab, interval 1, probability 0, space 0, times 0 [ 314.982761][ T9312] CPU: 0 UID: 0 PID: 9312 Comm: syz.4.821 Not tainted syzkaller #0 PREEMPT(full) [ 314.982786][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 314.982798][ T9312] Call Trace: [ 314.982805][ T9312] [ 314.982813][ T9312] dump_stack_lvl+0x189/0x250 [ 314.982838][ T9312] ? __pfx____ratelimit+0x10/0x10 [ 314.982863][ T9312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.982881][ T9312] ? __pfx__printk+0x10/0x10 [ 314.982904][ T9312] ? __pfx___might_resched+0x10/0x10 [ 314.982925][ T9312] ? fs_reclaim_acquire+0x7d/0x100 [ 314.982950][ T9312] should_fail_ex+0x414/0x560 [ 314.982980][ T9312] should_failslab+0xa8/0x100 [ 314.983003][ T9312] kmem_cache_alloc_noprof+0x74/0x6e0 [ 314.983021][ T9312] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 314.983039][ T9312] ? getname_flags+0xb8/0x540 [ 314.983065][ T9312] getname_flags+0xb8/0x540 [ 314.983098][ T9312] user_path_at+0x24/0x60 [ 314.983123][ T9312] do_sys_truncate+0xa3/0x190 [ 314.983142][ T9312] ? __pfx_do_sys_truncate+0x10/0x10 [ 314.983160][ T9312] ? __pfx_ksys_write+0x10/0x10 [ 314.983180][ T9312] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 314.983202][ T9312] __ia32_compat_sys_truncate+0x5b/0x70 [ 314.983221][ T9312] __do_fast_syscall_32+0xb6/0x2b0 [ 314.983241][ T9312] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.983262][ T9312] do_fast_syscall_32+0x34/0x80 [ 314.983281][ T9312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.983301][ T9312] RIP: 0023:0xf7f91539 [ 314.983315][ T9312] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 314.983329][ T9312] RSP: 002b:00000000f544455c EFLAGS: 00000206 ORIG_RAX: 000000000000005c [ 314.983346][ T9312] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000005 [ 314.983357][ T9312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.983367][ T9312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.983375][ T9312] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.983385][ T9312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.983408][ T9312] [ 316.090845][ T9] usb 1-1: USB disconnect, device number 70 [ 316.186787][ T5878] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 316.509395][ T5878] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 316.518617][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 316.566944][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 316.583075][ T5878] usb 2-1: Product: syz [ 316.620534][ T5878] usb 2-1: Manufacturer: syz [ 316.626277][ T5878] usb 2-1: SerialNumber: syz [ 316.681090][ T5878] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 316.774876][ T9] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 316.832982][ T9] usb 1-1: config 2 has no interface number 0 [ 316.849707][ T9] usb 1-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 316.864123][ T9] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 316.875203][ T9] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 316.891338][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 316.903635][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.912000][ T9] usb 1-1: Product: syz [ 316.916268][ T9] usb 1-1: Manufacturer: syz [ 316.921062][ T9] usb 1-1: SerialNumber: syz [ 317.009494][ T9326] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 317.047104][ T983] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 317.065373][ T9326] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 317.204819][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.211388][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.223132][ T983] usb 4-1: Using ep0 maxpacket: 8 [ 317.231596][ T983] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 317.254340][ T983] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.346471][ T9] usb 1-1: probing VID:PID(0424:012C) [ 317.355698][ T983] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 317.368585][ T9] usb 1-1: vub300 testing BULK IN EndPoint(0) 8E [ 317.397833][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.407518][ T9] usb 1-1: vub300 testing BULK IN EndPoint(1) 82 [ 317.414602][ T9] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 317.434057][ T983] usbtmc 4-1:16.0: bulk endpoints not found [ 317.449966][ T9] vub300 1-1:2.174: probe with driver vub300 failed with error -22 [ 317.475444][ T9] usb 1-1: USB disconnect, device number 71 [ 318.527192][ T5885] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 318.640057][ T5878] vp7045: USB control message 'out' went wrong. [ 318.662639][ T5878] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 318.673644][ T5878] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 318.707117][ T5878] usb 2-1: USB disconnect, device number 79 [ 318.801201][ T5885] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 318.810864][ T5885] usb 3-1: config 2 has no interface number 0 [ 318.834997][ T5885] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 318.881056][ T5885] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 318.892669][ T5885] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 318.912812][ T5885] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 318.923735][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.935259][ T5885] usb 3-1: Product: syz [ 318.950930][ T5885] usb 3-1: Manufacturer: syz [ 318.964031][ T5885] usb 3-1: SerialNumber: syz [ 318.986180][ T9338] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 318.995992][ T9338] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 319.019529][ T9346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 319.355703][ T5885] usb 3-1: probing VID:PID(0424:012C) [ 319.382510][ T5885] usb 3-1: vub300 testing BULK IN EndPoint(0) 8E [ 319.393237][ T5885] usb 3-1: vub300 testing BULK IN EndPoint(1) 82 [ 319.400664][ T5885] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 319.408741][ T5885] vub300 3-1:2.174: probe with driver vub300 failed with error -22 [ 319.426269][ T5885] usb 3-1: USB disconnect, device number 54 [ 320.006827][ T983] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 320.186849][ T983] usb 5-1: device descriptor read/64, error -71 [ 320.204185][ T9371] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 320.270919][ T5878] usb 4-1: USB disconnect, device number 71 [ 320.296856][ T43] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 320.468092][ T983] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 320.480394][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.520405][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.557057][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 320.570478][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.606924][ T983] usb 5-1: device descriptor read/64, error -71 [ 320.639855][ T43] usb 2-1: config 0 descriptor?? [ 320.717386][ T983] usb usb5-port1: attempt power cycle [ 321.066787][ T983] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 321.088023][ T983] usb 5-1: device descriptor read/8, error -71 [ 321.327050][ T983] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 321.345183][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 321.352246][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 321.457632][ T983] usb 5-1: device descriptor read/8, error -71 [ 321.510404][ T43] usb 2-1: USB disconnect, device number 80 [ 321.587248][ T983] usb usb5-port1: unable to enumerate USB device [ 321.959541][ T9384] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.845' sets config #6 [ 321.970986][ T9385] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.845' sets config #1 [ 322.296822][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 322.452160][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 322.466347][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.475448][ T9] usb 2-1: Product: syz [ 322.480182][ T9] usb 2-1: Manufacturer: syz [ 322.486370][ T9] usb 2-1: SerialNumber: syz [ 322.496024][ T9] usb 2-1: config 0 descriptor?? [ 322.509380][ T9] pwc: Logitech QuickCam Zoom (new model) USB webcam detected. [ 322.714497][ T9] pwc: Failed to set LED on/off time (-71) [ 322.723487][ T9] pwc: send_video_command error -71 [ 322.729510][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 322.749151][ T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 322.769827][ T9] usb 2-1: USB disconnect, device number 81 [ 323.245690][ T9397] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.509173][ T983] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 323.606975][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 323.677870][ T983] usb 3-1: Using ep0 maxpacket: 32 [ 323.684995][ T983] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.697249][ T983] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.816873][ T5908] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 323.824942][ T9] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 323.836833][ T9] usb 2-1: config 2 has no interface number 0 [ 323.843071][ T9] usb 2-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 323.855944][ T9] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 323.869662][ T983] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 323.879031][ T983] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 323.977541][ T983] usb 3-1: Product: syz [ 323.981843][ T9] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 323.992131][ T983] usb 3-1: Manufacturer: syz [ 324.003630][ T983] hub 3-1:4.0: USB hub found [ 324.012055][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 324.021291][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.031110][ T9] usb 2-1: Product: syz [ 324.035698][ T9] usb 2-1: Manufacturer: syz [ 324.040913][ T9] usb 2-1: SerialNumber: syz [ 324.065640][ T5908] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 324.074066][ T5908] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 324.082447][ T5908] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 324.093170][ T5908] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 324.131225][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 324.142620][ T9404] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 324.150064][ T9404] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 324.151359][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 324.173934][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 324.196076][ T5908] usb 5-1: string descriptor 0 read error: -22 [ 324.203534][ T5908] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 324.215221][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.224356][ T983] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 324.278831][ T5908] usb 5-1: config 0 descriptor?? [ 324.345426][ T5908] hub 5-1:0.0: bad descriptor, ignoring hub [ 324.355898][ T5908] hub 5-1:0.0: probe with driver hub failed with error -5 [ 324.371281][ T5908] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 324.597072][ T10] usb 3-1: USB disconnect, device number 55 [ 325.035531][ T9] usb 2-1: probing VID:PID(0424:012C) [ 325.042440][ T9] usb 2-1: vub300 testing BULK IN EndPoint(0) 8E [ 325.050952][ T9] usb 2-1: vub300 testing BULK IN EndPoint(1) 82 [ 325.057500][ T9] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 325.314073][ T9] vub300 2-1:2.174: probe with driver vub300 failed with error -22 [ 325.761117][ T9] usb 2-1: USB disconnect, device number 82 [ 326.216792][ T43] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 326.556910][ T43] usb 3-1: device descriptor read/64, error -71 [ 326.657802][ T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 326.806795][ T24] usb 4-1: device descriptor read/64, error -71 [ 326.813160][ T43] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 326.946937][ T43] usb 3-1: device descriptor read/64, error -71 [ 327.067677][ T24] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 327.076333][ T43] usb usb3-port1: attempt power cycle [ 327.142588][ T9] usb 5-1: USB disconnect, device number 83 [ 327.210783][ T24] usb 4-1: device descriptor read/64, error -71 [ 327.327770][ T24] usb usb4-port1: attempt power cycle [ 327.416876][ T43] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 327.442115][ T43] usb 3-1: device descriptor read/8, error -71 [ 327.599614][ T9] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 327.666792][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 327.686944][ T43] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 327.718453][ T43] usb 3-1: device descriptor read/8, error -71 [ 327.724990][ T24] usb 4-1: device descriptor read/8, error -71 [ 327.768682][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 327.779824][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.789008][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.797084][ T9] usb 5-1: Product: syz [ 327.801311][ T9] usb 5-1: Manufacturer: syz [ 327.805950][ T9] usb 5-1: SerialNumber: syz [ 327.813562][ T9] usb 5-1: config 0 descriptor?? [ 327.826890][ T10] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 327.827187][ T43] usb usb3-port1: unable to enumerate USB device [ 327.976826][ T24] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 327.988232][ T10] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 327.996504][ T10] usb 1-1: config 0 has no interface number 0 [ 328.004897][ T10] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 328.007404][ T24] usb 4-1: device descriptor read/8, error -71 [ 328.020364][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.028899][ T10] usb 1-1: Product: syz [ 328.033337][ T10] usb 1-1: Manufacturer: syz [ 328.039139][ T10] usb 1-1: SerialNumber: syz [ 328.049103][ T10] usb 1-1: config 0 descriptor?? [ 328.056079][ T10] usb-storage 1-1:0.20: USB Mass Storage device detected [ 328.075655][ T10] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 328.127411][ T24] usb usb4-port1: unable to enumerate USB device [ 329.296851][ T5885] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 329.446827][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 329.453336][ T5885] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 329.462937][ T5885] usb 2-1: config 0 has no interface number 0 [ 329.471231][ T5885] usb 2-1: config 0 interface 12 has no altsetting 0 [ 329.553832][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 329.977071][ T5885] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 329.987669][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.998322][ T5885] usb 2-1: Product: syz [ 330.003583][ T5885] usb 2-1: Manufacturer: syz [ 330.010480][ T5885] usb 2-1: SerialNumber: syz [ 330.068046][ T5885] usb 2-1: config 0 descriptor?? [ 330.329095][ T9] usb 5-1: USB disconnect, device number 84 [ 330.622618][ T983] usb 1-1: USB disconnect, device number 72 [ 330.867584][ T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 331.020413][ T9] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 331.029060][ T9] usb 5-1: config 2 has no interface number 0 [ 331.035276][ T9] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 331.077845][ T9] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 331.096025][ T9] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 331.140377][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 331.146864][ T24] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 331.157121][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.165600][ T9] usb 5-1: Product: syz [ 331.170295][ T9] usb 5-1: Manufacturer: syz [ 331.175822][ T9] usb 5-1: SerialNumber: syz [ 331.184637][ T9490] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 331.192606][ T9490] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 331.316671][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.334304][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.358121][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 331.368618][ T24] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 331.377263][ T24] usb 4-1: Manufacturer: syz [ 331.405000][ T24] usb 4-1: config 0 descriptor?? [ 331.920984][ T9] usb 5-1: probing VID:PID(0424:012C) [ 331.959067][ T9] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 331.965591][ T9] usb 5-1: vub300 testing BULK IN EndPoint(1) 82 [ 331.976901][ T9] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 331.984967][ T9] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 332.026169][ T9] usb 5-1: USB disconnect, device number 85 [ 332.176455][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 332.202728][ T6007] ------------[ cut here ]------------ [ 332.208742][ T6007] WARNING: CPU: 0 PID: 6007 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x137/0x160 [ 332.220116][ T6007] Modules linked in: [ 332.224340][ T6007] CPU: 0 UID: 0 PID: 6007 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 332.233910][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.244641][ T6007] Workqueue: events_unbound commit_work [ 332.250739][ T6007] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 332.257375][ T6007] Code: 42 80 3c 28 00 74 08 48 89 df e8 04 3c 5f fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c0 b6 88 05 cc e8 ea 85 f9 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 332.277156][ T6007] RSP: 0018:ffffc9000472f808 EFLAGS: 00010293 [ 332.283247][ T6007] RAX: ffffffff85c6bde6 RBX: ffffc9000472f980 RCX: ffff888030ec3c80 [ 332.291511][ T6007] RDX: 0000000000000000 RSI: 0000004d569c5ae1 RDI: 0000004d569c5ae1 [ 332.299640][ T6007] RBP: 1ffff920008e5f30 R08: ffffffff8f9dfc77 R09: 1ffffffff1f3bf8e [ 332.307820][ T6007] R10: dffffc0000000000 R11: ffffffff85c6bcb0 R12: 0000004d569c5ae1 [ 332.315824][ T6007] R13: dffffc0000000000 R14: ffff888024410028 R15: 0000004d569c5ae1 [ 332.323957][ T6007] FS: 0000000000000000(0000) GS:ffff888125d0d000(0000) knlGS:0000000000000000 [ 332.333038][ T6007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.339705][ T6007] CR2: 0000000080037018 CR3: 000000007d786000 CR4: 00000000003526f0 [ 332.348223][ T6007] Call Trace: [ 332.351518][ T6007] [ 332.354919][ T6007] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 332.361147][ T6007] drm_crtc_next_vblank_start+0x226/0x470 [ 332.366939][ T6007] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 332.373236][ T6007] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 332.379553][ T6007] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.384941][ T6007] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 332.391419][ T6007] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 332.398509][ T6007] ? read_tsc+0x9/0x20 [ 332.402626][ T6007] ? ktime_get+0x1d2/0x200 [ 332.407090][ T6007] commit_tail+0x79/0x3a0 [ 332.411508][ T6007] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.416881][ T6007] ? process_scheduled_works+0x9ef/0x17b0 [ 332.422673][ T6007] process_scheduled_works+0xae1/0x17b0 [ 332.428409][ T6007] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.434421][ T6007] worker_thread+0x8a0/0xda0 [ 332.439095][ T6007] kthread+0x711/0x8a0 [ 332.443204][ T6007] ? __pfx_worker_thread+0x10/0x10 [ 332.448868][ T6007] ? __pfx_kthread+0x10/0x10 [ 332.453956][ T6007] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.459263][ T6007] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.464465][ T6007] ? __pfx_kthread+0x10/0x10 [ 332.469098][ T6007] ret_from_fork+0x4bc/0x870 [ 332.473691][ T6007] ? __pfx_ret_from_fork+0x10/0x10 [ 332.478984][ T6007] ? __switch_to_asm+0x39/0x70 [ 332.483850][ T6007] ? __switch_to_asm+0x33/0x70 [ 332.488668][ T6007] ? __pfx_kthread+0x10/0x10 [ 332.493266][ T6007] ret_from_fork_asm+0x1a/0x30 [ 332.498105][ T6007] [ 332.501122][ T6007] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 332.508406][ T6007] CPU: 0 UID: 0 PID: 6007 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 332.517867][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.527938][ T6007] Workqueue: events_unbound commit_work [ 332.533507][ T6007] Call Trace: [ 332.536878][ T6007] [ 332.539812][ T6007] dump_stack_lvl+0x99/0x250 [ 332.544399][ T6007] ? __asan_memcpy+0x40/0x70 [ 332.548985][ T6007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.554196][ T6007] ? __pfx__printk+0x10/0x10 [ 332.558815][ T6007] vpanic+0x237/0x6d0 [ 332.562817][ T6007] ? __pfx_vpanic+0x10/0x10 [ 332.567328][ T6007] panic+0xb9/0xc0 [ 332.571053][ T6007] ? __pfx_panic+0x10/0x10 [ 332.575490][ T6007] __warn+0x31b/0x4b0 [ 332.579478][ T6007] ? vkms_get_vblank_timestamp+0x137/0x160 [ 332.585320][ T6007] ? vkms_get_vblank_timestamp+0x137/0x160 [ 332.591130][ T6007] report_bug+0x2be/0x4f0 [ 332.595466][ T6007] ? vkms_get_vblank_timestamp+0x137/0x160 [ 332.601270][ T6007] ? vkms_get_vblank_timestamp+0x137/0x160 [ 332.607080][ T6007] ? vkms_get_vblank_timestamp+0x139/0x160 [ 332.612891][ T6007] handle_bug+0x84/0x160 [ 332.617131][ T6007] exc_invalid_op+0x1a/0x50 [ 332.621619][ T6007] asm_exc_invalid_op+0x1a/0x20 [ 332.626559][ T6007] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 332.632966][ T6007] Code: 42 80 3c 28 00 74 08 48 89 df e8 04 3c 5f fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c0 b6 88 05 cc e8 ea 85 f9 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 332.652576][ T6007] RSP: 0018:ffffc9000472f808 EFLAGS: 00010293 [ 332.658637][ T6007] RAX: ffffffff85c6bde6 RBX: ffffc9000472f980 RCX: ffff888030ec3c80 [ 332.666607][ T6007] RDX: 0000000000000000 RSI: 0000004d569c5ae1 RDI: 0000004d569c5ae1 [ 332.674576][ T6007] RBP: 1ffff920008e5f30 R08: ffffffff8f9dfc77 R09: 1ffffffff1f3bf8e [ 332.682549][ T6007] R10: dffffc0000000000 R11: ffffffff85c6bcb0 R12: 0000004d569c5ae1 [ 332.690518][ T6007] R13: dffffc0000000000 R14: ffff888024410028 R15: 0000004d569c5ae1 [ 332.698491][ T6007] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 332.704650][ T6007] ? vkms_get_vblank_timestamp+0x136/0x160 [ 332.710472][ T6007] ? vkms_get_vblank_timestamp+0x136/0x160 [ 332.716282][ T6007] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 332.722430][ T6007] drm_crtc_next_vblank_start+0x226/0x470 [ 332.728151][ T6007] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 332.734435][ T6007] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 332.740686][ T6007] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.745896][ T6007] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 332.752245][ T6007] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 332.759115][ T6007] ? read_tsc+0x9/0x20 [ 332.763182][ T6007] ? ktime_get+0x1d2/0x200 [ 332.767604][ T6007] commit_tail+0x79/0x3a0 [ 332.771932][ T6007] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.777142][ T6007] ? process_scheduled_works+0x9ef/0x17b0 [ 332.782881][ T6007] process_scheduled_works+0xae1/0x17b0 [ 332.788456][ T6007] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.794463][ T6007] worker_thread+0x8a0/0xda0 [ 332.799150][ T6007] kthread+0x711/0x8a0 [ 332.803228][ T6007] ? __pfx_worker_thread+0x10/0x10 [ 332.808344][ T6007] ? __pfx_kthread+0x10/0x10 [ 332.812926][ T6007] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.818132][ T6007] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.823335][ T6007] ? __pfx_kthread+0x10/0x10 [ 332.827919][ T6007] ret_from_fork+0x4bc/0x870 [ 332.832516][ T6007] ? __pfx_ret_from_fork+0x10/0x10 [ 332.837720][ T6007] ? __switch_to_asm+0x39/0x70 [ 332.842483][ T6007] ? __switch_to_asm+0x33/0x70 [ 332.847674][ T6007] ? __pfx_kthread+0x10/0x10 [ 332.852273][ T6007] ret_from_fork_asm+0x1a/0x30 [ 332.857050][ T6007] [ 332.860364][ T6007] Kernel Offset: disabled [ 332.864678][ T6007] Rebooting in 86400 seconds..